I have a client office that strangely uses only one POP3 email account for all 10 people in the office. They all share just one account. They are recieving a huge amount of spam and want an opinion on how to control this problem that is growing everyday. They use Outlook Express. They best approach that I can think of is cutting the SPAM out from the distribution point which is the POP3 account from the company that is hosting the email. Any thoughts?

Yikes

I would also recommend having the hosting company filter for SPAM. But, have it placed in a spam folder that is accessable via webmail so that way mail that has a false positive can be retrieved.

Good point.

Why not retrieve the mail from the POP3 account using fetchmail, pipe it through spamassassin, and deliver it to a Maildir locally on that machine. then the users can retrieve from that machine after the mail has been filtered.

This is a 100% percent windows shop. I have never used fetchmail. Is fetchmail a MTA or is it a full blow e-mail server app? Would it be a big pain to add a sendmail or postfix into this type of setup and then have spam assassin do its magic? Please elaborate. It there a Fetchmail and SPAM ASSASSIN for windows? If not then I will just build a linux box and configure it as there mini mail server. Also can you show me a mini-how to perform this using a linux fetchmail machine and windows clients. I would imagine that I would need a IMAP service to give the windows client MTA access to the e-mail. thanks

ok I found this post:

http://www.linuxquestions.org/questi...utlook+express

so what I need is:

1 - Fetchmail configured to download the POP3 mail for the single mail account.

2 - Have the e-mail being downloaded sent to SPAMASSASSIN to be filtered.

3 - Dovecot - configured to point to the directory where the filtered e-mail has been downloaded too.

4 - Configure the MTA or Outlook Express/Mozilla Thunderbird to use the IMAP protocol and point to Dovecot server for e-mail retrieval.

I need a simple how if this is correct. Acid_kewpie I know you out there. Bail me out like you always have. thanks

If it is an "opinion" they want;

1: Do not share an account.
2: Have the provider enable some sort of filtering mechanism for them.
3. If the provider cannot do this for them, outsource this responsibility (email is NOT something you want hanging over your head, especially if you are only consulting)


Of course farslayer's idea is good and valid if you have the time and effort.

This is imho.