efa-project.org

Hello to All!

Is it possible to REJECT (not generate bounce) for mail with HI score, during SMTP incoming session?

Is it also possible to REJECT mail with LOW score, but save it in quarantine for inspection?
Best regards

I'm not sure I understand. Spam is retained, not bounced anyway... a REJECT always bounces a message...

shawniverson wrote:I'm not sure I understand. Spam is retained, not bounced anyway... a REJECT always bounces a message...

Sorry for my description ...

My question is:

Is possible to "drop SMTP connection with a reject code", and not close with "250 Ok...", if the score are Hi or with virus?

In this case the message is "bounced" directly from the mail server of the sender, and not generated a new bounce message from EFA server.

Thanks again

My understanding is that the SMTP has already accepted the message before passing it for spam and virus checks. That being the case you are too late to reject the connection. My personal opinion is that wherever possible all mail should be rejected rather than bounced. I do not bounce spam.

Postfix accepts the mail and then Mailscanner will do the scanning.

You want postfix to already reject the message.
As mailscanner/spamassassin runs next to postfix this is not possible.

Postfix will only reject if an RBL check is hit.

Is it possible, yes ofcourse but this will require a major rewrite of all the components used.
So don't see this happening anytime soon

darky83 wrote:Postfix accepts the mail and then Mailscanner will do the scanning.

You want postfix to already reject the message.
As mailscanner/spamassassin runs next to postfix this is not possible.

Postfix will only reject if an RBL check is hit.

Is it possible, yes ofcourse but this will require a major rewrite of all the components used.
So don't see this happening anytime soon

Hello darky83,

is it possible to set "Postfix and Mailscanner" with the feature "Before-Queue Content Filter"?
http://www.postfix.org/SMTPD_PROXY_README.html

I'm really excited about this EFA project, but I can't drop/quarantine mail (for example false positive),
or send notify to the recipient for every dropped mail.
At last I can't generate bounce potentially to extraneous senders for every "spam mail".

The best solution is "reject" mail/virus/other before "250 Ok... " or better.. before queue

Thanks again

That will only work good on low volume machine's with enough cpu and memory configured.

If you have an high traffic machine the SMTP connection has already had a timeout as it is still processing the mail.
So for an appliance it is an bad choice to do, only in specific configurations where you (the admin) know that the hardware you use can process all the mail in peak times then you can choose to use before queue filtering. For an appliance where we (the developers) don't know what the user is going to run on and how much traffic they are processing, it is an really bad choice to use before queue processing.

Why not simply drop (quarantine) the mail during the MailScanner/ClamAV/SA phase?

You can easily do this by setting Notify Senders to No in MailScanner....

Then the messages won't bounce.