RE: [Mimedefang] Disabling spam checks on outgoing email
We run spamassassin on outgoing mail so we can spot users machines that are either compromised or are spamming for any other reason. We track number of messages and average score for the last hour, day and week so that we can ignore a single message that scores high, but spot a user consistently scoring high and generating high volume. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Campbell Sent: Monday, July 26, 2004 3:47 PM To: [EMAIL PROTECTED] Subject: [Mimedefang] Disabling spam checks on outgoing email I have configured MD and have it properly scanning email using clamav and spamassassign. Recently I enabled it to scan both incoming and outgoing emails. I can't think of any reason why I would want to run spamassassign against outgoing emails. If I am wrong somebody please let me know what I am missing. Therefore what I want to do is to disable the spam checks for outgoing mail. In the filter_end function is where the spam checks are done. Is there a way to determine in filter_end if the email is originating from my domain and to not spam check it? I had tried a filter_relay function that would check the IP address and this worked but as a side effect it also disabled virus checks for outgoing mail as well. What I really want is to virus check incoming and outgoing mail while only spam checking incoming mail. Any ideas??? -- ___ Mike Campbell ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Disabling spam checks on outgoing email
--On Monday, July 26, 2004 2:47 PM -0500 Mike Campbell
[EMAIL PROTECTED] wrote:
I can't think of any reason why I would want to run spamassassign against
outgoing emails. If I am wrong somebody please let me know what I am
missing.
If outgoing includes smtp relay service (and thus incoming from PCs),
you might want to guard against compromised PCs being used by spammers.
Thanks to laptops being carried in and out, do not rely on network
firewalls. Requiring smtp auth helps though; the spam and virus engines
don't seem to do that yet. (We're waiting for one that puts its junk in
an Outlook Express outgoing queue to be sent with smtp auth later.)
You can put any conditions you want around the call to Spamassassin.
We skip it:
if (defined($SendmailMacros{auth_type}))
if ($RelayAddr eq 127.0.0.1)
and also if $RelayAddr is certain other local IPs that we trust.
Joseph Brennan
Academic Technologies Group, Academic Information Systems (AcIS)
Columbia University in the City of New York
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Disabling spam checks on outgoing email
Hi, return if ($RelayAddr eq 172.16.2.7); return if ($RelayAddr eq 127.0.0.1); Could you tell me where I have to put these lines into mimedefang-filter file? The relay server has always the same address; it's my exchange server that is behind sendmail. Thank you Yanick ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Disabling spam checks on outgoing email
-Original Message- From: Yanick Quirion [mailto:[EMAIL PROTECTED] Could you tell me where I have to put these lines into mimedefang-filter file? The relay server has always the same address; it's my exchange server that is behind sendmail. Just before you call SpamAssassin. Wherever that is in your filter. If you use the example filter, it is located in the filter_end subroutine. ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
[Mimedefang] Disabling spam checks on outgoing email
I have configured MD and have it properly scanning email using clamav and spamassassign. Recently I enabled it to scan both incoming and outgoing emails. I can't think of any reason why I would want to run spamassassign against outgoing emails. If I am wrong somebody please let me know what I am missing. Therefore what I want to do is to disable the spam checks for outgoing mail. In the filter_end function is where the spam checks are done. Is there a way to determine in filter_end if the email is originating from my domain and to not spam check it? I had tried a filter_relay function that would check the IP address and this worked but as a side effect it also disabled virus checks for outgoing mail as well. What I really want is to virus check incoming and outgoing mail while only spam checking incoming mail. Any ideas??? -- ___ Mike Campbell ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
RE: [Mimedefang] Disabling spam checks on outgoing email
-Original Message- From: Mike Campbell [mailto:[EMAIL PROTECTED] Therefore what I want to do is to disable the spam checks for outgoing mail. In the filter_end function is where the spam checks are done. Is there a way to determine in filter_end if the email is originating from my domain and to not spam check it? Do you know the IP where all your outgoing mail is coming from? Here's a snippet from my filter_end to show how I did it: # Everything that follows is for SpamAssassin. # If you wish to do anything else in filter_end, place it before # this point, or modify the logic. # Do not do SpamAssassin checks if mail from Exchange server is going out. return if ($RelayAddr eq 172.16.2.7); return if ($RelayAddr eq 127.0.0.1); If you stream by domain/recient, leave out the check for 127.0.0.1. If you can't predict the IP, but your users authenticate, see page 122 of http://mimedefang.org/static/mimedefang-lisa03.pdf ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
