You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Bob Apthorpe <ap...@cynistar.net> on 2004/06/22 16:25:56 UTC
One for BigEvil, plus strange Reply-To
Hi,
Just got spammed by igxglobal.com sending to an address scraped from the
Full Disclosure list. One notable thing about the spam was:
Reply-To: no-reply@igxglobal.com, igx-dsb@igxglobal.com
Is this even legal? How well does
header Reply-To =~ /,/
score?
-- Bob
Re: Dropping mail
Posted by Evan Platt <ev...@espphotography.com>.
At 09:12 AM 6/22/2004, you wrote:
>Can Spamassassin drop emails if it is over a certain amount of points? Or
>is that a maildrop script? I thought I saw a script on here that did that,
>something with an if statement and a exit statement.
>
>Basically if the points on an email is over a certain amount then I want
>the email dropped instead of delivered.
From a post by Christopher Kunz:
I'm using maildrop for this (in a vpopmail setup, YMMV):
####################################################
VPOP="| /home/vpopmail/bin/vdelivermail '' bounce-no-mailbox"
VHOME=`/home/vpopmail/bin/vuserinfo -d $EXT@$HOST`
if ( $SIZE < 262144 )
{
exception {
xfilter "/usr/bin/spamc -f -u $EXT@$HOST"
}
}
if (/^X-Spam-Flag: *YES/)
{
exception {
include $VHOME/Maildir/.mailfilter
}
IF YOU WANT TO GATHER ALL SPAM INTO 1 MAILDRIR
exception {
to /dev/null
}
## OR IF YOU WANT TO DELIVER SPAM TO THE USERS MAILDIR
# exception {
# to "$VPOP"
# }
}
else
{
exception {
include $VHOME/Maildir/.mailfilter
}
exception {
to "$VPOP"
}
}
Evan
Re: Dropping mail
Posted by Evan Platt <ev...@espphotography.com>.
At 02:36 PM 6/22/2004, you wrote:
>Well I already filter by putting it in a different folder. But I want to
>perminently stop certain email addresses from coming in at all. So is it
>best to do this at the maildrop level or does qmail have something built
>in that better "blocks" certain email address?
Yes, it's best to do it at the maildrop level.
BTW: Please check the time on your computer.. It's set in the future. :)
Evan
RE: Dropping mail
Posted by Robert Bartlett <rb...@digitalphx.com>.
Would this work?
/^X-Spam-Hits:.*/
if ($MATCH >= '15')
{
exit
}
Thanks
Robert
-----Original Message-----
From: Satya [mailto:satalk@thesatya.com]
Sent: Tuesday, June 22, 2004 3:56 PM
To: spamassassin-users@incubator.apache.org
Subject: Re: Dropping mail
On Jun 22, 2004 at 14:36, Robert Bartlett wrote:
>Well I already filter by putting it in a different folder. But I want to
>perminently stop certain email addresses from coming in at all. So is it
>best to do this at the maildrop level or does qmail have something built
>in that better "blocks" certain email address?
You could use the same setting that puts stuff in a different
folder, except set the threshold higher. If that test matches
(procmail-speak) do this:
| cat /dev/null
Or return an exit code of.... Hmm, I forget.
--
Satya. <URL:http://www.thesatya.com/>
He's not dead, Jim, he's just metabolically challenged.
Re: Dropping mail
Posted by Satya <sa...@thesatya.com>.
On Jun 22, 2004 at 14:36, Robert Bartlett wrote:
>Well I already filter by putting it in a different folder. But I want to
>perminently stop certain email addresses from coming in at all. So is it
>best to do this at the maildrop level or does qmail have something built
>in that better "blocks" certain email address?
You could use the same setting that puts stuff in a different
folder, except set the threshold higher. If that test matches
(procmail-speak) do this:
| cat /dev/null
Or return an exit code of.... Hmm, I forget.
--
Satya. <URL:http://www.thesatya.com/>
He's not dead, Jim, he's just metabolically challenged.
Re: Dropping mail
Posted by Robert Bartlett <rb...@digitalphx.com>.
Well I already filter by putting it in a different folder. But I want to
perminently stop certain email addresses from coming in at all. So is it
best to do this at the maildrop level or does qmail have something built
in that better "blocks" certain email address?
Thanks
Robert
>> # This routine will dump the spam into the user's file
>> :0 H
>> * ^Subject:.*\[SPAM\]
>> $MAILDIRLOG/spam.log
>
> FWIW, I think it's easier to filter based on the "X-Spam-Status: Yes"
> header. If you're using per-user rules, it's possible for the user to turn
> off subject alteration.
>
>
Re: Dropping mail
Posted by Mike Jackson <mj...@cmc.net>.
> # This routine will dump the spam into the user's file
> :0 H
> * ^Subject:.*\[SPAM\]
> $MAILDIRLOG/spam.log
FWIW, I think it's easier to filter based on the "X-Spam-Status: Yes"
header. If you're using per-user rules, it's possible for the user to turn
off subject alteration.
Re: Dropping mail
Posted by Greg Ennis <Po...@PoMec.Net>.
On Tue, 2004-06-22 at 11:12, Robert Bartlett wrote:
> Can Spamassassin drop emails if it is over a certain amount of points? Or
> is that a maildrop script? I thought I saw a script on here that did that,
> something with an if statement and a exit statement.
>
> Basically if the points on an email is over a certain amount then I want
> the email dropped instead of delivered.
>
> Thanks
> Robert
Robert,
I have done almost what you want with procmail. Here is my procmail
rule:
DROPPRIVS=YES
PATH=/usr/bin:/bin:/usr/local/bin:
LOGABSTRACT=ALL
MAILDIRLOG=/smile$HOME/Mail
LOGFILE=$MAILDIRLOG/from.log
# Check to see if there is spam in this packet and if so mark it as spam
:0fw
* < 256000
| spamc
# This routine will dump the spam into the user's file
:0 H
* ^Subject:.*\[SPAM\]
$MAILDIRLOG/spam.log
What I do is to dump all of the spam in a user file as it comes in.
Once per day I have a perl script that reads the file and creates an
e-mail that includes a listing of the contents of the file (Subject,
Sender, and Spam level) and then mail it to the user. If the user wants
any of the spam they can send me a note and I will get it for them. I
keep the files rotating on a daily basis so I have a week's worth of
each user's spam saved in their account at any given time. I have plans
to allow them to retrieve their spam without my interference, but in 6
months I have only had one request to retrieve any messages... so I have
not bothered to write the additional module.
Hope this helps.
Greg Ennis
Re: Dropping mail
Posted by Martin Schröder <ms...@artcom-gmbh.de>.
On 2004-06-22 09:12:50 -0700, Robert Bartlett wrote:
> Can Spamassassin drop emails if it is over a certain amount of points? Or
No.
> is that a maildrop script? I thought I saw a script on here that did that,
Yes.
You might want to read the FAQ.
HTH. HAND.
Martin
--
Martin Schröder, ms@artcom-gmbh.de
ArtCom GmbH, Lise-Meitner-Str 5, 28359 Bremen, Germany
Voice +49 421 20419-44 / Fax +49 421 20419-10
http://www.artcom-gmbh.de
Dropping mail
Posted by Robert Bartlett <rb...@digitalphx.com>.
Can Spamassassin drop emails if it is over a certain amount of points? Or
is that a maildrop script? I thought I saw a script on here that did that,
something with an if statement and a exit statement.
Basically if the points on an email is over a certain amount then I want
the email dropped instead of delivered.
Thanks
Robert