Mailing List Archive: SA and Exim ACLs

SA and Exim ACLs

Feb 11, 2004, 8:50 AM

Post #1 of 4 (842 views)

The list has been discussing how to use procmail for filtering mail, but I
was wondering if anyone has used exim ACL's to do any filtering after spamc
has run on a message. What I'd like to do is look at the message's X-Spam-*
headers and if the spam score is above 20 have exim send it to the bit
bucket. Has anyone messed with this or something similar that they could
give me a starting point to look at?
--
Benjamin Story
PC Client Server Technical Analyst
Information Technology
Dot Foods, Inc.
http://www.dotfoods.com

Re: SA and Exim ACLs [ In reply to ]

D.H.Davis at bath

Feb 11, 2004, 9:15 AM

Post #2 of 4 (824 views)

Permalink

>From: Ben Story <BStory@dotfoods.com>
>To: spamassassin-users@incubator.apache.org
>Subject: SA and Exim ACLs
>Date: Wed, 11 Feb 2004 09:50:45 -0600
>
>The list has been discussing how to use procmail for filtering
>mail, but I was wondering if anyone has used exim ACL's to do any
>filtering after spamc has run on a message. What I'd like to do
>is look at the message's X-Spam-* headers and if the spam score is
>above 20 have exim send it to the bit bucket. Has anyone messed
>with this or something similar that they could give me a starting
>point to look at?

There's been a fair amount of discussion on the exim mailing list
about issues such as this and also rejecting incoming viruses. An
*excellent* solution is to use exim:

http://www.exim.org/

with the exiscan patch:

http://duncanthrax.net/exiscan-acl/

The score from spamd is available in the exim ACL section. So
there's no need to send high-scoring email to the bit bucket.
You just refuse to accept it. Then it becomes a problem for the
connecting client, not you.

Re: SA and Exim ACLs [ In reply to ]

amen at oreilly

Feb 11, 2004, 10:50 AM

Post #3 of 4 (832 views)

Permalink

Ben Story wrote:
> The list has been discussing how to use procmail for filtering mail, but I
> was wondering if anyone has used exim ACL's to do any filtering after spamc
> has run on a message. What I'd like to do is look at the message's X-Spam-*
> headers and if the spam score is above 20 have exim send it to the bit
> bucket. Has anyone messed with this or something similar that they could
> give me a starting point to look at?

Another package (other than exiscan) is sa-exim (http://sa-exim.sf.net/
or http://marc.merlins.org/linux/exim/sa.html). I'm installing that
almost as I type. It has built in ACL definitions in the distro and
allows you to, accept, temporarily reject (400 error) permanently reject
(500 error) or tarpit (teergrube) based on score.

Cheers,
Bob
--
Bob Amen
O'Reilly Media, Inc.
http://www.ora.com/
http://www.oreilly.com/

Re: SA and Exim ACLs [ In reply to ]

steven at mrchuckles

Feb 11, 2004, 12:13 PM

Post #4 of 4 (827 views)

Permalink

Ben Story wrote:
> The list has been discussing how to use procmail for filtering mail, but I
> was wondering if anyone has used exim ACL's to do any filtering after spamc
> has run on a message. What I'd like to do is look at the message's X-Spam-*
> headers and if the spam score is above 20 have exim send it to the bit
> bucket. Has anyone messed with this or something similar that they could
> give me a starting point to look at?

Exiscan-ACL will do this as well as virus scanning and bouncing, etc.
SA-Exim does similar things, but uses it's own configuration, not Exim's
ACLs. Both of these packages run at SMTP time.

If you want to do it after the message has been received (if you're
running SpamAssassin through an Exim transport or something), use a
system or user filter.

Steven
--
Steven Dickenson <steven@mrchuckles.net>
http://www.mrchuckles.net