Mailing-List: contact users-help@spamassassin.apache.org; run by ezmlm
Precedence: bulk
Received-SPF: pass (asf.osuosl.org: domain of scheidell@secnap.net designates
 204.89.241.128 as permitted sender)
content-class: urn:content-classes:message
MIME-Version: 1.0
Content-Type: text/plain;
	charset="US-ASCII"
Content-Transfer-Encoding: quoted-printable
Subject: RE: Myway.com and RFC-ignorant.org
Date: Tue, 4 Jul 2006 08:35:13 -0400
Message-ID: <B3BCAF4246A8A84983A80DAB50FE7242396C14@secnap2.secnap.com>
Thread-Topic: Myway.com and RFC-ignorant.org
Thread-Index: AcafSS3uKHFxZsQARf+N0mWtwjG/dgAG+IeA
From: "Michael Scheidell" <scheidell@secnap.net>
To: "Anthony Peacock" <a.peacock@chime.ucl.ac.uk>,
	"SpamAssassin Users" <users@spamassassin.apache.org>


> -----Original Message-----
> From: Anthony Peacock [mailto:a.peacock@chime.ucl.ac.uk]=20
> Sent: Tuesday, July 04, 2006 5:06 AM
> To: SpamAssassin Users
> Subject: Myway.com and RFC-ignorant.org

> balance these scores out?  I understand that SPF is not a sign of=20
> hammy/spammyness, but would I be openening up my system too much by=20

But maybe ignoring emails to postmaster@ and abuse@ and having no valid
whois contacts IS a sign of spammyness, and that they don't care if
their users spam, have viruses or pass along phishing emails.

Since you use SPF, you could use whitelist from spf to make sure that
you aren't allowing in forged myway.com spam.
Put this in local.cf in ../etc/spamassassin directory where local config
files are.

Something like:

whitelist_from_spf    *@myway.com
(which would allow SPAM from myway.com users, but not FORGED SPAM)

or
whitelist_from_spf    remoteuser@myway.com
(which would be the safest)

However, $$$ is the best way to get myway.com to act.

Tell your user to get another ISP.

If myway.com doesn't care about spam, viruses, network abuse then they
don't care about the internet.


Vote with your feet.

--=20
Michael Scheidell, CTO
561-999-5000, ext 1131
SECNAP Network Security Corporation
Keep up to date with latest information on IT security: Real time
security alerts: http://www.secnap.com/news
=20