OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: FILTER_README suggestions

From: Tony Earnshaw (tericssonearnshawbarlaeus.nl)
Date: Fri Sep 01 2006 - 12:00:39 CDT


fr den 01.09.2006 Klokka 12:40 (-0400) skreiv Wietse Venema:

[...]

> > We use "tag & deliver" a.k.a second option. For some clients, maildrop
> > places the mail in appropriate folder. For others, we let the MUA decide
> > what to do with tagged mail.
>
> Thanks to all who recommended the "tag and deliver" approach.
>
> > Basically, quarantining is too much trouble for our end users and we don't
> > discard email for fear of false positives.
> >
> > I suggest adding some simple maildrop/procmail recipies as examples to
> > help the uninitiated.
>
> If you have examples to share, it will save me time.

A couple of dead simple stanzas from a maildrop/dspam setup:

in /etc/maildroprc ($VHOME is a variable defined at the head of
maildroprc):

`test -d $VHOME/Maildir/.dspam-quarantine/`
   if( $RETURNCODE == 1 )
   {
      `/usr/bin/maildirmake "$VHOME/Maildir/.dspam-quarantine"/`
   }
__________________________

if ( /^X-DSPAM-Result:[:space:]+Spam$/ )
{
   to "$VHOME/Maildir/.dspam-quarantine"
}

--Tonni

--
Tony Earnshaw
reservebergenser