question about spam store option

Julian Field MailScanner at ecs.soton.ac.uk
Wed Mar 9 17:40:40 GMT 2005


    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Peter Bonivart wrote:

> Jeff A. Earickson wrote:
>
>> High Scoring Spam Actions = store delete
>
>
> You can drop the delete action there for improved clarity.
>
>> So I looked at some of the stored samples (thank you for creating
>> a spam subdir in quarantine!) and realized that MS stores the virgin
>> message, no MS headers added.  So I have to grep thru my syslog to
>> find out what MS really thought of the message in terms of SA scoring,
>> phishing, html disarming, etc.  For spam storage, any chance this
>> info could be scribbled into a file in quarantine spam subdir somehow?
>
>
> That's the way it is for both archive and quarantine, I have never had a
> problem with it since I always end up in the quarantine after checking
> the logs anyway.

I intentionally leave the quarantined messages as close to the original
message as I possibly can. I don't plan on changing that any time soon,
it actually makes life quite awkward for me to change this.

--
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list