Mailing List CGatePro@mail.stalker.com Message #105932
From: Bill Cole <cgp-2015@billmail.scconsult.com>
Subject: If you use SpamAssassin with CGP, see SA bug #7277
Date: Mon, 14 Dec 2015 14:54:51 -0500
To: CommuniGate Pro Discussions <cgatepro@mail.stalker.com>
X-Mailer: MailMate (1.9.3r5187)
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7277 includes a patch (against SA 3.4.1) that you may find useful.

It fixes the problem of SA not recognizing mail submission via Pronto or IMAP XMIT on authenticated sessions as authenticated submission and so checking the submitting IP against various DNSBLs which are unsuited for authenticated submission.

Note that with the default configuration of SA, authenticated local submission hits the "ALL_TRUSTED" rule, which usually has a strong negative (i.e. NOT spam) score and sometimes (but not by default) is set to "shortcircuit" and skip checking most other SA rules. This can be risky for sites with substantial account hijacking problems, but since account hijacking spammers mostly use SMTP and/or webmail, fixing this bug probably won't worsen the risk.
Subscribe (FEED) Subscribe (DIGEST) Subscribe (INDEX) Unsubscribe Mail to Listmaster