roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Thomas Bolioli
Whenever our users travel outside the internal networks and send email to each other, the emails get tagged by the below reports (yes, I cranked up the default scores because of the botnet crap out there) because they are on dyn IPs and sending direct to the receiving MTA. I see a couple of

Re: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Thomas Bolioli
Dan Horne wrote: I see a couple of ways that this can be remedied, most of which is acceptable. a) Whitelist all of the users (or the entire domain) for every domain on the system [obviously bad since it allows spammers to spoof from headers with impunity even with SPF setup]. b) set up

Re: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Thomas Bolioli
Dan Horne wrote: I see a couple of ways that this can be remedied, most of which is acceptable. a) Whitelist all of the users (or the entire domain) for every domain on the system [obviously bad since it allows spammers to spoof from headers with impunity even with SPF setup]. b) set up

Re: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Michel R Vaillancourt
Thomas Bolioli wrote: Thanks for the response. SMTP auth is set up so there must be something I need to do to tell SA that it was auth'd. Any ideas? Thanks, Tom One solution that I used for this problem was a custom rule. We had one client site that had a lot of roadwarriors so

RE: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Dan Horne
Set up SMTP AUTH and require your users to log in to send email. If I understand correctly Spamassassin automatically trusts mails sent via SMTP AUTH. Thanks for the response. SMTP auth is

RE: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Dan Barker
my laptop comes home. Dan -Original Message- From: Thomas Bolioli [mailto:[EMAIL PROTECTED] Sent: Monday, December 18, 2006 10:37 AM To: users@spamassassin.apache.org Subject: roaming users sending mail internally and dynamic IPs issue Whenever our users travel outside the internal

Re: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Thomas Bolioli
Dan Barker wrote: Another issue you'll run into with road warriors is blocks on port 25. They may not be ABEL to authenticate with your server. They'll have to use port 587 (submission) on some connections. This is so common, that I even support 587 inside my firewall so the client setup doesn't

Re: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Nigel Frankcom
On Mon, 18 Dec 2006 16:13:32 -0500, Thomas Bolioli [EMAIL PROTECTED] wrote: Dan Horne wrote: Set up SMTP AUTH and require your users to log in to send email. If I understand correctly Spamassassin automatically trusts

RE: roaming users sending mail internally and dynamic IPs issue

2006-12-18 Thread Leon Kolchinsky
-Original Message- From: Thomas Bolioli [mailto:[EMAIL PROTECTED] Sent: Monday, December 18, 2006 5:37 PM To: users@spamassassin.apache.org Subject: roaming users sending mail internally and dynamic IPs issue Whenever our users travel outside the internal networks and send email