Thanks so much for the detailed HowTo Doug.  Very much appreciated.  I do 
have a couple of clarification questions, if you don't mind...

> Leave everything in testmode.  Don't prefix the subject with [SPAM].  Do
> turn on all connection tests but have them score only.  In your mta have a
> system wide rule that looks for a header line that includes:
> X-Assp-Spam-Reason:
> but does not include:
> X-Assp-Spam-Reason: Bayesian spam
> and route those emails to the users individual spamboxes or a central 
> spambox you control as those are most certainly spam.  The users will 
> still receive their Bayesian spam but will see a nice drop in total 
> received spam.

For starters, how do I set all connections test to scoring only?  Is that 
the PB setting (Penalize Bad Ip's: 3 - score only)?  I assume I leave the 
log settings to the defaults in this case (ie: store blacklisted domains: 3, 
spam helos: 3, etc..)

By following your procedure, I would be centrally collecting all messages 
that fail Spam tests other than Bayesian - correct?  ie: RBL tests, SpamBomb 
tests, PB tests, etc...  So for all valid email that fails those tests, the 
sender won't be notified that it wasn't accepted, and the user won't have 
received it because it would be in a central area.  Is that correct?

> Then occasionally search for text in files in your spam folder for your 
> company name, street address and such.  Also scan your notspam folder for 
> text in files with known spam words and sex words.

What do I do with legit emails at this point?  Just delete them?  The user 
won't have received their email though....  And what becomes the point of 
centrally collecting them using the MTA's rule?  Or do I have to go through 
each of them and forward the valid ones?

> BTW, delaying makes a huge difference right off the bat.  It also will 
> almost completely eliminate the virus laden emails, almost.

Oh - I am certain of that, which is why I'm extremely eager to get this up 
and running, but don't want to make a mistake while building the db, and get 
lynched for dropping valid emails.


Thanks again!

Eric 




-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user

Reply via email to