Re: [SAtalk] Whitelist using LDAP server

2003-06-16 Thread Colin Dean
John Lederer wrote: > I am extremely interested. > > We use Rolodap, an LDAP contacts directory . Automatically whielisting > email from anyone in tht would let us lower the threshold for spam > generally. > > If you can post your code somewhere where I could link to it, I would > make sure that

Re: [SAtalk] Whitelist using LDAP server

2003-06-15 Thread Tony Earnshaw
Simon Byrnand wrote: Huh ? Of course Sendmail can refuse mail for non-existant user accounts. :) This happens automatically for the "primary" domain name the server is configured with, but if you're doing multiple virtual domains using the virtusertable file then you need a wildcard entry per d

Re: [SAtalk] Whitelist using LDAP server

2003-06-15 Thread Simon Byrnand
At 11:30 15/06/03 +0200, Tony Earnshaw wrote: >Ah. Does this make any difference to putting your MTA in a proxy-forwarding DMZ? Don't know what provision >Sendmail has for defeating dictionary attacks and suchlike, but both Postfix 2.0 and Exim 4.20 can completely >defeat them, so using Fetchmai

Re: [SAtalk] Whitelist using LDAP server

2003-06-15 Thread David Luyer
On Sun, Jun 15, 2003 at 05:44:40PM +0200, Tony Earnshaw wrote: > I'll do a trade with you ("swap you this for that"). You tell me how > you'd whitelist a given ldap alias list with Sendmail, and I'll tell you > how I'd do it with SA-Exim 4.20/3.0 and with Postfix 2.0.12 (dunno yet, > cos I never

Re: [SAtalk] Whitelist using LDAP server

2003-06-15 Thread Tony Earnshaw
David Luyer wrote: Of course it can. sendmail can do anything. Never believe anyone who tells you there's something sendmail can't do. Well, well, well. It does it by default if it's the final delivery host, Good. So now I know that. I don't know Sendmail at all, but as I said, both SA-Exim 4.

RE: [SAtalk] Whitelist using LDAP server

2003-06-15 Thread David Luyer
> Also, both can be configured to refuse mail for non-existent user > accounts. Which I don't believe Sendmail can. Of course it can. sendmail can do anything. Never believe anyone who tells you there's something sendmail can't do. It does it by default if it's the final delivery host, if it's

Re: [SAtalk] Whitelist using LDAP server

2003-06-15 Thread Tony Earnshaw
Colin Dean wrote: Sorry, in trying to be brief in my original posting, I probably wasn't clear enough. All you had to do is to explain "why." Before using SA, we'd set up a regular cron job to send the relevant data from MySQL into an OpenLDAP directory so that we could then use this easily as a

Re: [SAtalk] Whitelist using LDAP server

2003-06-14 Thread John Lederer
I am extremely interested. We use Rolodap, an LDAP contacts directory . Automatically whielisting email from anyone in tht would let us lower the threshold for spam generally. If you can post your code somewhere where I could link to it, I would make sure that Rolodap users generally knew of

Re: [SAtalk] Whitelist using LDAP server

2003-06-14 Thread Colin Dean
Tony Earnshaw wrote: I suppose it might be of interest to others if you told the list what users your ldap director[y|ies] contain(s). As well as your policy. Like I don't want mail from my local users (100% Openldap 2.1.19 based) scanned, so both with my Postfix 2.0.x and SA-Exim 4.20/3.0 MTAs

Re: [SAtalk] Whitelist using LDAP server

2003-06-14 Thread Tony Earnshaw
Colin Dean wrote: Using SpamAssassin, I want to whitelist every email address in the LDAP directory address book our mail clients (Mozilla and Netscape) use, without having a separate "whitelist_from" hard-wired into the SpamAssassin config file. So I've hacked some changes to SpamAssassin 2.55 so

[SAtalk] Whitelist using LDAP server

2003-06-14 Thread Colin Dean
Hi, Using SpamAssassin, I want to whitelist every email address in the LDAP directory address book our mail clients (Mozilla and Netscape) use, without having a separate "whitelist_from" hard-wired into the SpamAssassin config file. So I've hacked some changes to SpamAssassin 2.55 so it can query