New wiki page

[Zaeem Arshad]

Hi Steve,

On Wed, Jul 1, 2009 at 11:20 PM, Steve Freegard <steve.freegard at fsl.com>wrote:

>
>
> - Inspect outbound SMTP traffic for obvious spam signs and reject it
> before queuing (e.g. as per my last mail:  URIBL_*, DCC, RAZOR2, PYZOR,
> IXHASH, Bayes, envelope sender from a domain that doesn't belong to you
> etc.).
>


Apart from the URIBL check, the DCC, Razor2, Pyzor and IXHASH checks require
you to queue the mail before they can be run. I am not sure how would one
delegate the responsibility to the MTA? And even if one can, the time
involved in scanning will be considerable opening a DoS attack vector.

Since I am aware of your contributions, I am inclined to the fact that I
might have gotten it all wrong. Please correct me if that's the case.


Regards

--
Zaeem
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090703/f2a3087e/attachment.html