spam should not be sent to spam-quarantine

[Fernando Serto <fe...@memetrics.com>]

Hi folks!

thanks for all the tips you all gave me before on rulesemporium, I'm running
rulesdujour script to have my rules updated automatically, and am catching
almost all the spam. there were users getting more than 100 spams a day, and
it has dropped to only a couple! I'm quite happy with that!

but, I'm not happy enough... I'm recieving all the spam on the
spam-quarantine e-mail address (which points to a folder on my mailbox), and
I need to check daily for false positives.

what happens is:
- we are running postfix as a smart relay.
- when an e-mail arrives, it is scanned by SA and sent to an exchange server
- we have heaps of ex-employees addresses that keep recieveing mail.
- if the From: header is not legimate, when the mail bounces at exchange, it
tries to send this message to that fake address, and this creates a long
mail queue on my postfix.

what I've done:
- added "/^(To|Cc): <ex-employee>@memetrics.com/ REJECT Unknown User" rule
to the header_checks file on postfix
- after that (I don't know how), I keep recieving mails to these users (a
very big part of it is blocked by postfix).
- I added "blacklist_to" rules for all the ex-employees on SA's local.cf
file

but now, I want something that could delete these messages before they're
sent to me. Note, I only want to delete messages to known ex-employees.

does this sound stupid? it might, but it's easier to check the mailq often
for real mail that didn't go through (for whatever reason), and check my
mailbox for false positives (that's why I want to eliminate part of the
rubbish).

cheers,
Fernando

--
Fernando Serto
Systems Administrator
Memetrics Pty.
Phone: +61 2 95560833
Fax: +61 2 95556911
Mobile: 0403 338 005
E-mail: fernando.serto@memetrics.com

--- 
Certain disclaimers and policies apply to all email sent from Memetrics.
For the full text of these disclaimers and policies see 
<a
href="http://www.memetrics.com/emailpolicy.html">http://www.memetrics.com/em
ailpolicy.html</a>