You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Scott Rothgaber <sc...@palmetto.tv> on 2004/05/24 16:03:04 UTC

whitelist_from_rcvd

A customer of mine sets the record for spammy-looking non-spam. Nearly 
everything that they receive is a newsletter that is writen with broken 
HTML, remote images, spammy phrases, etc.

I placed the following entry in local.cf but it does not appear to be 
working. Have I made a typo or misread the man page?

whitelist_from_rcvd   staples@e.staples-deals.com   staples-deals.com

I tried 'e.staples-deals.com' in the last column but no dice.

Thanks!
Scott

Re: whitelist_from_rcvd

Posted by Robert Menschel <Ro...@Menschel.net>.
Hello Scott,

Monday, May 24, 2004, 7:03:04 AM, you wrote:

SR> A customer of mine sets the record for spammy-looking non-spam.
SR> Nearly everything that they receive is a newsletter that is writen
SR> with broken HTML, remote images, spammy phrases, etc.  

SR> I placed the following entry in local.cf but it does not appear to be
SR> working. Have I made a typo or misread the man page? 

SR> whitelist_from_rcvd   staples@e.staples-deals.com   staples-deals.com

The headers I have here for a similar email are:
Received: from mta1.primary.ddc.dartmail.net ([146.82.220.225])
        by server3.arterytc3.net with esmtp (Exim 4.34)
        id 1BOaRL-00017q-UZ
        for myuser@mydomain.net; Fri, 14 May 2004 11:01:20 +0000
X-MID: <Ki...@flonetwork.com>
Date: Fri, 14 May 2004 07:01:15 -0400 (EDT)
Message-Id: <Ki...@flonetwork.com>
From: Staples <St...@email.staples-deals.com>

Seems like the following would work here:
> whitelist_from_rcvd  Staples_@email.staples-deals.com  dartmail.net
Hopefully that will help you with your analysis.

Bob Menschel

Re: whitelist_from_rcvd

Posted by Matt Kettler <mk...@evi-inc.com>.
At 10:03 AM 5/24/2004, Scott Rothgaber wrote:
>A customer of mine sets the record for spammy-looking non-spam. Nearly 
>everything that they receive is a newsletter that is writen with broken 
>HTML, remote images, spammy phrases, etc.
>
>I placed the following entry in local.cf but it does not appear to be 
>working. Have I made a typo or misread the man page?
>
>whitelist_from_rcvd   staples@e.staples-deals.com   staples-deals.com

Depends.. what do the From: and Received: headers look like?

The above rule will look for email  From: staples@e.staples-deals.com and 
will require the reverse DNS of the Received: header to a trusted host to 
contain "staples-deals.com".

If their RDNS is something different, you'll need to modify the second 
section to match it.