storing spam and ham as mbox files

[Steve Freegard]

Mike,

I've been playing with the MailScanner quarantine actions quite a bit
recently with a view to putting 'Quarantine Manager' screens into MailWatch.

I know this isn't exactly what you want - but you could set:

 Spam/High Scoring Spam Actions = store
 Quarantine Whole Message = yes
 Quarantine Whole Messages As Queue Files = no

in MailScanner.conf - then you'll have all the files in
/var/spool/MailScanner/quarantine/<date>/(not-spam|spam)/<messageid> stored
as files in message/rfc822 format that you can parse with awk/perl to do
what you want with it.  Alternativly there may be a util around out there
somewhere to munge a load of rfc822 files into mbox format...

Just an idea while I was watching this thread....

Kind regards,
Steve.

--
Steve Freegard
Systems Manager
Littlehampton Book Services Ltd.

-----Original Message-----
From: mikea [mailto:mikea at MIKEA.ATH.CX]
Sent: 17 July 2003 16:32
To: MAILSCANNER at JISCMAIL.AC.UK
Subject: Re: storing spam and ham as mbox files


On Thu, Jul 17, 2003 at 04:20:15PM +0100, Spicer, Kevin wrote:
> > Is there a way to store ham and spam as mbox files, or just to
> > concatenate all the ham to one file and all the spam to another?

> Can't you just use the forward action to forward the mails to a mailbox on
the local machine?

I'll give it a try.

<later>

Nope.

The "forward" action requires an address of the form something at domain,
and just supplying an address local to the machine without the
"@domain" part fails.

Unfortunately for me, the MX for our "inside" network is a Lotus Notes
server which is set to not relay anywhere. I can't get that changed,
and it is ... well, "unpleasant" is a very short way out along that
axis, and my situation lies considerably farther out.

Any ideas will be enthusiastically examined, and probably will be
given The Old School Try.

--
Mike Andrews
mikea at mikea.ath.cx
Tired old sysadmin since 1964

--
This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the sender and delete the message from your mailbox.

This footnote also confirms that this email message has been swept by
MailScanner (www.mailscanner.info) for the presence of computer viruses.