---------- Forwarded message ---------- From: Mark Williams <[EMAIL PROTECTED]> Date: Jul 29, 2005 1:58 PM Subject: Re: Relearning/routing spam/ham with Outlook client To: Herb Martin <[EMAIL PROTECTED]>
Thanks for that Herb.... appreciate the perl script, but am definately looking for Procmail solution... Can anyone else help? TIA On 7/29/05, Herb Martin <[EMAIL PROTECTED]> wrote: > > -----Original Message----- > > From: Mark Williams [mailto:[EMAIL PROTECTED] > > Sent: Friday, July 29, 2005 5:34 AM > > To: Loren Wilton > > Cc: users@spamassassin.apache.org > > Subject: Re: Relearning/routing spam/ham with Outlook client > > > > I like the sound of option 1 for our organisation. Here is my > > thinking: > > > > 1. Have users create a new mail message and attach the "spam" > > message to it. Send the message with attachment to > > [EMAIL PROTECTED] > > It is easier to teach users to wait for at least TWO messages; > multiple selection pressing Ctrl-F acts differently than when > viewing a single message or selected on only one if the browse > pain. > > I use z_Spam to get it sorted away from "real users" -- some > of my command line tools on the server take advantage of that > pattern to check these "special users or directories." > > Also watch out that the Spam (and Ham) accounts receive only > from authenticated users but do NOT filter out any email otherwise. > > (You don't want spammers sending to ham or spam, and you don't > want to hit any filters on those accounts -- many times I will > have improved the filters before the user actually sends the > email back so bouncing it to them is rude.) > > > 2.Use Procmail to make sure there is an attachment. If no > > attachment send received message to /dev/null and send new > > message back to sender advising them of actions taken/to take. > > message/rfc822 attachments to be precise since a regular > message frequently has ordinary attachments (and might even > have these as well.) > > I also tell my uses to use a SPECIAL subject OR leave it blank. > The subject line plus the message/rfc822 seems reliable enough > for this purpose -- and they like leaving it blank. > > > 3. If there is an attachment detach it and put it in the > > /home/spam/mail directory. > > If they select multiple messages when sending there may be > MANY attachments -- which is easy to deal with also. > > > 4. Use cron job to sa-learn these messages. > > I just learn them while detaching them but any way that > works for you. > > > Issue(s): > > > > munpack is installed. I have had several attempts at > > modifying my /etc/procmailrc file to no avail. Can anyone > > offer me some advice on Procmail to detach all attachments > > from incoming e-mails to [EMAIL PROTECTED] into the > > /home/spam/mail directory > > > Not a procmail guy. Sorry. > > I use a perl script for that. > > There are better, but these few lines will do the job: > > #!/usr/bin/perl -w > use MIME::Parser; > my $parser = new MIME::Parser; # Create parser > $parser->output_dir("./tmp"); # Tell it where to output > $parser->extract_nested_messages(0); # Extract messages whole? > $entity = $parser->parse(\*STDIN); # Parse an input filehandle > > -- > Herb Martin > > -- T's Mark -- T's Mark