> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Ralf Hildebrandt
> Sent: Monday, December 08, 2003 8:52 AM
> To: gentian
> Cc: [EMAIL PROTECTED]; Thomas Kinghorn
> Subject: Re: [SAtalk] filtering spam tagged email before
> hitting exchange 2000
>
> * gentian <[EMAIL PROTECTED]>:
>
> > I will be using Fedora or Redhat Enterprise, one of two.
>
> > I am very new to spamassassin and i want to setup a gateway for
> > external spam and then i want to relay mail from spamassassin to
> > Exchange 2000. I read that spamassassin just tags the mail,
> > doesn'filter it and i should filter it on Exhange 2000 and that
> > was done by some other tools. The problems is that i do not want
> > to mess around with Exchange 2000 and install other stuff in
> > there. It has already enough load and problems so I was
> wondering
> > if there is any way to filter tagged email before it hits
> > Exchange 2000, something that filters it at at tehe same machine
> > where spamassassin lives.
>
> Use Postfix+amavisd-new+SpamAssassin -- and user D_DISCARD to drop the
> spam on the gateway.
>
> --
> Ralf Hildebrandt (Im Auftrag des Referat V a)
>
Gentian,
I also would recommend this solution, here is how I implemented it.....
When I first built the SA relay box (Redhat, Postfix, Amavisd-new,
SpamAssassin), I set the $sa_kill_level_deflt = 6, $final_spam_destiny
to D_PASS and $spam_quarantine_to = '[EMAIL PROTECTED]'. With this
setup, the system "quarantined anythign above 6 points, but then
delivered the message. I watched the spam quarantine for several weeks,
while adjusting scores and whitelisting troublesome senders. When I was
comfortable with the setup I changed the tag settings as follows:
(from amavisd.conf)
$final_spam_destiny = D_Discard
$sa_tag_level_deflt = 0.001; # add spam info headers if at, or above
that level
$sa_tag2_level_deflt = 6.0; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 10.0; # triggers spam evasive actions
# at or above that level:
bounce/reject/drop,
# quarantine, and adding mail address
extension
So now any messages that score > 10 points are quarantined on the relay
server. We also use rules on Outlook to filter mail based on the
"X-Spam-Level:" headers, the default rules moves message with
"X-Spam-Level: ******" to a "SpamAssassin" folder in the users mailbox.
Even if the users don't take the time to import the default rule
(available on our intranet) they and the Exchange servers do get quite a
bit relief from all of the messages above 10 points that do not get
delivered.
Misc. stuff:
We created a SpamAssassin folder, placed a message with instructions on
how to import the default rule into this folder, then used exmerge to
pull this folder out to a .PST, ran a batch file that created a .pst for
each user and then used exmerge again to place it in all users
mailboxes.
Hope that helps,
matt
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
