Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread Jean-Yves Avenard
I found this optional patch in the FreeBSD ports. It does exactly what I want ; bypass all test if the message was sent over an authenticated connection... Could easily be adapted to simply add an extra header for spamassassin to check on diff -u orig/spamass-milter.1.in spamass-milter.1.in

Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread Ted Mittelstaedt
Yeah, this patch was discussed close to 6 years ago: http://lists.nongnu.org/archive/html/spamass-milt-list/2004-03/msg00014.html Unfortunately although the spamass-milter maintainer said he would add this, he never did, and the project appears to have been orphaned a few years later.

Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread John Hardin
On Wed, 13 Jan 2010, David B Funk wrote: On Wed, 13 Jan 2010, John Hardin wrote: header AUTH_SMTP Received =~ /\(authenticated bits=\d+\) by mail\.impsec\.org / One risk to this rule, a savvy spammer could forge a Received header to mimic that information to gain your white-list

Re: How to check if user is authenticated via Sendmail

2010-01-14 Thread Jean-Yves Avenard
Hi 2010/1/15 Ted Mittelstaedt t...@ipinc.net: Yeah, this patch was discussed close to 6 years ago: http://lists.nongnu.org/archive/html/spamass-milt-list/2004-03/msg00014.html Unfortunately although the spamass-milter maintainer said he would add this, he never did, and the project appears

How to check if user is authenticated via Sendmail

2010-01-13 Thread Jean-Yves Avenard
Hi Mail system is made of Sendmail as MTA - spamass-milter - spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to post. Is there a way to have a particular score if the sender has succesfully authenticated ? Like if the

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread John Hardin
On Thu, 14 Jan 2010, Jean-Yves Avenard wrote: Mail system is made of Sendmail as MTA - spamass-milter - spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to post. Is there a way to have a particular score if the sender

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread David B Funk
On Wed, 13 Jan 2010, John Hardin wrote: On Thu, 14 Jan 2010, Jean-Yves Avenard wrote: Mail system is made of Sendmail as MTA - spamass-milter - spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to post. Is

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread Jean-Yves Avenard
Hi 2010/1/14 John Hardin jhar...@impsec.org: Take a look at the Received header that your MTA inserts for an authenticated session. It will look something like this: Thanks for the hint.. I had a try with adding a hydrix.cf file containing: header AUTH_SMTP Received =~ /\(authenticated

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread Jean-Yves Avenard
Hi there 2010/1/14 David B Funk dbf...@engineering.uiowa.edu: A caveat, as you're using sendmail with a milter, be aware that the milter taps into the mail stream -before- the local sendmail Received header is added. Therefore the milter has to synthesize the Received header itself (to mimic

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread Daryl C. W. O'Shea
On 13/01/2010 9:29 PM, Jean-Yves Avenard wrote: Hi Mail system is made of Sendmail as MTA - spamass-milter - spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to post. Is there a way to have a particular score if

Re: How to check if user is authenticated via Sendmail

2010-01-13 Thread David B Funk
On Thu, 14 Jan 2010, Daryl C. W. O'Shea wrote: On 13/01/2010 9:29 PM, Jean-Yves Avenard wrote: Hi Mail system is made of Sendmail as MTA - spamass-milter - spamd Legitimate users are using the sendmail server over TLS and first need to authenticate themselves before being able to