Sending bounce/notification messages for spam going to a specific address

[Andy Moran]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Oh I was under the impression that bounce'ing would not deliver as well,
but in retrospect, it makes sense that it does.

It does not seem to be working for me.  Does it only generate bounces
for low scoring spam?

--Andy

Julian Field wrote:
> Look at the "Enable Spam Bounce" option. You will need to give it a
> ruleset such as
> To: address1 at domain yes
> To: address2 at domain yes
> ToOrFrom: default no
>
> Andy Moran wrote:
>
>
>>I think I know what I need to do but I don't think MailScanner supports it..
>>
>>Basically I want to deliver AND bounce for Spam Messages to a certain
>>address.  So:
>>
>>Spam Actions = %rules-dir%/spam.actions.rules
>>High Scoring Spam Actions = %rules-dir%/spam.high.actions.rules
>>
>>
>>And spam.acctions.rules would look like:
>>
>>To:             address1 at domain               bounce deliver
>>To:             address2 at domain               bounce deliver
>>ToOrFrom:       default                         deliver
>>
>>
>>
>>I set this up this way but it doesn't work, and I think it's because
>>Spam Actions doesn't support a 'bounce' option.   Could someone verify
>>this to be true and hopefully suggest a method to do this? :/
>>
>>--Andy
>>
>>
>>Andy Moran wrote:
>>
>>
>>
>>>>>Hello!
>>>>>
>>>>>We currently have a system where mailscanner tags and delivers spam,
>>>>>including spam going to our helpdesk system.  Our helpdesk system
>>>>>generates tickets and sends back ticket numbers to spammers.    We want
>>>>>to stop these tickets from being generated.
>>>>>
>>>>>The proposed solution is to setup a procmail rule that delivers these
>>>>>messages to a logfile that gets rotated every week.  However, because
>>>>>nobody has time to manage and look through this log file,  we want a
>>>>>message or bounce to be sent back to the sender of these spam-tagged
>>>>>messages in case it is a fale negative telling them to call our phone
>>>>>number and ask for help.
>>>>>
>>>>>I thought this might be easy to do with MailScanner's bounce_rules but
>>>>>I'm not sure how to say that only mail *to* our helpdesk system gets a
>>>>>specific message back to the sender (i.e.  "Your message to helpdesk did
>>>>>not generate a ticket because it was marked as Spam.  If this is a real
>>>>>issue, please call xxxxxxx" etc).
>>>>>
>>>>>Is there a way to specify in the ruleset which bounce to send back?  And
>>>>>if not, do I just edit one of the report files?   I see there are two
>>>>>files "reports/en/sender.spam.sa.report.txt" and
>>>>>"reports/en/sender.spam.report.txt".   Not sure which one needs to be
>>>>>edited or if I can edit my own and specify it somewhere (ideal).  Also,
>>>>>I'm not sure if the bounce ruleset is the bet place (will it allow me to
>>>>>still deliver it a mbox file later?) or if I use some other mechanism.
>>>>>
>>>>>hope that wasn't too confusing.  Any help is appreciated!
>>>>>
>>>>>--Andy
>>>>>
>>>>>
>>>>>P.S.  I fully expect to get flamed for saying we want to send messages
>>>>>back for spam, but having valid helpdesk messages disappear without
>>>>>anyone (including the sender) know about it isn't acceptable and we
>>>>>don't have the man power to wade through spam messages either, so this
>>>>>is the best solution we could think of.  :/
>>>>>
>>>>>
>>>>>
>
>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!