Re: whitelisting recipients

[Dan Nelson]

In the last episode (Jun 03), Derek J. Balling said:
> On Tuesday, June 3, 2003, at 10:15 AM, Dan Nelson wrote:
> >I add "whitelist_to address@hidden" lines to spamassassin's local.cf for
> >people like this.
> 
> Does this work when you get something like:
> 
> From: <address@hidden>
> To: <address@hidden>
> 
> and <address@hidden> is a member of address@hidden

Depends on the rest of the headers in that message.  According to the
faq at http://spamassassin.taint.org/faq/index.cgi?req=all#4.11 ,
spamassassin cannot directly access the envelope headers (even through
our milter can see them).  It does look at the following message
headers that intermediate MTAs sometimes generate:

  Resent-To                # std, rfc822
  Resent-Cc                # std, rfc822

  To 
  Apparently-To            # sendmail, from envelope
  Delivered-To             # Postfix, I think
  Envelope-Recipients      # qmail: new-inject(1)
  Apparently-Resent-To     # procmailrc manpage
  X-Envelope-To            # procmailrc manpage
  Cc

It actually wouldn't be that hard to have spamass-milter create
Resent-To and Resent-From headers before passing the message to spamc. 
The modification would not affect the original message, so there would
be no security issues (BCCs becoming visible, etc).

-- 
        Dan Nelson
        address@hidden