Hi! On Tue, 23 Dec 2003 23:22:27 -0800 (PST) [EMAIL PROTECTED] (Don Caprio) wrote:
> I looked through the FAQ and couldn't find the answer. So sorry if I missed > it. Check the mailing list archives at http://marc.theaimsgroup.com/?l=spamassassin-talk&r=1&w=2 or http://news.gmane.org/thread.php?group=gmane.mail.spam.spamassassin.general > I would like to delete spam messages when they arrive rather that having > users filter via procmail. I did see the notes on how to delete spam mail > using procmail using the X-Spam-Level. The FAQ is in a period of transition, moving to the wiki at http://wiki.spamassassin.org/w/FrequentlyAskedQuestions - the specific entry is http://wiki.spamassassin.org/w/DeletingAllMailsMarkedSpam though it doesn't specifically answer your question, probably because the general consensus is that deleting high scoring mail without manually verifying it's actually spam is A Bad Idea. Examples: filtering mail content sent to your abuse role account is counterproductive. Also tagging mail from lists that discuss spam is not wise. > I'm running postfix and the spamc daemon. Is there a way to delete the > spam emails without using procmail? or is the best way to handle this is > with a site-wide procmail? You can do it several ways, either through procmail or with a site-wide postfix mail filter (amavisd-new.) If you are going to do this, pick a threshold guaranteed not to give false positives (analyze your mail logs), warn your users (if any) that you're going to delete mail unread, and make sure to discard or reject the mail, not bounce it. Also, filtering role accounts is probably A Bad Idea. It's best to reject mail before the SMTP DATA phase to save on bandwidth & other resources. You're probably better off tuning postfix to use trustworthy DNSBLs (open relay, open proxy, zombie/unallocated network, and dynamic allocation blocklists), to mandate RFC compliance (proper HELO format), to require valid rDNS, and to require the HELO string match an actual host. Some of these (rDNS, HELO checks) may cause false positives but the failures will be temporary, giving you time to whitelist broken-but-legitimate mail systems, provided you watch your mail logs. hth, -- Bob ------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk