Yet another "disable outgoing scan" question

[Jason Ede]

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Mauricio Tavares
> Sent: 16 February 2010 21:31
> To: MailScanner discussion
> Subject: Re: Yet another "disable outgoing scan" question
> 
> On Tue, Feb 16, 2010 at 4:18 PM, Alex Neuman <alex at rtpty.com> wrote:
> > You should make sure the e-mails that go through your server that say
> they're from your domain actually *are* from your domain.
> > This is done at the MTA level.
> >
>       That I think I am already doing: I told my MTA, postfix, to
> always do smtp auth. Should that suffice?


Depends... How are you doing SMTP auth? If not using TLS or the like then your credentials will be transmitted in plaintext and so are sniffable if you wanted to. If its an internal network then risk is minimal, but if its over internet then have seen outgoing servers credentials compromised in this way...

TLS on postfix is trivial to get working.
 
> > On Feb 16, 2010, at 3:41 PM, Mauricio Tavares wrote:
> >
> >>      As the subject states, I would like to disable outgoing scan.
> >> Now, from what I saw in mailscanner.conf and was explained in the
> irc
> >> channel, I should set Scan Messages = my ruleset file and then have
> >> something like
> >>
> >> From:     my.domain.com no
> >> FromOrTo: default           yes
> >>
> >> in the file. Question I have is would the first line cause emails
> >> pretending to be coming from my domain not to be scanned? If so, how
> >> would I make sure only the emails that truly originate from my
> domain
> >> not be scanned?
> >> --
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website!