Re: Antispam solutions

From: Mark Johnston (mjohnston_at_skyweb.ca)
Date: 04/05/05

  • Next message: wendelmaques: "Re: Antispam solutions" 
    To: Phillip Salzman <phill@sysctl.net>
Date: Tue, 05 Apr 2005 11:31:59 -0500

    On Tue, 2005-04-05 at 11:00 -0500, Phillip Salzman wrote:
    > One of the goals is to prevent the mail from actually hitting our backend
    > Qmail systems, but at the same time give users the ability to weed through
    > their messages in a quarantine. Initially we wanted to deploy Spam Assassin
    > but haven't found any quarantine method available.

    I set this up a while ago, but quarantining viruses instead of spam.
    Here's what I did:

    - Amavis, with the following config for quarantine:

    @virus_quarantine_to_maps = (
      new_RE( [qr'^([^+]+)(\+[^@]*)?@(.*)$' => '${1}+quarantine@$3'] )
    );

    This just appends "+quarantine" before the @ of virus-infected mail.
    You could easily use @spam_quarantine_maps instead of @virus_... .

    - Postfix, with virtual_mailbox_maps set to a complex SQL query that
    figures out the appropriate maildir and sorts into folders based on
    +extension

    - @Mail, with IMAP access (dovecot), for users to come in and browse
    through the quarantine. Power users can also browse the quarantine with
    a regular IMAP client. Most customers use POP3 and don't get the
    quarantined messages.

    This is a pretty nifty setup, IMO - you get the full flexibility of
    Amavis to run Spamassassin and virus scanners, and trivial access to the
    quarantine via the web or via IMAP. I expect you could do the same
    thing with qmail, but using -quarantine instead of +quarantine. If you
    want to get a little fancier, you could throw together a simple
    web-based IMAP client that had "spam/not spam" buttons for learning, and
    a "rescue from quarantine" that moved the message back to the INBOX, so
    it would show up in the POP3 box.

    Hope that gives you some ideas,
    Mark

    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"

  • Next message: wendelmaques: "Re: Antispam solutions"