Re: Help with a rule
makes sense. thanks for the help guys (including those whose replies dont appear here) [EMAIL PROTECTED] wrote: Matthew.van.Eerde wrote: Yusuf Ahmed wrote: SCENARIO: I am the owner of "sample.com.au". I have email accounts named "info" and "joeblow", therefore their email addresses would be [EMAIL PROTECTED] and [EMAIL PROTECTED] PROBLEM: I am getting tonnes of spam coming through to random email prefixes @sample.com.au. I would like to block all email sent to @sample.com.au except for the email addresses specified above. Hmmm... you should probably also accept [EMAIL PROTECTED] See section 4.5.1 of RFC 2821. http://www.faqs.org/rfcs/rfc2821.html Also, you should probably REJECT mail to invalid addresses at RCPT TO time. This will allow people who are legitimately trying to send you mail at a mistyped address to receive an undeliverable report, rather than assuming the message went through. Also also, what about BCC? SpamAssassin will not see the address, and therefore cannot add a score based on the address. Or what about emails To: [EMAIL PROTECTED] Bcc: [EMAIL PROTECTED] SpamAssassin will only analyze the email once, but you'll want to accept it for [EMAIL PROTECTED] and reject it for [EMAIL PROTECTED] which you can't do in SMTP after seeing the DATA anyway.
RE: Help with a rule
Matthew.van.Eerde wrote: > Yusuf Ahmed wrote: >> SCENARIO: I am the owner of "sample.com.au". I have email accounts >> named "info" and "joeblow", therefore their email addresses would be >> [EMAIL PROTECTED] and [EMAIL PROTECTED] >> PROBLEM: I am getting tonnes of spam coming through to random email >> prefixes @sample.com.au. I would like to block all email sent to >> @sample.com.au except for the email addresses specified above. > > Hmmm... you should probably also accept [EMAIL PROTECTED] > See section 4.5.1 of RFC 2821. > http://www.faqs.org/rfcs/rfc2821.html > > Also, you should probably REJECT mail to invalid addresses at RCPT TO > time. This will allow people who are legitimately trying to send you > mail at a mistyped address to receive an undeliverable report, rather > than assuming the message went through. Also also, what about BCC? SpamAssassin will not see the address, and therefore cannot add a score based on the address. Or what about emails To: [EMAIL PROTECTED] Bcc: [EMAIL PROTECTED] SpamAssassin will only analyze the email once, but you'll want to accept it for [EMAIL PROTECTED] and reject it for [EMAIL PROTECTED] which you can't do in SMTP after seeing the DATA anyway. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer
Re: Help with a rule
-Original Message- From: Yusuf Ahmed <[EMAIL PROTECTED]> To: users@spamassassin.apache.org Date: Fri, 03 Feb 2006 11:18:18 +1100 Subject: Re: Help with a rule > Yes thats what I meant - I'll add x amount of points to the rule, but > what would be a good way to write the rule? > > Postfix and MailScanner. Why bother making a rule? Unless you then add a procmail rule to delete the mail above a certain score, you'll still see it. It would be better done in your postfix. I have postfix but I used postfixEnabler (Mac GUI) to configure postfix. At least for me, it's in my aliases file. If the address isn't in my aliases file, it doesn't get delivered. I think there's a option in main.cf or master.cf to tell it to reject all other mail, but I can't tell you offhand.
RE: Help with a rule
Yusuf Ahmed wrote: > SCENARIO: I am the owner of "sample.com.au". I have email accounts > named "info" and "joeblow", therefore their email addresses would be > [EMAIL PROTECTED] and [EMAIL PROTECTED] > PROBLEM: I am getting tonnes of spam coming through to random email > prefixes @sample.com.au. I would like to block all email sent to > @sample.com.au except for the email addresses specified above. Hmmm... you should probably also accept [EMAIL PROTECTED] See section 4.5.1 of RFC 2821. http://www.faqs.org/rfcs/rfc2821.html Also, you should probably REJECT mail to invalid addresses at RCPT TO time. This will allow people who are legitimately trying to send you mail at a mistyped address to receive an undeliverable report, rather than assuming the message went through. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer
Re: Help with a rule
Yes thats what I meant - I'll add x amount of points to the rule, but what would be a good way to write the rule? Postfix and MailScanner. Evan Platt wrote: -Original Message- From: Yusuf Ahmed <[EMAIL PROTECTED]> To: users@spamassassin.apache.org Date: Fri, 03 Feb 2006 11:09:43 +1100 Subject: Help with a rule Wondering if someone can give me a hand writing a rule. I'm kind of new to this and so running into a few problems. SCENARIO: I am the owner of "sample.com.au". I have email accounts named "info" and "joeblow", therefore their email addresses would be [EMAIL PROTECTED] and [EMAIL PROTECTED] PROBLEM: I am getting tonnes of spam coming through to random email prefixes @sample.com.au. I would like to block all email sent to @sample.com.au except for the email addresses specified above. How would I write a rule for this? I'm assuming Meta rules are what I am looking for but need a bit more help. SpamAssassin cannot *BLOCK* anything. You can make a rule to add say 1000 points, but a better solution would be to properly configure your MTA to reject mail to those addresses. (you didn't mention what MTA you use).
Re: Help with a rule
- Original Message - From: "Yusuf Ahmed" <[EMAIL PROTECTED]> Hi, Wondering if someone can give me a hand writing a rule. I'm kind of new to this and so running into a few problems. SCENARIO: I am the owner of "sample.com.au". I have email accounts named "info" and "joeblow", therefore their email addresses would be [EMAIL PROTECTED] and [EMAIL PROTECTED] PROBLEM: I am getting tonnes of spam coming through to random email prefixes @sample.com.au. I would like to block all email sent to @sample.com.au except for the email addresses specified above. How would I write a rule for this? I'm assuming Meta rules are what I am looking for but need a bit more help. You would be much better off doing this through your MTA rather than SA. You should be rejecting messages at your MTA that are addressed to non-existent accounts. Bill
Re: Help with a rule
-Original Message- From: Yusuf Ahmed <[EMAIL PROTECTED]> To: users@spamassassin.apache.org Date: Fri, 03 Feb 2006 11:09:43 +1100 Subject: Help with a rule > Wondering if someone can give me a hand writing a rule. I'm kind of new > to this and so running into a few problems. > > SCENARIO: I am the owner of "sample.com.au". I have email accounts > named > "info" and "joeblow", therefore their email addresses would be > [EMAIL PROTECTED] and [EMAIL PROTECTED] > PROBLEM: I am getting tonnes of spam coming through to random email > prefixes @sample.com.au. I would like to block all email sent to > @sample.com.au except for the email addresses specified above. > > How would I write a rule for this? I'm assuming Meta rules are what I > am > looking for but need a bit more help. SpamAssassin cannot *BLOCK* anything. You can make a rule to add say 1000 points, but a better solution would be to properly configure your MTA to reject mail to those addresses. (you didn't mention what MTA you use).
