MailScanner custom header modification

Rick Cooper rcooper at
Tue May 26 16:06:15 UTC 2015

The way I handle it with exim is I have two lists
1. the IP of any of our servers that might send mail (because anyone could
become a backup)
2. A list of all of our domains that we handle mail from
the condition is
  if the sender's ip is NOT in the IP list above
   and if the sender attempts to helo with one of our domain names in the
list above
    reject and firewall for 90 days
never had an issue


From: MailScanner [mailto:mailscanner-bounces at] On
Behalf Of Jerry Benton
Sent: Thursday, May 21, 2015 3:15 PM
To: MailScanner Discussion
Subject: Re: MailScanner custom header modification

Be careful this this approach. This is especially true if you have multiple
servers handling the same email and have some sort of HA in place.

Jerry Benton

On May 21, 2015, at 2:48 PM, Shawn Iverson <IversonS at>

Why not just reject external mail addressed to your domain instead? 

If it has your address on it and it is not coming from you, then it is not

Postfix/Exim/etc. support this feature.

On Thu, May 21, 2015 at 6:00 AM, Арсений Черняков <a.v.chernyakov at>

We've deployed MailScanner as an email relay and virus/spam scanner.
We've encountered some messages that sent from various external servers with
"from" header set to our domain and rcpt-to set to various free mailservers
such as <> . There is a plugin to
spamassassin that detects such messages and increaces spam score.
There is need to somehow modify Subject of such emails with [FRAUD] stamp
(for example) like SpamAssassin modifies it with [SPAM] stamp. Is it
possible to do with MailScanner?
Or maybe there is another way to do it?

Thank you.

MailScanner mailing list
mailscanner at


Shawn Iverson 
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at

MailScanner mailing list
mailscanner at

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the MailScanner mailing list