whitelisting lists/groups (Re: yahoogroups)

[David B Funk <db...@engineering.uiowa.edu>]

Ah, yes, whitelisting lists/groups, I've harped on this one before. ;)

This is probably a "from" header availability issue.

Note that the various whitelist/blacklist_from commands operate on
the contents of 'From' type headers that are available to SA.

If you look at your example below you see that the 'From: ' header
has no relation to yahoogroups at all and thus useless for your
desired purpose ('From: "Alex Feuerherdt" <du...@nexgo.de>').

The ENVELOPE-FROM address DOES have the desired address but it probably
is NOT available to SA for processing (unless you specifically configure
your mail system to make it available).

That 'Return-Path: ' header has what you want, but it was probably added
by the delivery agent -after- the SA processing, so SA never saw it.

So the answer is to configure your mail system in such a way that
the envelope-from address is put in an additional header (such
as Return-Path: or Envelope-Sender: or X-Envelope-From:) BEFORE
it passes the message to SA for scoring.

If you do this you can make use of the 'whitelist_from_rcvd' command
rather than just the plain 'whitelist_from' (which is more resistant
to abue by forgery).


On Mon, 19 Apr 2004, Matthias Fuhrmann wrote:

> On Mon, 19 Apr 2004, Mike Burger wrote:
>
> > Sorry...that would go in local.cf, or in the user_prefs files.
>
> well, tried this, but didnt work at first sight.
> here is an example header: (i 'dummy'ed out all privacy issues)
>
> <snip>
> Return-Path:
> <sentto-6889266-5318-1081939187-dummy=dummy.de@returns.g
>     roups.yahoo.com>
> Received: from n5.grp.scd.yahoo.com (n5.grp.scd.yahoo.com [66.218.66.89])
>         by dummy.de (8.12.11/8.12.11) with SMTP id
>     i3EAdqIB014481
>         for <du...@dummy.de>; Wed,
>      14 Apr 2004 12:39:53 +0200 (MEST)
> X-eGroups-Return:
> sentto-6889266-5318-1081939187-dummy=dummy@returns.gr
>     oups.yahoo.com
[snip..]
> From: "Alex Feuerherdt" <du...@nexgo.de>
> X-eGroups-Approved-By: <du...@kaneda.iguw.tuwien.ac.at> via email; 14 Apr
>     2004 10:39:46 -0000
> MIME-Version: 1.0

-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{

Re: whitelisting lists/groups (Re: yahoogroups)

[Matthias Fuhrmann <Ma...@stud.uni-hannover.de>]

On Mon, 19 Apr 2004, David B Funk wrote:


[...]
> So the answer is to configure your mail system in such a way that
> the envelope-from address is put in an additional header (such
> as Return-Path: or Envelope-Sender: or X-Envelope-From:) BEFORE
> it passes the message to SA for scoring.
>
> If you do this you can make use of the 'whitelist_from_rcvd' command
> rather than just the plain 'whitelist_from' (which is more resistant
> to abue by forgery).

i've got that idea too, but this means reading man pages and docs of
sendmail, gosh ... but i'll give it a try :)

thnx &

regards,
Matthias