Re: [Mimedefang] Hacking in authenticated local submissions

[EMAIL PROTECTED] wrote: >Philip Prindeville wrote: > > >>Do we want to change the line: >> >>if ($Features{"SpamAssassin"}) { >> >>in mimedefang-filter, for instance, to skip this check if $auth_authen >>is valid? >> >> > >Yup. http://www.mimedefang.com/kwiki/index.cgi?SMTPAuth > > T

RE: [Mimedefang] Hacking in authenticated local submissions

Philip Prindeville wrote: > Do we want to change the line: > > if ($Features{"SpamAssassin"}) { > > in mimedefang-filter, for instance, to skip this check if $auth_authen > is valid? Yup. http://www.mimedefang.com/kwiki/index.cgi?SMTPAuth David, perhaps the synthesize_received_header could

Re: [Mimedefang] Hacking in authenticated local submissions

Philip Prindeville wrote: Now, why isn't trusted_networks taking effect? Because I might be connecting via the public Internet (and using IMAPS and SMTPS to converse with my mail server). trusted_networks doesn't tell SpamAssassin that it can trust *mail* from that network, it tells SpamAssas

Re: [Mimedefang] Hacking in authenticated local submissions

Philip Prindeville wrote: > I'm using port 465 and SSL for local submissions, and I'd like > to tweak either Mdf or SA (or both) so that if I forward (for > instance) a copy of a spam to someone outside, that I in > turn don't get my message rejected because it looks like spam. > > Now, why isn't

[Mimedefang] Hacking in authenticated local submissions

I'm using port 465 and SSL for local submissions, and I'd like to tweak either Mdf or SA (or both) so that if I forward (for instance) a copy of a spam to someone outside, that I in turn don't get my message rejected because it looks like spam. Now, why isn't trusted_networks taking effect? Beca