Hi!

On Tue, 23 Dec 2003 23:22:27 -0800 (PST) [EMAIL PROTECTED] (Don Caprio) wrote:

> I looked through the FAQ and couldn't find the answer. So sorry if I missed
> it.

Check the mailing list archives at 
http://marc.theaimsgroup.com/?l=spamassassin-talk&r=1&w=2 or 
http://news.gmane.org/thread.php?group=gmane.mail.spam.spamassassin.general

> I would like to delete spam messages when they arrive rather that having
> users filter via procmail. I did see the notes on how to delete spam mail
> using procmail using the X-Spam-Level.

The FAQ is in a period of transition, moving to the wiki at
http://wiki.spamassassin.org/w/FrequentlyAskedQuestions - the specific
entry is http://wiki.spamassassin.org/w/DeletingAllMailsMarkedSpam
though it doesn't specifically answer your question, probably because
the general consensus is that deleting high scoring mail without
manually verifying it's actually spam is A Bad Idea.

Examples: filtering mail content sent to your abuse role account is
counterproductive. Also tagging mail from lists that discuss spam is not
wise.

> I'm running postfix and the spamc daemon. Is there a way to delete the 
> spam emails without using procmail? or is the best way to handle this is
> with a site-wide procmail?

You can do it several ways, either through procmail or with a site-wide
postfix mail filter (amavisd-new.) If you are going to do this, pick a
threshold guaranteed not to give false positives (analyze your mail
logs), warn your users (if any) that you're going to delete mail unread,
and make sure to discard or reject the mail, not bounce it. Also,
filtering role accounts is probably A Bad Idea. 

It's best to reject mail before the SMTP DATA phase to save on bandwidth
& other resources. You're probably better off tuning postfix to use
trustworthy DNSBLs (open relay, open proxy, zombie/unallocated network,
and dynamic allocation blocklists), to mandate RFC compliance (proper
HELO format), to require valid rDNS, and to require the HELO string
match an actual host. Some of these (rDNS, HELO checks) may cause false
positives but the failures will be temporary, giving you time to
whitelist broken-but-legitimate mail systems, provided you watch your
mail logs.

hth,

-- Bob


-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills.  Sign up for IBM's
Free Linux Tutorials.  Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to