Need help solving a Sender/From address dilemma

Hi,

I've been using TMDA c/r for years on my server very successfully, with exim. (Version 1.1.9)

I now have a problem (which must be common) that I can't figure out.

I have whitelisted *@amazon.com.

I'm now receiving spam with these headers:
	Return-path: <some-real-address@some-real-domain>
	From: "Amazon.com Email Subscriptions" <[email protected]>

The return-path is a random valid email address, which has nothing to do with amazon.com.

Ideas I've had:
Get Exim to match the Return-path domain with the From domain.  Not a good idea, because they are often legitmately different.
Get TMDA to only check the Return-path address against the white list.  Also, not a good idea because a legitimate whitelisted sender's server might send the email with an unrelated return-path.
Implementing Sender Policy Framework checking in Exim would stop this, but not every legitimate email sender uses SPF.

I'm stumped....

Does anyone have any suggestions on how to deal with this?


-- 
Russell Robinson ([email protected])

------------------------------------------------------------------------------

_______________________________________________
tmda-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tmda-users