On Thu, 14 Nov 2002, Richard Menedetter wrote:

> Steve haven't you activated the auto-whitelist feature ??
> I think it is a great one ...

  I was already using procmail before spamassasin, and still 
do.  I use procmail as a sort of "whitelist."
 
  First, a user .procmailrc sends some of the most obvious 
spams straight to /dev/null... stuff from korea and china, 
and addresses I invented for single purpose which are now 
in the hands of the spammers, for instance. 
  
  Then comes some delivery of certain addresses at my 
domains to certain users locally, then the mail goes through 
spamassassin, and is then sorted to folders based on 
mailinglists.

  Spamassassin used to be last, but too much spam was 
getting through, so I moved it up in front of the "procmail 
sorting" functions.  This was the first time since I 
installed spamassassin that an arachne mail ended up in 
"spamfolder."
  Then if a mail gets through spamassassin, it goes through 
the system-wide procmail filters.

  Which takes precedence is controlled by its position in 
the .procmailrc file, so you can do a lot of fine tuning 
just by moving things around. 

  Anyway, only 1-2% of mail in my INBOX is spam, and much 
less than 1% of mail that ends up in the spamfolder is real 
mail.  Much goes straight to /dev/null without me ever being 
aware of it.

> PS: eric even if the mail would have been sent from yahoo ... why mail
> WEBmaster ?? instead of POSTmaster ??
> PPS: naturally 99.99999999% of all SPAM has a forged From: header !

  Which is why it's a good idea to learn how to read mail 
headers, and how to turn those IP addresses into domain 
names.  Unfortunately, whois.arin.net has made changes that 
break what used to be my favorite tool, ipw.
  Now I have to type "whois [EMAIL PROTECTED]" 
each time "host xxx.xx.xxx.x" doesn't return anything.
 
  Any of you C wizards like to take a look at it and see 
if you can fix it?  It's still the same place it always was,
http://wizard.dyndns.org/ipw.tar.gz

-- 
Steve Ackman
http://twoloonscoffee.com       (Need green beans?)
http://twovoyagers.com          (glass, linux & other stuff)

Reply via email to