jhardin at impsec
Apr 8, 2010, 6:22 AM
Post #5 of 5
(538 views)
Permalink
|
On Thu, 8 Apr 2010, ram wrote:
> On Thu, Apr 8, 2010 at 12:27 AM, John Hardin <jhardin [at] impsec> wrote:
>
>> On Wed, 7 Apr 2010, ram wrote:
>>
>>> i need to created seperate user for this like spam [at] domain, is this
>>> correct.
>>
>> No, you don't _need_ a special user in your domain to catch spam for
>> training. There are ways to do that, look up "spamtrap" for instance.
>
> But as per the document domain wide, user need to create
> and as the users to forward the spam mail to that user and learn.
>
> correct me if my understand wrong
Oh. I misunderstood what you were saying, sorry.
Creating a spam account for your users to forward messages to is one way
to do this, yes.
>>> so all my users are using Outlook express, when they see some message
>>> is spam how can i ask them to report back so that create rules based
>>> on that
>>
>> How are your users retrieving their mail from the server? POP or IMAP?
>>
>> If they are using POP then it becomes difficult, as the mail client
>> will unavoidably mangle the spam messages when your users try to send
>> them to you to be learned. I'll let others who actually use POP comment
>> on that.
>
> 90% of my users are Outlook express.. people on the roam use Imap, but its
> only 20%, but iam more concern people using OE.
"My users use Outlook Express" tells us as much as "my users use
Thunderbird". The mail client they use doesn't have a lot of bearing on
the design of your mail system.
How do the Outlook Express users access their mailboxes? POP or IMAP?
I expect they use POP, that's the most common method.
> i appriciate if some one using this kind of setup.
>
>> If you are using IMAP it becomes really easy. Just set up a
>> SpamAssassin-SPAM mail folder for each user, tell them to _move_ spams from
>> their inbox to that folder, and train from it nightly. Poke around under
>> http://www.impsec.org/~jhardin/antispam/ for some scripting that you can
>> use as a starting point.
>
> thanks for the link, let me see what best i can do for the users who
> using IMAP
For POP users, the general model is to have them forward spams _as
attachments_ (if they don't forward them as attachments they are useless)
to the spam account, then there is a script that extracts the attachments
from those messages and learns them.
I don't use POP so I can't provide an example.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhardin [at] impsec FALaholic #11174 pgpk -a jhardin [at] impsec
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
If someone has a gun and is trying to kill you, it would be
reasonable to shoot back with your own gun.
-- the Dalai Lama, May 15, 2001
-----------------------------------------------------------------------
5 days until Thomas Jefferson's 267th Birthday
|
