Michael,
> > Actually, amavisd does suppress bounces (even if configured)
> > to spam mail coming from Windows machines. The p0f setup must
> > be operational for this to be possible.
>
> Ah, ok, I had not seen enough additional value using p0f (I turned it
> off, too much cpu usage for a very small point percentage) and the fact
> that it really can't figure out the difference between a windows 2000
> server and an XP workstation.
I find the extra 2.3 points for Windows XP, 1.3 for other Windows,
and -1 poins for Unix (non-Linux) quite valuable, both for pushing
the score over the limit for spam, or for sparing a marginal ham
on occasion.
Also, combined with a BOTNET plugin rules, it significantly reduces
false positives of this plugin.
> So, if there a regex that it uses to know when not to bounce?
For the moment it is hard-wired in sub delivery_status_notification:
} elsif ($os_fingerprint =~ /^Windows\b/ && # hard-coded limits!
$spam_level+$boost >=
($os_fingerprint=~/^Windows XP(?![^(]*\b2000 SP)/ ? 5 : 8)) {
$suppressed = 1;
$os_fingerprint =~ /^(\S+\s+\S+)/;
do_log(3, "DSN: FILTER %s %s, suppressed for mail from %s ".
"at %s, score=%s, <%s> -> <%s>", $smtp_resp_code, $ccat_name,
$1, $msginfo->client_addr, $spam_level+$boost, $sender,$recip);
}
> (and I still think if DNS admin bothers to publish spf, dkim, or sender
> id records we should take the time to not bounce)
>
> MAYBE a VERY HIGH score on HARD SPF, high enough to be above threshold
> (and we can increase its priority, and add it to shortcut list also)
I tried not to bundle amavisd too tightly with SpamAssassin,
or to repeat the tests already done by SA. Maybe some day...
Mark
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
