> -----Original Message----- > From: Dan [mailto:[EMAIL PROTECTED] > Sent: Monday, December 01, 2003 14:22 > To: [EMAIL PROTECTED]; Matt Kettler > Subject: Re: [SAtalk] bayes > > > I took a peek, and I guess my question is this...... How do I > train on what > is spam, if the spam has already been relayed onto the > exchange server ( my > setup is a SMTP gateway ) I dont have the spam messages. > > Any ideas? Do I have to get all the users to send there spam to me?
Dan, I was in the same situation as you. I was working on implementing SA in an environment where all of the mail comes through Sendmail on a Linux box but is forwarded onto MS Exchange (5.5 in my case) with varying levels of Outlook in use (from 97/98 to XP). I had looked at various methods for getting FP and FN mails back from users to allow me to continue training Bayes. You may find some very useful information here: http://www.stearns.org/doc/spamassassin-setup.v0.6.0.html (I know I definitely did.) One issue that I hit was that Outlook in an Exchange environment will NOT allow you to use the RESEND (aka "bounce") feature. Your users need to have the proper "authorization" to resend/bounce an e-mail on behalf of another sender - an impossible task considering the numbers of sender "names" in SPAM messages. Saving e-mails or forwarding them as attachments was of no use as it seemed that Exchange/Outlook stripped off all of the necessary headers that would be needed. So, I came across this great suggestion from the list archives: http://article.gmane.org/gmane.mail.spam.spamassassin.general/16566/match=im ap+perl+script+exchange Which is what I'm going to be implementing here. This presumes a couple of things: 1. You have public folders set up to accept Spam and Ham. All Exchange users have the necessary permissions to copy/move e-mail messages into these folders. 2. You have a domain/Exchange userid/password that could be publicly viewable if you're going to use a cron job to do regular training sessions. If you'll be doing further training by hand, you can use your own userID/password. In either case, make sure you have the necessary permissions to view, delete, etc. the messages in those folders. The Perl script linked above does not delete any messages (based on my reading of the script). As FPs and FNs come in to your users, have them move or copy those messages to the proper public folder. Run the Perl script pointed at the right folders at whatever interval you find necessary. Hope this helps. Good luck! Joseph Kang Network Administrator Network Executive Software, Inc. [EMAIL PROTECTED] ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
