Easiest way to let Windows users set per-recipient whitelist to amavisd-new in a DMZ .

I am running Debian testing, with amavsid-new 2.4.2-5, with
postfix and
spamassassin 3.1.7. This machine sits on a DMZ, and screens
my Exchange
server. I have it set to tag all email, and to quarantine
anything over
our limits. The quarantining forwards to a special mailbox
on our
Exchange server. I then go into said mailbox everyday;
forward out the
false positives to the intended local (Exchange)
recipients.

So I am maintaining a recipient-independent (i.e.,
system-wide)
whitelist, onto which I put all false positives. I do *not*
use the SA
auto-whitelist (I've noticed problems with it at home,
wherein spam gets
auto-whitelisted, and therefore continues to always come
in).

I'm seeing more false positives, and the CEO is now pissed,
because
sometimes email to him gets quarantined, even though
previous emails
from this same sender have not been quarantined. I tried to
explain that
the tagging is on a message-by-message basis, and so some
messages may
get tagged, even though other messages from the same sender
may not.
When I see a FP, I do add the address to our whitelist. But
I think it
might be easier on the users, if they can add their own
whitelist.

I'd like to avoid using the auto-whitelist of SA, as I
mentioned. But
how can I set things up, so that my Windows users can
maintain their own
per-user whitelists? I haven't found any software that
provides any kind
of interface or ability for a Windows user to create and
maintain a
per-user recipient whitelist, with use by amavisd-new or
Spamassassin.

Thanks for any help


-- 
------------------------------------------------------------

Michael Leone, Systems Administrator 
Philadelphia Contributionship 
210 S. 4th Street, Philadelphia, PA  19106 
<mailto:mleonecontributionship.com> 
V: 215-627-1752 x1282 
F: 215-627-5354 
 

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael,

> how can I set things up, so that my Windows users can
maintain their own
> per-user whitelists? I haven't found any software that
provides any kind
> of interface or ability for a Windows user to create
and maintain a
> per-user recipient whitelist, with use by amavisd-new
or Spamassassin.

I believe the whitelisting is a drastic measure that
shouldn't need
to be used and maintained on a daily basis. When I see false
positives,
I verify why they collected such score, adjust the rules or
their
score points if the final score was unwarranted, feed ham to
bayes,
and if the sender was genuine and collected score points due
to some
obvious mistake of theirs that could be easily be avoided, I
send
them a notice.

A very successful mechanism to keep correspondence going on
between regular correspondents (reply time on the order of
weeks)
is a pen-pals mechanism, offered since amavisd-new-2.4.2,
see release notes for details. It requires an SQL database
to store sender/recipient pairs for the last couple of
weeks.

  Mark

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

-- 
------------------------------------------------------------

Michael Leone, Systems Administrator 
Philadelphia Contributionship 
210 S. 4th Street, Philadelphia, PA  19106 
<mailto:mleonecontributionship.com> 
V: 215-627-1752 x1282 
F: 215-627-5354 
  

-> -----Original Message-----
-> From: amavis-user-bounceslists.sourceforge.net 
-> [mailto:amavis-user-bounceslists.sourceforge.net] On
Behalf 
-> Of Mark Martinec
-> Sent: Tuesday, February 06, 2007 7:07 PM
-> To: amavis-userlists.sourceforge.net
-> Subject: Re: [AMaViS-user] Easiest way to let Windows
users 
-> setper-recipient whitelist to amavisd-new in a DMZ
...
-> 
-> Michael,
-> 
-> > how can I set things up, so that my Windows users
can 
-> maintain their own
-> > per-user whitelists? I haven't found any software
that 
-> provides any kind
-> > of interface or ability for a Windows user to
create and maintain a
-> > per-user recipient whitelist, with use by
amavisd-new or 
-> Spamassassin.
-> 
-> I believe the whitelisting is a drastic measure that
shouldn't need
-> to be used and maintained on a daily basis. When I see
false 
-> positives,

Here's what I've just been been told by the Management
committee:

"There was general agreement that we should be looking
for a new Spam
filter that will give the end user more control (automatic
notification
to them, ability for them to release an e-mail if they
choose, maintain
their own white list, etc.)"

And so we won't be using SA any longer. Amavisd-new will
just forward
all email to this spam filter. Or it will be out on the DMZ
instead of
amavisd-new.

