----- Forwarded message from Wietse Venema <[EMAIL PROTECTED]> ----- David Schweikert: > Hi, > > Is support for RFC 3848 planned?
No. > I am trying to figure out how to solve the problem that SpamAssassin at > our site does check the originating IP addresses of mails sent by users > with SMTP AUTH and sometimes gives SPAM-points because they are > dialup adresses (and sometimes blacklisted too). This problem is > described here: http://wiki.apache.org/spamassassin/DynablockIssues This a good illustration of why filtering on IP addresses in RECEIVED headers is a bad idea. Thanks for pointing me to this resource. The proposed workaround, labeling the RECEIVED header with SASL AUTH information is no good; SASL AUTH is needed only for customers who submit mail from outside without TLS certificate authentication. A principle in computer security is "do no harm". In this case, the workaround harms innocent people. Meanwhile the spammers are laughing all the way to the bank, because none of the above makes the least difference for them. > Having RFC-3848 support would mean that the Received headers for > authenticated connections can be distinguished ('ESMTPA' or 'ESMTPSA' in > the line) and ignored by SpamAssassin. Let's spend our energy on fixing the right problem, instead of building work-around upon work-around for one poorly-devised anti-spam measure after the other. That right problem would be a better way to authenticate the sender domain, instead of the scheme that relies entirely on the last-hop client IP address/helo information. Wietse ----- End forwarded message ----- he..he.. kalau di iklan tv: be precise :-) dunia sudah terlalu ruwet. terlalu banyak orang berpikiran ruwet. keep it (the problem) small and simple (to solve). seringkali justru orang menghadapkan kita ke hutan belantara supaya masalah tidak bisa diselesaikan (baca: cuci tangan). SPF dll itu perlu dijauhi ... Salam, P.Y. Adi Prasaja -- Right or wrong my list. Unsubscribe option is currently unavailable. Indeed, it's available upon request .. but: cepek dulu donk!
