Overwhelmed Users

Tony Rodasta wrote:
> We have Postfix + Amavis-new + ClamAV + SpamAssassin
under the 
> umbrella of Maia Mailguard, and I need to start off by
saying that it 
> is working great. Almost too great. Some users are
receiving over 100 
> spam e-mail per day. The complaint is that since the
spam e-mail is 
> dumped to their Junk Mail folder in GroupWise, having
to search 
> through all that spam e-mail daily (to ensure there are
not any false 
> positives) is a chore and I have been asked if there is
a way to 
> reduce the amount of spam e-mail that reaches the
users. I have the 
> domain set to add headers >= -999.000, consider spam
when >= 5, and I 
> have to have the quarantine spam >= 999.00. Is there
a way to 
> over-ride the quarantine spam score? If not, is there
another way to 
> do this? I would eventually like to quarantine anything
with a score 
> >= 18.000 and leave the rest to be delivered and
dealt with the client.
In the current version (1.0.1) there is no facility for
two-tiered spam 
actions.  You can either label OR quarantine, but not both. 
What I 
would suggest doing is quarantining and using digest feature
to send an 
email to each user at a pre-determined period (say every
3600 minutes or 
1800 minutes--I agree that this should be changed to hours).
 The email 
arrives with a list of spam and non-spam (spam first) sorted
by score 
(lowest spam score first).  If everything looks OK, the user
has one 
button click to approve the items as is.  Otherwise users
can be 
directed to the Maia interface to make corrections to
mislabeled items.

Future versions of Maia may include a multi-tiered approach
(how is the 
roadmap these days?).

Hope that helps.

Darrick

-- 
Darrick Hartman
DJH Solutions, LLC
http://www.djhsolutions.c
om

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

>>> On Tue, Nov 21, 2006 at  2:50 PM, in message
<45632E4A.56A5.00E6.0ecc.net>,
"Tony Rodasta" <TRodastaecc.net> wrote: 
> The 
> complaint is that since the spam e- mail is dumped to
their Junk Mail folder in 
> GroupWise, having to search through all that spam e-
mail daily (to ensure 
> there are not any false positives) is a chore and I
have been asked if there 
> is a way to reduce the amount of spam e- mail that
reaches the users. I have 
> the domain set to add headers

Tony,

I'm interested in the overall answer to this as well,
however, perhaps turning on user accounts and digests would
be more helpful.  Digests send the users a "list"
of the mail that was blocked for them (as often as the user
chooses), but the digests rather than being FIFO are sorted
by spam score. So if instead of just looking in the
GroupWise Junk Mail folder (which cannot sort on the spam
score), the user receives an HTML email that has all of the
junk sorted by score, it becomes easier.  It will be QUITE
rare for a real message to receive more than an 8 or 9 score
even if they get on an RBL if it really isn't spam.  So
users have fewer messages to "look through" (at
least once they gain some confidence in the digest), because
they soon realize that they only need to look at about 3 or
4 of the spam at the top of the list to see if they might be
accidentally caught. Not only that, but they can then just
click a link to whitelist that sender, and never have to
worry about it
  being blocked again.

Danita


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


On Nov 21, 2006, at 7:50 PM, George Armstrong wrote:

> Also have the same question - User Concern, We too are
using Maia  
> 1.0.1 with Amavis-new, Clam AV, Spamassassin. From the
excellent  
> Docs by Stephen Carter  http://www.retnet.co.uk/
>
> Some of the users get their Spam dumped to their junk
folder others  
> do not (Myself included) do not (Running GW 7.01) with
Maia and  
> company as a separate Gateway in front of GroupWise.
>
> How do I prevent or allow the spam to be sent to the
junk mail box?
>

What the mail client does with mail once it is delivered is
beyond  
the scope and reach of Maia.   I imagine that the groupwise
mail  
client has a junk mail setting.

If mail is being delivered to their junk mail box, it must
be that  
you are labeling and not quarantining.  Each user can set
this in  
their own settings using the web interface; this is what
Maia is  
designed to do.   I much prefer to let Maia quarantine the
email on  
the server so my email client never even has to deal with
it.


David Morton
Maia Mailguard http://www.maiamailguard
.com
mortondadgrmm.net



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iD8DBQFFY8M0Uy30ODPkzl0RAjMtAJ9DhqCqgEiRv4xx5pKeWHB6BsFrqgCg
l9YU
uRKfUCiKg6D28VQ1NOHez3c=
=VW8U
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

> a lot about Exchange and with their IMF filter they
have two different
> methods for handling what is Junk.  One is to move it
to the Junk Email
> folder, the other is to just archive it so the user
never sees it.  Is

Groupwise can only move to the Junk Mail folder if the
X-SPAM heading defined is positive.  So if you get 300 spam
a day, they all go in to the Junk Mail folder.  I think Tony
just hasn't gotten his head around the idea yet that the
digest is actually "easier" than looking in that
folder.  I actually am a GroupWise consultant, and deal with
the product all of the time, and I personally think the
digest is MUCH easier than having it in the junk mail
folder, and I've convinced just about all of my clients that
mark and deliver is totally unnecessary in their
environments.  I'm sure there will be users that dislike the
digest as much as there are users that dislike the Junk Mail
folder, but all in all I think the digest over time becomes
the favorite.

