spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From RW <rwmailli...@googlemail.com>
Subject Re: blacklist_from with whitelist
Date Sat, 29 Jul 2017 13:11:28 GMT
On Sat, 29 Jul 2017 00:45:41 -0600
@lbutlr wrote:

> Would this work to blacklist mail with a "From: " claiming to be
> PayPal, but sent from fakedomain.tld?
> 
> blacklist_from *@paypal.com
> whitelist_from_rcvd *@paypal.com paypal.com

Assuming that you mean from a server with fakedomain.tld rdns then it
should do as far as it goes  The paypal email I get uses subdomains,
although that may just be for informational email since I haven't used
paypal for years.

I'd go for 

blacklist_from *@paypal.com
blacklist_from *@*.paypal.com
whitelist_auth *@paypal.com
whitelist_auth *@*.paypal.com

and optionally for added redundancy 

whitelist_from_rcvd *@paypal.com paypal.com
whitelist_from_rcvd *@*.paypal.com paypal.com

Personally I find that these days spammers mostly just use 

From: "Paypal" <something@someotherdomain.tld>


Mime
View raw message