Quarantine or save SPAM based on rules
kvue at WADSNET.COM
Wed Nov 26 17:01:34 GMT 2003
Excuse my NEWBIE-ness but here's what I've got.
1. Created /etc/MailScanner/rules/lowspam.rules for low spam
From: 10. store deliver
From: 192.168. store deliver
From: default attachment deliver
2. Created /etc/MailScanner/rules/highspam.rules for low spam
From: 10.20. store delete
From: 192.168. store delete
From: default delete
3. Edit /etc/MailScanner/MailScanner.conf and change the following
- Spam Actions = /etc/MailScanner/rules/lowspam.rules
- High Scoring Spam Actions = /etc/MailScanner/rules/highspam.rules
Correct? Can I just use store and do I need delete also?
Thankx in advance.
----- Original Message -----
From: "Julian Field" <mailscanner at ECS.SOTON.AC.UK>
To: <MAILSCANNER at JISCMAIL.AC.UK>
Sent: Wednesday, November 26, 2003 11:30 AM
Subject: Re: Quarantine or save SPAM based on rules
> At 16:16 26/11/2003, you wrote:
> >We've got a few customers in our network that are sending SPAM. We have a
> >firewall and every IP address is NAT so the IP addresses are different
> >Is there a way to quarantine or save SPAM emails based on an IP address
> >For example, if IP X.X sends SPAM, it saves it.
> Use a ruleset saying something like
> From: 22.214.171.124 store
> FromOrTo: default deliver
> and set "Spam Actions" and "High Scoring Spam Actions" to point at it. You
> can put all sorts of network definitions in rulesets such as
> >My current solution is I forward all SPAM to a mailbox, every 5 minutes
> >for my IP, if found then copy it, else delete box.
> Julian Field
> MailScanner thanks transtec Computers for their support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
More information about the MailScanner