spamassassin-users June 2010 archive
Main Archive Page > Month Archives  > spamassassin-users archives
spamassassin-users: Re: Worthwhile to scan outgoing?

Re: Worthwhile to scan outgoing?

From: Ted Mittelstaedt <tedm_at_nospam>
Date: Mon Jun 21 2010 - 21:31:23 GMT
To: users@spamassassin.apache.org

We do not. We inadvertently did and it wasted a lot of our time when
our customers would periodically send mail that we would tag as spam,
since they would call us and complain. The arguments that their mail
would also have been tagged as spam by their recipient's mailserver
mostly fell on deaf ears.

So instead we launched a campaign to convert all users to auth-smtp
using strong passwords and have mostly succeeded. The campaign was
helped by gradually erecting port 25 blocks in strategic areas of our
network.

Note that a password of 6 chars with 1-2 of them special chars is
apparently considered very strong by spambots.

Ted

On 6/21/2010 8:39 AM, Adam Moffett wrote:
> My philosophy in the past has always been not to scan outgoing emails
> because my users are not likely to be spamming.
>
> However, a couple of issues recently with spambots and SMTP AUTH with
> weak passwords has me reconsidering that stance.
>
> Is anyone here currently scanning their outgoing mail with SA? Good
> results? Bad results?
>