Michael,
> > For amavisd -based lookups, only addresses from a
SMTP
> > envelope matter, so whitelist the
bounce.exacttarget.com.
> > Mail header is ignored for most purposes within
amavisd.
>
> Yuck.
> In this case, with amavisd SQL user has to either
whitelist:
> <bounce-1129466_HTML-2038856471-6697714-3922 bounce.exacttarget.com>
> (which will change for each email!)
A regexp-based whitelist is available, you can add some
negative
score points for: /^bounce-[^ ]* bounce\.exacttarget\.com$/i
see amavisd.conf-sample -> score_sender_maps ->
new_RE(...)
> The amavisd SQL way IS safer! (harder for spammers to
forge)
For spammers it is just as easy to forge From or envelope
sender address.
> it just might conflict with VERP and SPF forwarding.
If the sending domain is signing with DKIM, one can also
use whitelist_from_dkim in SA.
> > For amavisd -based lookups, only addresses from a
SMTP
> > envelope matter, so whitelist the
bounce.exacttarget.com.
> > Mail header is ignored for most purposes within
amavisd.
>
> What about (SA's SQL based?) AWL? Which one? Either?
AWL is based on From address from the header.
See man Mail::SpamAssassin::Plugin::AWL
> > For SA-based whitelists, you have a choice of
whitelisting
> > addresses from mail header (not from the SMTP
envelope, which
> > is not seen by SA).
>
> Return-Path:
> <bounce-1129466_HTML-2038856471-6697714-3922 bounce.exacttarget.com>
> From: "American Society for Quality"
<listmanager asq.org>
See man page Mail::SpamAssassin::Conf for
whitelist_from and whitelist_from_rcvd.
Mark
------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
AMaViS-user mailing list
AMaViS-user lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/
|