From: Tony Earnshaw (no email)
Date: Sun Feb 01 2004 - 10:23:16 EST
søn, 01.02.2004 kl. 12.00 skrev Rene Bartsch:
> If a spammer sends a mail, it is processed by postfix, goes through
> filter-chains like amavisd-new with SpamAssassin and F-Prot and is
> distributed to IMAP-folder by e.g. procmail.
You have to (you're duty-bound to) say what version of Postfix you're
using.
> But that way the Spammer has success or believed success as he can deliver his
> spam to the MTA. The sender of a wanted mail may be deceived when the
> spam-filter drops a mail. Sending a error-mail cannot be done, too, as
> address-spoofing would result in a DoS-Attack to the stolen address. So the
> only way is to disconnect the SMTP-connection with error.
>
> If Postfix would keep the SMTP-connection until the mail has passed the filter
> chains, it would be possible to disconnect the SMTP-connection with a OK in
> case the mail is fine or with a failure in case the mail is malicious and
> dropped by one of the filters.
>
> So a friendly mailer would get a error-report if his mail has been
> mis-detected and a spammer would get an error-report making him aware this
> address is useless for him.
All of what you want you'll be able to do with the Postfix 2.1 release
(look for "proxy") and I'm already doing with the end-of-December
snapshot. However, a few people on the list consider it "a bad idea" and
say it's much better to swallow the spam/virus and simply discard them.
--Tonni
-- mail: billy - at - billy.demon.nl http://www.billy.demon.nl
|
|
|