Detecting forwarded spam

[Andrew MacLachlan]

Might it be better to write that so that it can score the message in SA?
Just my £0.02...

----- Original Message ----
From: Julian Field <MailScanner at ecs.soton.ac.uk>
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
Sent: Wednesday, 16 May, 2007 4:13:27 PM
Subject: Re: Detecting forwarded spam

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



Scott Silva wrote:
> Michael Masse spake the following on 5/15/2007 10:20 AM:
>   
>> Is there a way for MailScanner to detect if a forwarded message has already been detected as spam by another system, therefore not needing to run it's own spam check?  
>>
>> We have a large number of users who used to use a separate email provider and they now just have that email forwarded to their account here.    Their old system detects spam and creates a header entry like:
>> X-Spam-Report: IsSpam=yes
>>
>> Right now our system just ignores that, so I was wondering if I can get our Mailscanner to take this into account and not bother with spamassassin checks if it sees this in the header?     I'm sure I could make a spamassassin rule to assign points if it saw this, but the whole point is to not have to get spamassassin involved.   
>>
>> Is this possible, or should I just stick with a spamassassin rule?
>>
>> Mike
>>
>>
>>     
> You could write a custom function to do this, and maybe you could get Julian
> to write it for you for some $$$ (money, deniro, cash, mammon, greenbacks,
> script, coinage, euros, pounds sterling, etc...).
>   
Yes: for a suitable bribe, I could write you a Custom Function to do this.

Jules

- -- 
Julian Field MEng CITP
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
For all your IT requirements visit www.transtec.co.uk



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.1 (Build 1012)
Charset: UTF-8

wj8DBQFGSyBUEfZZRxQVtlQRAsjhAKCAAwTxoBet4D9oLTStQHRNV5jDlACg8Uaz
76DXvWlg3dqGlFfiT8PBjVI=
=ro91
-----END PGP SIGNATURE-----

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
For all your IT requirements visit www.transtec.co.uk

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!