Fred Viles wrote:
>On 23 Aug 2005 at 19:14, Marc Perkel wrote about
> "[exim] Anti Phishing Trick":
>
>| Here's an anti phishing trick I came up with. The idea is that major
>| corps will have received lines that match the domain in the from
>| address.
>
>Interesting idea, but your assumption seems highly questionable to
>me. How did you test it?
>
>- Fred
>
>
>
I ran it for a few weeks to see if there were any false positives and
there weren't any.
And - I've been running this for over a year with no problems.
# PayPal Scam
if "$h_from:" contains "paypal.com"
then
if "$h_Received:" does not contain "paypal.com"
then
deliver spoof@???
finish
endif
endif
if "$h_from:" contains "ebay.com"
then
if "$h_Received:" does not contain "ebay.com"
then
deliver abuse@???
finish
endif
endif
--
Marc Perkel - marc@???
Spam Filter: http://www.junkemailfilter.com
My Blog: http://marc.perkel.com
