Re: whitelist_from and whitelst_from_rcvd

2010-03-17 Thread Ron
thank you sir, i think this worked. On 3/17/2010 3:26 AM, John Hardin wrote: On Tue, 16 Mar 2010, John Hardin wrote: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ Watch the line wrap on that...

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
hi sir, yes i am using vchkpw to auth users. are you talking about using whitelist_auth? i have tried using that coz i have spf defined on my domain, but i am not sure if whitelist_auth is for that. dig -t TXT pinoyonthego.net ;; QUESTION SECTION: ;pinoyonthego.net. IN TXT

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: On 3/16/2010 12:51 AM, John Hardin wrote: Are you authenticating your users in any way? There are ways to whitelist users who have authenticated against your MTA. Please check the list archives and the Wiki. yes i am using vchkpw to auth users. are you

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread Ron
thank you sir, please see attached file. test header set score to 15 just to be able to send out, i have setup report_safe to but x-spam-report does not show up on the header, i can't tell what's causing all the points to increase. regards Ron On 3/16/2010 11:16 PM, John Hardin wrote: On

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: please see attached file. Is mail.pinoyonthego.net your MTA? If so, try this: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ score POGO_CUSTOMER -1 Run in test for a while, if you only get hits on

Re: whitelist_from and whitelst_from_rcvd

2010-03-16 Thread John Hardin
On Tue, 16 Mar 2010, John Hardin wrote: header POGO_CUSTOMER Received =~ /\(\...@pinoyonthego\.net\@[\d\.]+\).*by mail\.pinoyonthego\.net/ Watch the line wrap on that... -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread RW
On Mon, 15 Mar 2010 21:43:03 +0800 Ron nha...@gmail.com wrote: Hi All, Newbie here, i have a qmail server, and i installed qmail-scanner+clav+spamassassin. I'm trying to allow all my users using whitelist_from but filter spoofed e-mail address using whitelist_from_rcvd. Whitelist rules

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread Ron
Hi Sir, Please see inline. Thank You On 3/16/2010 12:05 AM, RW wrote: On Mon, 15 Mar 2010 21:43:03 +0800 Ronnha...@gmail.com wrote: Hi All, Newbie here, i have a qmail server, and i installed qmail-scanner+clav+spamassassin. I'm trying to allow all my users using whitelist_from but filter

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread John Hardin
On Mon, 15 Mar 2010, Ron wrote: whitelist_from *...@imagetransforms.com Do not do this. The From: address is trivially easy to spoof. You should not trust it to this degree. whitelist_from should only be used in unusual situations, when you know exactly why one of the other whitelist

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: i think the only way to not scan outgoing mails in qmail is to add the users IP address to /etc/tcp.smtp, unfortunately my users are on dynamic IP that i cannot add it one by one. Are you authenticating your users in any way? There are ways to whitelist users