Re: whitelist on Reply-To:

On Wed, 7 Feb 2007, Jason R. Mastaler wrote:

> Tim Rice <[email protected]> writes:
> 
> >> > I discovered that if I sent an e-mail from an account that was
> >> > not white-listed but the Reply-To: header was my address that is
> >> > white-listed, the message gets delivered unchallenged.
> 
> This is the intended behavior. The address in Reply-To is looked at
> along with a few others when looking for matches.

Seems like quite a SPAM hole. All a spammer has to do is set
the Reply-To: to a user in your company wide whitelist and they
can send spam to anyone in the company without being challenged.

-- 
Tim Rice				Multitalents	(707) 887-1469
[email protected]