Hello everyone,

Is there any way in ASSP to separately collect mail sent by
SASL-authenticated users?

This might actually be very useful.

(The "okmail" folder seems NOT to be such folder - the
config says it is mail OK'eyed by Bayesian filter, which may
include quite a lot of spam.)

The feature of automatic whitelisting external addresses
that SASL-authenticated users send mail to was the main
selling point of ASSP for me (that plus immediately letting
foreign addresses know their mail has been bounced as
opposed to blackholing it like SpamAssassin does).

Those two features are IMHO even more important from
practical point of view than sheer performance of Bayesian
filter, but obviously having a better filter would not harm.

This would include getting:

a) better corpus

b) better filter

Goal b) can be addressed by installing/developing better
filter, e.g. DSPAM.

Goal a) is harder to acquire, because one needs a perfect
source of spam (clean of false negatives) and a perfect
source of ham (clean of false positives).

A near-perfect source of spam can be acquired using spam
traps. There's still some risk of a few clueless users
contaminating spam :-) with false negatives, but that's
rather rare.

But where one finds a near-perfect source of ham?

Manual sorting? That's actually worse than the best Bayesian
filters, as I found to my nasty surprise when some users
reported false positives that I overlooked during sorting
several hundred mails by hand.

And then it hit me - abstract from a bad apple in a barrel
like a spammer among one's users, the mail sent by
SASL-authenticated authenticated users is exactly such a
near-perfect source of ham!

The only issue is how to get it: not all MTAs make it
possible, though it may be possible to get Exim to do it - I
still don't know if it's possible, because ASSP obviously
hands mail over 127.0.0.1 address and I don't know if it's
just watching success/failure of authentication process or
e.g. checking local user in some other way (that would
result in MTA losing this piece of information from
particular SMTP session).

Thus, the easiest and the most universal option would be
collecting such mail by ASSP - it has to know about
authenticated users and it sorts and stores the mail anyway.


Regards,
Marcin KRol


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to