On 20/03/2008, Harry Duncan <[EMAIL PROTECTED]> wrote:
>
> On Wed, Mar 19, 2008 at 6:47 PM, Gordon Messmer <[EMAIL PROTECTED]> wrote:
> > Jerry Amundson wrote:
> > > But a solution to either one solves both.
> > > Basically, aren't we saying(?):
> > > 1. As a company, mandate *no* signatures on the mail client for the
> > > company account.
> > > 2. Require SMTP AUTH.
> > > 3. Globally filter such that the script uses auth info to lookup
> > > fullname, title, etc. externally
> > > 4. Add txt/html formatted signature as needed.
> > > See? Simple. ;-)
> > >
> >
> > Yes, it is simple. If someone wants to do append signatures for legal
> > or policy reasons, I wouldn't remark. However, anyone who thinks that
> > enforcing this policy on their mail server will secure them against
> > fraud committed by employees (giving themselves inappropriate titles)
> > should be set straight. It won't.
>
>
>
> HOw do you distinguish between inbound and outbound smtp? I know for
> instance on my setup, I can catch inbound messages with maildrop
> filters because they are part of the local delivery process, but how
> do I hook a filter into courier so that it only catches outbound smtp
> messages?
Thanks to everybody for all the replies to my original post. Harry's point
about
catching outbound messages was one that I hoped somebody could answer,
also assuming I write a "maildrop" like filter, how do I capture the AUTH
information associated with the message? I guess I might have to start
hacking some of the "core" parts of Courier (perhaps "submit"?), this sounds
like rather more work than I thought.
As far as comments about the suitability of the proposal to avoid fraud, I
accept that there are plenty of ways of circumventing it, however IMHO
most of these require an in-depth understanding of the operation of e-mail
that most potential fraudsters would lack. [In fact I'm often surprised by
the
extent that the inner workings of e-mail seem such a mystery to many in IT.]
I'm not too sure about how to handle multi-part and MIME encoded mail, one
idea is, rather than a standard signature at the bottom of the mail, put a
standard salutation at the top (a sort of electronic equivalent of headed
notepaper). Any reactions?
Harry.
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> courier-users mailing list
> [email protected]
> Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
>
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
courier-users mailing list
[email protected]
Unsubscribe: https://lists.sourceforge.net/lists/listinfo/courier-users
