Re: whitelist on Reply-To:

On Fri, 9 Feb 2007, Jason R. Mastaler wrote:

> This is what I do too. Postfix expects local domain mail to be relayed
> either through the local network or though a SASL authenticated
> session. All other mail that arrives with an envelope sender claiming
> to be local is simply dropped right there.

Yes, that is how it is here too.
But that doesn't help on this kind of spam
.......
    From [email protected] Thu Feb  8 18:14:44 2007
    Return-Path: [email protected]
    [ snipped some Received: headers transfering to another internal machine]
    X-Authentication-Warning: trr.multitalents.net: tim set sender to [email protected] using -f
    Received-SPF: none (mail.multitalents.net: domain of [email protected] does not designate permitted sender hosts)
    Received: from 62-101-102-101.ip.fastwebnet.it (62-101-102-101.ip.fastwebnet.it [62.101.102.101])
    	by mail.multitalents.net (8.12.11.20060614/8.12.11) with SMTP id l192ET0R020313;
    	Thu, 8 Feb 2007 18:14:31 -0800
    X-Originating-IP: 152.160.176.218 by smtp.62.101.102.101;  Thu, 08 Feb 2007 21:14:13 -0500
    Message-ID: <[email protected]>
    From: "Wesley Bartlett" <[email protected]>
    Reply-To: "Wesley Bartlett" <[email protected]>
    To: [email protected], [email protected], [email protected]
    Subject: Cial1s S0ft Tabs - Impress her
    Date: Thu, 08 Feb 2007 21:14:13 -0500
    Content-Type: text/plain;
    Content-Transfer-Encoding: 7Bit
    X-SCO-PAD: XXXXXX
    Content-Length: 852
    Status: RO
    X-Status: 
    X-Keywords:                 
    X-UID: 421
.......

TMDA passes it through unchallenged to the valid local users because
the Reply-To: is a valid local user.

-- 
Tim Rice				Multitalents	(707) 887-1469
[email protected]