Thanks to all that replied.

On Tue, 08 Jul 2003 07:40:53 +0200, Tony Earnshaw wrote
> Mike Vanecek wrote:
> 
> > Running RH 9, SA 2.55 w/spamc/d, Postfix, procmail, ...
> 
> This would be "old fashioned" Postfix. I run 2.0.12, normally - but 
> am looking at the current snapshot.

[EMAIL PROTECTED] admin]$ rpm -qa | grep -i postfix
postfix-1.1.11-11

I guess I need to go look at 2.0.12 and see what it offers. I do not know what
version is in rawhide. If I can ever get in ...

> 
> > Q1.
> > Does a configuration exist (mailscanner, or such utilities) that would allow 
> > one to do a standard reject based on the hit score? Based on my existing 
> > setup, by the time the message goes through SA via spamc, it is already out of
> > postfix. I assume that means that a standard smtp type of reject could not be
> > done? Does anyone have a setup to reject rather than dev/null and, if so, how?
> 
> Under normal conditions you can configure Postfix itself to do 
> regexp/pcre/RBL-based rejection on header and body content. Using 
> Amavis-d (as I am) I can't do smtp rejections, since the smtpd 
> daemon has already given a 201 acceptance. I must either bounce or quarantine.

That is kinda what I thought. I really did not want to configure Postfix to do
the filtering; I really like the job done by SA. Also, IIUC, reject
essentially says nobody home, go away, whereas bounce says we are here but do
not want to talk to you? Quarantine says the mail accepted for an inbox, but
it actually goes to a junk directory. It is the manual maintenance of the junk
directory that is starting to be a time waste.

> However, the current Postfix snapshot smtpd can be configured to 
> hang onto the client connection until Amavis-d has scanned the 
> message. The release will probably be in a few months, according to 
> the postfix developers. Whether this works or not in practice, we've 
> all still to find out.

Now that would be nice. That is exactly what I have in mind. Use Amavis-d to
scan with SA and maybe AV, then reject on that basis as opposed to bounce or
quarantine. Have you tried out the current Postfix snapshot?

> 
> > Q2.
> > The downside to this is that it would add bounce messages to the flow of
> > things and spammy often does not have valid return addresses. The upside is
> > that if I dev/null and it was a valid message, the sender never knows the
> > message was lost. If a reject is sent back, then the user could contact the
> > recipient via some other means. Hence, would the reject, even if it could be
> > done, be a good idea (my idea was to reject as a non-existent user).
> 
> That's your decision. I was doing this (smtpd reject high-score spam)
>  for several months but came to the conclusion it was useless -
>  client proxies and suchlike aren't configured to understand smtp 
> 5xx refusals, they either drop the connection or keep on trying.

When you say "smtpd reject high-score spam," was that via the built-in Postfix
test hooks or using a different method (a different MTA with SA - such as
sendmail)?

Based on that experience, it might not seem worth the time to configure things
to do it. On-the-other-hand, it does remove the need to review manually the
quarantined mail. Valid mail gets through. Invalid mail goes back with a
reject (with a potential of a small error rate of rejecting valid as invalid).

> You don't have to dev-null spam with Amavis-d/SA-Exim, you can 
> quarantine it in a dedicated directory. That's what I do.

That is how I use SA now via spamc/procmail. The downside is I have to go
through the directory manually to check what is there. I was trying to find a
way to not even look at the junk, but still send a reject message in case of a
valid message being tagged.

Does Exim provide any benefits over Postfix? I am pretty comfortable with
Postfix. How complicated is the switch from it to Exim?  Have you had any
success with the current snapshot of Postfix with regard to this issue?

Thank you for your help.

Mike.



-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to