On 2006-01-14 21:01:00 -0500, Swallow, Harold wrote:
> John Peacock wrote:
> >>"Failures" during the filter processing will require notifying the sender.
> >
> >This is a very bad idea.  If you have already accepted the messages,
> >you no longer have the ability to refuse them during the SMTP
> >transaction and can only bounce them.  The vast majority of spam is
> >sent with forged FROM: and/or envelope sender, so it is not
> >acceptable to notify the sender via a bounce, since you are simply
> >annoying an innocent bystander.

Normally I strongly agree with that. However, there is one exception:

> Your training/mindset is spam & virus email for good reason.
> The origins and primary use of qpsmtpd is anti-virus and
> anti-spam.  The qpsmtpd package has accomplished a lot in
> that arena.  My thoughts are aimed at providing a benefit
> to those who are "real" users of our mail system.

If you *know* that the sender is not forged (e.g., because you verified it
via SMTP AUTH) it may be beneficial to do some content filtering after
accepting the mail - either for performance reasons (users get impatient
if the MUA takes several seconds to send a mail) or because you can
explain the problem better in a bounce message than in an SMTP error
message (which the MUA may not even display).

So, since we don't know your application or environment, we can't say
for sure if what you are trying to do is a good idea or a bad idea.
I do think, however, that you should think hard before putting any check
which can cause non-delivery post-queue.

> Now that I think of it, someone within the qpsmtpd
> community must have considered using the package as
> a Postfix content filter since there is a postfix-queue
> plugin.

No. I wrote the postfix-queue plugin because I wanted to use qpsmtpd
instead of the postfix smtpd. I didn't think of postfix after-queue
content filters then (I guess I didn't even know about them: I used
postfix 1.1 at the time, and the README on the website says, that this
technique requires 2.1).



-- 
   _  | Peter J. Holzer    | Ich sehe nun ein, dass Computer wenig
|_|_) | Sysadmin WSR       | geeignet sind, um sich was zu merken.
| |   | [EMAIL PROTECTED]         |
__/   | http://www.hjp.at/ |    -- Holger Lembke in dan-am

Attachment: pgpwrv7EegwTT.pgp
Description: PGP signature

Reply via email to