<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=koi8-r" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 11.00.9600.17801"></HEAD>
<BODY
style="WORD-WRAP: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space">
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial>The way I handle it with exim is I have two
lists</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial>1. the IP of any of our servers that might send mail (because
anyone could become a backup)</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial>2. A list of all of our domains that we handle mail
from</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial>the condition is</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial> if the sender's ip is NOT in the IP list
above</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial> and if the sender attempts to helo with one of
our domain names in the list above</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015> <FONT
color=#0000ff size=2 face=Arial>reject and firewall for 90
days</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial>never had an issue</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=395474415-26052015><FONT color=#0000ff
size=2 face=Arial>Rick</FONT></SPAN></DIV><BR>
<DIV lang=en-us class=OutlookMessageHeader dir=ltr align=left>
<HR tabIndex=-1>
<FONT size=2 face=Tahoma><B>From:</B> MailScanner
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Jerry
Benton<BR><B>Sent:</B> Thursday, May 21, 2015 3:15 PM<BR><B>To:</B> MailScanner
Discussion<BR><B>Subject:</B> Re: MailScanner custom header
modification<BR></FONT><BR></DIV>
<DIV></DIV>Be careful this this approach. This is especially true if you have
multiple servers handling the same email and have some sort of HA in place.<BR>
<DIV apple-content-edited="true">
<DIV
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px Helvetica; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR
class=Apple-interchange-newline>-</DIV>
<DIV
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px Helvetica; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px">Jerry
Benton</DIV>
<DIV
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px Helvetica; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><A
href="http://www.mailborder.com">www.mailborder.com</A></DIV>
<DIV
style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: 12px Helvetica; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><BR></DIV><BR
class=Apple-interchange-newline></DIV><BR>
<DIV>
<BLOCKQUOTE type="cite">
<DIV>On May 21, 2015, at 2:48 PM, Shawn Iverson <<A
href="mailto:IversonS@rushville.k12.in.us">IversonS@rushville.k12.in.us</A>>
wrote:</DIV><BR class=Apple-interchange-newline>
<DIV>
<DIV dir=ltr>Why not just reject external mail addressed to your domain
instead?
<DIV><BR></DIV>
<DIV>If it has your address on it and it is not coming from you, then it is
not yours.</DIV>
<DIV><BR></DIV>
<DIV>Postfix/Exim/etc. support this feature.</DIV></DIV>
<DIV class=gmail_extra><BR>
<DIV class=gmail_quote>On Thu, May 21, 2015 at 6:00 AM, Арсений Черняков <SPAN
dir=ltr><<A href="mailto:a.v.chernyakov@gmail.com"
target=_blank>a.v.chernyakov@gmail.com</A>></SPAN> wrote:<BR>
<BLOCKQUOTE class=gmail_quote
style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid">
<DIV dir=ltr>Hello.
<DIV>We've deployed MailScanner as an email relay and virus/spam
scanner.</DIV>
<DIV>We've encountered some messages that sent from various external servers
with "from" header set to our domain and rcpt-to set to various free
mailservers such as <A href="http://outlook.com/"
target=_blank>outlook.com</A>. There is a plugin to spamassassin that
detects such messages and increaces spam score.</DIV>
<DIV>There is need to somehow modify Subject of such emails with [FRAUD]
stamp (for example) like SpamAssassin modifies it with [SPAM] stamp. Is it
possible to do with MailScanner?</DIV>
<DIV>Or maybe there is another way to do it?</DIV>
<DIV><BR></DIV>
<DIV>Thank you.</DIV></DIV><BR><BR><BR>--<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR><A
href="http://lists.mailscanner.info/listinfo/mailscanner"
target=_blank>http://lists.mailscanner.info/listinfo/mailscanner</A><BR><BR><BR></BLOCKQUOTE></DIV><BR><BR
clear=all>
<DIV><BR></DIV>-- <BR>
<DIV class=gmail_signature>
<DIV dir=ltr>Shawn Iverson
<DIV>Director of Technology</DIV>
<DIV>Rush County Schools</DIV>
<DIV>765-932-3901 x271</DIV>
<DIV><A href="mailto:iversons@rushville.k12.in.us"
target=_blank>iversons@rushville.k12.in.us</A></DIV></DIV></DIV></DIV><BR><BR>--
<BR>MailScanner mailing list<BR><A
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</A><BR>http://lists.mailscanner.info/listinfo/mailscanner<BR><BR></DIV></BLOCKQUOTE></DIV><BR></BODY></HTML>