On Apr 12, 2010, at 7:52 PM, Carlos Mennens wrote:
> 
> On my Postfix server, when my co-workers VPN from their laptops from
> home, they then send mail via Outlook and their ISP IP address. When
> the message gets to it's recipient, it's marked ***SPAM*** by SA.
> User's are complaining that email from internal users are being marked
> as 'spam' and they don't know why. When I check the message source, I
> can see that the user is connected to their personal ISP
> (tampabay.res.rr.com in this case) to tunnel / VPN in and send mail
> from their work account. My question is what can I fix to eliminate
> this confusion for my co-workers w/o compromising actual spam to get
> through? If this is good normal behavior from SA / Postfix, then I
> will leave it alone based on your expect recommendations however if
> you think I can tune Postfix / SA to handle mail better, I would
> greatly appreciate any suggestions. I see below in the headers that
> the message is being tagged as spam due to parameters that are typical
> or big ISP's. The message source is below:

We had the same problems with our Pop-before-SMTP users, sending emails 
directly to MTA, where DOS_OUTLOOK_TO_MX always fired. 

What we did:
- first, we lowered the score of DOS_OUTLOOK_TO_MX, to prevent such cases
- we wrote a plugin to dynamically assign trusted_networks on the fly with 
getting the information stored in SQL for pop-before-smtp users
- after that we have raised the score of DOS_OUTLOOK_TO_MX :)

You can read more about troubles with dynamic users and solution to it:
- http://wiki.apache.org/spamassassin/DynablockIssues
- http://wiki.apache.org/spamassassin/POPAuthPlugin

regards, 
--
Jernej Porenta <jernej.pore...@arnes.si>
ARNES, Tehnološki park 18, p.p. 7, SI-1001 Ljubljana, Slovenia
tel: +386 1 479 8800, fax: +386 1 479 88 99


------------------------------------------------------------------------------
Download Intel&#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to