[Mimedefang] Image spam and broken file formats

2006-12-04 Thread Kenneth Porter
Do the files found in image spam follow the letter of the format specs, or do they tend to be broken? Is the degree of brokenness useful as a spam metric? I'm a fan of rejecting broken files at the gateway (including HTML) and would like to bounce images that violate their format standards, as

Re: [Mimedefang] two md_check_against_smtp_server questions

2006-12-04 Thread Yizhar Hurwitz
HI. > From: John Rudd <[EMAIL PROTECTED]> > 2) Has anyone set up a means of caching results? I don't want to hit my > back-line servers constantly with these requests. I would prefer to > have results cached for, say, 2 hours. I'm trying to think of a good > way to do this. You can take a loo

Re: [Mimedefang] two md_check_against_smtp_server questions

2006-12-04 Thread Jonas Eckerman
John Rudd wrote: > 2) Has anyone set up a means of caching results? I don't want to hit my > back-line servers constantly with these requests. I'm caching this in the SQL database in out filter at . (Our filter was allready using a local SQL database for other stuff

Re: [Mimedefang] $RelayHostname not matching sendmail's Received header?

2006-12-04 Thread Joseph Brennan
--On Thursday, November 30, 2006 14:51 -0600 Michael Sims <[EMAIL PROTECTED]> wrote: Received: from adsl86-34-215-137.romtelecom.net (adsl86-34-215-137.romtelecom.net [86.34.215.137] (may be forged)) by ... However, inside my mimedefang-filter, the value of $RelayHostname was not "adsl86-3

Re: [Mimedefang] two md_check_against_smtp_server questions

2006-12-04 Thread David F. Skoll
John Rudd wrote: > 1) what does MD fill in if you leave the $helo argument blank? It doesn't "fill in" anything. > Does it fill in the hosts own hostname? No. But MIMEDefang defines a function called get_host_name() that returns that, so you can use that for the $helo argument. > 2) Has anyon