I like the sound of option 1 for our organisation. Here is my thinking: 1. Have users create a new mail message and attach the "spam" message to it. Send the message with attachment to [EMAIL PROTECTED]
2.Use Procmail to make sure there is an attachment. If no attachment send received message to /dev/null and send new message back to sender advising them of actions taken/to take. 3. If there is an attachment detach it and put it in the /home/spam/mail directory. 4. Use cron job to sa-learn these messages. Issue(s): munpack is installed. I have had several attempts at modifying my /etc/procmailrc file to no avail. Can anyone offer me some advice on Procmail to detach all attachments from incoming e-mails to [EMAIL PROTECTED] into the /home/spam/mail directory TIA Mark