[asterisk-dev] Dear asterisk-dev at lists.digium.com May 89% 0FF

[Tilghman Lesher]

On Wednesday 21 May 2008 11:47:43 Jay R. Ashworth wrote:
> Copied below are the headers of the spam in question.  It wasn't a
> forgery that made it to that user's mailbox *looking like* it came
> through the list.  It *went on the list*.

In my defense, I didn't see it come across, because I have a fairly well-tuned
anti-spam solution that doesn't use whitelisting, so my mail server rejected
it at SMTP time.

> On Wed, May 21, 2008 at 08:09:56AM -0500, VIAGRA ? Official Site wrote:
> > 	(envelope-from <asterisk-dev at sdb-bosch.com>) id 1Jyo4j-00018N-3i

These are always going to make it through when the spam software selects an
envelope sender who is actually subscribed to the list.  This is due to the
fact that we had so many false positives when the list software was using
spam filtering, and people kept wondering why their posts never made it to the
list.

I'm not sure if we're currently checking SPF or not, but that's likely in the
future, although it wouldn't have helped in this case, as sdb-bosch.com does
not publish SPF records.

-- 
Tilghman