Patrick Morris ([EMAIL PROTECTED]) had this to say on 05/29/03 at 23:23: > This may be a silly question -- but why not just have Sendmail do the > LDAP account lookup itself (using the LDAP_ROUTING feature)? Seems like > it'd be quite a bit less overhead to deal with than passing stuff to a > Perl milter.
I tried to have my postfix v1.1.11 do an LDAP lookup of recipient against my Exchange 5.5 server. And found out that the LDAP lookup returned 0 (success), whether it found the recipient email address or not ... So I extracted out the GAL to a text file, and let postfix use that as a valid list of rcipients to accept mail for. Works a treat. > > Stevens, John wrote: > > >Hi All, > >Apologies for the crappy disclaimer :( > >We have two linux mail gateways protecting our MSExchange Server. We > >run SA with sendmail using spamass-milter, and LOVE SA. You wouldn't > >believe how much spam we are marking, with no false positives and very > >few sneaking through. One problem we had for a while (we let all spam > >trhough, only tag it. The MD doesn't like ANY chance of a false > >positive) is that a lot of spam comes through to ex employees and > >unlisted users. This comes through the gateways as the recipient domain > >is correct and the gateways had no idea of if the users existed or not. > >We definitely DO NOT WANT valid users on the gateways. So we had > >several options, most involving us not only configuring users/aliases on > >exchange, but also on both boxes. Then the Exchange server couldn't > >find these unknown recipients and bounced the message back to the > >sending server, which sat in the gateway's mail queue for a couple of > >days until they expired. Why? Well have you ever tried to send a > >message back to a spam server? They are good at dishing out, but not at > >taking. > >We got around the whole problem with a small perl based milter that uses > >an ldap query to the Exchange Server to check each recipient. If ldap > >can't find an appropriate alias for the recipient name, it rejects the > >mail. In the past two days it has rejected over 3000 spams, and reduced > >the stacked up mail in the gateway queue to almost nill. If anyone > >would find such a beast useful on their system, please let me know and I > >will send details to you. If there is enough interest I will package it > >up and put it on our website, with a web based configuration utility > >that sets preferences for all a user's aliases. > >For those not interested, please forgive the intrusion. > > > >============================================ > >TUSC Computer Systems - www.tusc.com.au > >John Stevens - Senior Project Engineer > >Mobile: 0419840411 > >Direct: 03 9840 4428 > >--- > >This message (and any associated files) is intended only for the > >use of the individual or entity to which it is addressed and may > >contain information that is confidential, subject to copyright or > >constitutes a trade secret. If you are not the intended recipient > >you are hereby notified that any dissemination, copying or > >distribution of this message, or files associated with this message, > >is strictly prohibited. If you have received this message in error, > >please notify us immediately by replying to the message and deleting > >it from your computer. Messages sent to and from us may be monitored. > > > >Internet communications cannot be guaranteed to be secure or error-free > >as information could be intercepted, corrupted, lost, destroyed, arrive > >late or incomplete, or contain viruses. Therefore, we do not accept > >responsibility for any errors or omissions that are present in this > >message, or any attachment, that have arisen as a result of e-mail > >transmission. If verification is required, please request a hard-copy > >version. Any views or opinions presented are solely those of the author > >and do not necessarily represent those of the company. > > > > > >------------------------------------------------------- > >This SF.net email is sponsored by: eBay > >Get office equipment for less on eBay! > >http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 > >_______________________________________________ > >Spamassassin-talk mailing list > >[EMAIL PROTECTED] > >https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > > > > > > > ------------------------------------------------------- > This SF.net email is sponsored by: eBay > Get office equipment for less on eBay! > http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5 > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
pgp00000.pgp
Description: PGP signature
