Forgive my ambling pre-amble, but it's to pre-empt all the obvious questions!
Firstly, just to say I have googled and forum-searched myself silly, as
you'll see. So although it looks long, please bear with me.

For my own historical (but very good!) reasons, here's how I have my email
setup:

All 7 accounts of my personal and business email gets forwarded to gmail,
which then filters it (incredibly effectively, found nothing better), and in
certain rules, either forwards it to another account, or just labels it.
The spam stays in spam.

Being a cunning little devil, I always sign up for offers/sites/forums based
on the following criteria: sitename_c...@mydomain.co.uk

So let's say I signed up to thissite.com and my code was the alphabetical
number or the last letter of the site, email would come to
thissi...@mydomain.co.uk - but of course, would actually just arrive in the
inbox as normal. (Bear with me here, I'm going somewhere with this!)

What this means is that I have an incredibly effective way of proving which
naughty sites or retailers have been selling on my email without permission
- they can't say "random chance", and it's got me a few apologies and
freebies in my time 

THE PROBLEM: I'm signed up to over 300 forums, shops, sites etc, so there's
no way I could make an email address box for all of those "pseudoaddresses",
as it were. So I can't turn the catchall off.

Up until now, it's not been a problem as gmail almost never files a real
mail as spam. However, with nearly 200 spams an hour, it's getting a bit
crazy, and some false positives are getting lost in the noise.

SO...time to turn the whitelist and verification on, and the
Spamassassin/boxtrapper combo looked perfect for this.

I want all messages (wherever they were originally sent to), which are
marked as spam, to go to a mailbox on which boxtrapper is active.

That part works

a...@mydomain.com \
b...@mydomain.com > when *spam* goes to spamtrap...@mydomain.com
c...@mydomain.com /

Or to put it another way: 

http://www.nabble.com/file/p23483808/email_flowchart.png 

BUT it appears that only mail ADDRESSED to spamtrap...@mydomain.com is
activating the "please confirm" message.

I also tried the alternative of piping to a script. I found some help here:
http://www.evolt.org/article/Incoming_Mail_and_PHP/18/27914/
but to be honest, I've not got the code skills to figure out how to change
that "to" address then forward it on, in php.

I then found a "user_prefs" file in /home/myaccount/.spamassassin/user_prefs

I followed the documentation here:
http://search.cpan.org/~jmason/Mail-SpamAssassin-3.2.5/lib/Mail/SpamAssassin/Conf.pm#BASIC_MESSAGE_TAGGING_OPTIONS

>From this, I appended the following rule to the user_prefs file, so it now
looks thus:

required_score 5
rewrite_header TO spamt...@mydomain.com
(I have also tried To and to)

However, this "to" header is not being rewritten. This is driving me crazy -
all I want to do is get box-trapper to act against ALL incoming mail,
whoever addressed to, if it's been tagged as spam.

I wrote the above to my host, who are using
cPanel Version  11.24.4-RELEASE
cPanel Build    35075
Theme   x3

They replied:

It looks like your server is using the new style Spam Assassin which does
not allow for header re-writing.
We can enable subject re-writing on a global scale, which has already been
done.
The subject lines for spam messages will be re-written to start with
"***SPAM***"
You might try setting a filter up that takes subjects marked as spam, and
redirects to another e-mail account.
Additionally, if you can write a traditional .filter file setup for mail
filtering to rewrite the TO line (not SpamAssassin, but standard mail
filters), then we can insert the file into your filters.

Is the above what I want to do? And while I'm here, how come there's a large
and rapidly growing binary file in
/home/myaccount/.spamassassin/auto-whitelist which currently has 5mb of
spammy addresses I've never emailed? I've been scratching my head over this
for a while - help appreciated, but mainly on the first problem.

Thanks, and apology for the length of this, but over the 1.5 months I've
been battling this, I've built up quite some info!
-- 
View this message in context: 
http://www.nabble.com/Boxtrapper-and-Spamassassin-Cpanel-11-strange-behaviour.-tp23483808p23483808.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Reply via email to