Sending bounce/notification messages for spam going to a specific address

[Andy Moran]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Thank you! That is what I wanted to know.

Cheers!

--Andy

Julian Field wrote:
> We are getting our wires crossed a bit. Bouncing doesn't deliver to the
> recipient, it delivers back to the (forged and therefore fake) sender.
>
> And you can't bounce high-scoring spam, sorry.
>
> Andy Moran wrote:
>
>
>>Oh I was under the impression that bounce'ing would not deliver as well,
>>but in retrospect, it makes sense that it does.
>>
>>It does not seem to be working for me.  Does it only generate bounces
>>for low scoring spam?
>>
>>--Andy
>>
>>Julian Field wrote:
>>
>>
>>
>>>Look at the "Enable Spam Bounce" option. You will need to give it a
>>>ruleset such as
>>>To: address1 at domain yes
>>>To: address2 at domain yes
>>>ToOrFrom: default no
>>>
>>>Andy Moran wrote:
>>>
>>>
>>>
>>>
>>>
>>>>I think I know what I need to do but I don't think MailScanner supports it..
>>>>
>>>>Basically I want to deliver AND bounce for Spam Messages to a certain
>>>>address.  So:
>>>>
>>>>Spam Actions = %rules-dir%/spam.actions.rules
>>>>High Scoring Spam Actions = %rules-dir%/spam.high.actions.rules
>>>>
>>>>
>>>>And spam.acctions.rules would look like:
>>>>
>>>>To:             address1 at domain               bounce deliver
>>>>To:             address2 at domain               bounce deliver
>>>>ToOrFrom:       default                         deliver
>>>>
>>>>
>>>>
>>>>I set this up this way but it doesn't work, and I think it's because
>>>>Spam Actions doesn't support a 'bounce' option.   Could someone verify
>>>>this to be true and hopefully suggest a method to do this? :/
>>>>
>>>>--Andy
>>>>
>>>>
>>>>Andy Moran wrote:
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>>>>Hello!
>>>>>>>
>>>>>>>We currently have a system where mailscanner tags and delivers spam,
>>>>>>>including spam going to our helpdesk system.  Our helpdesk system
>>>>>>>generates tickets and sends back ticket numbers to spammers.    We want
>>>>>>>to stop these tickets from being generated.
>>>>>>>
>>>>>>>The proposed solution is to setup a procmail rule that delivers these
>>>>>>>messages to a logfile that gets rotated every week.  However, because
>>>>>>>nobody has time to manage and look through this log file,  we want a
>>>>>>>message or bounce to be sent back to the sender of these spam-tagged
>>>>>>>messages in case it is a fale negative telling them to call our phone
>>>>>>>number and ask for help.
>>>>>>>
>>>>>>>I thought this might be easy to do with MailScanner's bounce_rules but
>>>>>>>I'm not sure how to say that only mail *to* our helpdesk system gets a
>>>>>>>specific message back to the sender (i.e.  "Your message to helpdesk did
>>>>>>>not generate a ticket because it was marked as Spam.  If this is a real
>>>>>>>issue, please call xxxxxxx" etc).
>>>>>>>
>>>>>>>Is there a way to specify in the ruleset which bounce to send back?  And
>>>>>>>if not, do I just edit one of the report files?   I see there are two
>>>>>>>files "reports/en/sender.spam.sa.report.txt" and
>>>>>>>"reports/en/sender.spam.report.txt".   Not sure which one needs to be
>>>>>>>edited or if I can edit my own and specify it somewhere (ideal).  Also,
>>>>>>>I'm not sure if the bounce ruleset is the bet place (will it allow me to
>>>>>>>still deliver it a mbox file later?) or if I use some other mechanism.
>>>>>>>
>>>>>>>hope that wasn't too confusing.  Any help is appreciated!
>>>>>>>
>>>>>>>--Andy
>>>>>>>
>>>>>>>
>>>>>>>P.S.  I fully expect to get flamed for saying we want to send messages
>>>>>>>back for spam, but having valid helpdesk messages disappear without
>>>>>>>anyone (including the sender) know about it isn't acceptable and we
>>>>>>>don't have the man power to wade through spam messages either, so this
>>>>>>>is the best solution we could think of.  :/
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>>>>>>
>>
>>
> --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!