Re: [spamdyke-users] Filter $SENDER == $RECIPIENT

2010-01-17 Thread Peter Palmreuther
Hello,

Eric Shubert wrote:
 Peter Palmreuther wrote:
[...]
 So here's the question: is there any chance to configure spamdyke
 rejecting mails with $SENDER == $RECIPIENT or even better with
 DOMAIN($SENDER) in (RCPTHOSTS) UNLESS it's a authenticated SMTP
 connection?
 
 That's simple. Blacklist your domain using sender-blacklist-. See 
 http://www.spamdyke.org/documentation/README.html#REJECTING_ADDRESSES 
 and specify @yourdomain.com in the entry. You probably want to include 
 all domains that are in your rcpthosts file.
 
 This is anti-intuitive, but it works. Since users of your domain always 
 authenticate (or use a submission port 587), they always pass. Anything 
 coming in that's not authenticated and appears to be from your domain is 
 rejected.

Thanks a LOT, that's great!

Just wrote a small script that takes my rcpthosts and converts it to a
sender-blacklist-file (by prepending @) and albeit it's only one and a
half hour up and running it already caught more than 100 mails.

While having a look at the logs I saw not only they're all '$SENDER ==
$RECIPIENT', but also a lot of attempts with empty 'local part' of
envelope sender address. Gotty configure mailfront to block those if one
of them by any chance passes spamdyke filters ...

Thanks for helping out, and thanks to all who participate in spamdyke's
development. I've had almost given up in finding a graylist enabling
'add on' for my qmail installation that would integrate with mailfront
that good. Respect!

Have a nice day,
and thanks a lot once more.
-- 
Regards,

Peter
___
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users


[spamdyke-users] Filter $SENDER == $RECIPIENT

2010-01-16 Thread Peter Palmreuther
Hello,

pardon me if my question has already been answered, but the overwhelming
amount of information in documentation and FAQ maybe just made me not
finding it. In this case I simple link to the answer would be appreciated.

I'm getting a lot of spam mail with $SENDER being equal to
$RECIPIENT. Maybe I'm dense, but I really don't remember having sent
this messages to myself ;-)

But: from time to to I do sent a reminder about some stuff to myself,
so sometimes $SENDER == $RECIPIENT is OK.

I know it would be a tough job for spamdyke knowing, when it's me and
when it's not myself selnding this message, BUT: if I do it I do use
SMTP-AUTH.

So here's the question: is there any chance to configure spamdyke
rejecting mails with $SENDER == $RECIPIENT or even better with
DOMAIN($SENDER) in (RCPTHOSTS) UNLESS it's a authenticated SMTP
connection?
-- 
Thanks a lot,
and best regards,

Peter Palmreuther
___
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users


Re: [spamdyke-users] Filter $SENDER == $RECIPIENT

2010-01-16 Thread Eric Shubert
Peter Palmreuther wrote:
 Hello,
 
 pardon me if my question has already been answered, but the overwhelming
 amount of information in documentation and FAQ maybe just made me not
 finding it. In this case I simple link to the answer would be appreciated.
 
 I'm getting a lot of spam mail with $SENDER being equal to
 $RECIPIENT. Maybe I'm dense, but I really don't remember having sent
 this messages to myself ;-)
 
 But: from time to to I do sent a reminder about some stuff to myself,
 so sometimes $SENDER == $RECIPIENT is OK.
 
 I know it would be a tough job for spamdyke knowing, when it's me and
 when it's not myself selnding this message, BUT: if I do it I do use
 SMTP-AUTH.
 
 So here's the question: is there any chance to configure spamdyke
 rejecting mails with $SENDER == $RECIPIENT or even better with
 DOMAIN($SENDER) in (RCPTHOSTS) UNLESS it's a authenticated SMTP
 connection?

That's simple. Blacklist your domain using sender-blacklist-. See 
http://www.spamdyke.org/documentation/README.html#REJECTING_ADDRESSES 
and specify @yourdomain.com in the entry. You probably want to include 
all domains that are in your rcpthosts file.

This is anti-intuitive, but it works. Since users of your domain always 
authenticate (or use a submission port 587), they always pass. Anything 
coming in that's not authenticated and appears to be from your domain is 
rejected.

-- 
-Eric 'shubes'

___
spamdyke-users mailing list
spamdyke-users@spamdyke.org
http://www.spamdyke.org/mailman/listinfo/spamdyke-users