Ah, well.



------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

At 11:06 AM 2/7/2007, Leone, Michael wrote:
>Here's what I've just been been told by the Management
committee:
>
>"There was general agreement that we should be
looking for a new Spam
>filter that will give the end user more control
(automatic notification
>to them, ability for them to release an e-mail if they
choose, maintain
>their own white list, etc.)"
>
>And so we won't be using SA any longer. Amavisd-new will
just forward
>all email to this spam filter. Or it will be out on the
DMZ instead of
>amavisd-new.

There are a bunch of third-party add-ons for amavisd-new
that allow 
user control of quarantine and other settings.
http://ww
w.ijs.si/software/amavisd/#contrib

Notable mentions include MailZu which interfaces to your
existing 
amavisd-new, and Maia Mailguard which is a replacement for
amavisd-new.

-- 
Noel Jones 


------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael wrote:

> Here's what I've just been been told by the Management
committee:

> "There was general agreement that we should be
looking for a new Spam
> filter that will give the end user more control
(automatic notification
> to them, ability for them to release an e-mail if they
choose, maintain
> their own white list, etc.)"

> And so we won't be using SA any longer. Amavisd-new
will just forward
> all email to this spam filter. Or it will be out on the
DMZ instead of
> amavisd-new.

> Ah, well.

Maia Mailguard may suit your particular needs, and there is
a howto on
getting it installed on an etch system:

http://www200.pair.com/mecham/spam/debian-etch-maia.html


Gary V


------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

On Wed, Feb 07, 2007 at 12:06:23PM -0500, Leone, Michael
wrote:
> 
> Here's what I've just been been told by the Management
committee:
> 
> "There was general agreement that we should be
looking for a new Spam
> filter that will give the end user more control
(automatic notification
> to them, ability for them to release an e-mail if they
choose, maintain
> their own white list, etc.)"

Just disable the whole spam filtering, and see how long
users want to put up
with the "nofications"..

I understand asking for such things if admins are clueless
and mail is
missing all the time, but in my opinion users should have
better things to
do than manage their spam. Atleast here we don't have such
problems. Few
times a week someone asks about "missing" mail
that ends up being mistyped
address or such.

Cheers,
Henrik

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

-> On Wed, Feb 07, 2007 at 12:06:23PM -0500, Leone,
Michael wrote:
-> > 
-> > Here's what I've just been been told by the
Management committee:
-> > 
-> > "There was general agreement that we should
be looking for 
-> a new Spam
-> > filter that will give the end user more control
(automatic 
-> notification
-> > to them, ability for them to release an e-mail if
they 
-> choose, maintain
-> > their own white list, etc.)"
-> 
-> Just disable the whole spam filtering, and see how
long 
-> users want to put up
-> with the "nofications"..

Longer than my continued employment here, if I were to. 

(mind you, I wouldn't mind doing that ...)

-> I understand asking for such things if admins are
clueless 
-> and mail is
-> missing all the time, but in my opinion users should
have 
-> better things to
-> do than manage their spam. Atleast here we don't have
such 
-> problems. Few
-> times a week someone asks about "missing"
mail that ends up 
-> being mistyped
-> address or such.

Certainly not here ...

Is there a way to do per-user notify of quarantining? That
much would
help, short term. YES, they'd get 37 notifications a day, as
it
quarantines 36 real spams, and 1 false positive.

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

-> 
-> Michael wrote:
-> 
-> > Here's what I've just been been told by the
Management committee:
-> 
-> > "There was general agreement that we should
be looking for 
-> a new Spam
-> > filter that will give the end user more control
(automatic 
-> notification
-> > to them, ability for them to release an e-mail if
they 
-> choose, maintain
-> > their own white list, etc.)"
-> 
-> > And so we won't be using SA any longer.
Amavisd-new will 
-> just forward
-> > all email to this spam filter. Or it will be out
on the 
-> DMZ instead of
-> > amavisd-new.
-> 
-> > Ah, well.
-> 
-> Maia Mailguard may suit your particular needs, and
there is 
-> a howto on
-> getting it installed on an etch system:
-> 
-> http://www200.pair.com/mecham/spam/debian-etch-maia.html


I saw that. What I didn't see what other details of Maia -
how do the
users connect and enter their own whitelist; how do they
release spam
from quarantine (if they do); how does it present an entry
screen; is it
a GUI entry screen (a requirement; I can just see me asking
the CEO to
type in an ASCII file of addresses ...); can you send it
emails to be
learned as ham or spam; etc.

