Sending bounce/notification messages for spam going to a specific address

[Andy Moran]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

I think I know what I need to do but I don't think MailScanner supports it..

Basically I want to deliver AND bounce for Spam Messages to a certain
address.  So:

Spam Actions = %rules-dir%/spam.actions.rules
High Scoring Spam Actions = %rules-dir%/spam.high.actions.rules


And spam.acctions.rules would look like:

To:             address1 at domain               bounce deliver
To:             address2 at domain               bounce deliver
ToOrFrom:       default                         deliver



I set this up this way but it doesn't work, and I think it's because
Spam Actions doesn't support a 'bounce' option.   Could someone verify
this to be true and hopefully suggest a method to do this? :/

--Andy


Andy Moran wrote:
>>>Hello!
>>>
>>>We currently have a system where mailscanner tags and delivers spam,
>>>including spam going to our helpdesk system.  Our helpdesk system
>>>generates tickets and sends back ticket numbers to spammers.    We want
>>>to stop these tickets from being generated.
>>>
>>>The proposed solution is to setup a procmail rule that delivers these
>>>messages to a logfile that gets rotated every week.  However, because
>>>nobody has time to manage and look through this log file,  we want a
>>>message or bounce to be sent back to the sender of these spam-tagged
>>>messages in case it is a fale negative telling them to call our phone
>>>number and ask for help.
>>>
>>>I thought this might be easy to do with MailScanner's bounce_rules but
>>>I'm not sure how to say that only mail *to* our helpdesk system gets a
>>>specific message back to the sender (i.e.  "Your message to helpdesk did
>>>not generate a ticket because it was marked as Spam.  If this is a real
>>>issue, please call xxxxxxx" etc).
>>>
>>>Is there a way to specify in the ruleset which bounce to send back?  And
>>>if not, do I just edit one of the report files?   I see there are two
>>>files "reports/en/sender.spam.sa.report.txt" and
>>>"reports/en/sender.spam.report.txt".   Not sure which one needs to be
>>>edited or if I can edit my own and specify it somewhere (ideal).  Also,
>>>I'm not sure if the bounce ruleset is the bet place (will it allow me to
>>>still deliver it a mbox file later?) or if I use some other mechanism.
>>>
>>>hope that wasn't too confusing.  Any help is appreciated!
>>>
>>>--Andy
>>>
>>>
>>>P.S.  I fully expect to get flamed for saying we want to send messages
>>>back for spam, but having valid helpdesk messages disappear without
>>>anyone (including the sender) know about it isn't acceptable and we
>>>don't have the man power to wade through spam messages either, so this
>>>is the best solution we could think of.  :/
>>>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!