blacklist based on FROM

Questions and answers about how to do stuff
Post Reply
hiandras
Posts: 22
Joined: 25 Jul 2017 08:59

blacklist based on FROM

Post by hiandras »

Hi,

The blacklisting and email address (or domain) is very useful.
It checks the MAIL FROM address during the smtp session.

Sometimes it is better to use the FROM address.

Ie. recent spam:

X-.....-MailScanner-From: 01020?????6c83c-73a1a380-fc39-4133-ba19-a792127d2435-000000@eu-west-1.amazonses.com
and this value is different for all mails, but the From: header is the same.

Is there a way to use the blacklist feature for the From field also?
Or better use a rule in local.cf? (I do not want to write a rule for all these addresses.)

I also found a feature in SpamAssasin called "Denied addresses". Ho can i set this up?

Any help or idea is most welcome!

Regards,
Andras
hiandras
Posts: 22
Joined: 25 Jul 2017 08:59

Re: blacklist based on FROM

Post by hiandras »

To answer my own question...

I found the easiest, using a blacklist rure in local.cf:

blacklist_from xxxxxxxxxx@xxxxxx.com

(So you don not hav to write a complete rule, where you check the header field andgive some score.)

You can also set this in webmin, which will add the above line to the end of local.cf.

Regards,
Andras
Post Reply