Whitelisting subdomains?

[Andrew Talbot <an...@gmail.com>]

Hey, all -

 

I'm trying to whitelist all our internal subdomains but I can't seem to get
it to work.

 

We have so many of them that it's impractical to do them individually. For
instance, we have ____@logs.domain.com, @admin-sql.domani.com etc. etc. etc.

 

I was thinking that whitelist_from *.domain.com would work but it doesn't 

 

I can't seem to find any documentation on the net anywhere - is it even
possible to do this? 

 

 

Re: Whitelisting subdomains?

[Benny Pedersen <me...@junc.eu>]

Andrew Talbot skrev den 2013-08-14 20:53:

> I was thinking that whitelist_from *.domain.com would work but it 
> doesn't
>
> I can't seem to find any documentation on the net anywhere - is it
> even possible to do this?

you showed an example not to use, ask another way, is whitelistning 
even needed ?, does local users send spam that are detected in your 
spamassassin ?

i dont get the problem :(

dokumention is here:

perldoc Mail::SpamAssassin::Conf, avoid using littery whitelist_from 
unless there is no mx or a record for that domain !

is problem you have more complex ?

Re: Whitelisting subdomains?

[Karsten Bräckelmann <gu...@rudersport.de>]

On Wed, 2013-08-14 at 14:53 -0400, Andrew Talbot wrote:
> I’m trying to whitelist all our internal subdomains but I can’t seem
> to get it to work.
> 
> We have so many of them that it’s impractical to do them individually.

> I was thinking that whitelist_from *.domain.com would work but it
> doesn’t

According to the docs [1], it does. That's precisely one of the
examples. If it does not work for you, you'll have to show some samples
by providing raw headers.

I strongly suggest to use the much safer variants with additional
constraints: whitelist_from_rcvd and whitelist_auth.


> I can’t seem to find any documentation on the net anywhere – is it
> even possible to do this? 

M:SA:Conf docs [1], section Whitelist and Blacklist Options.


[1] http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Conf.html

-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: Whitelisting subdomains?

[Alex <my...@gmail.com>]

Hi,

>
> I’m trying to whitelist all our internal subdomains but I can’t seem to
> get it to work.****
>
> We have so many of them that it’s impractical to do them individually. For
> instance, we have ____@logs.domain.com, @admin-sql.domani.com etc. etc.
> etc.****
>
> I was thinking that whitelist_from *.domain.com would work but it doesn’t
> ****
>
> I can’t seem to find any documentation on the net anywhere – is it even
> possible to do this? ****
>
I don't think that's going to work, because it uses the header From
information, which can be spoofed easily.

Are you using amavisd-new? It might be easier/better to do this right
within your MTA glue application instead.

@client_ipaddr_policy = (
  [qw( 192.168.1.1/32 )] => 'TRUSTED', # smtp.inside.example.com
  [qw( 0.0.0.0/8 127.0.0.1/8 [::] [::1] )] => 'TRUSTED',
  \@mynetworks => 'MYNETS',
);

$policy_bank{'TRUSTED'} = {
  originating => 1,
  bypass_virus_checks_maps  => [1],
  bypass_spam_checks_maps   => [1],
  bypass_banned_checks_maps => [1],
};

Regards,
Alex