Re: SMTP AUTH

[Nate S.]

Hi,
I've been using the 'hack' described below for some time, and it's been
working until recently.  After I reconfigured sendnmail.mc for
milter-greylist, which ignores AUTH'd mail just fine, spamass-milter
hasn't been ignoring AUTH'd messages.  Below are the relevant lines from
sendmail.mc.  I'm hoping you can tell me how to change it so that
spamass-milter will ignore AUTH'd mail without breaking
milter-greylist's ability to do so.

INPUT_MAIL_FILTER(`spamassassin',
`S=local:/var/run/sendmail/spamass.sock, F=T, T=C:15m;S:5m;R:5m;E:15m')
define(`confMILTER_MACROS_CONNECT',`t, b, j, _, {daemon_name},
{if_name}, {if_addr}')
define(`confMILTER_MACROS_HELO',`s, {tls_version}, {cipher},
{cipher_bits}, {verify}, {cert_subject}, {cert_issuer}')dnl
define(`confMILTER_MACROS_ENVFROM',`i, {auth_authen}')
define(`confMILTER_MACROS_ENVRCPT',`r, v, Z, {greylist}')

Thanks in advance,
Nate
___________________


   Re: SMTP AUTH

------------------------------------------------------------------------
*From*:         Dan Nelson
*Subject*:      Re: SMTP AUTH
*Date*:         Tue, 9 Mar 2004 14:43:39 -0600
*User-agent*:   Mutt/1.5.6i

------------------------------------------------------------------------

In the last episode (Mar 04), Adam Kujawski said:
> / I would like to skip the checks performed by spamass-milter for/
> / messages that have been accepted using SMTP AUTH./
> / /
> / 1. Is  ${auth_type} the correct macro to be checking to see if a message was/
> / accepted with SMTP AUTH?/
> / /
> / My understanding is that if auth_type is set (not null), then SMTP/
> / AUTH has been used sucessfully./

Sounds reasonable.

> / 2. Do I need to add anything to my .mc to send the auth_type macro to/
> / spamass-milter, or is it done by default?/
> / /
> / It looks like my sendmail.cf's "Milter.macros.envfrom" includes/
> / auth_type by default, so I assume I don't have to set any/
> / confMILTER_MACROS_ENVFROM values and rebuild my config. Is that/
> / correct?/

Right.

> / 3. What changes need to be made to spamass-milter to automatically pass SMTP/
> / AUTH messages?/
> / /
> / I added the following bit of code to the beginning of the mlfi_connect()/
> / function in spamass-milter.cpp and recompiled:/
> / /
> /         if (smfi_getsymval (ctx, "{auth_type}") != NULL)/
> /         {/
> /                 return SMFIS_ACCEPT;/
> /         }/

This may be too soon.  mlfi_connect gets called when the socket is
opened.  The client doesn't send AUTH until after EHLO, so I think the
soonest that {auth_type} can be set would be in smfi_envfrom.  Which
actually makes sense, because you mentioned above that auth_type is in
Milter.macros.envfrom :)

--
       Dan Nelson
       address@hidden <http://lists.gnu.org/spam.html>