Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have been receiving a lot of mails that are "From" my domain. These mails have usually a different return path (spf passes), but have for example my email in the to and the from header. Spam-assassin doesn't catch all of these mails.

Now the plan is to somehow rewrite the headers to warn the users that the mail is not legit so if the from address is from my domain and there is no dkim signature I would like to classify it as spam or write something in the subject, but I am open to other alternatives.

share|improve this question

1 Answer 1

I have solved it by using a few spam-assassin rules:

1) check if mail is from my domain

2) check if mail is to my domain

3) if both 1) and 2) are true add +5 spam score

4) if 1) and 2) are true and dkim is valid add -6 spam score

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.