Re: [SLUG] Setting up a spam email

2008-02-18 Thread Alex Samad
On Tue, Feb 19, 2008 at 10:13:10AM +1100, Alex Samad wrote:
> On Tue, Feb 12, 2008 at 09:40:16AM +0900, jam wrote:
> > On Tuesday 12 February 2008 08:07:39 [EMAIL PROTECTED] wrote:
> > > > On Monday 11 February 2008 05:34:05 [EMAIL PROTECTED] wrote:
> > > > > I want to set up an email address where for my domain, were users can
> > > > > send spam emails to and they will be added to the spam DB.
> [snip]
> 
> > u it very simple, not convoluted at all:
> > 
> > Mail to [EMAIL PROTECTED] gets vetted
> > 
> > It is delivered, sent to maybe or sent to amspam
> > 
> > every user can accept their mail, or (mailer dependant eg kmail == button) 
> > bounce the mail to user amspam. They can even troll, usually via webmail, 
> 
> Not sure if we are talking about the same thing (might be but I am not 
> getting 
> it).
> 
> I run exim on my server to handle my mail domain
> 
> I use the linkage between exim and spamassassin to identify spam at USER & 
> DATA 
> steps of the smtp connection. This spamassassin runs as spamassassin 
> 
> Then when an email say [EMAIL PROTECTED] comes in for me. exim delivers it 
> via 
> procmail which run spamassassin again but with my DB instead of the system 
> wide 
> one. I have folder setup
> .Ham - a cron job checks in her for email that should be not marked as 
> spam
> 
> .MarkedSpam - this is where the automatically marked spam mail ends up
> 
> .Spam - this is where I place the spam that did not got automatically marked 
> as 
> spam, again a cron job looks at this.
> 
> 
> I would like to be able to take mail from  [EMAIL PROTECTED] (presume it did 
> not get 
> auto marked as spam) and not only add its information to my spamassassin db 
> but 
> to add it to the system wide DB.  I thought about have an email address that 
> I 
> could bounce (mutt bounce) messages to.  But the email will look like it came 
> from me (i think) and thus taint the system wide DB
> 
> I believe what you have described is what I am doing currently, but not what 
> I 
> am trying to extend to - updating the system wide DB

did another google and found this 
http://www.stearns.org/doc/spamassassin-setup.current.html#sitewide
which shows how to strip of the headers which was the key

> 
> > maybe. Any real mail found in maybe is bounced to amnot.
> > 
> > In my specific case mail from [EMAIL PROTECTED] was tagged as spam so 303 
> > was 
> > whitelisted.
> > 
> > If you are not running your mail server, surely your upstream provider does 
> > the dirty work?
> [snip]
> 
> > hmmm seems to work :-)
> > James
> > -- 
> > SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> > Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
> > 
> 
> -- 
> God helps them that help themselves.
>   -- Benjamin Franklin, "Poor Richard's Almanac"



> -- 
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

-- 
"So thank you for reminding me about the importance of being a good mom and a 
great volunteer as well."

- George W. Bush
01/05/2004
St. Louis, MO


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Setting up a spam email

2008-02-18 Thread Alex Samad
On Tue, Feb 12, 2008 at 09:40:16AM +0900, jam wrote:
> On Tuesday 12 February 2008 08:07:39 [EMAIL PROTECTED] wrote:
> > > On Monday 11 February 2008 05:34:05 [EMAIL PROTECTED] wrote:
> > > > I want to set up an email address where for my domain, were users can
> > > > send spam emails to and they will be added to the spam DB.
[snip]

> u it very simple, not convoluted at all:
> 
> Mail to [EMAIL PROTECTED] gets vetted
> 
> It is delivered, sent to maybe or sent to amspam
> 
> every user can accept their mail, or (mailer dependant eg kmail == button) 
> bounce the mail to user amspam. They can even troll, usually via webmail, 

Not sure if we are talking about the same thing (might be but I am not getting 
it).

I run exim on my server to handle my mail domain

I use the linkage between exim and spamassassin to identify spam at USER & DATA 
steps of the smtp connection. This spamassassin runs as spamassassin 

Then when an email say [EMAIL PROTECTED] comes in for me. exim delivers it via 
procmail which run spamassassin again but with my DB instead of the system wide 
one. I have folder setup
.Ham - a cron job checks in her for email that should be not marked as 
spam

.MarkedSpam - this is where the automatically marked spam mail ends up

.Spam - this is where I place the spam that did not got automatically marked as 
spam, again a cron job looks at this.


