Stan Hoeppner a écrit : > dar...@chaosreigns.com put forth on 2/19/2010 11:26 PM: >> I want to collect all spam delivered to my server to an invalid user / >> domain. luser_relay seems to be doing part of the job, but how do I get it >> around or through spamassassin which is set up as a pre-queue content >> filter? It looks like skipping the smtpd_proxy_filter isn't an option, so >> can I set a header or something for spamassassin to whitelist on? >> >> >> I love running spamassassin as a pre-queue filter, knowing that any false >> positives will get an error message, without causing any backscatter. >> >> (Honey pot, for maintenance of whitelist / blacklist type things.) > > Just add > > smtpd_recipient_restrictions = > check_recipient_access hash:/etc/postfix/honey_pot_whitelist > > at the very top of your smtpd_recipient_restrictions list. > > > /etc/postfix/honey_pot_whitelist > # white list honey pot addresses > > honey-...@yourdomain.com OK > sw33t3r-...@yourdomain.com OK > sw33t3st-...@yourdomain.com OK >
This isn't enough. Darxus is using spamassassin as a pre-queue filter. Instead of "OK", use PREPEND to insert a header (or use a class that includes a check to PREPEND plus other checks). then have SA use this header (but make sure spammers can't insert the header themselves. so use a "secret" one...). note that you should do this for specific honey pot addresses or address patterns. do not do this for "any unlisted address" (people do typo addresses sometimes...). > [snip]