> We use the Info Manager and Rules so that when an e-mail is flagged > as spam (checking the header for X-IMail-Spam), we move it to a > sub-folder for that user called "Spam." Then, and only for one > client, we use the Info Manager to send an e-mail to sender that it > was caught.
It's impressive that you can get away with this method (which we can generically call "alerting," the Declude term) at all! When we first splashed down with Declude a couple of years ago, we enthusiastically put alerts in place at our clients, but the feedback was...shall we say...strongly in the negative. Even tuning it down so that alerts were only sent once per month per sender IP was deemed intrusive, insulting, etc. Then again, if your client is always the dominant player in its business communications, or largely receives personal mail, it might _seem_ to work without outright complaints. The outgoing mail load also might be easily handled by your server on the purely technical level. But, as others have already pointed out, you are spamming anyone who did not actually originate a message that triggers an alert. More important, though, is what you're _getting_ out of alerts? Their only function, even in fantasy, is to indirectly escalate remote configuration issues to IT personnel. Has your client actually thought that through? Do they care? When you deliver to a submailbox, you're already deferring total control to the client. The only difference in resource utilization between submailbox delivery and standard mailbox delivery would be if you are aging items out of the subfolder periodically, which _might_ keep messages from being opened or downloaded and save the associated resources a bit. But if your users are always checking the submailbox, why do they need more? > The problem we have now is that we have almost all the options > turned on in IMail Anti-Spam but a ton still gets through. Well, that's basically the opposite issue. You seem to be mixing fear of false positives, which, which you _already_ take more than adequate measures against by _delivering_ suspected spam to a submailbox (what more do they need?), with a desire to reduce false negatives. --Sandy ------------------------------------ Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
