Whitelisting and SA, Bayes issues.

Hopefully I'm doing some thing wrong here, but I'm stuck.

Question: Why, if an from address is whitelisted, does it still go through
SA?

Issue: I (root <at> x) sends email daily, summarizing quarantined messages to my
users, thus I white list root.

Problem:  These messages are being auto learned as "not spam".  The messages
include the subject line, etc.  thus messing with my bayes database
slightly. 

TIA Michael...

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Daily Spam report

On 30/09/06, Cornelius Koelbel <cornelius.koelbel <at> gmx.de> wrote:
> Hi there,
>
> is it possible, to send a daily spam report to the user?
> It is easier for my to check false positives in a list, than with every
> mail.
>
> Besides this is a top feature for enterprise usage.
> Deliver no Spams, but keep them quarantined.
> Get a daily spam report and release a spam mail on user request.
>
> Kind regards
> Cornelius

To my knowledge you have two options:
1) MailWatch (version 1.x) has a quarantine report script that will do
something like this. Check http://mailwatch.sf.net or the related
software in the MailScanner wiki.
2) Fortress systems have a script that will do this (I think). Check
http://www.fsl.com/support/

Having said that, I don't use either... (But there seem to be several
who do So I can't really vouch for how well they work.

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
--

-- 
MailScanner mailing list

Re: Whitelisting and SA, Bayes issues.

On 01/10/06, Michael R. Dilworth (E-mail) <michael <at> dilworth.net> wrote:
> Hopefully I'm doing some thing wrong here, but I'm stuck.
>
> Question: Why, if an from address is whitelisted, does it still go through
> SA?
>
> Issue: I (root <at> x) sends email daily, summarizing quarantined messages to my
> users, thus I white list root.
>
> Problem:  These messages are being auto learned as "not spam".  The messages
> include the subject line, etc.  thus messing with my bayes database
> slightly.
>
> TIA Michael...
>
>
How do you whitelist it? Through a ruleset on what/which settings?
If done right, SA shouldn't be invoked on whitelisted mails.

-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

MailScanner ANNOUNCE: Stable version 4.56 released

Hi folks!

A new stable release for you. New things this time include:

-- control of reports sent to senders of "too large" messages,
-- Postfix 2.3 support,
-- fine control of maximum size of message section sent to SpamAssassin,
-- significant improvement to reliability of tnef extraction utility,
-- new location for web bug replacement to alleviate server load.

Available from www.mailscanner.info

The full Change Log is this:

* New Features and Improvements *
1 Added a complete new set of configuration settings to report on
  messages and attachments that are outside the size limits set in
  MailScanner.conf. These are:
  Sender Size Report
  Stored Size Message Report
  Deleted Size Message Report
  Size Modify Subject
  Size Subject Text
  These are used in exactly the same way as the other sets of options
  that tag and modify the message for other reasons.
3 Improved report of "message too large" case.
3 Updated Catalan language files courtesy of Jordi Sanfeliu.
3 Increased default max SpamAssassin message size to catch more single-image
  spam messages.

Re: Daily Spam report

Hi Glenn,

thanks for your reply. So I see that Mailscanner does not support this
by itself.
I saw mailwatch, but did not like to use mysql and php, which is needed
by mailwatch.
So I will look around at fortress systems or start my mysqld :(

Kind regards
Cornelius

Glenn Steen schrieb:
> On 30/09/06, Cornelius Koelbel <cornelius.koelbel <at> gmx.de> wrote:
>> Hi there,
>>
>> is it possible, to send a daily spam report to the user?
>> It is easier for my to check false positives in a list, than with every
>> mail.
>>
>> Besides this is a top feature for enterprise usage.
>> Deliver no Spams, but keep them quarantined.
>> Get a daily spam report and release a spam mail on user request.
>>
>> Kind regards
>> Cornelius
> 
> To my knowledge you have two options:
> 1) MailWatch (version 1.x) has a quarantine report script that will do
> something like this. Check http://mailwatch.sf.net or the related
> software in the MailScanner wiki.

Custom Header

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Daily Spam report

On 01/10/06, Cornelius Koelbel <cornelius.koelbel <at> gmx.de> wrote:
> Hi Glenn,
>
> thanks for your reply. So I see that Mailscanner does not support this
> by itself.
No, that is true.... Then again, there are a lot of things that
MailScanner doesn't do *by itself*.

