Cloning/Splitting Mail at SMTP level

Hello all!

    I've just subscribed to this mailing list to receive
help with the 
MIMEDefang process and to see if anyone has came across the
current 
scenario that I have.
We currently have a decent amount of customers on our
mailing system.  
Our spam has decreased some since the application of our
spam appliance 
but would like to test
issues further with comparing spam messages tag as spam to
the original 
email it originated from.  Obviously this would be a per
user basis as 
we have honey pots that continually get new spam.

    After a couple hours of searching on the Internet I've
come up with 
this mailing list, and was wondering if anyone has used
MIMEDefang in an 
application similar to this situation?  Can MIMEDefang do
these 
processes at the SMTP level so mail that comes in get's
scanned by our 
spam appliance, and also send to another external account
for analysis? 
Thanks to all in advance

Jeremy Phillips
Unix Administrator
Cass Internet
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang

Jeremy Phillips spake the following on 3/6/2007 9:41 AM:
> Hello all!
> 
>    I've just subscribed to this mailing list to receive
help with the
> MIMEDefang process and to see if anyone has came across
the current
> scenario that I have.
> We currently have a decent amount of customers on our
mailing system. 
> Our spam has decreased some since the application of
our spam appliance
> but would like to test
> issues further with comparing spam messages tag as spam
to the original
> email it originated from.  Obviously this would be a
per user basis as
> we have honey pots that continually get new spam.
> 
>    After a couple hours of searching on the Internet
I've come up with
> this mailing list, and was wondering if anyone has used
MIMEDefang in an
> application similar to this situation?  Can MIMEDefang
do these
> processes at the SMTP level so mail that comes in get's
scanned by our
> spam appliance, and also send to another external
account for analysis?
> Thanks to all in advance
> 
> Jeremy Phillips
> Unix Administrator
> Cass Internet
There is a program called roundhouse that can do what you
want.
http://
www.snertsoft.com/sendmail/roundhouse/


-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't!!!!

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang

Jeremy Phillips wrote:

>    After a couple hours of searching on the Internet
I've come up with
> this mailing list, and was wondering if anyone has used
MIMEDefang in an
> application similar to this situation?  Can MIMEDefang
do these
> processes at the SMTP level so mail that comes in get's
scanned by our
> spam appliance, and also send to another external
account for analysis?

Sure.  Pseudocode in filter_end:

foreach my $recip (Recipients) {
	add_recipient(localpart($recip) . 'test.example.com');
}

You then configure a box to accept mail for
"test.example.com"

--
David.
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang

David F. Skoll wrote:
> Jeremy Phillips wrote:
> 
>>    After a couple hours of searching on the
Internet I've come up with
>> this mailing list, and was wondering if anyone has
used MIMEDefang in an
>> application similar to this situation?  Can
MIMEDefang do these
>> processes at the SMTP level so mail that comes in
get's scanned by our
>> spam appliance, and also send to another external
account for analysis?
> 
> Sure.  Pseudocode in filter_end:
> 
> foreach my $recip (Recipients) {
> 	add_recipient(localpart($recip) . 'test.example.com');
> }
> 
> You then configure a box to accept mail for
"test.example.com"

Is anyone doing something like this to have archive/backup
copies or 
comply with email retention regulations?  In that case you'd
have to 
treat local and remote recipients differently.

-- 
   Les Mikesell
    lesmikesellgmail.com
_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang

----- Original Message ----- 
From: "Les Mikesell" <lesfuturesource.com>
> David F. Skoll wrote:
> > Sure.  Pseudocode in filter_end:
> >
> > foreach my $recip (Recipients) {
> > add_recipient(localpart($recip) . 'test.example.com');
> > }
> >
> > You then configure a box to accept mail for
"test.example.com"
>
> Is anyone doing something like this to have
archive/backup copies or
> comply with email retention regulations?  In that case
you'd have to
> treat local and remote recipients differently.

Yes, I am. I generating one hash lookup table of all
mailboxes that require
a copy to be made.
After resolving all my aliases to a mailbox, I add_recipient
for
'mailbox'copydomain.com if I find it in my hash table.
Naturally, I only apply this to domains I am accepting email
for and I don't
allow mailbox LHS clashes across my different domains.
It gets a little more complex without that restriction.

Cheers
Roland

_______________________________________________
NOTE: If there is a disclaimer or other legal boilerplate in
the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpengu
in.com
MIMEDefang mailing list MIMEDefanglists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mime
defang