On Thu, 2004-03-25 at 12:30, Kiko Piris wrote:
> On 25/03/2004 at 12:06, Marc Swanson wrote:
> 
> > My solution was to create a separate mail user, lets say spam_user, with
> > two mail aliases:  is_spam and not_spam.  After setting this up, I
> > instructed the users to forward any spam messages they receive to the
> > address [EMAIL PROTECTED] and any incorrectly flagged spam
> > messages or sets of non-spam messages to [EMAIL PROTECTED] .
> 
> AFAICS, it would be better to upload both the false positives and the
> false negatives to this mailboxes with, for example, imap instead of
> simply forwarding the messages.


The problem there is that some of the users retrieve their email via
POP.

> Mail clients, normally remove smtp headers when forwarding messages. And
> it's better if the mail is passed to sa-learn with both body and
> original headers.

this is true on some of the headers, but at least on thier mail servers
a large portion of the headers remain intact, including the "Received"
lines.


> Another solution would be to "bounce" the message to that other
> mailboxes (not all mail clients support bouncing messages, and most of
> them add some headers that are better not feeded to sa-learn).

None of the programs they use seem to support such a feature.  Sounds
very similar to a forward, just leaves headers intact?  Never heard of
it.

> 
> I think that uploading messages with imap it's the best solution (many
> mail clients can do that).

but then everyone would have to have the password for the spam assassin
mail account, AND be running imap (many of them use POP).

> 
> Another advantage is that this way, smtp server refuses mail to this
> mailboxes and only the owner can upload messages there because only he
> knows the imap password.

that adds inconvienience.. and the system would not be used.  It has to
be very easy for them or they aren't interested.


> However, it has the inconvenient that you can not use the same mailbox
> to both sa-learn false positives and false negatives.
> 
> I've set up something like this in my company and, given the really low
> rate of false positives, I've decided to process them manually (haven't
> seen a single one yet).

I've only seen one so far, and it was vaugely spam.. an email from my
credit card company after signing up for online account management.

Best Regards

-- 
-----------------------------
Marc Swanson
MSwanson Consulting

Email:  [EMAIL PROTECTED]
Phone:  (603)512-1267
Fax:    (603)868-1730

http://www.mswanson.com

Reply via email to