Hello

when someone send a whitelist request using email interface and 
whitelist a domain name or email,
ASSP add this in whitelist

[email protected]?1269954258
or this
[email protected]?1269954258

Could it possible to have this format instead (per user)

[email protected]?localdomainx.com?1269954258

where localdomainx is the authenticated local domain which required the 
whitelist .
In this way [email protected] will be white ONLY for localdomainx.com and 
not for all users in the server.

In a similar way should work also the automatic whitelisting , for 
example if localdomainx.com
which is local, send an email to [email protected] , ASSP should create add this

[email protected]?localdomainx.com?1269954258

The same should be done also for assp-notwhite ,  assp-of , assp-red , 
rebuildspamdb ..

Personally I think that managing all "per user" instead of "server wide" 
could be useful for following reason

1) sometime a local user could whitelist or put in noprocessing (using 
assp-of) big domain names like
    yahoo.com , hotmail.com .. it could not be good since sometime spam 
could come from them
2) sometime an hacker could be able to send email from the server 
running ASSP, and he could able to send
    thousand outgoing spam email . All these email will go in whitelist 
(if automatic whitelisting is enabled) .
    After the spammer activity has been stopped is not so easy to clean 
whitelist from all the lines added by the hacker action.
3) currently is hard to know who is adding email to whitelist (only 
investigating current logs is possible)
4) suppose the client localdomainx.com leave the server and migrate on 
another server ;
With a whitelist structure like this
[email protected]?localdomainx.com?1269954258
could be easy to remove all his whitelist entries .Currently it's not 
possible .


What do you think ?

Graziano


------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to