diff xml/dnsbl.in @ 162:c4bce911c276 stable-6-03

don't add auto whitelist for A to A
author carl
date Sat, 14 Jul 2007 12:25:17 -0700
parents d384df37491f
children 97d7da45fe2a
line wrap: on
line diff
--- a/xml/dnsbl.in	Tue Jul 10 14:09:23 2007 -0700
+++ b/xml/dnsbl.in	Sat Jul 14 12:25:17 2007 -0700
@@ -176,11 +176,15 @@
                 allowed to relay thru this mail server with no spam filtering.
             </para>
             <para>
-                Consider the case of a message from A to B passing thru this milter.
-                If that message is not blocked, then we might eventually see a reply
+                Consider the case of a message from A to B passing thru this milter.  If
+                that message is not blocked, then we might eventually see a reply
                 message from B to A. If the filtering context for A includes an
-                autowhite entry, then this milter will add an entry in that file to
-                whitelist such replies for a configurable time period.  Such autowhite
+                autowhite entry, and that context does <emphasis>not</emphasis> cover B
+                as a recipient, then this milter will add an entry in that file to
+                whitelist such replies for a configurable time period.  Suppose A and B
+                are in the same domain, or at least use the same filtering context.  In
+                that case we don't want to add a whitelist entry for B, since that would
+                then allow spammers to send mail from B (forged) to B. Such autowhite
                 files need to be writeable by the dnsbl user, where all the other dnsbl
                 configuration files only need to be readable by the dnsbl user.
             </para>