RE: Sitewide SA implementation question

2004-11-10 Thread Bowie Bailey
From: Kang, Joseph S. [mailto:[EMAIL PROTECTED]
> 
> At this point, I've made scanning of messages for my users to be
> entirely opt-in.  All mail users (about 30 total) have local server
> accounts but the messages get sent on to an internal MS Exchange
> server via .forward files.  So, those users who do opt to have
> their messages scanned by SA get a "canned" .procmailrc that I've
> created placed into their homedirs.
> 
> So, now I want to move to a configuration where I could
> surreptitiously scan ALL incoming messages and, via
> /etc/procmailrc, dump those that score above a certain threshold
> before handing off to the user's .procmailrc.
> 
> What I'm worried about is that by doing this I will hit the
> condition where messages get scanned twice.  
> 
> And, I'd like to avoid having to require any user intervention
> (editing their .procmailrc files) to make this happen.  Most of my
> users' .procmailrc files are under my control.  A few users,
> including myself, are more advanced.

I would suggest that you scan and tag all incoming messages.  Don't
make any subject or body changes, just let SA add the headers.  Then
your global procmailrc can drop the high-scoring spam and your users
.procmailrc can use the same headers for further processing if they
want to sort out the spam or drop more of it.  This way the headers
are always there and the users can either take advantage of the spam
scan or ignore the headers.

Bowie


Sitewide SA implementation question

2004-11-10 Thread Kang, Joseph S.
All:

It's been awhile since I actually had a question about SA.  Also, I'm not
sure if this is a SA question or more a Procmail question.  I think it's a
bit of both...

So, I'm running sendmail and have implemented SA 2.64 (spamc/spamd) via
procmail.  SA is set up with sitewide Bayes and NO per users SA prefs.  

At this point, I've made scanning of messages for my users to be entirely
opt-in.  All mail users (about 30 total) have local server accounts but the
messages get sent on to an internal MS Exchange server via .forward files.
So, those users who do opt to have their messages scanned by SA get a
"canned" .procmailrc that I've created placed into their homedirs.

So, now I want to move to a configuration where I could surreptitiously scan
ALL incoming messages and, via /etc/procmailrc, dump those that score above
a certain threshold before handing off to the user's .procmailrc.

What I'm worried about is that by doing this I will hit the condition where
messages get scanned twice.  

And, I'd like to avoid having to require any user intervention (editing
their .procmailrc files) to make this happen.  Most of my users' .procmailrc
files are under my control.  A few users, including myself, are more
advanced.

Is this possible?  Or, no matter what, will it require some sort of end user
PROCMAILRC file editing?

Or am I thinking about this all wrong?  

Thanks in advance!

Joe K.
Systems Administrator
Network Executive Software, Inc.
888-604-5573 / postmaster(at)netex(dot)com