2 questions different SA scores for outbound vs inbound and best ldap/AD connector for postfix

[Alex Neuman]

Good point, though from the fact that he needs to scan outgoing mail
suggests his users are not trustworthy - ergo, probably from dynamic IP's.
This could be solved by having separate MTA instances running on different
IP addresses for local, trusted users vs. nonlocal, non-trustable users.

On Fri, May 27, 2011 at 3:00 PM, Martin Hepworth <maxsec at gmail.com> wrote:

> Also not a great idea to use domains for the outbound checks as many
> spam use the same from domain as the to domain. Better to use ip
> address in the from here
>
>
> Martin
> On Friday, 27 May 2011, Alex Neuman <alex at vidadigital.com.pa> wrote:
> > About question #1, it's definitely possible - although it's not often you
> find outbound spam unless your users are spammers themselves!
> >
> > spam = %rules-dir%/spam.rules
> > high scoring spam = %rules-dir%/high.scoring.spam.rules
> >
> > spam.rules:
> >
> > # inbound
> > to: *@mydomain.com 4
> > # outbound
> > fromorto: default 7
> >
> > high.scoring.spam.rules:
> > # inbound
> > to: *@mydomain.com 7
> > # outbound
> > fromorto: default 12
> >
> > Reload MailScanner and it should pick up.
> >
> > PS: Please don't email back saying it didn't work because you copied it
> verbatim. This is just an example, read the docs and make sure you know what
> every parameter does.
> > On Fri, May 27, 2011 at 10:49 AM, Harondel J. Sibble <
> mailscanner at pdscc.com> wrote:
> >
> > Question #1
> >
> > Is there a way to assign different spam score requirements to inbound vs
> > outbound mail?  I see in the list archives instructions for disabling
> > outbound SA scoring, but not for different directional scores.
> >
> > Basically want
> >
> > Inbound
> > spam = 4
> > high scoring spam = 7
> >
> > outbound
> > spam = 7
> > high scoring spam = 12
> >
> > Can someone point me to instructions on how to make this work or let me
> know
> > if it's not even possible?
> >
> > Question #2
> >
> > what's the current recommended best AD/LDAP connector for using with
> Postfix
> > and Exchange 2010/Windows 2008 R2 AD.
> >
> > I've been reviewing the list archives and googling and see there are
> still a
> > lot of options in general, but most I've come across so far seem to be
> > specific to EX2003/2007/Win2k3.
> >
> > Customer is happy to pay for a commercial solution.  Just looking for the
> > simplest to deploy/maintain.
> >
> > --
> > Harondel J. Sibble
> > Sibble Computer Consulting
> > Creating Solutions for the small and medium business computer user.
> > help at pdscc.com (use pgp keyid 0x3AD5C11D) http://www.pdscc.com
> > Blog: http://www.pdscc.com/blog
> > (604) 739-3709 (voice)
> >
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
> >
> >
> > --
> >
> > --
> >
> > Alex Neuman van der Hans
> > Reliant Technologies / Vida Digital
> > http://vidadigital.com.pa/
> >
> > +507-6781-9505
> > +507-832-6725
> > +1-440-253-9789 (USA)
> >
> > Follow @AlexNeuman on Twitter
> > http://facebook.com/vidadigital
> >
> >
> >
>
> --
> --
> Martin Hepworth
> Oxford, UK
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>



-- 

--

Alex Neuman van der Hans
Reliant Technologies / Vida Digital
http://vidadigital.com.pa/

+507-6781-9505
+507-832-6725
+1-440-253-9789 (USA)

Follow @AlexNeuman on Twitter
http://facebook.com/vidadigital
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110527/990b70f9/attachment.html