MailScanner custom header modification

[Rick Cooper]

The way I handle it with exim is I have two lists
1. the IP of any of our servers that might send mail (because anyone could
become a backup)
2. A list of all of our domains that we handle mail from
 
the condition is
  if the sender's ip is NOT in the IP list above
   and if the sender attempts to helo with one of our domain names in the
list above
    reject and firewall for 90 days
 
never had an issue
 
Rick

  _____  

From: MailScanner [mailto:mailscanner-bounces at lists.mailscanner.info] On
Behalf Of Jerry Benton
Sent: Thursday, May 21, 2015 3:15 PM
To: MailScanner Discussion
Subject: Re: MailScanner custom header modification


Be careful this this approach. This is especially true if you have multiple
servers handling the same email and have some sort of HA in place.


-
Jerry Benton
www.mailborder.com




On May 21, 2015, at 2:48 PM, Shawn Iverson <IversonS at rushville.k12.in.us>
wrote:

Why not just reject external mail addressed to your domain instead? 

If it has your address on it and it is not coming from you, then it is not
yours.

Postfix/Exim/etc. support this feature.

On Thu, May 21, 2015 at 6:00 AM, Арсений Черняков <a.v.chernyakov at gmail.com>
wrote:


Hello. 
We've deployed MailScanner as an email relay and virus/spam scanner.
We've encountered some messages that sent from various external servers with
"from" header set to our domain and rcpt-to set to various free mailservers
such as outlook.com <http://outlook.com/> . There is a plugin to
spamassassin that detects such messages and increaces spam score.
There is need to somehow modify Subject of such emails with [FRAUD] stamp
(for example) like SpamAssassin modifies it with [SPAM] stamp. Is it
possible to do with MailScanner?
Or maybe there is another way to do it?

Thank you.



--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner







-- 

Shawn Iverson 
Director of Technology
Rush County Schools
765-932-3901 x271
iversons at rushville.k12.in.us


-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/listinfo/mailscanner




-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150526/bdb7ee49/attachment.html>