PileOfMush wrote:
>
> I have what sounds like the same problem. I have white-listed my own
> domain because most of the email occurs from and to the same domain,
> but any spam coming through that uses our domain in the reply-to gets
> through.


The rule of thumb is to never use 'whitelist_from' unless there is no
other option. Instead, use 'whitelist_from_rcvd' so that the whitelist
only applies to your IP range, or set an SPF record and use
'whitelist_from_spf'.

--
Bowie