<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2655.35">
<TITLE>RE: Spam notice</TITLE>
</HEAD>
<BODY>
<P><FONT SIZE=2>My own version of the Spam digest, reads the quarantine directory for the spam folders, reads the qf files for the information for the digest. A central server pulls the list of stored spam from each of the MX hosts and creates the report for each user.</FONT></P>
<P><FONT SIZE=2>Since the stored qf and df files don't include the MailScanner headers it hard to get the score for inclusion in the report.</FONT></P>
<P><FONT SIZE=2>It stores 60 days worth of messages on the server and displays 3 days worth in the report. Reports are sent Mon-Fri.</FONT>
</P>
<P><FONT SIZE=2>The Retrieve link allows the user to move the message into the queue. Clicking on the link displays the email headers and asks for confirmation to send the email.</FONT></P>
<P><FONT SIZE=2>An MD5 hash of the qf file is included in the link to hopefully ensure that only the recipient of the report can Retrieve the email. Doesn't matter since the email is sent only to the original recipients.</FONT></P>
<P><FONT SIZE=2>I used a helper app that was suid to read and move the df and qf pairs from the web interface.</FONT>
</P>
<P><FONT SIZE=2>When moving the qf and df files I move them into the incoming queue and add a header to ensure that it will not be considered spam, this allows MailScanner to check for viruses or dangerous content.</FONT></P>
<P><FONT SIZE=2>I'm still piloting/testing this.</FONT>
</P>
<P><FONT SIZE=2>Work well so far, no need to modify MailScanner, no need to read syslog entries.</FONT>
</P>
<P><FONT SIZE=2>Example report:</FONT>
</P>
<P><FONT SIZE=2>This is a list of the past 3 day(s) of email messages currently stored on the mail systems which have been identified as SPAM. Please read the Spam FAQ for more information.</FONT></P>
<P><FONT SIZE=2>Important Notice: By clicking on the retrieve link the user accepts all responsibility for all content. The user acknowledges that email may be sent to more users than themselves and may contain offensive content.</FONT></P>
<BR>
<P><FONT SIZE=2>--------------------------------------------------------------------------------</FONT>
</P>
<P><FONT SIZE=2> </FONT>
<BR><FONT SIZE=2>From: serhap@hotmail.com </FONT>
<BR><FONT SIZE=2>To: No Other Recipients </FONT>
<BR><FONT SIZE=2>Subject: naber </FONT>
<BR><FONT SIZE=2>Received: Wed Nov 5 16:53:32 2003 </FONT>
<BR><FONT SIZE=2> Retrieve </FONT>
<BR><FONT SIZE=2>.</FONT>
<BR><FONT SIZE=2>.</FONT>
<BR><FONT SIZE=2>.</FONT>
<BR><FONT SIZE=2> </FONT>
</P>
<P><FONT SIZE=2>-----Original Message-----</FONT>
<BR><FONT SIZE=2>From: Ugo Bellavance [<A HREF="mailto:ugob@CAMO-ROUTE.COM">mailto:ugob@CAMO-ROUTE.COM</A>]</FONT>
<BR><FONT SIZE=2>Sent: Friday, November 07, 2003 12:46 PM</FONT>
<BR><FONT SIZE=2>To: MAILSCANNER@JISCMAIL.AC.UK</FONT>
<BR><FONT SIZE=2>Subject: Re: Spam notice</FONT>
</P>
<BR>
<P><FONT SIZE=2>> -----Message d'origine-----</FONT>
<BR><FONT SIZE=2>> De : ian douglas [<A HREF="mailto:id@W98.US">mailto:id@W98.US</A>]</FONT>
<BR><FONT SIZE=2>> Envoyé : Friday, November 07, 2003 12:32 PM</FONT>
<BR><FONT SIZE=2>> À : MAILSCANNER@JISCMAIL.AC.UK</FONT>
<BR><FONT SIZE=2>> Objet : Re: Spam notice</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> Problem with digests, as experienced in the past with web hosting and</FONT>
<BR><FONT SIZE=2>> setting up Email mailing lists, is that HTML Emails cause a lot of</FONT>
<BR><FONT SIZE=2>> headaches. The digest mode would have to strip HTML or save it as</FONT>
<BR><FONT SIZE=2>> text/plain - otherwise badly-written HTML could make an </FONT>
<BR><FONT SIZE=2>> archive really hard</FONT>
<BR><FONT SIZE=2>> to read, if readable at all, embedded styles, etc., could </FONT>
<BR><FONT SIZE=2>> make even the</FONT>
<BR><FONT SIZE=2>> prettiest HTML documents look horrendous.</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> Just my $0.02 worth, but yes, I support this idea. I have one </FONT>
<BR><FONT SIZE=2>> user (who gets</FONT>
<BR><FONT SIZE=2>> 50% of all spam collected on my system of dozens of domains </FONT>
<BR><FONT SIZE=2>> hosted) who is</FONT>
<BR><FONT SIZE=2>> particularly paranoid about FP's and losing legit Email.</FONT>
<BR><FONT SIZE=2>> </FONT>
<BR><FONT SIZE=2>> -id</FONT>
</P>
<P><FONT SIZE=2>To me, a plain-text digest containing info about the message would be sufficient.</FONT>
<BR><FONT SIZE=2>Example:</FONT>
</P>
<P><FONT SIZE=2>You received 3 messages that were considered as Spam by MailScanner and quarantined, here is the list:</FONT>
</P>
<P><FONT SIZE=2>Message 1:</FONT>
</P>
<P><FONT SIZE=2>From:</FONT>
<BR><FONT SIZE=2>To:</FONT>
<BR><FONT SIZE=2>Subject:</FONT>
<BR><FONT SIZE=2>Spam score:</FONT>
<BR><FONT SIZE=2>Time/Date:</FONT>
<BR><FONT SIZE=2>To have this message released from quarantine, send this info to your Mail Admin:</FONT>
<BR><FONT SIZE=2>/path/to/message</FONT>
</P>
<P><FONT SIZE=2>So on..</FONT>
</P>
<P><FONT SIZE=2>Any other ideas?</FONT>
</P>
<P><FONT SIZE=2>Ugo</FONT>
</P>
</BODY>
</HTML>