[Mimedefang] Frustration...
Jeff Rife
mimedefang at nabs.net
Thu Nov 4 17:06:26 EST 2004
On 4 Nov 2004 at 14:15, Lisa Casey wrote:
> and Spamassassin adds a SpamAssassinReport.txt as an attachment to each
> spam mail. But I've been reading websites for two days now and can't figure
> out how to do anything else with this. Basically I don't want spam coming
> into my users mailboxes, they don't want it. I understand there will be some
> amount of false positives, but I just want to drop (or bounce or whatever)
> the spam before it reaches the mailboxes.
For this, in /etc/mail/mimedefang-filter where the code currently adds
the SA report, just use "action_discard" or "action_bounce" instead.
> I'ld also like to drop, bounce, whatever mail that has certain words in the
> subject, such as rolex, penis, viagra, etc.
For this, check out http://www.rulesemporium.com/ and add rules that
seem to do what you want.
I like:
BOGUSVIRUS
SARE_SPECIFIC
SARE_RATWARE
SARE_BML
SARE_FRAUD
SARE_OEM
SARE_GENLSUBJ0
TRIPWIRE
> Also, I'm not sure how I'm supposed to feed it spam. I have
> Sendmail/Qpopper and most of my users pick up their mail using
> Outlook Express. I understand I can't just forward spam to a spam
> mailbox and run sa-learn on that as the forwarding will not get the
> original headers.
For anything you mark as "spam", use the "resend_message" function
inside to copy the *original* to a spam mailbox. Then, run sa-learn on
that mailbox every so often. That box *could* just be an alias to a
pipe to sa-learn, if you want.
--
Jeff Rife | "You may find this strange, but I think body
SPAM bait: | piercing is a good thing. It gives us a
AskDOJ at usdoj.gov | quick way to tell that people ain't right,
spam at ftc.gov | just by lookin' at 'em."
| -- Hank Hill, "King of the Hill"
More information about the MIMEDefang
mailing list