SAGrey plugin

["Eric A. Hall" <eh...@ehsco.com>]

I've written a little plugin called SAGrey that provides a limited amount
of greylisting functionality using SpamAssassin's existing services.

SAGrey is two-phased, in that it first looks to see if the current score
of the current message exceeds the user-defined threshold value (as set in
one of the cf files), and then looks to see if the message sender's email
and IP address tuple are already known to the auto-whitelist (AWL)
repository. If the message is spam and the sender is unknown, SAGrey
assumes that this is one-time spam from a throwaway or zombie account, the
SAGREY rule fires, adds 1.0 to the current message score, and optionally
creates a header field in the message itself. The rulename or header field
can then be used to perform additional functions (EG, having your delivery
or transfer agent defer delivery), or the score by itself can be used to
penalize the message.

This model has two benefits over MTA-specific greylisting mechanisms:
first, it only subjects probable-spam to greylisting (instead of making
everybody be deferred, which has known problems), and it repurposes the
existing spamassassin history database (meaning no additional databases
need to be maintained). Another benefit is that it can still work at the
MTA level if your MTA can call spamassassin while the transfer is active
and then defer delivery based on the presence of header-field data
(postfix 2.x will not do this unfortunately, since the header checks don't
provide a DEFER verb), but can also be used in other models (such as
delivery routines).

The plugin and cf are posted at http://www.ntrg.com/misc/sagrey/ and I've
also updated the wiki

-- 
Eric A. Hall                                        http://www.ehsco.com/
Internet Core Protocols          http://www.oreilly.com/catalog/coreprot/

Re: SAGrey plugin

[Jim Knuth <jk...@jkart.de>]

Hallo und Guten Abend Eric,

Heute (am 21.08.2005 - 22:52 Uhr)
   schriebst Du: 


> The plugin and cf are posted at
> http://www.ntrg.com/misc/sagrey/ and I've
> also updated the wiki

thanks, but how do I use this with amavisd-new?


-- 
Viele Grüße, Kind regards,
 Jim Knuth
 jk@jkart.de
 ICQ #277289867
 PGP: 54C9 1A46 D3B2 95B6 454D 74FA AC73 773E 1F78 066F
----------
Zufalls-Zitat
----------
Ich habe Löwenbändiger nie für besonders mutig gehalten, 
denn im Löwenkäfig sind sie ja sicher vor den Menschen. 
(G.B. Shaw, engl.-irisch. Dramatiker, 1856-1950)
----------
Der Text hat nichts mit dem Empfänger der Mail zu tun
----------
Virus free. Checked by NOD32 Version 1.1198 Build 6011  19.08.2005