Feature request

[Julian Field]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Chris W. Parker wrote:

>Hello,
>
>I'd like know if it's possible to delete a message that has N or more
>recipients that do not appear in /etc/mail/access. I just got an email
>that scored only a 6.23 (regular spam is at 5, high spam is at 11) but
>of the six recipients on the email only one of them was valid. The other
>addresses were just dictionary type attack addresses (as opposed to
>former employees' addresses).
>
>With an option like 'Delete On Invalid Recipient Count = N' in place MS
>could have deleted this email even though it scored below the high spam
>score (which I have set to delete).
>  
>
Unfortunately MailScanner has no way of accurately determining what a 
vaid/invalid address is. Relying on an access file isn't very good for 
general systems. How much spam is sent as multiple recipients on 1 
message? I think most is done 1 recipient per message.

I would think a modification to milter-ahead would be better. The author 
of that milter is always open to good suggestions, so try asking him to 
write it for you. Google will find his address (or ask 
Steve.Swaney at fsl.com).

>In my environment I could safely set it to something low like 2 and
>still be confident that I wouldn't be cutting out any legitimate email.
>
>Or perhaps this is already possible with a custom SA rule or a milter?
>  
>
If you can produce a db or list then it is a very simple custom 
function, tie it to Required SpamAssassin Score and/or Spam Actions.

- -- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Professional Support Services at www.MailScanner.biz
MailScanner thanks transtec Computers for their support

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.0.2 (Build 2424)

iQA/AwUBQ1fZTBH2WUcUFbZUEQK+8gCgsO+QP8otUDzZzQhF31IiCq8bekIAn3/1
972h1fQp0LyEDh4R1jdNPZs4
=yT2i
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!