Re: RELEASE: Postwhite 0.1.0

2008-07-25 Thread Daniel L. Miller
Sven Schwyn wrote: Hi I've just released the first version of Postwhite, a policy server for Postfix which implements whitelisting. These per-recipient whitelists are entirely managed by use of emails. It's a nice thought - and I like seeing something controlled via e-mail instead of modifyin

Re: RELEASE: Postwhite 0.1.0

2008-07-25 Thread Sven Schwyn
On Thu, 24 Jul 2008 16:32:13, Scott Kitterman wrote You appear to have missed the next step where spammers scrape Arthur's list mail address from the mailing list archives and use it as the Mail From address in spam they send to him. That won't work because Arthur can't send any messages to

Re: RELEASE: Postwhite 0.1.0

2008-07-25 Thread Benny Pedersen
On Fri, July 25, 2008 14:05, Scott Kitterman wrote: > Based on the example, he's whitelisting based on Rcpt To. In my counter > example the local domain is being used in both Mail From and Rcpt To, so dont test spf on this 2 headers > the only domain's SPF that might enter into this is his own.

Re: RELEASE: Postwhite 0.1.0

2008-07-25 Thread Scott Kitterman
On Fri, 25 Jul 2008 20:28:45 +1000 Daniel Black <[EMAIL PROTECTED]> wrote: >On Fri, 25 Jul 2008 06:32:13 am Scott Kitterman wrote: >> You appear to have missed the next step where spammers scrape Arthur's list >> mail address from the mailing list archives and use it as the Mail From >> address i

Re: RELEASE: Postwhite 0.1.0

2008-07-25 Thread Benny Pedersen
On Fri, July 25, 2008 12:28, Daniel Black wrote: > Just need to make sure the list owner has deployed SPF and DKIM before > then :-) does not help here, its the maillist USER that should provide a spf on domain he is sending from, then the maillist-owner can reject forged mails to the maillist,

Re: RELEASE: Postwhite 0.1.0

2008-07-25 Thread Daniel Black
On Fri, 25 Jul 2008 06:32:13 am Scott Kitterman wrote: > You appear to have missed the next step where spammers scrape Arthur's list > mail address from the mailing list archives and use it as the Mail From > address in spam they send to him. > > Scott K Just need to make sure the list owner has d

Re: RELEASE: Postwhite 0.1.0

2008-07-24 Thread Scott Kitterman
On Thursday 24 July 2008 12:37, Sven Schwyn wrote: > Hi > > I've just released the first version of Postwhite, a policy server for > Postfix which implements whitelisting. These per-recipient whitelists > are entirely managed by use of emails. > > http://www.bitcetera.com/products/postwhite > > Her

RELEASE: Postwhite 0.1.0

2008-07-24 Thread Sven Schwyn
Hi I've just released the first version of Postwhite, a policy server for Postfix which implements whitelisting. These per-recipient whitelists are entirely managed by use of emails. http://www.bitcetera.com/products/postwhite Here's a real-life example of what Postwhite does: Arthur‘s ma