I would like to be able to take mail from  [EMAIL PROTECTED] (presume it did 
not get 
auto marked as spam) and not only add its information to my spamassassin db but 
to add it to the system wide DB.  I thought about have an email address that I 
could bounce (mutt bounce) messages to.  But the email will look like it came 
from me (i think) and thus taint the system wide DB

I believe what you have described is what I am doing currently, but not what I 
am trying to extend to - updating the system wide DB

> maybe. Any real mail found in maybe is bounced to amnot.
> 
> In my specific case mail from [EMAIL PROTECTED] was tagged as spam so 303 was 
> whitelisted.
> 
> If you are not running your mail server, surely your upstream provider does 
> the dirty work?
[snip]

> hmmm seems to work :-)
> James
> -- 
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
> 

-- 
God helps them that help themselves.
-- Benjamin Franklin, "Poor Richard's Almanac"


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Setting up a spam email

2008-02-18 Thread jam
On Tuesday 12 February 2008 08:07:39 [EMAIL PROTECTED] wrote:
> > On Monday 11 February 2008 05:34:05 [EMAIL PROTECTED] wrote:
> > > I want to set up an email address where for my domain, were users can
> > > send spam emails to and they will be added to the spam DB.
> > >
> > > I use debian, exim and spamassassin. All my spam processing gets done
> > > as user spamassassin, so I thought I could just process all mails sent
> > > to spamassassin as spam with a procmail rule like
> > >
> > > #
> > > # Record it as spam
> > >
> > > :0 fw
> > > :
> > > | /usr/bin/sa-learn --spam
> > >
> > > but then I realised how do I get it to ignore the senders address
> > > (because it will be one of my addresses and I don't when then
> > > blacklisted ?)
> > >
> > >
> > > how do other people setup site wide spam addresses
> >
> > You really need to R.M  there is much about this topic ...
>
> Maybe I am reading it wrongly but I think I do this already for a user
> specific spamassassion DB
>
> I wanted to have a spamassassin DB setup for the entire domain, that is
> used by exim at time of delivery, currently exim calls spamassassin as
> userid spamassassin. I don't want to give this account rights to all the
> maildirs. I would like for user a b & c to be able to forward mail to an
> email address (not a location because they might not have file access). I
> want this mail address to take the mail as spam and then processes into the
> userid spamassassin's spamassassin DB
>
> > I run 3 accounts (not) called
> >
> > amspam
> > amnot
> > maybe
>
> I am presuming this is are not different email;s and by bouncing you are
> not talking about using smtp to move between accounts
>
> > All spam that is received is *bounced* to amspam
> >
> > Everything tagged as spam gets sent to maybe
> > Not Spam in maybe gets bounced to amnot
> >
> > cron.daily runs a 'bayesian' task to learn amspam and amnot
> > Bouncing is different for each mail client. See
> >
> > http://wiki.apache.org/spamassassin/BayesInSpamAssassin?highlight=%28baye
> >sian%29

u it very simple, not convoluted at all:

Mail to [EMAIL PROTECTED] gets vetted

It is delivered, sent to maybe or sent to amspam

every user can accept their mail, or (mailer dependant eg kmail == button) 
bounce the mail to user amspam. They can even troll, usually via webmail, 
maybe. Any real mail found in maybe is bounced to amnot.

In my specific case mail from [EMAIL PROTECTED] was tagged as spam so 303 was 
whitelisted.

If you are not running your mail server, surely your upstream provider does 
the dirty work?

A quick browse of maybe shows:
Johnnie Dominguez 8:01 am   +   BenitoMacroErectileorgan
Benae Maor  7:24 am +   Amaze the girls with your powerful tool.
margo linder6:37 am +   Your tool deserves some sharpening.
Eddie Ratliff   5:17 am +   King-sizedPhallusErika
cibyl Quail 4:05 am +   Your instrument will bring great joy to 
ladies.
Jennifer P. 2:20 am +   I apologize for contacting you right now
RESPeRATE   12:06 am+   Join the RESPeRATE Club
Best of SparkPeople Mon, 9:44 pm+   A healthy diet for your children
Jiri TozziJrMon, 8:30 pm+   You and your partner will have many 
magical 
moments wi...
Australian Lottery  Mon, 8:14 pm+   Your Lucky Day
Debra Woolgar   Mon, 7:11 pm+   FW: CAKE OR BED - Love This!!
Amanda Schutte  Mon, 6:41 pm+   Nexus - Cockburn Central - Coming Soon
SparkPeople Recipe of the Day   Mon, 6:08 pm+   Sweet and moist 
Applesauce 
Carrot Cake
Clifton weise   Mon, 5:59 pm+   Jessica loves riding me now that my 
longer 
pen1s can p...
SparkPeople's Healthy Reflections   Mon, 5:17 pm+   Struggling to 
find your 
voice
Randolph Hopenhayn  Mon, 2:22 pm+   Click here for Guaranteed 
Growth.
prisca omar Mon, 12:47 pm   +   Dearest One,
aras Chepil Mon, 11:05 am   +   Discover a new method of enlarging your 
p3nis 
never se...
Lonely Wives Dating Network Mon, 7:52 am+   Married women looking 
to meet 
new people - sexually ...
Porfirio Benson Mon, 7:23 am+   Save on Top Designer Brands 
Shoes Uggs Gucci 
Chanel Pr   ...ahed Maydew  Mon, 7:09 am+   Being normal is not 
good enough, 
you need a bigger ...
Reggie Mcelroy  Mon, 6:24 am+   60% Off All Luxury Designer Shoes & 
Boots Men 
& Women ...

