Filtering SPAM

arjuns8471 · 02-22-2008, 02:28 AM

Hi,

I am using RHEL v5.0 on our Linux Mailserver, with Spamassassin, MailScanner, Clamav & Postfix as the MTA.

The High Scoring Spams are not getting filtered to the defined EmailID (Spam@mydomain.com), instead it is getting delivered to the respective users.

I have set the following rule in the Mailscanner.conf file
Spam Actions = store forward spam@mydomain.com header "X-Spam-Status: Yes" AND

High Scoring Spam Actions = store forward spam@mydomain.com header "X-Spam-Status: Yes"

But the spam mails are not getting forwarded to the spam ID.

Any suggestions.

Thanks,
Arjun

bigrigdriver · 02-22-2008, 03:31 AM

I don't know anything about Mailscanner, so I went to freshmeat and found this:

Quote:

About:
MailScanner is an email virus scanner, vulnerability protector, and spam tagger. It supports the Postfix, Sendmail, Exim, Qmail, and ZMailer MTAs, and the Sophos, McAfee, F-Prot, F-Secure, CommandAV, InoculateIT, Inoculan, eTrust, Kaspersky, Nod32, AntiVir, BitDefender, RAV, Panda, DrWeb, ClamAV, and other anti-virus scanners. It uses SpamAssassin for highly successful spam identification, and is designed to handle denial of service attacks. It will detect password-protected zip files and apply filename checking to their contents. It is very easy to install, requires no changes at all to your sendmail.cf file, is designed to be lightweight, and won't grind your mail system to a halt with its load. It can be integrated into any email system, regardless of

That is enough to tell me that it won't sort or forward mail. That is not it's job. Sorting and forwarding is the job of the MTA (mail transfer agent).

For that, I use procmail. All mail tagged as spam goes into a spam folder. All other mail goes into folders named for the sender, or to the inbox if no rule has been set up. In a network, it would forward mail to the recipient.

If have this in my ~/.procmailrc to send spam to a spam folder:

Code:

# scores > 5 - send to spam folder
 :0:
  * ^X-Spam-Status: Yes
  $HOME/Mail/SPAM

I repeat, I don't know much about Mailscanner. But, the description I found at freshmeat doesn't say anything about sorting and forwarding mail; just scanning and tagging. Perhaps there is something in the Mailscanner documentation that says it's supposed to also sort and forward, but I haven't seen it.

arjuns8471 · 02-22-2008, 04:34 AM

Thanks for the quick response..!
But MailScanner does this filtering of Spam...check the below link...
http://www.mailscanner.info/MailScanner.conf.index.html

bigrigdriver · 02-22-2008, 12:59 PM

Your config:

Quote:

High Scoring Spam Actions = store forward spam@mydomain.com header "X-Spam-Status: Yes"

Mailscanner documentation in re Spam Actions:

Quote:

forward user@domain.com - forward a copy of the message to user@domain.com

That's why the spam still gets delivered.

Stated more clearly, user@domain.com gets a copy of the spam, not the original. The addressee stile gets the spam. It may be a side-effect of using the forward parametet that overides the store parameter.

Try using store or store-spam without the forward parameter to see what happens (assuming you have the spam quarantine set up).

Relevant documentation: http://www.mailscanner.info/MailScan...ndex.html#Spam Actions

arjuns8471 · 02-26-2008, 12:06 AM

Hi,

I have tried
Spam Actions = store spam@mydomain.com header "X-Spam-Status: Yes"

+

High Scoring Spam Actions = store spam@mydomain header "X-Spam-Status: Yes"

in the MailScanner.conf file...but still doesn't work. The high scoring spam are still getting delivered to the users...any other solutions?

Thanks..