[Snort-users] Re: [SAtalk] Returned email

From: Matt Kettler <mkettler(at)evi-inc.com>
Date: Thu Mar 20 2003 - 12:07:51 EST

No, SpamAssassin has no rules that assign points to a mismatch in From: and Reply-To:

It does however assign points when the From: line doesn't contain any sort of "real name" portion, or if the "real name" is the same string as the email address itself. Neither of these alone is enough to tag an email.

Another thing that might be worth checking is if the mailserver he's sending through listed in any RBLs. Old versions of SpamAssassin, which are unfortunately still used, had a pretty high trust of relays.osirusoft.com.

It should also be noted that bouncing mail based on SA score is generally frowned upon unless done with an extraordinarily high score threshold. 5.0 is just NOT suited to anything but tagging.

If he has a non-sensitive email that bounces I can run it through SA 2.43 and 2.50 and see if anything interesting sticks out.

At 08:55 AM 3/20/2003 -0600, Matthew Michael wrote:

>I have a user with two accounts in his outlook. And sometimes he gets
>messages returned due to spam assassin. Is the problem that his reply
>address is different than his sending address? Ex. He sends an email from
>@wb-resources.com, but the reply to address is @mastio.com?
>
>
>
>Thanks for the help.

---

This SF.net email is sponsored by: Tablet PC. Does your code think in ink? You could win a Tablet PC. Get a free Tablet PC hat just for playing. What are you waiting for? http://ads.sourceforge.net/cgi-bin/redirect.pl?micr5043en

---

Snort-users mailing list
Snort-users@lists.sourceforge.net
Go to this URL to change user options or unsubscribe: https://lists.sourceforge.net/lists/listinfo/snort-users Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users Received on Thu Mar 20 12:20:29 2003