blocking out-of-office

[Logan Shaw]

On Fri, 4 Aug 2006, Glenn Steen wrote:
> On 04/08/06, Peter Peters <P.G.M.Peters at utwente.nl> wrote:
>> Yes, I would want to block OoO's trying to get outside the university
>> but keep the OoO's flowing between the departments.
>> 
> Well then, you'd have two problems:
> 1) Identifying an OoO.
> 2) selectively disallowing them to exit your organization.
>
> I'd look into making a set of SA rules to facilitate this. One or two
> to identify that the message really is an OoO, that it originates from
> one of your subdomains, and finally one rule to combine those results
> and giving that one a truly hefty score, pushing it into the high
> scoring spam category.

One down side of that approach is that scoring a legit user's
message (even if an OoO) as spam will screw up that user's
SpamAssassin AWL average, thus affecting the user's other
messages.

   - Logan