<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2800.1276" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=792465614-04062004><FONT face=Arial size=2>I've been pondering
this idea for a while, but wanted some opinions on how feasible it would
be...and the load it would cause.</FONT></SPAN></DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial size=2>I currently have all
users that receive spam that bypassed MailScanner, simply forward the email to
<A href="mailto:spam@ourdomain.com">spam@ourdomain.com</A>. The email then got
blacklisted and there was an option to put 'domain' in the subject header to
black list the entire domain. This worked well, but the black list got up to
around 1600 emails/domains and I started to get many SA time outs. This was
before implementing Bayes which is working great, if not too good with false
positives, but that's another story.</FONT></SPAN></DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial size=2>My idea is to
basically archive every email that enters the system (through MS) for a period
of a day or so. I've got a script that deletes all emails older than a time
specified from an mbox file. Then using my script from above, have users forward
the email to <A href="mailto:spam@ourdomain.com">spam@ourdomain.com</A>, have a
new script fetch that email out of the archive and feed it to
Bayes.</FONT></SPAN></DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial size=2>Any thoughts on
this? Is it ridiculous?</FONT></SPAN></DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial size=2>Most of my users are
on various Exchange servers, and there really is no easy way to get the email
fed into bayes. I know you can do a public folder, but then you have to train
each user how to get it there, and they have to open the public folder tree,
etc. Using IMAP is even more administration. I've found that simply
forwarding the email somewhere is very easy for them.</FONT></SPAN></DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=792465614-04062004><FONT face=Arial
size=2>Max</FONT></SPAN></DIV></BODY></HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>