log spam
Marc Lucke
marc at marcsnet.com
Fri Jun 11 13:34:28 IST 2010
(so off topic - sorry to offend any purists): what I'd now like to do is
say something like "you're banned for double the amount of time you were
last time".
Marc Lucke wrote:
> and now everything becomes clear! Very clever. So in fact all I
> would need to have done was to have returned "store forward <email
> address>" and that would have done what I wanted.
>
> I was looking for a way to combine milter-greylist with fail2ban -
> i.e. send me spam and you get banned for 4 hours (in my example)
> instead of told do go away for 5 minutes. I've decied to turn
> milter-greylist off altogether and use fail2ban on a "you abuse me, I
> block you" basis rather than assume everyone's the enemy to begin
> with. milter-greylist has the lag, but too (lol) it was pretty
> successful and I like some good and varied spam samples to feed to SA.
>
> fail2ban is a poor name. So far it hasn't failed to ban anything
> (boom boom) :)
>
>
> Julian Field wrote:
>> In addition to what John told you, you can't use Custom Functions
>> like this. A Custom Function takes the message object as its
>> parameter, and returns a string (or number) giving the value you want
>> for this MailScanner.conf setting for this message. So in "Spam
>> Actions =", a Custom Function could return something like "store
>> forward wibble at foobar.com". Of course a Custom Function can have side
>> effects such as extra logging, but fundamentally it is just a way to
>> calculate the value of a MailScanner.conf setting programmatically.
>> It isn't an additional Spam Action, which is what you are trying to
>> do with it.
>>
>> It's all a whole lot simpler than you are imagining.
>>
>> Jules.
>>
>> On 11/06/2010 07:50, Marc Lucke wrote:
>>> /etc/MailScanner/MailScanner.conf
>>> Spam Actions = &logspam store forward <email address>
>>>
>>> /usr/lib/MailScanner/MailScanner/CustomConfig.pm
>>> sub Initlogspam {};
>>> sub Endlogspam {};
>>> sub logspam {
>>> my($message) = @_;
>>> MailScanner::Log::InfoLog("MailScanner: spam: ".$message->{clientip});
>>> };
>>>
>>> this doesn't work. Complains about @ If I put &logspam at the end,
>>> it gets ignored.
>>>
>>> I want to log the ip address of the person sending me spam, store
>>> the message and then forward it to my spam box. Can I have my cake
>>> and eat it to? If so, how?
>>>
>>>
>>> Thanks in advance
>>> Marc
>>
>> Jules
>>
>
More information about the MailScanner
mailing list