Mailing Lists: Apple Mailing Lists
Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: TMDA ‹ the Tagged Message Delivery Agent.


On Feb 19, 2007, at 12:55 AM, Fred Alger wrote:


Hi Dave,

and whether or not this is even a sane idea.

Challenge-response (one component of TMDA) is an insane idea unless you are
certain that [1] you'll never challenge an innocent third party (hint-- you
will) and [2] people want to give you their business so much that they'll
accept having to jump through some hoops to do so (hint-- they won't).
Thanks for the quick reply. My employer likes the challenge- response system, which we use for some of our current in-house email addresses (hosted elsewhere), and we'd like to offer it to our clients (we host about 15 websites with corresponding email accounts) on an "opt-in" basis, not force it blindly across the board.

At the risk of sounding like Dan, a well-configured Exim setup plus a tuned
SpamAssassin install should allow you to safely reject 99% of incoming spam
and tag the remainder for special handling. (I don't quite share Dan's faith
in sender callout verification, however; I've found I have to add 1-2 legit
senders a week to my exempt-from-verification list as some legit bulk mail
will otherwise fail that test.)
So, you have the "potentially spam" messages delivered to you, and you hand-enter them into a whitelist? My biggest concern, of course, is not blocking legitimate mail from our users. Do you use the self-tuning "spam@" and "notspam@" addresses with SpamAssasin?

If you're interested, I'd be glad to share some of the antispam techniques I
use with Exim.
I'd love to hear more about your Exim-foo because, frankly, we are getting a lot of spam right now, even after following Apple's (may I interject: pretty shallow) Mail Services guide. I've moved the SpamAssassin slider down a couple of ticks, but this doesn't really seem to make a difference...

The default config of Postfix in OS X Server is functional but extremely poor, in terms of spam-rejection.

You **really** need to move beyond what the GUI (Server Admin) provides, and can make an enormous difference.

Comparing Exim with Postfix is not my goal here, but to judge Postfix on the basis of a stock Apple config, is akin to slapping training wheels on a racing bicycle and then judging it ;)

http://www.postfix.org/docs.html - "UCE/Virus" section, in particular
http://jimsun.linxnet.com/misc/postfix-anti-UCE.txt - "For 2.x versions of Postfix" but read it in its entirety. You'll need to use
"hash" vs. pcre or dbm with the supplied version of postfix, and for rbl(s), use zen.spamhaus.org before the others listed there.

A more pre-chewed write-up is here
http://downloads.topicdesk.com/docs/ Frontline_Spam_Defense_for_Mail_in_Mac_OS_X.pdf
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Macos-x-server mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
http://lists.apple.com/mailman/options/macos-x-server/email@hidden

This email sent to email@hidden
References: 
 >Re: TMDA ‹ the Tagged Message Delivery Agent. (From: Dave Pooser <email@hidden>)
 >Re: TMDA ‹ the Tagged Message Delivery Agent. (From: Fred Alger <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.