[Mimedefang] Question for the HOWTO page

Joseph Brennan brennan at columbia.edu
Mon Jan 30 09:49:24 EST 2006



--On Sunday, January 29, 2006 11:41 -0700 Philip Prindeville 
<philipp_subx at redfish-solutions.com> wrote:

> Also, instead of flagging spam, what about just rejecting the email in
> filter_end() if SA reports too high a probability of it being spam?


Of course.

     $names =~ s/,/ /g;

     if ($hits >= 8.0) {
         md_graphdefang_log('spam', "$hits $names", $RelayAddr);
         action_bounce("This appeared to be spam");
     }

Choose your own threshold and your own message.  We change commas to
spaces in $names for the sake of the log.  By logging the score and
the names, we can more easily assess the problem in cases of legit mail
that got rejected.

We also assign points and names to a few things more easily checked
in Mimedefang, like bogus Helo strings or no reverse DNS.  If $hits
has reached 8.0 before we run the SA tests, we can skip SA.

Joseph Brennan
Columbia University Information Technology




More information about the MIMEDefang mailing list