> I saw mailwatch, but did not like to use mysql and php, which is needed
> by mailwatch.
Ok. You lose out on a pretty impressive tool, but that is entirely
your prerogative

> So I will look around at fortress systems or start my mysqld :(
You needn't look that far... It is the QuarantineReport script (a
tarball linked as the final link in the first section
(MailScanner...)). This excerpt is from the INSTALL file:
------
uarantineReport is:
--------------------------------------------
QuarantineReport is a small application that's intended to:

* Create a daily report for each user who has messages in MailScanner
  quarantine
* Create a web link to view the message in Quarantine
* Provide a link to allow the user to release the message in Quarantine
* Email the report to the user

The report will contain this information for each message in Quarantine:

	From: address_of_sender
	Subject: subject_of message
	Link_to_View
	Link_to_Release

The application can aslo verify that recipient is a valid user by checking
a file or performing an LDAP search.
-----

If you run Sendmail or Exim, this seems to be viable for what you want
to do. If not (Postfix, Zmail, Qmail...) you'll probably need go with
MailWatch, or... hack it up to fit your MTA.

Cheers
-- 
-- Glenn
email: glenn < dot > steen < at > gmail < dot > com
work: glenn < dot > steen < at > ap1 < dot > se
--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Wikipedia

Could someone update the Wikipedia entry for MailScanner please? It's 
currently a short "stub" entry, which could do with expanding to include 
a list of features, and pointers to the various support channels available.

Please can some do this for me?

Thanks folks!

Jules

--

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules <at> Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk

Re: Daily Spam report

 > > On 30/09/06, Cornelius Koelbel <cornelius.koelbel <at> gmx.de> wrote:
 >> >> Hi there,
 >> >>
 >> >> is it possible, to send a daily spam report to the user?
 >> >> It is easier for my to check false positives in a list, than with every
 >> >> mail.
 >> >>
 >> >> Besides this is a top feature for enterprise usage.
 >> >> Deliver no Spams, but keep them quarantined.
 >> >> Get a daily spam report and release a spam mail on user request.
 >> >>
 >> >> Kind regards
 >> >> Cornelius
 > >
 > > To my knowledge you have two options:
 > > 1) MailWatch (version 1.x) has a quarantine report script that will do
 > > something like this. Check http://mailwatch.sf.net or the related
 > > software in the MailScanner wiki.
 > > 2) Fortress systems have a script that will do this (I think). Check
 > > http://www.fsl.com/support/
 > >
 > > Having said that, I don't use either... (But there seem to be several
 > > who do So I can't really vouch for how well they work.

I don't have a daily spam report either but if I had to have one this is how 
I'd do it.

First not sure how you store your spam I forward it to an account with this rule

Spam Actions = forward spams-store <at> localhost

Then I use a script to roll the IMAP Folders based on date.

#!/bin/bash
##########################################################################
#spamstore_roller.sh
#Copyright Mar 8 2005 Mike Tremaine <mgt <at> stellarcore.net>
#
#
##########################################################################
#

###########################
#
###########################

#Set Global dir
spamstore_user="spam-store"
spamstore_group="spamstore"
spamstore_spool="/var/spool/mail/$spamstore_user"
spamstore_maildir="/home/$spamstore_user/mail"
spamstore_mailboxlist="/home/$spamstore_user/.mailboxlist"
targetdate=$(date -d -5min +%Y%m%d)
purgeoffset=3weeks

##################
#If system has non gnu date use perl like so
#targetdate=$(perl -e 'use POSIX qw(strftime); $now_string = strftime "%Y%m%d", 
localtime; print "$now_string";')

#############################
#Rotate spool to dated mbox
if [ -s $spamstore_spool ]; then
    cat $spamstore_spool >> $spamstore_maildir/spam.$targetdate.mbox
    cp /dev/null $spamstore_spool
    chown $spamstore_user:$spamstore_user $spamstore_maildir/spam.$targetdate.mbox
fi

#############################
#Purge control

purgeday=$(date -d -$purgeoffset +%Y%m%d)

if [ -f $spamstore_maildir/spam.$purgeday.mbox ]; then
    rm -f $spamstore_maildir/spam.$purgeday.mbox
fi

##############################
#Rebuild mailboxlist if needed

if [ -f $spamstore_mailboxlist ]; then
    ls -1 $spamstore_maildir | sed -e 's:\(.*\)$:mail\/\1:' > 
$spamstore_mailboxlist
    chown $spamstore_user:$spamstore_group $spamstore_mailboxlist
fi

# vi: shiftwidth=3 tabstop=3 et

So now you have daily mailboxes for spam.... The next step to get a report 
would another Perl or Bash script that could grep the To/From/Subject and make 
a little list of whats in there.

Maybe this pushes you in the right direction, maybe this wastes space in your 
Inbox. Good luck.

-Mike
--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 

Re: Daily Spam report

Cornelius Koelbel wrote:
> Hi Glenn,
>
> thanks for your reply. So I see that Mailscanner does not support this
> by itself.
> I saw mailwatch, but did not like to use mysql and php, which is needed
> by mailwatch.
> So I will look around at fortress systems or start my mysqld :(
>   

And what the hell do you think fortress systems uses?

--

-- 
MailScanner mailing list
mailscanner <at> lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!