On Saturday, Nov 23, 2002, at 17:08 US/Pacific, Ross Vandegrift wrote:
My thought on this is:On Sat, Nov 23, 2002 at 05:12:29PM -0600, Dark Alchemist wrote:Basically I want it to let all below my threshold come trough untouched,
from threshold to 14 mark it as possible spam and 14+ junk it.
Ok, I know this will be an unpopular suggestion among some -but you will some day regret you configured your filter to auto-delete.
Right now I use mailscanner, but I've considered switching to mime-defang. Until then, what I do is take all messages that SA marks as spam and return a "you've been added to my blacklist" message to the sender, and then add them to my blacklist (while deleting the message). I don't have to review it, and if it was a legit sender they can send a message to my appeals address to get off my blacklist. If they were an actual spammer, then either the warning will go to the ether and I don't care, or they'll send an appeal to my appeals address trying to justify themselves (hasn't happened yet), or they do nothing. In any of those cases, I never get more spam from that address. (I also have a mechanism that allows me to put false negatives into a folder, and that folder gets cleaned out by a cron job every so often, adding all of those messages to the blacklist ... but without sending the warning -- I've reviewed all of those messages by hand, so there's no need to warn anyone)
It avoids the problem you're talking about because legit senders will be notified that their message looked like spam and wasn't delivered ... yet at the same time I don't have to waste my time with it.
If I had mime-defang, then I would simply refuse to accept the transfer of any messages that SA marked as spam ... so if it's a legit sender, they'll get the bounce message from the other MTA (and my MTA wont have to sit there trying to send a bounce message for a few days). If it's a spammer, then I don't care what happens to the message.
I agree that completely blindly trashing SA marked messages is a bad idea, but that doesn't mean you can't throw them away at all. It just means you have to make sure that if it's a legit sender then they'll get an error.
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
