Guardian Digital Inc. >
InfoCenter >
Mailing List Archives >
Amavis
Amavis Mailing List Archive
> -----Original Message-----
> From: amavis-user-admin@lists.sourceforge.net
> [mailto:amavis-user-admin@lists.sourceforge.net] On Behalf Of
> Jack Vandensype
> Sent: Wednesday, December 29, 2004 10:32 AM
> To: amavis-user@lists.sourceforge.net
> Subject: [AMaViS-user] SA gateway and sa-learn -- best way to
> implement?
>
>
> Hello all,
> I currently run a RH9/Postfix/Amavis/SA box that acts as a gateway for
> my Exchange
> server and all my Outlook 2003 clients. I set amavis/SA to tag all
> messages with
> the **SPAM** tag and pass it along to Exchange where I have GFI
> Mailessentials doing
> more spam filtering. While GFI works fine, SA is not so hot.
>
> My question is if anyone can give me a broad overview of how
> best to run
> sa-learn on
> all my users' spam to make SA more effective. Can people
> forward me spam
> from their
> outlook/exchange etc.
>
> I am just a bit confused on how best to achieve the "learning" aspects
> of SA when it is
> in a gateway (MTA) configuration rather than an MDA.
>
> TIA,
> Jack
Hi Jack,
Not sure if this is the "best way" to handle "learning" in a MTA ->
Exchange setup, but it works pretty well for me.
I have setup public folders called verified_spam and verified ham, these
folders are then setup with permissions that allow everyone to create
messages, but are unable to view or delete messages. Once they drop
them into the folders, they can't touch them again. This helps solve
the issue of other users being able to view other users ham. Only
myself and one other member of IT have the ability to fully access those
folders.
The next few steps I use are very optional, but pretty much required in
my case. I then have sub-folders in each top levels folders, one for
checked external, one for missed spam, and one for sa-learn. I have
issues with users throwing internal emails, etc. into the sa-learn
folder, worthless since it does not help bayes that much and frequently
they dump valid work emails in as spam (some people just never read
their emails). So in order to combat the user side of things, I have a
couple of "rules" setup in my Outlook client that are inactive (I have
to manually run them), once a day or so I will go to the public folder
called verified spam, and run a rule on it that moves all messages that
have my SA box headers in them and move them to the sub-folder for
"check external", then I quickly check for duplicate messages and
obvious ham messages, then run the missed spam rule to copy any missed
spam to the next folder for later review (used to write custom SA
rules). The last thing to do is then to move the messages that have
been checked to make sure they were external and drop them into the
sa-learn folder. Repeat for the ham folders.
On my SA box, I use a script that pulls the messages via IMAP from
Exchange and pipes them to sa-learn, and then deletes them from the
public folder. The IMAP sa-learn script is scheduled to run every 8
hours or so via cron.
Of course this setup depends on Public Folders with the users accessing
Exchange via Outlook (MAPI connections) (but might work with IMAP
connected clients). I'm also working with a developer here in house,
and have come up with a simple add-in for Outlook that adds "learn as
spam" and "learn as ham" buttons to the standard toolbar in Outlook.
Users can then select one or multiple messages, click the spam or ham
button and it will then submit the selected messages to the public
folders. Using the buttons, spam is "moved" to the spam folder
resulting in deleting the spam from the users inbox and ham is "copied"
to the public folder in order to leave a copy of the valid message for
the user. Hopefully within the next couple of months we'll actually
release the add-in as GPL'ed software.
In a nutshell, that's how I handle the learning for my amavis/SA gateway
for Exchange.
Cheers,
Matt
-------------------------------------------------------
The SF.Net email is sponsored by: Beat the post-holiday blues
Get a FREE limited edition SourceForge.net t-shirt from ThinkGeek.
It's fun and FREE -- well, almost....http://www.thinkgeek.com/sfshirt
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
|
....