> -----Original Message-----
> From: Mark Williams [mailto:[EMAIL PROTECTED]
> Sent: Friday, July 29, 2005 5:34 AM
> To: Loren Wilton
> Cc: users@spamassassin.apache.org
> Subject: Re: Relearning/routing spam/ham with Outlook client
>
> I like the sound of option 1 for our organisation. Here is my
> thinking:
>
> 1. Have users create a new mail message and attach the "spam"
> message to it. Send the message with attachment to
> [EMAIL PROTECTED]
It is easier to teach users to wait for at least TWO messages;
multiple selection pressing Ctrl-F acts differently than when
viewing a single message or selected on only one if the browse
pain.
I use z_Spam to get it sorted away from "real users" -- some
of my command line tools on the server take advantage of that
pattern to check these "special users or directories."
Also watch out that the Spam (and Ham) accounts receive only
from authenticated users but do NOT filter out any email otherwise.
(You don't want spammers sending to ham or spam, and you don't
want to hit any filters on those accounts -- many times I will
have improved the filters before the user actually sends the
email back so bouncing it to them is rude.)
> 2.Use Procmail to make sure there is an attachment. If no
> attachment send received message to /dev/null and send new
> message back to sender advising them of actions taken/to take.
message/rfc822 attachments to be precise since a regular
message frequently has ordinary attachments (and might even
have these as well.)
I also tell my uses to use a SPECIAL subject OR leave it blank.
The subject line plus the message/rfc822 seems reliable enough
for this purpose -- and they like leaving it blank.
> 3. If there is an attachment detach it and put it in the
> /home/spam/mail directory.
If they select multiple messages when sending there may be
MANY attachments -- which is easy to deal with also.
> 4. Use cron job to sa-learn these messages.
I just learn them while detaching them but any way that
works for you.
> Issue(s):
>
> munpack is installed. I have had several attempts at
> modifying my /etc/procmailrc file to no avail. Can anyone
> offer me some advice on Procmail to detach all attachments
> from incoming e-mails to [EMAIL PROTECTED] into the
> /home/spam/mail directory
Not a procmail guy. Sorry.
I use a perl script for that.
There are better, but these few lines will do the job:
#!/usr/bin/perl -w
use MIME::Parser;
my $parser = new MIME::Parser; # Create parser
$parser->output_dir("./tmp"); # Tell it where to output
$parser->extract_nested_messages(0); # Extract messages whole?
$entity = $parser->parse(\*STDIN); # Parse an input filehandle
--
Herb Martin
