From: Kang, Joseph S. [mailto:[EMAIL PROTECTED] > > At this point, I've made scanning of messages for my users to be > entirely opt-in. All mail users (about 30 total) have local server > accounts but the messages get sent on to an internal MS Exchange > server via .forward files. So, those users who do opt to have > their messages scanned by SA get a "canned" .procmailrc that I've > created placed into their homedirs. > > So, now I want to move to a configuration where I could > surreptitiously scan ALL incoming messages and, via > /etc/procmailrc, dump those that score above a certain threshold > before handing off to the user's .procmailrc. > > What I'm worried about is that by doing this I will hit the > condition where messages get scanned twice. > > And, I'd like to avoid having to require any user intervention > (editing their .procmailrc files) to make this happen. Most of my > users' .procmailrc files are under my control. A few users, > including myself, are more advanced.
I would suggest that you scan and tag all incoming messages. Don't make any subject or body changes, just let SA add the headers. Then your global procmailrc can drop the high-scoring spam and your users .procmailrc can use the same headers for further processing if they want to sort out the spam or drop more of it. This way the headers are always there and the users can either take advantage of the spam scan or ignore the headers. Bowie