On Sat, 10 Apr 2010, Dennis B. Hopp wrote:
What are people using for quarantine management with spamassassin?
We use an homegrown arrangement. I've forgotten the details since it's
running without problems since ages, but in the nutshell we have this:
- spam is quarantined system-wide (not by user) in a daily folder
(actually two, one on each MX)
- a crontab rotates the quarantine folder. We keep one week of old
folders.
- the same crontab sends a report to each user which has received some
spam. A complex awk arrangement which also expand mail aliases so it
signals also spam sent to internal mailing lists.
The list is essentially in a form of lists of from/to/subject.
So each user receives 2 to 2n reports (2 one per MX, 2n if there
was also spam for n-1 mailing lists he is member of).
The user can look at the report and ask for occasional false positives
to the sys adm. We get, I guess, only a few of them per month for all
our users. See note (*)
- the same crontab prepares material for statistics (run later by another
crontab of mine)
- another crontab (on both MX), using the result of the previous one
stored on a shared disk, runs sa-learn, so that both servers learn
the same spam.
The same crontab also learns additional spam stored by willing users,
and exceptionally some ham (false positives retrieved from quarantine
by the sys adm)
(*) I tend to trust what spamassassin does, and not look at the reports.
Instead I have some personal procmail script which take all the
reports sent to me in one day, and makes a super-summary ... if
there is a message repeated with the same subject for instance it
is definitely spam, so the super-summary just says "n messages".
If it is alone, it is listed.
I do keep the reports in a folder for a week, and I have also
additional procmail-based personal spam filtering.
--
------------------------------------------------------------------------
Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy)
------------------------------------------------------------------------
Citizens entrusted of public functions have the duty to accomplish them
with discipline and honour
[Art. 54 Constitution of the Italian Republic]
------------------------------------------------------------------------
For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html
------------------------------------------------------------------------
