RE: [vps-mail] procmailrc and includerc question

["Jim Smith" <maillists@xxxxxxxxxxxxxxxx>]

> The answer to that is to write your own SA rules rather than trying to
> fudge round it with procmail. > - -- 
> G. Stewart - gstewart@xxxxxxxxxxx

Godwin,
Thanks for the alternative but I already considered that. I can't customize
rules SA for certain people and not others without creating a security risk
in the user_pref files. I also can't create an include file for SA. 

The way I use it is that I have SA for everyone unless they opt out of it.
For heavy hitters (myself included), I add procmailrc includes which
reference an ongoing file list of subject, and one of body, and one of
from's. When I start getting annoyed by a spam that is getting by SA, I put
the rule in the bottom of my master includes knowing it won't bother me or
others any more. Once in a while I stick something in there that snags legit
messages. I wade through their log files for body, subject, and from, to see
if I can find where it is tagging. It would be so much easier if I could
narrow it down by asking the client to look at the headers and tell me if
they see a BL_body, BL_subject, or BL_from in there. With that, I don't need
to search the logs. If there is something in the body, I offer to remove
that procmail include or whitelist those emails if it is only one that is
getting caught. If several are getting tagged with the body filters, I know
I must have recently added something that I shouldn't. If it is a "from" or
"subject", I can ask them to read me the from or subject and I can do a
quick search of the appropriate include file to find the rule and either
disable it or adjust it (or if they like getting email from a known spammer,
I can disable that rcinclude in their procmailrc file.

For that longwinded reason <grin>, I'd prefer to use procmail rather than SA
(plus it uses a lot less resources for that). That is also the reason I'd
rather have it in the header of the email rather than using Scott's
suggestion of looking through a variety of log files (verbose ones at
that!). 

Thanks.

Jim Smith




========================================================================
This is <vps-mail@xxxxxxxxxxxxx>  <http://groupmail.org/lists/vps-mail/>
Before posting a question, please search the archives (see above URL).