Forgive my ambling pre-amble, but it's to pre-empt all the obvious questions! Firstly, just to say I have googled and forum-searched myself silly, as you'll see. So although it looks long, please bear with me.
For my own historical (but very good!) reasons, here's how I have my email setup: All 7 accounts of my personal and business email gets forwarded to gmail, which then filters it (incredibly effectively, found nothing better), and in certain rules, either forwards it to another account, or just labels it. The spam stays in spam. Being a cunning little devil, I always sign up for offers/sites/forums based on the following criteria: sitename_c...@mydomain.co.uk So let's say I signed up to thissite.com and my code was the alphabetical number or the last letter of the site, email would come to thissi...@mydomain.co.uk - but of course, would actually just arrive in the inbox as normal. (Bear with me here, I'm going somewhere with this!) What this means is that I have an incredibly effective way of proving which naughty sites or retailers have been selling on my email without permission - they can't say "random chance", and it's got me a few apologies and freebies in my time THE PROBLEM: I'm signed up to over 300 forums, shops, sites etc, so there's no way I could make an email address box for all of those "pseudoaddresses", as it were. So I can't turn the catchall off. Up until now, it's not been a problem as gmail almost never files a real mail as spam. However, with nearly 200 spams an hour, it's getting a bit crazy, and some false positives are getting lost in the noise. SO...time to turn the whitelist and verification on, and the Spamassassin/boxtrapper combo looked perfect for this. I want all messages (wherever they were originally sent to), which are marked as spam, to go to a mailbox on which boxtrapper is active. That part works a...@mydomain.com \ b...@mydomain.com > when *spam* goes to spamtrap...@mydomain.com c...@mydomain.com / Or to put it another way: http://www.nabble.com/file/p23483808/email_flowchart.png BUT it appears that only mail ADDRESSED to spamtrap...@mydomain.com is activating the "please confirm" message. I also tried the alternative of piping to a script. I found some help here: http://www.evolt.org/article/Incoming_Mail_and_PHP/18/27914/ but to be honest, I've not got the code skills to figure out how to change that "to" address then forward it on, in php. I then found a "user_prefs" file in /home/myaccount/.spamassassin/user_prefs I followed the documentation here: http://search.cpan.org/~jmason/Mail-SpamAssassin-3.2.5/lib/Mail/SpamAssassin/Conf.pm#BASIC_MESSAGE_TAGGING_OPTIONS >From this, I appended the following rule to the user_prefs file, so it now looks thus: required_score 5 rewrite_header TO spamt...@mydomain.com (I have also tried To and to) However, this "to" header is not being rewritten. This is driving me crazy - all I want to do is get box-trapper to act against ALL incoming mail, whoever addressed to, if it's been tagged as spam. I wrote the above to my host, who are using cPanel Version 11.24.4-RELEASE cPanel Build 35075 Theme x3 They replied: It looks like your server is using the new style Spam Assassin which does not allow for header re-writing. We can enable subject re-writing on a global scale, which has already been done. The subject lines for spam messages will be re-written to start with "***SPAM***" You might try setting a filter up that takes subjects marked as spam, and redirects to another e-mail account. Additionally, if you can write a traditional .filter file setup for mail filtering to rewrite the TO line (not SpamAssassin, but standard mail filters), then we can insert the file into your filters. Is the above what I want to do? And while I'm here, how come there's a large and rapidly growing binary file in /home/myaccount/.spamassassin/auto-whitelist which currently has 5mb of spammy addresses I've never emailed? I've been scratching my head over this for a while - help appreciated, but mainly on the first problem. Thanks, and apology for the length of this, but over the 1.5 months I've been battling this, I've built up quite some info! -- View this message in context: http://www.nabble.com/Boxtrapper-and-Spamassassin-Cpanel-11-strange-behaviour.-tp23483808p23483808.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.