Filtering with Procmail before it goes to spamassassin.

["David A. Roth" <ro...@comcast.net>]

I have been using Spamassassin (SA) for my domain and it suits my 
needs. Lately I have been getting a lot of spam spoofed bounced e-mail 
using my domain. The spammers don't use a valid user name from my 
domain, so I can't simply add them to the SA blacklist. I decided I 
only want e-mail mail addressed To: me@ & webmaster@ be allowed 
through. Everything else can go to /dev/null. However, if someone has a 
typo user name as legit e-mail to my domain, I feel they should get a 
reply letting them know that their 'typo' doesn't exist. At the same 
time, I don't want to have it reply from a valid e-mail address since 
it must just get added by spammers and I really want them to send it to 
a correct e-mail address (perhaps noreply@ ?)

I assume what I described above is a good task for Procmail? I'm still 
getting up to speed on Procmail and would like to find examples of what 
I described above done, so that after Procmail does its job, it then 
passes the properly addressed e-mail to SA.

Thanks in advance,

David Roth
rothmail at comcast.net

Re: Filtering with Procmail before it goes to spamassassin.

["David A. Roth" <ro...@comcast.net>]

On Friday, July 23, 2004, at 06:09  PM, Scot L. Harris wrote:

> On Fri, 2004-07-23 at 17:23, David A. Roth wrote:
>> I have been using Spamassassin (SA) for my domain and it suits my
>> needs. Lately I have been getting a lot of spam spoofed bounced e-mail
>> using my domain. The spammers don't use a valid user name from my
>> domain, so I can't simply add them to the SA blacklist. I decided I
>> only want e-mail mail addressed To: me@ & webmaster@ be allowed
>> through. Everything else can go to /dev/null. However, if someone has 
>> a
>> typo user name as legit e-mail to my domain, I feel they should get a
>> reply letting them know that their 'typo' doesn't exist. At the same
>> time, I don't want to have it reply from a valid e-mail address since
>> it must just get added by spammers and I really want them to send it 
>> to
>> a correct e-mail address (perhaps noreply@ ?)
>>
>> I assume what I described above is a good task for Procmail? I'm still
>> getting up to speed on Procmail and would like to find examples of 
>> what
>> I described above done, so that after Procmail does its job, it then
>> passes the properly addressed e-mail to SA.
>>
>> Thanks in advance,
>>
>> David Roth
>> rothmail at comcast.net
>
> Could you use sendmail access.db to do this for you?
>
> That would reject the message at the MTA level.
> -- 
> Scot L. Harris
> webid@cfl.rr.com
>

I don't believe so, because I was under the impression you need to be 
root to do this? (I can't be root with the ISP for my domain).

David Roth
rothmail at comcast.net

Re: Filtering with Procmail before it goes to spamassassin.

["Scot L. Harris" <we...@cfl.rr.com>]

On Fri, 2004-07-23 at 17:23, David A. Roth wrote:
> I have been using Spamassassin (SA) for my domain and it suits my 
> needs. Lately I have been getting a lot of spam spoofed bounced e-mail 
> using my domain. The spammers don't use a valid user name from my 
> domain, so I can't simply add them to the SA blacklist. I decided I 
> only want e-mail mail addressed To: me@ & webmaster@ be allowed 
> through. Everything else can go to /dev/null. However, if someone has a 
> typo user name as legit e-mail to my domain, I feel they should get a 
> reply letting them know that their 'typo' doesn't exist. At the same 
> time, I don't want to have it reply from a valid e-mail address since 
> it must just get added by spammers and I really want them to send it to 
> a correct e-mail address (perhaps noreply@ ?)
> 
> I assume what I described above is a good task for Procmail? I'm still 
> getting up to speed on Procmail and would like to find examples of what 
> I described above done, so that after Procmail does its job, it then 
> passes the properly addressed e-mail to SA.
> 
> Thanks in advance,
> 
> David Roth
> rothmail at comcast.net

Could you use sendmail access.db to do this for you?  

That would reject the message at the MTA level.
-- 
Scot L. Harris
webid@cfl.rr.com

We don't care how they do it in New York.