Danita 


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

>>> On Tue, Nov 21, 2006 at  6:50 PM, in message
<456366A1.87FD.0029.1mw.k12.ny.us>,
"George Armstrong" <garmstromw.k12.ny.us>
wrote: 
> How do I prevent or allow the spam to be sent to the
junk mail box?

Since you are asking about GroupWise, there are only three
ways that the mail will go into the Junk Mail folder.

1) - you have enabled the /xspam option in your gwia.cfg (or
in ConsoleOne) - this will force all mail (except mail that
is on the "trusted list") to go into the Junk Mail
folder if the X-Spam setting in the header is
"yes" (that's simplistic, there are various x-spam
settings you can check for - but we won't get into that here
<g>).

2) - users have created rules that are putting messages that
show "spam" in the subject into the Junk Mail
folder.

3) - users have enabled the Junk Mail folder and are placing
addresses in their own junk/block/trust lists and those
messages are going in there.

If you do not, and others do get their mail in the junk mail
folder, I would suspect #2 above - some savvy users have
decided to put their junk mail in there via a rule. 
However, if you want this to happen for everyone, do #1
above.

Danita


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

This thread has confused me a little.   there are 3 numbers
of interest:

1) At what point to add scanning headers
2) At what point to add [SPAM] to the headers ( or whatever
you want)
3) At what point to not deliver the mail and quarantine it

Is this correct?
Isn't that 2 tier filtering?

Danita Zanre wrote:
>>>> On Tue, Nov 21, 2006 at  6:50 PM, in
message
>>>>         
> <456366A1.87FD.0029.1mw.k12.ny.us>,
"George Armstrong" <garmstromw.k12.ny.us>
> wrote: 
>   
>> How do I prevent or allow the spam to be sent to
the junk mail box?
>>     
>
> Since you are asking about GroupWise, there are only
three ways that the mail will go into the Junk Mail folder.
>
> 1) - you have enabled the /xspam option in your
gwia.cfg (or in ConsoleOne) - this will force all mail
(except mail that is on the "trusted list") to go
into the Junk Mail folder if the X-Spam setting in the
header is "yes" (that's simplistic, there are
various x-spam settings you can check for - but we won't get
into that here <g>).
>
> 2) - users have created rules that are putting messages
that show "spam" in the subject into the Junk Mail
folder.
>
> 3) - users have enabled the Junk Mail folder and are
placing addresses in their own junk/block/trust lists and
those messages are going in there.
>
> If you do not, and others do get their mail in the junk
mail folder, I would suspect #2 above - some savvy users
have decided to put their junk mail in there via a rule. 
However, if you want this to happen for everyone, do #1
above.
>
> Danita
>
>
> _______________________________________________
> Maia-users mailing list
> Maia-usersrenaissoft.com
> http://www.renaissoft.com/mailman/listinfo/maia-users
>
>
>   


_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Munroe wrote:
> This thread has confused me a little.   there are 3
numbers of interest:
> 
> 1) At what point to add scanning headers
> 2) At what point to add [SPAM] to the headers ( or
whatever you want)
> 3) At what point to not deliver the mail and quarantine
it
> 
> Is this correct?
> Isn't that 2 tier filtering?

No, in current versions the spam destiny--Labeled,
Quarantined, or
Discarded--determines which of those threshold scores should
be used and
which should be ignored.  Only one destiny can be specified
for a given
type of mail (viruses, spam, banned attachments, invalid
mail headers).

The upshot is that if you choose 'Labeled' as your spam
destiny, then
the quarantine/blocking threshold becomes irrelevant and
potentially
confusing, so it gets forced to a high value (999) to ensure
that all
spam gets delivered (with labeling), as expected.

Similarly, if you choose 'Quarantined' or 'Discarded' as
your spam
destiny, then the two latter thresholds (the point at which
mail is
determined to be spam, and the point at which action gets
taken to block
delivery) are forced to be identical in order to ensure that
nothing
that's considered spam gets delivered, as expected.

The forcing of rational thresholds according to the
specified spam
destiny is a safeguard against the quirky behaviours that
can result
from inconsistent threshold and destiny settings.  Without
it, you could
configure your thresholds in such a way that a whole score
range had no
associated destiny--or worse, a destiny that contradicted
what you'd
specified.  This leads to "surprising" behaviour
that can be tricky to
diagnose, leaving novice administrators struggling to
explain why /some/
mail seems to be mishandled, while the rest of the mail gets
processed
as expected.

What you (and many other people) are looking for is the
ability to
specify multiple spam destinies--one for each score range. 
Advanced
users in particular want this flexibility, and we mean to
provide it in
an upcoming version of Maia, by using three thresholds to
define four
score ranges:

  High-Probability Ham (HPH)
  Low-Probability Ham (LPH)
  Low-Probability Spam (LPS)
  High-Probability Spam (HPS)

Each score range will have its own configurable destiny,
with a
drop-down list of options that make sense for that range.

- --
Robert LeBlanc <rjlrenaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iD8DBQFFbH+mGmqOER2NHewRAhscAJ9vaA5McGESSHhcfJtgv4dLBU0bzwCg
r1Ig
zTgulYEvKtloDSXsHpu3rRg=
=WpLT
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users