RE: TMDA + Postfix + Dovecot + Spamassassin + MYSQL + Clamav + Amavisd

Yes tmda-cgi does release and/or confirm messages based on a clicked link.
There were messages on the list in years past on how to take the output from
tmda-pending to generate a pending mail report complete with URLs to release
pending messages of interest, plus there's the confirmation url variable
that can be added to the challenge templates.  As long as tmda-cgi is
installed and working correctly they work just fine.

That said, however, I think most self respecting netizens would find such a
url suspect thinking it to be some sort of Trojan.  As such they would be
much more comfortable with just replying to an email than clicking on a
link.

That said, I'm with Kevin, you need to filter your outgoing email so that
you can auto white list addresses that you initiate dialog with, and you
definitely should prime your white list with all the addresses in your
address book.  And no tmda solution is truly complete without other first
line defenses to reduce the number of challenges going out.  You should
include things like spam assassin to weed out the obvious junk, and perhaps
a grey listing implementation to further reduce the amount of spam that gets
through to tmda.

-DJ 

-----Original Message-----
From: Kevin Goodsell [mailto:[email protected]] 
Sent: Thursday, March 24, 2011 9:33 PM
To: [email protected]
Cc: [email protected]
Subject: Re: TMDA + Postfix + Dovecot + Spamassassin + MYSQL + Clamav +
Amavisd

On Thu, Mar 24, 2011 at 7:27 PM, [email protected]
<[email protected]> wrote:
> ok...
> well Kevin.
>
> I need:
> when someone sends an email to me, return an email asking for the person
> clicks on the link to be included on a whitelist.

Think carefully about whether that's really what you want. If someone
replies to your email or otherwise sends mail from an address you
previously sent email to, should they really be challenged? This is
why you normally auto-whitelist people you send email to, and one of
the reasons why you also need to filter your *outgoing* mail through
TMDA (and probably prime your whitelist with all the addresses in your
outbox).

In any case, TMDA doesn't support clicking a link as a way of
answering a challenge (where would such a link point?). The challenge
recipient needs to reply to the challenge email. Reportedly tmda-cgi
can use challenge links, but I've never tried it.

>
> I already read
> http://tmda.sourceforge.net/cgi-bin/moin.cgi/TmdaConfiguration
>
> If I follow

<snip>

>
> I can do want I need?
>

Well, yes. You need to direct mail through TMDA for TMDA to work on
that mail. Using .forward is a fairly easy and straight-forward way to
make TMDA act on *incoming* mail, but it has no effect on outgoing
mail. Outgoing mail is described here:

http://tmda.sourceforge.net/cgi-bin/moin.cgi/ClientConfiguration

in the section "Mail User Agent (MUA) Configuration". You might also
want to read this:

http://tmda.sourceforge.net/cgi-bin/moin.cgi/TmdaOfmipdHowto

-Kevin

----------------------------------------------------------------------------
--
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
tmda-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tmda-users

------------------------------------------------------------------------------
Enable your software for Intel(R) Active Management Technology to meet the
growing manageability and security demands of your customers. Businesses
are taking advantage of Intel(R) vPro (TM) technology - will your software 
be a part of the solution? Download the Intel(R) Manageability Checker 
today! http://p.sf.net/sfu/intel-dev2devmar
_______________________________________________
tmda-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/tmda-users