You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Christian Reynolds <cy...@astro.cmreynolds.org> on 2012/06/06 21:57:29 UTC
Bypassing SpamAssassin for SASL auth users
Hello,
I am running a CentOS 5 / SpamAssassin 3.3.1-2 / MailScanner 4.84.5-2 / Postfix 2.3.3-2.3
I have been running MailScanner + Postfix + SA for several years, and recent network changes have caused me a bit of a problem. Some of my road warriors are running into trouble away from the office because their addresses are seen as a PBL by spamhaus, and my mailserver is starting to trap their outbound emails as spam. I have all of the mail clients going to a special postfix port, and it usually works.
I am wondering if my SASL-equipped mail clients can bypass spamassassin's checks, and be routed through?
I am running Postfix on a different port, let's call it 50000.
Is anyone aware of a ruleset, or a postfix setting, or something that would allow me to have these SASL authenticated messages pass spamassassin, and thus not be marked, and be sent on their merry way?
Thanks,
Christian
Re: Bypassing SpamAssassin for SASL auth users
Posted by Martin Hepworth <ma...@gmail.com>.
Prob better to ask on the mailscanner list as this is a fairly common query
Martin
On Wednesday, 6 June 2012, David B Funk wrote:
> On Wed, 6 Jun 2012, Christian Reynolds wrote:
>
> Hello,
>>
>> I am running a CentOS 5 / SpamAssassin 3.3.1-2 / MailScanner 4.84.5-2 /
>> Postfix 2.3.3-2.3
>>
>> I have been running MailScanner + Postfix + SA for several years, and
>> recent network changes have caused me a bit of a problem. Some of my road
>> warriors are running into trouble away from the office because their
>> addresses are seen as a PBL by spamhaus, and my mailserver is starting to
>> trap their outbound emails as spam. I have all of the mail clients going
>> to a special postfix port, and it usually works.
>>
>> I am wondering if my SASL-equipped mail clients can bypass spamassassin's
>> checks, and be routed through?
>>
>> I am running Postfix on a different port, let's call it 50000.
>>
>> Is anyone aware of a ruleset, or a postfix setting, or something that
>> would allow me to have these SASL authenticated messages pass spamassassin,
>> and thus not be marked, and be sent on their merry way?
>>
>> Thanks,
>>
>> Christian
>>
>
> Yes,
> It depends upon exactly how you have SA hooked into your postfix.
> It's been discussed several times on this list.
>
> Search the archives of this list for bypassing or having SA properly
> recognise authenticated users' mail. (smtp-auth).
>
>
> --
> Dave Funk University of Iowa
> <dbfunk (at) engineering.uiowa.edu> College of Engineering
> 319/335-5751 FAX: 319/384-0549 1256 Seamans Center
> Sys_admin/Postmaster/cell_**admin Iowa City, IA 52242-1527
> #include <std_disclaimer.h>
> Better is not better, 'standard' is better. B{
>
--
--
Martin Hepworth, CISSP
Oxford, UK
Re: Bypassing SpamAssassin for SASL auth users
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Wed, 6 Jun 2012, Christian Reynolds wrote:
> Hello,
>
> I am running a CentOS 5 / SpamAssassin 3.3.1-2 / MailScanner 4.84.5-2 / Postfix 2.3.3-2.3
>
> I have been running MailScanner + Postfix + SA for several years, and recent network changes have caused me a bit of a problem. Some of my road warriors are running into trouble away from the office because their addresses are seen as a PBL by spamhaus, and my mailserver is starting to trap their outbound emails as spam. I have all of the mail clients going to a special postfix port, and it usually works.
>
> I am wondering if my SASL-equipped mail clients can bypass spamassassin's checks, and be routed through?
>
> I am running Postfix on a different port, let's call it 50000.
>
> Is anyone aware of a ruleset, or a postfix setting, or something that would allow me to have these SASL authenticated messages pass spamassassin, and thus not be marked, and be sent on their merry way?
>
> Thanks,
>
> Christian
Yes,
It depends upon exactly how you have SA hooked into your postfix.
It's been discussed several times on this list.
Search the archives of this list for bypassing or having SA properly
recognise authenticated users' mail. (smtp-auth).
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{