Spam management?

We get about a thousand spam messages a month to addresses like
support@our_domain which, of course, go into RT queues. Our email
system does site-wide scanning with MimeDefang/SpamAssassin but
because the identification isn’t perfect we just tag messages
with a special header instead of discarding at that level. Our
webmaster alias is handled by the mailman list manager which has
a nifty feature where it can hold messages for approval based on
certain criteria including header contents so only one person has
to wade through looking for false positives and the rejected items
don’t clutter the archives. Has anyone worked out a similar scheme
with RT to require approval on tagged email before allowing it to
go into a queue? Because of performance problems with large RT
databases I’d prefer to avoid adding the contents and especially
auto-creating the sender as a user as you would have to do if you
just divert into a spam queue (unless there is some way to really
delete the rejected contents). I suppose it would work to send email
through a mailman list with the RT address as the only member but
that seems pretty cumbersome just to get an approval mechanism.

Les Mikesell
les@futuresource.com

I have a setup with procmail + SpamAssassin. If SpamAssassin flags
mail as potential spam, it is redirected to a human. That human
can send approved mail to a different mail address which does NOT
filter its input through SpamAssassin. The unfiltered address is
not known to the public, of course. Both of these mail addresses
go to the same queue in RT.

Dag Bruck
Dynasim AB, Sweden

I have a setup with procmail + SpamAssassin. If SpamAssassin flags
mail as potential spam, it is redirected to a human. That human
can send approved mail to a different mail address which does NOT
filter its input through SpamAssassin. The unfiltered address is
not known to the public, of course. Both of these mail addresses
go to the same queue in RT.

That sounds simple enough but what mailer does the human use
that keeps the original sender in the From: when forwarding
to the unfiltered address?

Les Mikesell
les@futuresource.com

That sounds simple enough but what mailer does the human use
that keeps the original sender in the From: when forwarding
to the unfiltered address?

Eudora has a “redirect” feature, in addition to “forward”.

With Netscape’s mail client you can set the reply-to address,
and that will then enter RT correctly. In my experience, very
few messages need to be forwarded after some tweaking of the
SpamAssassin rules…

Dag Bruck

Dag Bruck wrote:

That sounds simple enough but what mailer does the human use
that keeps the original sender in the From: when forwarding
to the unfiltered address?

Eudora has a “redirect” feature, in addition to “forward”.

This is usually called “redirect” or “bounce.”

Mutt and Pine will do it, as will some graphical MUAs.

Netscape/Mozilla/Thunderbird don’t support this for some reason, and
someone has even offered a bounty to whoever adds it.
http://www.wonko.com/content.php?id=23

Pine or Mutt might be a good bet. You could set them as the shell so
that even someone who doesn’t know unix won’t be exposed to the terrors
of the command line. (Or tell them to login and type “pine.” :slight_smile:

I think you have to explicitly enable this function in Pine. It’s in
Preferences or directly, in the rc file.

Stuart Krivis stuart@krivis.com