On Mon, 2008-11-10 at 17:52 +0000, Adam Stephens wrote:
> I certainly wouldn't block on it outright like this. We see forwarded
> mail with hotmail senders, and mailing list mail, and mail from ebay's
> mail servers, and apparently legitimate mail sent via other ISPs, all of
> which would be rejected by this rule.
the test checks the envelope sender, not the headers of the e-mail. you
won't get false positives from mailing lists, forwarded e-mail or eBay
with that rule.
> >> deny message = Faked hotmail, so you must be spam.
> >> log_message = Fake hotmail
> >> senders = *@hotmail.com
> >> condition = ${if match {$sender_host_name} \
> >> {\Nhotmail.com$\N}{no}{yes}}
--
kind regards,
Kjetil T.
