<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2873" name=GENERATOR></HEAD>
<BODY>
<DIV dir=ltr align=left><SPAN class=715221316-03102006><FONT face=Arial
color=#0000ff size=2>If I read this right, that capability is already in
mailscanner...take a look under your "what to do with spam" section, where it
says Spam Actions = typical is deliver, but you could have "deliver header
X-MS-Exchange-Organization-SCL: 6.5" in there just as well. You could give
it some high SCL for the high spam that matches what you're looking for on the
exchange side for the SCL. So what if it's not the PRECISE score in SCL
terms, only so that it trips the trigger for the right behavior on the exchange
side.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=715221316-03102006><FONT face=Arial
color=#0000ff size=2><BR>Steve</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <B>On Behalf Of </B>Duncan,
Brian M.<BR><B>Sent:</B> Tuesday, October 03, 2006 9:43 AM<BR><B>To:</B>
mailscanner@lists.mailscanner.info<BR><B>Subject:</B> Mailscanner/Spam Assassin
support for Microsoft IMF/SCL Spamscoring?<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV dir=ltr align=left><FONT face=Arial color=#0000ff
size=2></FONT> </DIV>
<DIV></DIV>
<DIV><FONT face=Arial size=2>For those of us that are environments that support
MS Exchange and Outlook 2003+ at the desktop, the capability<SPAN
class=237280813-03102006> </SPAN>to support MS IMF (MS Exchange Intelligent
Message Filter<SPAN class=284413613-03102006> scoring</SPAN>)
from <SPAN class=237280813-03102006>the</SPAN> network edge is very
beneficial.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN
class=284413613-03102006> M</SPAN>ost organizations that have
SpamAssassin/Mailscanner at the edge of their network rel<SPAN
class=284413613-03102006>y </SPAN>on custom<SPAN class=237280813-03102006>
</SPAN>created rules on clients to move the SpamAssassin tagged messages into
their local "Junk-Mail" folder or Spam folder - Or delete them right
away.</FONT></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>This leads to support issues in large
organizations. Creating custom exceptions etc, usually in most companies
these <SPAN class=284413613-03102006> local users</SPAN> cannot
manage the rules<SPAN class=237280813-03102006> efficiently</SPAN>.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>MS in the last year has released a free add-on for
Exchange that works very similarly to SpamAssassin it assigns a Score to a
message that looks<SPAN class=237280813-03102006> </SPAN>to be in the
headers. Exchange will then automatically put messages based on the local
Outlook clients preference level into their <SPAN
class=237280813-03102006>local </SPAN>Junk Mail folder.<SPAN
class=237280813-03102006> </SPAN>The great thing with this is that users can
just right click on messages and add to their "white list" or do complete
domains. No custom scripts to create,<SPAN
class=237280813-03102006> </SPAN><SPAN class=237280813-03102006>
</SPAN>much easier to support in a large environment.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2>If SpamAssassin/Mailscanner could support
adding the IMF headers at the edge, then those that would still like<SPAN
class=237280813-03102006> </SPAN>to leverage a SpamAssassin (or any product for
that matter, as long as it used the IMF score header) solution<SPAN
class=237280813-03102006> at the edge of their network </SPAN>they could do
so<SPAN class=237280813-03102006> easily</SPAN>.<SPAN
class=237280813-03102006> You could tune your MS Exchange servers to not
be reactive and the SpamAssasin edge products would dictate what was Spam and
what was not.</SPAN></FONT></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=237280813-03102006><FONT face=Arial size=2>Microsoft with
Exchange 12 is pushing<SPAN class=284413613-03102006> companies
into </SPAN> putting Exchange at the edge of a network<SPAN
class=284413613-03102006> . I have already had this discussion in my
environment and that I do not think it makes sense given that
Sendmail + Mailscanner + SpamAssassin is almost rock
solid. </SPAN><SPAN class=284413613-03102006> </SPAN><SPAN
class=284413613-03102006> </SPAN><SPAN
class=284413613-03102006> </SPAN> </FONT></SPAN></DIV>
<DIV><SPAN class=237280813-03102006><FONT face=Arial size=2></FONT></SPAN><SPAN
class=237280813-03102006></SPAN><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial><FONT size=2><SPAN class=237280813-03102006>At the end of
this</SPAN> <SPAN class=237280813-03102006>is a previous message </SPAN>to
th<SPAN class=237280813-03102006>is</SPAN> mailing list that is asking for the
same thing that I am.</FONT></FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Does anyone have anything to add to this or is this
request really not that worthwhile.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Just the capability of being able to add a generic