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael wrote:

->> 
->> Michael wrote:
->> 
->> > Here's what I've just been been told by the
Management committee:
->> 
->> > "There was general agreement that we
should be looking for 
->> a new Spam
->> > filter that will give the end user more
control (automatic 
->> notification
->> > to them, ability for them to release an
e-mail if they 
->> choose, maintain
->> > their own white list, etc.)"
->> 
->> > And so we won't be using SA any longer.
Amavisd-new will 
->> just forward
->> > all email to this spam filter. Or it will be
out on the 
->> DMZ instead of
->> > amavisd-new.
->> 
->> > Ah, well.
->> 
->> Maia Mailguard may suit your particular needs, and
there is 
->> a howto on
->> getting it installed on an etch system:
->> 
->> http://www200.pair.com/mecham/spam/debian-etch-maia.html


> I saw that. What I didn't see what other details of
Maia - how do the
> users connect and enter their own whitelist; how do
they release spam
> from quarantine (if they do); how does it present an
entry screen; is it
> a GUI entry screen (a requirement; I can just see me
asking the CEO to
> type in an ASCII file of addresses ...); can you send
it emails to be
> learned as ham or spam; etc.

http
://www.maiamailguard.com/maia/wiki/AboutMaia
There is a SuSE howto .pdf that should show some screen
shots:
http://www.novell.com/coolsolutions/feature/16093.html


Gary V


------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Michael,

> Is there a way to do per-user notify of quarantining?
That much would
> help, short term. YES, they'd get 37 notifications a
day, as it
> quarantines 36 real spams, and 1 false positive.

Well, yes there is, although it is not considered to be
useful,
and spam recipient notification is empty by default.

To enable it, place the following into amavisd.conf:

------------
$warnrecip_maps_by_ccat{+CC_SPAM} = [
  [ qw(user1example.com user2example.com) ],
];

$notify_spam_recips_templ = <<'EOD';
# This is a template for SPAM RECIPIENTS NOTIFICATIONS.
Date: %d
From: %f
Subject: Spam mail TO YOU from [?%s|<>|[?%o|(?)|%s]]
To: [? %#T |undisclosed-recipients: ;|[<%T>|, ]]
[? %#C |#|Cc: [<%C>|, ]]
Message-ID: <SR%i%h>

Our content checker found spam in an email to you from %s .
Our internal reference code for your message is %n/%i

[? %a |#|[:wrap|78||  |First upstream SMTP client IP
address: [%a] %g]]
[? %e |#|[:wrap|78||  |According to a 'Received:' trace,
 the message originated at: [%e], %t]]

[? %s |#|[:wrap|78||  |Return-Path: %s]]
#
[~[:header_field|Authentication-Results]|["\b(?i)(doma
inkeys|dkim)=pass\b"]|
["[? [:header_field|From] |#|[:wrap|78||  |From:
[:header_field|From]]]
[? [:header_field|Sender] |#|[:wrap|78||  |Sender:
[:header_field|Sender]]]
[:wrap|78||  |Authentication-Results:
[:header_field|Authentication-Results]]
"]]#
[? [:useragent] |#|[:wrap|78||  |[:useragent]]]
[? %m |#|[:wrap|78||  |Message-ID: %m]]
[? %r |#|[:wrap|78||  |Resent-Message-ID: %r]]
[? %j |#|[:wrap|78||  |Subject: %j]]
[? %q |Not quarantined.|The message has been quarantined as:
%q]

Please contact your system administrator for details.
EOD

------------

Replacing one spam with another junk notifications is not
considered
of much use, it is better to just deliver spam, either
tagged
in the header, or redirected to a dedicated mailbox,
and let recipient quickly glance at the contents and easily
discard it.

  Mark

------------------------------------------------------------
-------------
Using Tomcat but need to do more? Need to support web
services, security?
Get stuff done quickly with pre-integrated technology to
make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on
Apache Geronimo
http://sel.as-us.falkag.net/
sel?cmd=lnk&kid=120709&bid=263057&dat=121642

_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/