Sending bounce/notification messages for spam going to a specific address

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

We are getting our wires crossed a bit. Bouncing doesn't deliver to the
recipient, it delivers back to the (forged and therefore fake) sender.

And you can't bounce high-scoring spam, sorry.

Andy Moran wrote:

>Oh I was under the impression that bounce'ing would not deliver as well,
>but in retrospect, it makes sense that it does.
>
>It does not seem to be working for me.  Does it only generate bounces
>for low scoring spam?
>
>--Andy
>
>Julian Field wrote:
>
>
>>Look at the "Enable Spam Bounce" option. You will need to give it a
>>ruleset such as
>>To: address1 at domain yes
>>To: address2 at domain yes
>>ToOrFrom: default no
>>
>>Andy Moran wrote:
>>
>>
>>
>>
>>>I think I know what I need to do but I don't think MailScanner supports it..
>>>
>>>Basically I want to deliver AND bounce for Spam Messages to a certain
>>>address.  So:
>>>
>>>Spam Actions = %rules-dir%/spam.actions.rules
>>>High Scoring Spam Actions = %rules-dir%/spam.high.actions.rules
>>>
>>>
>>>And spam.acctions.rules would look like:
>>>
>>>To:             address1 at domain               bounce deliver
>>>To:             address2 at domain               bounce deliver
>>>ToOrFrom:       default                         deliver
>>>
>>>
>>>
>>>I set this up this way but it doesn't work, and I think it's because
>>>Spam Actions doesn't support a 'bounce' option.   Could someone verify
>>>this to be true and hopefully suggest a method to do this? :/
>>>
>>>--Andy
>>>
>>>
>>>Andy Moran wrote:
>>>
>>>
>>>
>>>
>>>
>>>>>>Hello!
>>>>>>
>>>>>>We currently have a system where mailscanner tags and delivers spam,
>>>>>>including spam going to our helpdesk system.  Our helpdesk system
>>>>>>generates tickets and sends back ticket numbers to spammers.    We want
>>>>>>to stop these tickets from being generated.
>>>>>>
>>>>>>The proposed solution is to setup a procmail rule that delivers these
>>>>>>messages to a logfile that gets rotated every week.  However, because
>>>>>>nobody has time to manage and look through this log file,  we want a
>>>>>>message or bounce to be sent back to the sender of these spam-tagged
>>>>>>messages in case it is a fale negative telling them to call our phone
>>>>>>number and ask for help.
>>>>>>
>>>>>>I thought this might be easy to do with MailScanner's bounce_rules but
>>>>>>I'm not sure how to say that only mail *to* our helpdesk system gets a
>>>>>>specific message back to the sender (i.e.  "Your message to helpdesk did
>>>>>>not generate a ticket because it was marked as Spam.  If this is a real
>>>>>>issue, please call xxxxxxx" etc).
>>>>>>
>>>>>>Is there a way to specify in the ruleset which bounce to send back?  And
>>>>>>if not, do I just edit one of the report files?   I see there are two
>>>>>>files "reports/en/sender.spam.sa.report.txt" and
>>>>>>"reports/en/sender.spam.report.txt".   Not sure which one needs to be
>>>>>>edited or if I can edit my own and specify it somewhere (ideal).  Also,
>>>>>>I'm not sure if the bounce ruleset is the bet place (will it allow me to
>>>>>>still deliver it a mbox file later?) or if I use some other mechanism.
>>>>>>
>>>>>>hope that wasn't too confusing.  Any help is appreciated!
>>>>>>
>>>>>>--Andy
>>>>>>
>>>>>>
>>>>>>P.S.  I fully expect to get flamed for saying we want to send messages
>>>>>>back for spam, but having valid helpdesk messages disappear without
>>>>>>anyone (including the sender) know about it isn't acceptable and we
>>>>>>don't have the man power to wade through spam messages either, so this
>>>>>>is the best solution we could think of.  :/
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>>>>>>
>
>
--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!