Re: whitelist on Reply-To:

On Fri, 9 Feb 2007, Mark Horn wrote:

> A few questions:
> 
> 1) How many addresses are in the "valid user accounts" whitelist?

Not many (16).
 
> 2) Is it a small number of valid addresses that are being forged
>    over and over again, or is it many different addresses?  

The former.

> If it's a small number of addresses and the number of valid users is
> high, I'd guess that the spammer is just guessing and getting lucky.
> I'm not sure how to deal with this.  I can imagine TMDA working
> just file without matching against the Reply-To: address (maybe
> I'm wrong about this, though). On the other hand, I can't even
> imagine how TMDA could possibly work if it wasn't able to match
> valid addresses against the From: address.

So far I have not been enable to imagine a case where I would want
TMDA to pass a message unchallenged based on the Reply-To: address.
But that doesn't mean there isn't one.

-- 
Tim Rice				Multitalents	(707) 887-1469
[email protected]