<HTML><HEAD>
<META content="text/html; charset=utf-8" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.7600.16490"></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">
<DIV><BR><BR>>>> "Daniel Straka" <Dstraka@caspercollege.edu> 3/5/2010 10:00 AM >>><BR>We are receiving a ton of SPAM where the From and/or Reply-to addresses have been forged so they appear to have come from users in our own domain. Of course, these BC several users at a time. Is there any way to detect these with MailScanner?<BR><BR></DIV>
<DIV>There are many potential solutions provided in the archive of this list because this question has been asked numerous times. The consensus is that you should utilize SPF on your MTA to block most of these that have your domain from address in the reply-to address or envelope stage, and a custom spamassassin rule to take care of the ones that use your domain in the message body portion FROM: address. I also use a milter called mailfromd in addition to spf which gives much finer control. </DIV>
<DIV> </DIV>
<DIV>-Mike</DIV>
<DIV> </DIV>
<DIV> </DIV></BODY></HTML>