alternate lcoation

[Jean-Paul Natola <jn...@familycareintl.org>]

Hi everyone, 

If this shouldn't be posted here I do apologize in advance;

I would like to start catching/storing/redirecting ALL spam messages to an
alternate location (a central folder/box/directory etc..) instead of
discarding them.

In my setup I do NOT house and users, as my box is strictly a
cleansing/filtering box, that hands everything off to the Exchange server.

I run 

BSD 5.4
Exim
Clam
And SA

I heard postini charges for this type of service  and even sends a report of
the blocked spam and lets you retrieve it if it happens to be an FP. 

My thought was something along the lines of creating a user on my Exchange
called "spam_catch" or something similar,  and have all the all the messages
that are currently being discarded put there. That way if someone says they
were waiting for a message they never received they can access this folder
and retrieve it.

Again if this is not an SA question I do apologize, 




 
 
 
 
 
Jean-Paul Natola
Network Administrator
Information Technology
Family Care International
588 Broadway Suite 503
New York, NY 10012
Phone:212-941-5300 xt 36
Fax:  212-941-5563
Mailto: Jnatola@Familycareintl.org 

Re: alternate lcoation

[Dirk Bonengel <di...@bonengel.de>]

I did something along that line using postfix and amavisd-new.
amavisd-new should also be able to interface with exim (at least it says 
so at http://www.ijs.si/software/amavisd/#features-mta)
However, you could also have a look at Maia Mailguard. That software 
uses a modified version of amavisd-new and stores spam in a database for 
later review.
Presumed Ham is also stored in the DB but passed on to the final 
destination. Great setup  to train one bayes...

Dirk




Jean-Paul Natola schrieb:

>Hi everyone, 
>
>If this shouldn't be posted here I do apologize in advance;
>
>I would like to start catching/storing/redirecting ALL spam messages to an
>alternate location (a central folder/box/directory etc..) instead of
>discarding them.
>
>In my setup I do NOT house and users, as my box is strictly a
>cleansing/filtering box, that hands everything off to the Exchange server.
>
>I run 
>
>BSD 5.4
>Exim
>Clam
>And SA
>
>I heard postini charges for this type of service  and even sends a report of
>the blocked spam and lets you retrieve it if it happens to be an FP. 
>
>My thought was something along the lines of creating a user on my Exchange
>called "spam_catch" or something similar,  and have all the all the messages
>that are currently being discarded put there. That way if someone says they
>were waiting for a message they never received they can access this folder
>and retrieve it.
>
>Again if this is not an SA question I do apologize, 
>
>
>
>
> 
> 
> 
> 
> 
>Jean-Paul Natola
>Network Administrator
>Information Technology
>Family Care International
>588 Broadway Suite 503
>New York, NY 10012
>Phone:212-941-5300 xt 36
>Fax:  212-941-5563
>Mailto: Jnatola@Familycareintl.org 
>
>  
>

Re: alternate lcoation

[Matthew Newton <mc...@leicester.ac.uk>]

On Fri, Feb 10, 2006 at 12:56:21PM -0800, Loren Wilton wrote:
> I don't know Exim to tell you how to do it there, but this would be fairly
> trivial with Postfix.  Run the mail through SA, and if the X-Spam-Status
> header says it is spam, rewrite the destination mailbox.  Exchange should
> handle it from there.

This is easy in exim; you can set an ACL variable if you are going
to reject the message, and then use "control = fakereject" to
reject it but keep processing. Later on, have a redirect router
that sends any mail to the fixed address if the variable is set.

Be very very careful when using fakereject...

Of course, you could just redirect rather than pretend to reject
it as well.

> However: do you REALLY want a common spam mailbox for everyone in the
> company?  This has a real chance of exposing spersonal or company
> confidential stuff to recipients that shouldn't have it.

Quite.

I'd be more inclined to just dump it into a mail store on the exim
box for administrator investigation if necessary.

Matthew


-- 
Matthew Newton <mc...@le.ac.uk>

UNIX and e-mail Systems Administrator, Network Support Section,
Computer Centre, University of Leicester,
Leicester LE1 7RH, United Kingdom

Re: alternate lcoation

[Loren Wilton <lw...@earthlink.net>]

I don't know Exim to tell you how to do it there, but this would be fairly
trivial with Postfix.  Run the mail through SA, and if the X-Spam-Status
header says it is spam, rewrite the destination mailbox.  Exchange should
handle it from there.

However: do you REALLY want a common spam mailbox for everyone in the
company?  This has a real chance of exposing spersonal or company
confidential stuff to recipients that shouldn't have it.

        Loren

Re: alternate lcoation

[Matt Kettler <mk...@evi-inc.com>]

Jean-Paul Natola wrote:
> Hi everyone, 
> 
> If this shouldn't be posted here I do apologize in advance;
> 
> I would like to start catching/storing/redirecting ALL spam messages to an
> alternate location (a central folder/box/directory etc..) instead of
> discarding them.
> 
> In my setup I do NOT house and users, as my box is strictly a
> cleansing/filtering box, that hands everything off to the Exchange server.
> 
> I run 
> 
> BSD 5.4
> Exim
> Clam
> And SA
> 
> I heard postini charges for this type of service  and even sends a report of
> the blocked spam and lets you retrieve it if it happens to be an FP. 
> 
> My thought was something along the lines of creating a user on my Exchange
> called "spam_catch" or something similar,  and have all the all the messages
> that are currently being discarded put there. That way if someone says they
> were waiting for a message they never received they can access this folder
> and retrieve it.
> 
> Again if this is not an SA question I do apologize, 


Well, it's spamassassin relevant, but it's not something that spamassassin
itself can do.

SA itself can't redirect or delete mail. The way it patches into mail systems
inhibits it from doing anything but analyzing and modifying the message contents.

In theory what you want to do is get Exim, or whatever tool is calling SA, to
change the delivery envelope for the tagged spam to go to your spam_catch user.

However, I'm no Exim expert, but at least I've pointed you in the right direction.