hmmm seems to work :-)
James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Setting up a spam email

2008-02-10 Thread Alex Samad
On Mon, Feb 11, 2008 at 10:33:17AM +0900, jam wrote:
> On Monday 11 February 2008 05:34:05 [EMAIL PROTECTED] wrote:
> > I want to set up an email address where for my domain, were users can send
> > spam emails to and they will be added to the spam DB.
> >
> > I use debian, exim and spamassassin. All my spam processing gets done as
> > user spamassassin, so I thought I could just process all mails sent to
> > spamassassin as spam with a procmail rule like
> >
> > #
> > # Record it as spam
> >
> > :0 fw
> > :
> > | /usr/bin/sa-learn --spam
> >
> > but then I realised how do I get it to ignore the senders address (because
> > it will be one of my addresses and I don't when then blacklisted ?)
> >
> >
> > how do other people setup site wide spam addresses
> 
> 
> You really need to R.M  there is much about this topic ...
Maybe I am reading it wrongly but I think I do this already for a user specific 
spamassassion DB

I wanted to have a spamassassin DB setup for the entire domain, that is used by 
exim at time of delivery, currently exim calls spamassassin as userid 
spamassassin. I don't want to give this account rights to all the maildirs. I 
would like for user a b & c to be able to forward mail to an email address (not 
a location because they might not have file access). I want this mail address 
to take the mail as spam and then processes into the userid spamassassin's 
spamassassin DB

> 
> I run 3 accounts (not) called
> 
> amspam
> amnot
> maybe
I am presuming this is are not different email;s and by bouncing you are not 
talking about using smtp to move between accounts

> 
> All spam that is received is *bounced* to amspam
> 
> Everything tagged as spam gets sent to maybe
> Not Spam in maybe gets bounced to amnot
> 
> cron.daily runs a 'bayesian' task to learn amspam and amnot
> Bouncing is different for each mail client. See
> 
> http://wiki.apache.org/spamassassin/BayesInSpamAssassin?highlight=%28bayesian%29
> 
> James
> -- 
> SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
> Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html
> 

-- 
BOFH excuse #227:

Fatal error right in front of screen


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Setting up a spam email

2008-02-10 Thread jam
On Monday 11 February 2008 05:34:05 [EMAIL PROTECTED] wrote:
> I want to set up an email address where for my domain, were users can send
> spam emails to and they will be added to the spam DB.
>
> I use debian, exim and spamassassin. All my spam processing gets done as
> user spamassassin, so I thought I could just process all mails sent to
> spamassassin as spam with a procmail rule like
>
> #
> # Record it as spam
>
> :0 fw
> :
> | /usr/bin/sa-learn --spam
>
> but then I realised how do I get it to ignore the senders address (because
> it will be one of my addresses and I don't when then blacklisted ?)
>
>
> how do other people setup site wide spam addresses


You really need to R.M  there is much about this topic ...

I run 3 accounts (not) called

amspam
amnot
maybe

All spam that is received is *bounced* to amspam

Everything tagged as spam gets sent to maybe
Not Spam in maybe gets bounced to amnot

cron.daily runs a 'bayesian' task to learn amspam and amnot
Bouncing is different for each mail client. See

http://wiki.apache.org/spamassassin/BayesInSpamAssassin?highlight=%28bayesian%29

James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


[SLUG] Setting up a spam email

2008-02-09 Thread Alex Samad
Hi

I want to set up an email address where for my domain, were users can send spam 
emails to and they will be added to the spam DB.

I use debian, exim and spamassassin. All my spam processing gets done as user 
spamassassin, so I thought I could just process all mails sent to spamassassin 
as spam with a procmail rule like

#
# Record it as spam
:0 fw
| /usr/bin/sa-learn --spam


but then I realised how do I get it to ignore the senders address (because it 
will be one of my addresses and I don't when then blacklisted ?)


how do other people setup site wide spam addresses

Alex

 -- "I also understand how tender the free enterprise system can be."

- George W. Bush
07/08/2002
White House press conference, Washington, D.C.


signature.asc
Description: Digital signature
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html