Whitelisting logged in user

Rabellino Sergio rabellino at DI.UNITO.IT
Wed Aug 24 15:01:40 IST 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Ugo Bellavance wrote:

>Nigel kendrick wrote:
>  
>
>>One of our users is currently on a dial-up link and it looks like the
>>dial-up IP block has been blacklisted so their mail is being deleted due to
>>"Spam Lists To Be Spam = 3". I get the feeling a ruleset that ups the
>>threshold to, say, 5 would be a workaround, but it would not be watertight.
>>Users have to authenticate before sending - can this be worked into a
>>ruleset? I'm not sure where to start with this one so any pointers would be
>>appreciated.
>>
>>Thanks
>>
>>Nigel Kendrick
>>
>>    
>>
>
>Maybe implementing SMTP-AUTH at mta level?
>
>  
>
Using in sendmail the TSL+AUTH, you get into your headers a string like this

 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NO userCertificateDN= DipinfoAuthUser=YOURUSER );

Then I've inserted into spamassassin this rule:
header   AUTHENTICATEDUSER Received =~ /(.*)DipinfoAuthUser=\w(.*)/
describe AUTHENTICATEDUSER Email Sender Auth by MY MTA
score    AUTHENTICATEDUSER -100.0

Where DipinfoAuthUser was choosed by me as a search token.

Now, the problem is that (As far as I know) the blacklists wins against 
a SA score, even if negative score, so now i've disabled the blacklist 
from MS.
There's a way to understand the behaviour if blacklist and SA checks are 
in contrast by themself ???

Bye.

-- 
Dott. Mag. Sergio Rabellino 

 Technical Staff
 Department of Computer Science
 University of Torino (Italy)

http://www.di.unito.it/~rabser
Tel. +39-0116706701
Fax. +39-011751603

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!



More information about the MailScanner mailing list