Return-Path: Delivered-To: apmail-spamassassin-users-archive@www.apache.org Received: (qmail 84482 invoked from network); 28 Jun 2010 10:38:33 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 28 Jun 2010 10:38:33 -0000 Received: (qmail 51621 invoked by uid 500); 28 Jun 2010 10:38:30 -0000 Delivered-To: apmail-spamassassin-users-archive@spamassassin.apache.org Received: (qmail 51164 invoked by uid 500); 28 Jun 2010 10:38:26 -0000 Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm Precedence: bulk list-help: list-unsubscribe: List-Post: List-Id: Delivered-To: mailing list users@spamassassin.apache.org Received: (qmail 51157 invoked by uid 99); 28 Jun 2010 10:38:25 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 28 Jun 2010 10:38:25 +0000 X-ASF-Spam-Status: No, hits=-0.0 required=10.0 tests=SPF_HELO_PASS,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (nike.apache.org: domain of ned@unixmail.co.uk designates 195.137.4.79 as permitted sender) Received: from [195.137.4.79] (HELO quad.pendre.co.uk) (195.137.4.79) by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 28 Jun 2010 10:38:18 +0000 Received: from localhost (Quad [127.0.0.1]) by quad.pendre.co.uk (Postfix) with ESMTP id 44E062F40E3 for ; Mon, 28 Jun 2010 11:37:58 +0100 (BST) X-Virus-Scanned: amavisd-new at pendre.co.uk Received: from quad.pendre.co.uk ([127.0.0.1]) by localhost (quad.pendre.co.uk [127.0.0.1]) (amavisd-new, port 10024) with LMTP id p0aYdalO2JWj; Mon, 28 Jun 2010 11:37:57 +0100 (BST) Received: from [192.168.0.1] (pendre.co.uk [192.168.0.1]) by quad.pendre.co.uk (Postfix) with ESMTP id 97EB22F40E1 for ; Mon, 28 Jun 2010 11:37:57 +0100 (BST) Message-ID: <4C287B85.60501@unixmail.co.uk> Date: Mon, 28 Jun 2010 11:37:57 +0100 From: Ned Slider User-Agent: Mozilla/5.0 (X11; U; Linux i686 (x86_64); en-US; rv:1.9.2.4) Gecko/20100608 Thunderbird/3.1 MIME-Version: 1.0 To: users@spamassassin.apache.org Subject: Re: blizzard (and others) faux messages References: <01E0B492-26EA-4573-BF86-15341392DAD4@kreme.com> <20100628110702.20195icte0mtdvli@mail.junc.org> In-Reply-To: <20100628110702.20195icte0mtdvli@mail.junc.org> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Checked: Checked by ClamAV on apache.org Yes, I do exactly the same - whitelist by dkim (or spf) the domain that is being abused and then wack all mail from that domain that isn't signed. On 28/06/10 10:07, Benny Pedersen wrote: > >> whitelist_from_dkim *@blizzard.com >> whitelist_from_dkim *@battle.net > > first dont use wildcard > Why not - that looks fine to me? > but as you want can be done like this > > blacklist_from foo@example.net > whitelist_from_dkim foo@example.net > > if wildcard is needed do def_blacklist_from and def_whitelist_from_dkim > The only real difference I see between whitelist_from_dkim and def_whitelist_from_dkim is that they have different scores so one is 'more whitelisted' than the other There is some good documentation here: http://www.ijs.si/software/amavisd/amavisd-new-docs.html#dkim-sa