Beta release 4.61.4

[Julian Field]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

This code has had to be removed, due to potential patent problems in the 
USA. I don't want to distribute different copies of MailScanner for US 
and non-US markets, and have no way of controlling who gets what version.

So it's gone and it ain't coming back.
Sorry guys.

If you want to read about how it works, look up
        http://en.wikipedia.org/wiki/HMAC

.


- --[ UxBoD ]-- wrote:
> It is a difficult one Jules.  More constants have to be included in the
> hash, that are also very difficult to spoof.  I have having a look at the
> RFC to see what I can come up with.
>
> On Tue, 26 Jun 2007 19:51:17 +0100, Julian Field
> <MailScanner at ecs.soton.ac.uk> wrote:
>   
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Quite possibly. Can you see any way around this problem?
>>
>> - --[ UxBoD ]-- wrote:
>>     
>>> Another question :) If you were to send a email to a mailing list, like
>>> this one, could a spammer extract the watermark and spoof the to and
>>>       
>> from
>>     
>>> address to bypass MailScanner ?
>>>
>>> On Tue, 26 Jun 2007 14:06:48 -0400, DAve <dave.list at pixelhammer.com>
>>>       
>> wrote:
>>     
>>>   
>>>       
>>>> Daniel Maher wrote:
>>>>     
>>>>         
>>>>>> 4 Added new feature (thanks to Matt Hampton for this) to skip the
>>>>>>             
>> spam
>>     
>>>>>> checks
>>>>>>   on a message if it is a reply to one of your own messages. This is
>>>>>> known as
>>>>>>   "watermarking" a message. There are 4 new configuration settings:
>>>>>>   Add Watermark = yes
>>>>>>   Skip Spam Checks If Watermark Valid = yes
>>>>>>   Watermark Secret = SOMETHING-SECRET!
>>>>>>   Watermark Lifetime = 2419200 # = 4 weeks
>>>>>>         
>>>>>>             
>>>>> Does this result in the addition of a header or something?  Is there
>>>>>       
>>>>>           
>>>> detailed technical documentation available for this new feature?
>>>>     
>>>> The big question is the LifeTime. Is MailScanner caching the watermark?
>>>> IF so can that cache be shared? We have multiple incoming MS servers,
>>>> and multiple outgoing SMTP servers.
>>>>
>>>> If possible I am sure we can Ruby something up to add the watermark on
>>>> the outbound servers and pass that information to the MXs.
>>>>
>>>> DAve
>>>>
>>>>     
>>>>         
>>>>> --
>>>>>   _
>>>>>  °v°  Daniel Maher
>>>>> /(_)\ Administrateur Système Unix
>>>>>  ^ ^  Unix System Administrator
>>>>>
>>>>> "The most incomprehensible thing about the world is that it is
>>>>>       
>>>>>           
>>>> comprehensible." -- Albert Einstein.
>>>>
>>>>
>>>> --
>>>> Three years now I've asked Google why they don't have a
>>>> logo change for Memorial Day. Why do they choose to do logos
>>>> for other non-international holidays, but nothing for
>>>> Veterans?
>>>>
>>>> Maybe they forgot who made that choice possible.
>>>> --
>>>> MailScanner mailing list
>>>> mailscanner at lists.mailscanner.info
>>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>>>
>>>> Before posting, read http://wiki.mailscanner.info/posting
>>>>
>>>> Support MailScanner development - buy the book off the website!
>>>>
>>>> --
>>>> This message has been scanned for viruses and dangerous content by
>>>> MailScanner, and is
>>>> believed to be clean.
>>>>     
>>>>         
>> Jules
>>
>> - -- 
>> Julian Field MEng CITP
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>>
>> MailScanner customisation, or any advanced system administration help?
>> Contact me at Jules at Jules.FM
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>> For all your IT requirements visit www.transtec.co.uk
>>
>>
>>
>>
>> -----BEGIN PGP SIGNATURE-----
>> Version: PGP Desktop 9.6.2 (Build 2014)
>> Charset: UTF-8
>>
>> wj8DBQFGgWAnEfZZRxQVtlQRAoaXAKCFJGH05XzWPOisIIJbzMDI93R+6wCfUKpZ
>> MNsVDuaq7B4WvueOwWD2oD4=
>> =79kM
>> -----END PGP SIGNATURE-----
>>
>> -- 
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>> For all your IT requirements visit www.transtec.co.uk
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>>     

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk




-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)
Charset: UTF-8

wj8DBQFGgYF+EfZZRxQVtlQRAnpYAJ90tlBKw7gYO0zqNRWe+8fSPte/RACgvFQA
pSj/HFbqMVAmAwMHeyn89Y0=
=shnH
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk