I know how it works, but...

Management has gotten a bit paranoid after showing them how
it works.

They wish to have the ability to quarantine mails that score
enough points
in such a fashion that normal users can't rescue them, but
administrators
can.

The fear is that a user might accidentally or on purpose
rescue email with
naughty pictures or words, and offend either themselves or
their neighbors.

I have tried to point out that a score is not indicative of
the type of
content, nor does any score correlate with level of
offensiveness, nor does
a lack of spam score guarantee that something naughty might
not slip
through, but they are being obstinate on this.

Can anyone give me a way to address their wish with Maia?
Failing that, I'm
looking at a less featureful implementation with only
amavisd-new and
quarantining mail on the gateway that scores more than some
number of
points, which *still* won't protect easily-offended eyes
from the in-between
cases.


Thanks,



Kurt Buff
Lead Network Administrator
Zetron, Inc.
425.820.6363 x463
kbuffzetron.com
PO Box 97004
Redmond, WA 98073


  

_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Kurt Buff wrote:

> Management has gotten a bit paranoid after showing them
how it works.
> 
> They wish to have the ability to quarantine mails that
score enough points
> in such a fashion that normal users can't rescue them,
but administrators
> can.
> 
> The fear is that a user might accidentally or on
purpose rescue email with
> naughty pictures or words, and offend either themselves
or their neighbors.
> 
> I have tried to point out that a score is not
indicative of the type of
> content, nor does any score correlate with level of
offensiveness, nor does
> a lack of spam score guarantee that something naughty
might not slip
> through, but they are being obstinate on this.

Well, if you're in the mood to do a tiny bit of
code-hacking, it
wouldn't be too difficult to modify the SQL query that gets
used to
generate the spam quarantine list (the set_select() function
in
cache.php), such that items that score higher than X don't
get returned
unless the user happens to be an administrator.

This issue raises another possibility for future versions of
Maia,
though--the ability to quarantine not only by score, but by
"rule
class."  That is, it might be convenient for the
super-administrator to
be able to define some rule categories and then assign
SpamAssassin rule
names to those categories.  Then the quarantine rules could
be extended
such that regardless of the mail's score, a hit on any rule
in a given
category would be sufficient to quarantine it.  For
instance, you could
then define a category called, say, "Porn Rules",
and assign a bunch of
the relevant SpamAssassin rules to that category.  If you
then mark the
"Porn Rules" category as "quarantine on
sight," or somesuch, then any of
those rules triggering on an email would be enough to
quarantine it (or
discard it, or whatever).

This would have the added benefit of providing a kind of
classification
system for the spam you receive, if only for statistical
purposes--you
could pie-chart for your bosses what percentage of the spam
you receive
is porn-related, what percentage are phishing attempts,
stock fraud, etc.

- --
Robert LeBlanc <rjlrenaissoft.com>
Renaissoft, Inc.
Maia Mailguard <http://www.maiamail
guard.com/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFGJUFCGmqOER2NHewRAtf1AJ4txkEKR/XSgUV0Ch99cVsJytJWmwCf
XBYW
uIhyJZ8+oI5h+MKcusW4Fug=
=2Iar
-----END PGP SIGNATURE-----
_______________________________________________
Maia-users mailing list
Maia-usersrenaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users