Ari Jort <[EMAIL PROTECTED]> writes: > I've implemented a verify_sender routine as inspired by > the postfix address verification, noted below. Patch > is attached.
Interesting. > I added a subroutine in EvalTests.pm called verify_sender() > that will verify a given address with an appropriate mx. > It needs a mechanism to get the envelope-from for this > to be effective. This implementation relies on the header > Return-Path: which postfix adds to messages. We really should have a standard method for finding the envelope-from. Right now, have have the envfrom field in the Received headers data structure. If it doesn't find the right headers or look at things like Return-Path There's also all_to_addrs() which obviously isn't right, but is related. The other issue is that this could possibly be used as an address verification technique by spammers. You should also make this a plugin for 3.0. > 3) It relies on 2 extra perl modules: Net::DNS and Net::SMTP which > might be better outside the spamd process space. Maybe a sender > verification daemon? Net::DNS is okay. Dragging in Net::SMTP is non-optimal, but perhaps the right way to go. Daniel -- Daniel Quinlan anti-spam (SpamAssassin), Linux, http://www.pathname.com/~quinlan/ and open source consulting
