amavisd-new

[Alan Munday <sp...@brightheadtechnology.com>]

Tried posting a variation of this to the amavis list earlier, as I had no response I thought I'd try here.

I'm currently configuring my 1st install of amavisd-new, and while I'm setting up and testing I would like to be able to send a copy of all mail that is scanned by SA to be saved into a local mbox or quarantine directory. 

I wish to check what is being passed as clear, marked as spam as well as checking what is canned and put into the quarantine dir.

Is this possible? 

Thanks

Alan

Re: amavisd-new

[Menno van Bennekom <mv...@xs4all.nl>]

> Kevin Peuhkurinen wrote the following on 21/04/2005 16:05:
>> The expected results of this, as I say, is that ALL emails will be
>> tagged as spam; will have SA headers inserts; will have a copy placed
>> into the the quarantine folder; and finally will be passed on back to
>> the MTA for delivery.   This should suffice for the type of testing you
>> want to do.   Anything more complicated and you will need to use your
>> MTA to help sort things out.
>>
> Thanks Kevin
>
> This is pretty close but I don't really want all the mail to the end users
> marked as spam.
> Right now my thinking was to add an "-o always_bcc = mailcheck@domain.com"
> to master.cf for when amavisd-new passes the mail back to postfix for
> delivery.
But lowering the $sa_kill_level_deflt doesn't tag the mail with "***SPAM"
in the subject, that is the $sa_tag2_level_deflt setting and you can keep
that unchanged. So users won't notice any difference of this archiving.
I have $sa_kill_level_deflt set lower than $sa_tag2_level_deflt so I can
look in the 'spam'-archive for mail that scores just below the spam-score.
That gives me the change to fine-tune spam-settings.
If I want to save all mail I also use always_bcc = mail@localunixuser in
the main.cf of postfix, and use a .procmailrc to put the mail in a
directory for sreening.
Menno van Bennekom

Re: amavisd-new

[Alan Munday <sp...@brightheadtechnology.com>]

Kevin Peuhkurinen wrote the following on 21/04/2005 16:05:
> The expected results of this, as I say, is that ALL emails will be 
> tagged as spam; will have SA headers inserts; will have a copy placed 
> into the the quarantine folder; and finally will be passed on back to 
> the MTA for delivery.   This should suffice for the type of testing you 
> want to do.   Anything more complicated and you will need to use your 
> MTA to help sort things out.
> 
> Kevin
> 
Thanks Kevin

This is pretty close but I don't really want all the mail to the end users marked as spam.

My current live box's use anomy where I've amended the scripts to copy mail into mbox's non-spam, marked-spam and not-delivered-spam.

This means it has been really easy to check for false positives/negatives and to feed corrections back into SA.

This was one of the reasons for trying to replicate this with amavisd-new. Being new to amavisd-new I'm still getting used to its architecture. Which while I've been doing this I've been trying to figure out how to handle corrections to SA when I don't have a copy of the source mail.

Right now my thinking was to add an "-o always_bcc = mailcheck@domain.com" to master.cf for when amavisd-new passes the mail back to postfix for delivery.

regards

Alan

Re: amavisd-new

[Kevin Peuhkurinen <ke...@meridiancu.ca>]

Alan Munday wrote:

> Tried posting a variation of this to the amavis list earlier, as I had 
> no response I thought I'd try here.
>
> I'm currently configuring my 1st install of amavisd-new, and while I'm 
> setting up and testing I would like to be able to send a copy of all 
> mail that is scanned by SA to be saved into a local mbox or quarantine 
> directory.
> I wish to check what is being passed as clear, marked as spam as well 
> as checking what is canned and put into the quarantine dir.
>
I'm not sure if this is exactly what you want, but you can ask amavisd 
to 1) tag all emails as spam, 2) put a copy of the emails into a 
particular directory, and 3) pass the emails on.   The reason for (1) is 
that amavisd has no option to save a copy of email that is not 
considered spam.   You would then be able to look through the quarantine 
and see what the SA score is for each email.

For (1), use the line:
$sa_kill_level_deflt = -999;

For (2), use:
$QUARANTINEDIR = '/path/to/spamquarantine/';
$spam_quarantine_method         = 'local:spam-%b-%i-%n';

And for (3), use
$final_spam_destiny       = D_PASS;

You will also want to comment out the line that starts 
"$sa_mail_body_size_limit" if you want SA to scan large emails as well, 
otherwise they will not be tagged and quarantined.

The expected results of this, as I say, is that ALL emails will be 
tagged as spam; will have SA headers inserts; will have a copy placed 
into the the quarantine folder; and finally will be passed on back to 
the MTA for delivery.   This should suffice for the type of testing you 
want to do.   Anything more complicated and you will need to use your 
MTA to help sort things out.

Kevin

>