Hello,
Recently we started to see some nasty phishing mails passing trough.
They are mails with empty SMTP MAILFROM, so all the hard rules bout validity of sender server (SPF, etc) are skipped.
Spamassin correctly tags it with a (very) high spamicity level;
however, the From: matches an adress in the destinatary mailbox whitelist ... and as such passes.
How would it be possible to apply a rule before looking a users' whitelist, in the case of no MAILFROM and spam level >= some threshold
Thanks
Recently we started to see some nasty phishing mails passing trough.
They are mails with empty SMTP MAILFROM, so all the hard rules bout validity of sender server (SPF, etc) are skipped.
Spamassin correctly tags it with a (very) high spamicity level;
however, the From: matches an adress in the destinatary mailbox whitelist ... and as such passes.
How would it be possible to apply a rule before looking a users' whitelist, in the case of no MAILFROM and spam level >= some threshold
Thanks