Dealing with suspected spam

[Julian Field]

One thing I want to make sure you know:

Thunderbird has a feature where it will trust the "Is This Spam?"  
headers from SpamAssassin among other systems. You have to switch  
this on in the preferences.

By default on new MailScanner systems, MailScanner will generate the  
relevant headers pretending to be SpamAssassin for this feature. So  
your users can very easily filter their spam into Thunderbird's Junk  
folder, without having to go into the complexity of writing a rule  
that matches the subject line or anything like that.

If you want to apply this to older installations, set things up like  
this:

Non Spam Actions = deliver header "X-Spam-Status: No"
Spam Actions = deliver header "X-Spam-Status: Yes"

I hope that helps someone.
Jules.

On 17 May 2006, at 11:45, <sandrews at andrewscompanies.com>  
<sandrews at andrewscompanies.com> wrote:

> Quarantine High and deliver the rest as tagged in subject line.   
> Advise
> users to create a rule to dump tagged to trash can and tell them to
> check every so often for false positives; keep lowering bar on spam  
> and
> high spam until we get into false positive range and then back off  
> a bit
> and start whitelisting.
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of James
> Page
> Sent: Wednesday, May 17, 2006 5:53 AM
> To: mailscanner at lists.mailscanner.info
> Subject: Dealing with suspected spam
>
> Hello,
>
> Not sure this is really on topic for this forum, but anyhoo....
>
> What are people's opinions on dealing with spam in a corporate
> environment? Is it best to quarantine and advise original sender? Tag
> and deliver? Quarantine high scoring and then tag and deliver below a
> certain score? What strategies do you use?
>
>
> Thanks,
>
>
> James
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!

-- 
Julian Field
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
MailScanner thanks transtec Computers for their support.