First of all, let me say I'm not positive that I understand exactly the problems, you're having. I'm gathering that you do not have your customer base on a small set of subnets and that rather, they are spread through out the internet. To offer them mail relaying you have opened relaying to a very large portion of the world. If this is the case, I believe first of all you need to drastically rethink your methods. Here are two ways of dealing with customers not residing in a small pool of IPs: A. implement SMTPauth and don't allow relaying from any subnets at all. B. Your radius server may allow you to log your customer's IP's to a mysql database. You then could use the mysql patch for tcpserver and then in your tcpserver .cdb file disallow relaying to the world. We use this solution for our customers. We use FreeRadius for this purpose.
Lastly, I think you should rethink using qmail-scanner for spam purposes, it, in my opinion, doesn't provide the flexibility necessary for SPAM filtering. Cody Baker [EMAIL PROTECTED] ----- Original Message ----- From: "Vpopmail Mailinglist" <[EMAIL PROTECTED]> To: "Cody Baker" <[EMAIL PROTECTED]> Sent: Thursday, February 12, 2004 2:21 AM Subject: Re: [Qmail-scanner-general]only outgoing mail (smtp) troghqmailscanner > Hi .. > First thx for the answer. > But is there no other solution ? > > I don't want to scan incoming mail cause i want to secure that noone is > sending spam over my smtp server . Im working on an ISP and we have in > last time often get blacklistet cause Spam. we use dynamic ips so the > ips often change and the other custumer who not sending spam gets the IP > next time and get in trouble.so the spam check is to only for us not the > custumers.. > Some custumers don'T want the spamfilter in front of their. > > I Hope you understand what i want. > > If there is no other Solution i must cause yours .. > > THX > Am Mi, den 11.02.2004 schrieb Cody Baker um 18:12: > > You really have two options for this. Because of qmail-scanner's location > > in the chain of all things qmail, it doesn't distinguish between incoming > > and outgoing, and there's good reason for this. Mail sent to qmail-smtpd > > and sub-sequentially to qmail-scanner can have both local and remote > > targets, so at this level there is no such thing as outgoing mail. You do > > have the option of not scanning mail received from your RELAY mail zones, > > but this is a bad idea because it would allow one customer of your server to > > send to another unfiltered. The ideal solution is to run two copies of > > qmail on different IPs. Set the MX record of your domain to copy A with > > qmail-scanner and leave smtp.domain.com or whatever your "outgoing" mail > > server is without qmail-scanner. This dualistic qmail has drastically > > positive performance implications as well. Your outgoing mail server will > > no longer be burdened with sending the thousands of "user not found" > > messages to unanswering spammers. > > > > That said, I would consider outgoing messages just as important to scan for > > viruses, unless you're serving an entirely UNIX network, or have a situation > > where you're mass mailing. > > > > Thank you, > > > > Cody > > [EMAIL PROTECTED] > > > > ----- Original Message ----- > > From: "Vpopmail Mailinglist" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Wednesday, February 11, 2004 10:03 AM > > Subject: [Qmail-scanner-general]only outgoing mail (smtp) trogh qmailscanner > > > > > > > Hi guys, > > > > > > anyone know how i can set qmailscanner so that it only test outgoing > > > mail ( smtp) = > > > Or that incoming mail not put to qmailscanner ? > > > > > > BYe > > > > > > > > > > > > ------------------------------------------------------- > > > The SF.Net email is sponsored by EclipseCon 2004 > > > Premiere Conference on Open Tools Development and Integration > > > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. > > > http://www.eclipsecon.org/osdn > > > _______________________________________________ > > > Qmail-scanner-general mailing list > > > [EMAIL PROTECTED] > > > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > > > > > > > > > > > ------------------------------------------------------- > > SF.Net is sponsored by: Speed Start Your Linux Apps Now. > > Build and deploy apps & Web services for Linux with > > a free DVD software kit from IBM. Click Now! > > http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click > > _______________________________________________ > > Qmail-scanner-general mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general > > ------------------------------------------------------- SF.Net is sponsored by: Speed Start Your Linux Apps Now. Build and deploy apps & Web services for Linux with a free DVD software kit from IBM. Click Now! http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
