Topic: SpamAssassin WBL configuration

[ddougan]

I'm being spoofed with spam email using two of my domains (the primary and one virtual domain).

I've entered the real originating domains and the IP addresses (one here in Canada, the other in Australia, from the headers) in the WBL in Jesper Knudsen's SA contrib., but I'm still receiving the spam. Is this because of the spoofing? Is there any way to resolve this?

I've searched the archive here, but with no success.

Thanks,

Des

[raem]

ddougan

> I've entered the real originating domains and the IP addresses

I think you have to enter the return address of the message rather than the real source, which is less effective as the return addresses are many and varied & constantly changing.

And they have to go in the Black list not the White list !

I assume you have RBL rejection enabled ?

You may need to tweak the spamassassin cf rules to get those messages tagged.
This may give you some ideas
http://www.ccskavenger.info/sober-worm-spamassassin-rules/