header to all Spam detected messages would be a great start:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>X-MS-Exchange-Organization-SCL: 6.5</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>(I have already tested this, all headers that are
added by Mailscanner seems to include additional information added to the same
line)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=237280813-03102006><FONT face=Arial size=2>Brian
Duncan</FONT></SPAN></DIV>
<DIV><SPAN class=237280813-03102006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=237280813-03102006><FONT face=Arial color=#000000 size=2><A
href="mailto:brian.duncan@kattenlaw.com">brian.duncan@kattenlaw.com</A></FONT></SPAN></DIV>
<DIV><SPAN class=237280813-03102006><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><FONT face=Arial size=2>P.S.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>There is already a product that can sit on an
Exchange server that will convert SpamAssassin scores to equivalent MS IMF
Scores. It would<SPAN class=237280813-03102006> </SPAN>be great if we
could handle it from the Unix/Linux side transparently. (It's called
Assassin2Exchange filter)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2><A href="http://www.smtptracker.com/"><FONT
color=#000000>http://www.smtptracker.com/</FONT></A> </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Previous message that went unanswered to this
list:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>Exchange 2003 SP2 has added a "Intelligent Mail
Filter" to allow it to deal with spam messages identified by systems like
MailScanner or other appliance based solutions.</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>Basically, it looks for the following
header(s):</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>X-MS-Exchange-Organization-PCL: (Phishing
Confidence Level)<BR>>X-MS-Exchange-Organization-SCL: (Spam Confidence
Level)</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>More details can be found at:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial
size=2>>http://www.microsoft.com/technet/prodtechnol/exchange/E2k7Help/28d3a5c2-8509-4b25-9876-763536e77c27.mspx?mfr=true</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>So, my question is -- can I add this header
with MailScanner, inserting the appropriate spam score after the header,
e.g.:</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>X-MS-Exchange-Organization-SCL:5</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>>The trick is, I don't want to mess with my
existing header adds, I want to add this in addition to my normal ones
(X-Spam-Score: XX). I see where I can add additional headers in
the:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>>Spam Actions = deliver header "X-Spam-Status:
Yes"</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>>However, it is unclear how to insert the spam
score "value" in the "value" area that it needs to be in. It is also
unclear from the Microsoft docs if the "score" can be anything other than whole
numbers (e.g. can't be 5.5 but 5 is OK). So, a way to "round" the score
would be helpful.</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>>Any pointers?</FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial size=2>>-- </FONT></DIV>
<DIV> </DIV>
<DIV><FONT face=Arial
size=2>>-----------------------------------------<BR>>Mike Bacher / <A
href="mailto:listacct@tulsaconnect.com">listacct@tulsaconnect.com</A><BR>>TCIS
- TulsaConnect Internet
Services<BR>>http://www.tulsaconnect.com<BR>>-----------------------------------------<BR></FONT></DIV>
<TABLE>
<TBODY>
<TR>
<TD bgColor=#ffffff><FONT
color=#000000>===========================================================<BR>CIRCULAR
230 DISCLOSURE: Pursuant to Regulations Governing Practice Before the
Internal Revenue Service, any tax advice contained herein is not intended
or written to be used and cannot be used by a taxpayer for the purpose of
avoiding tax penalties that may be imposed on the
taxpayer.<BR>===========================================================<BR>CONFIDENTIALITY
NOTICE:<BR>This electronic mail message and any attached files contain
information intended for the exclusive use of the individual or entity to
whom it is addressed and may contain information that is proprietary,
privileged, confidential and/or exempt from disclosure under applicable
law. If you are not the intended recipient, you are hereby notified that
any viewing, copying, disclosure or distribution of this information may
be subject to legal restriction or sanction. Please notify the sender, by
electronic mail or telephone, of any unintended recipients and delete the
original message without making any
copies.<BR>===========================================================<BR>NOTIFICATION:
Katten Muchin Rosenman LLP is an Illinois limited liability partnership
that has elected to be governed by the Illinois Uniform Partnership Act
(1997).<BR>===========================================================<BR></FONT></TD></TR></TBODY></TABLE></BODY></HTML>