Re: whitelist on Reply-To:

Stephen Warren <[email protected]> writes:

>> I think you can resolve a lot of this problem by not
>> auto-whitelisting your domain.
>
> That's a good point.
>
> I try to detect and reject that kind of thing in the MTA though,
> because then the email is never accepted for processing by my
> system, and hence I never have to hold/challenge it, nor
> virus/spamassassin/... check it etc. This uses much fewer of my
> system's resources!

This is what I do too. Postfix expects local domain mail to be relayed
either through the local network or though a SASL authenticated
session. All other mail that arrives with an envelope sender claiming
to be local is simply dropped right there.