I've been happily using SpamAssassin with MIMEDefang for nearly a year now.
I have a question about controlling and querying the whitelist.

The per-user automatic whitelist is enabled and clearly doing "something"
(because it's growing in size) but I can't find much documentation about it.
Is there any way to query the email addresses stored in the AWL? For
example, periodically I wouldn't mind going through the AWL and promoting
addresses to the actual whitelist for each user (and then mark all the
others as permanently blacklisted) just to "help" the AWL on its way. Also,
as I use MIMEDefang, this would allow me to implement the blacklist earlier
without actually calling spamc as I could bounce the email immediately
following the SMTP FROM clause. Looking through the docs - I can't see any
way of querying the addresses and scores from the AWL... did I miss
something?

Ultimately, what I'm planning on doing, either in my MIMEDefang filter or by
parsing the sendmail logs every now and then, is to update user's whitelists
such that any email address emailed *by* a user are automatically added to
their personal whitelist in user_prefs. Additionally, because most of my
users use Outlook, I'd periodically synchronise Outlook address books with
the server. MIMEDefang is configured to bounce email above a certain
threshold: giving it the users' address books allows this bounce threshold
to be very low (e.g. 3-5) as MIMEDefang could use a higher bounce threshold
(e.g. 10) for recognised email addresses - which would hopefully still catch
SPAM with a forged from address (though from what I can see it's relatively
rare to get SPAM from a forged address that you actually know).

Is this:

a) Sensible (is it a good idea to have a huge number of email addresses in
user_prefs?)
b) Has anyone configured SpamAssassin (via MIMEDefang or any other milter)
to work this before?

I've googled around and couldn't see anything. I'm invoking SpamAssassin via
spamc running version 3.2.5 on Fedora 9 but I don't expect that's relevant
here.

Thanks in advance for any advice/tips


David 

Reply via email to