[Mimedefang] Frustration...

[Jeff Rife]

On 4 Nov 2004 at 14:15, Lisa Casey wrote:

> and Spamassassin adds a  SpamAssassinReport.txt as an attachment to each
> spam mail. But I've been reading websites for two days now and can't figure
> out how to do anything else with this. Basically I don't want spam coming
> into my users mailboxes, they don't want it. I understand there will be some
> amount of false positives, but I just want to drop (or bounce or whatever)
> the spam before it reaches the mailboxes.

For this, in /etc/mail/mimedefang-filter where the code currently adds 
the SA report, just use "action_discard" or "action_bounce" instead.

> I'ld also like to drop, bounce, whatever mail that has certain words in the
> subject, such as rolex, penis, viagra, etc.

For this, check out http://www.rulesemporium.com/ and add rules that 
seem to do what you want.

I like:

BOGUSVIRUS
SARE_SPECIFIC
SARE_RATWARE
SARE_BML
SARE_FRAUD
SARE_OEM
SARE_GENLSUBJ0
TRIPWIRE

> Also, I'm not sure how I'm supposed to feed it spam. I have
> Sendmail/Qpopper and most of my users pick up their mail using
> Outlook Express. I understand I can't just forward spam to a spam
> mailbox and run sa-learn on that as the forwarding will not get the
> original headers. 

For anything you mark as "spam", use the "resend_message" function 
inside to copy the *original* to a spam mailbox.  Then, run sa-learn on 
that mailbox every so often.  That box *could* just be an alias to a 
pipe to sa-learn, if you want.


--
Jeff Rife        | "You may find this strange, but I think body 
SPAM bait:       |  piercing is a good thing.  It gives us a 
AskDOJ at usdoj.gov |  quick way to tell that people ain't right, 
spam at ftc.gov     |  just by lookin' at 'em." 
                 |         -- Hank Hill, "King of the Hill"