Whitelist outgoing mails

[Pavel Hruška]

Hi, I'm just fine tuning PMG spam filtering, and wanted to ask if there is possibilty to whitelist outgoing email addresses (adjust their SA score with some negative value). It would help to prevent false positives on emails, that were seen on outgoing communication and are (in theory) safe.

I've seen some plugins for Spamassasin but I am not sure if this approach is safe, maybe just something to discuss.

Thank you.

 

[Stoiko Ivanov]

Not sure if I understand the request 100%:
* Do you want to prevent mails not being sent out from PMG, because they get rated too high with the Spam Detector?
** Then just configure your server which sends via PMG to use the internal port (default port 26) for relaying the mails

* If you want PMG to insert some negative SA-score header into the mail, that could also be done, but would not help for anything I can think of, because when PMG sends the mail to the destination server - they will most likely also check it. And if it rates bad on PMG with SpamAssassin, chances are that it would rate similarly bad with the destination server

if I did not understand the question correctly please provide a bit more detail, including a sample (anonymized) e-mail, and corresponding logs

Thanks!

 

[Pavel Hruška]

Thank you for reply. I think you misunderstood my question.

I want to adjust reputation of recipient's address when outgoing mail is sent (this asumes that this email is valid and it is not expected to receive spam from). When an email is received from the same address later (probably for the same user that sent the email previously) it will get some negative SA score to prevent false posivite.

I see some mails that are replies to valid emails in quarantine and this would prevent it.

 

[Stoiko Ivanov]

I don't understand the part of changing a _recepient_ reputation (reputation only plays a role when analyzing the sender)?
Anyways - maybe the Autowhitelist feature is what you're looking for
https://cwiki.apache.org/confluence/display/spamassassin/AutoWhitelist
(it can be enabled in the GUI->Configuration->Spam Detector->Options->Use auto-whitelists)
if the mail ends up in the spam-quarantine - the recipient can click on 'Whitelist' in the quarantine interface and then all further mails from that address should end in the quarantine)

I hope this helps!

 

[Pavel Hruška]

It is 2 step operation.

1) Me (A) send something to (B), the (B) is for this reason stored in AWL as a "kinda safe sender" (yes, sender, but in future), because I have mailed him. Nothing else is happening here...

... some time...

2) The (B) mails me (A), and because the (B) is found in AWL, it's granted with some positive reputation.


Now if I mail somebody it hardly can happend that reply or further communication will end up in quarantine.

 

[Pavel Hruška]

I think this plugin is is doing the stuff I've described (Mail::SpamAssassin:lugin::TxRep):

http://truxoft.com/resources/txrep.htm#txrep_whitelist_out

 

[KatyComputer]

I posted a question to the SA list server, a couple people wrote back saying AWL is dead, time to move on to TxRep.

 

[Pavel Hruška]

So anyone think any chance to get it into PMG? Just asking...

 

[turnicus]

Hello, I am interested in the exact same feature! The idea is simple: if I send an email to alice@example.com, I would like alice@example.com to be automatically added in "Administration -> User Whitelist".

I never reply to spam so if I send an email to someone, I would like this person to be able to reply me even if his/her mail server is very badly configured.

Is it possible?

 

[ivn]

We currently use ORF for some of our clients and it has such "auto add to whitelist" feature. And we found it very useful! After enabling it we can set more strict spam detection level, because we are sure that our real contacts will always bypass our spam filter!
It would be really great if Proxmox could implement it too! Any news about that?

 

[mparvanov]

Hi there,

are there any udates on this handy (request for) feature? Is it possible with PMG?
Thanks.

 

[kentur]

Hello, I am interested in the exact same feature! The idea is simple: if I send an email to alice@example.com, I would like alice@example.com to be automatically added in "Administration -> User Whitelist".

I never reply to spam so if I send an email to someone, I would like this person to be able to reply me even if his/her mail server is very badly configured.

Is it possible?

The problem with this, is also if one of your clients/mailsenders get infected and starts sending out thousands of spams, you have automatically whitelisted all those targets, incoming responses back to you.

Similarly if alice@whatever.com today sens you 200 good emails, in 6 months when she leaves her job, her mailbox doesn't get disabled, and someone starts spamming.
You have now whitelisted and accepted this spam.
AWL would build up reputation over time, but still likely catch that spam.

This would be fully accepted as ham with a static whitelist.

I understand what you want to do, and I see a benefit of it, however personally I'd say the better approach is to whitelist on user/address level, not on global level. (preferrably not at all, but definitely not global in proxmox)

 

[patrick56770]

Idem, auto whitelist for email SENTS without any action by sender will be a great feature