Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread Jean-Yves Avenard
Hi 2010/1/15 Ted Mittelstaedt : > Yeah, this patch was discussed close to 6 years ago: > > http://lists.nongnu.org/archive/html/spamass-milt-list/2004-03/msg00014.html > > Unfortunately although the spamass-milter maintainer said he would > add this, he never did, and the project appears to have b

Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread John Hardin
On Wed, 13 Jan 2010, David B Funk wrote: On Wed, 13 Jan 2010, John Hardin wrote: header AUTH_SMTP Received =~ /\(authenticated bits=\d+\) by mail\.impsec\.org / One risk to this rule, a savvy spammer could forge a "Received" header to mimic that information to gain your white-list sco

Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread Ted Mittelstaedt
Yeah, this patch was discussed close to 6 years ago: http://lists.nongnu.org/archive/html/spamass-milt-list/2004-03/msg00014.html Unfortunately although the spamass-milter maintainer said he would add this, he never did, and the project appears to have been orphaned a few years later. Interesti

Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread Jean-Yves Avenard
I found this optional patch in the FreeBSD ports. It does exactly what I want ; bypass all test if the message was sent over an authenticated connection... Could easily be adapted to simply add an extra header for spamassassin to check on diff -u orig/spamass-milter.1.in spamass-milter.1.in ---

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread David B Funk
On Thu, 14 Jan 2010, Daryl C. W. O'Shea wrote: > On 13/01/2010 9:29 PM, Jean-Yves Avenard wrote: > > Hi > > > > Mail system is made of > > Sendmail as MTA -> spamass-milter -> spamd > > > > Legitimate users are using the sendmail server over TLS and first need > > to authenticate themselves before

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread Daryl C. W. O'Shea
On 13/01/2010 9:29 PM, Jean-Yves Avenard wrote: > Hi > > Mail system is made of > Sendmail as MTA -> spamass-milter -> spamd > > Legitimate users are using the sendmail server over TLS and first need > to authenticate themselves before being able to post. > > Is there a way to have a particular

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread Jean-Yves Avenard
Hi there 2010/1/14 David B Funk : > A caveat, as you're using sendmail with a milter, be aware that the milter > taps into the mail stream -before- the local sendmail "Received" header is > added. Therefore the milter has to synthesize the "Received" header > itself (to mimic what sendmail will cr

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread Jean-Yves Avenard
Hi 2010/1/14 John Hardin : > Take a look at the Received header that your MTA inserts for an > authenticated session. It will look something like this: Thanks for the hint.. I had a try with adding a hydrix.cf file containing: header AUTH_SMTP Received =~ /\(authenticated bits=[0-9]+\) by (mail

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread David B Funk
On Wed, 13 Jan 2010, John Hardin wrote: > On Thu, 14 Jan 2010, Jean-Yves Avenard wrote: > > > Mail system is made of > > Sendmail as MTA -> spamass-milter -> spamd > > > > Legitimate users are using the sendmail server over TLS and first need > > to authenticate themselves before being able to pos

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread John Hardin
On Thu, 14 Jan 2010, Jean-Yves Avenard wrote: Mail system is made of Sendmail as MTA -> spamass-milter -> spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to post. Is there a way to have a particular score if the sender h

How to check if user is authenticated via Sendmail

2010-01-13 Thread Jean-Yves Avenard
Hi Mail system is made of Sendmail as MTA -> spamass-milter -> spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to post. Is there a way to have a particular score if the sender has succesfully authenticated ? Like if the s