NMS 4 UBEfilter.cfg in JES?

We has a spam filter in Netscape messaging server 4.1, use UBEfilter.cfg, I put spammer subject key word there, filter a lot spam, drop in a center mailbox, then I clean them later.

Wondering how to implement it in JMS 2005Q4?

I am going to use SpamAssassin (addtag), let user to handle the spam, but for some known spam, I would like drop them in a center mailbox, then I clean them later, before deliver to user.

[433 byte] By [Jerry_Goconnect] at [2007-11-26 11:02:04]
# 1

Hi,

You need to be a bit more specific. What exactly was in the UBEfilter.cfg and what was the filtering based on (e.g. RBL lists/SpamAssassin scores). Although I used to use NMS4.15 that was a long time ago (pre-lots of spam so I didn't need to use the UBE facilities).

With regards to dropping the emails into a central mailbox, this should be possible using a redirect sieve action. The problem is how can you know who to deliver the emails to later? The envelope rcpt to: information would have been lost.

Much better to just deliver to a users spam folder, which has some kind of expiry rule set (e.g. emails in that folder older then 30 days are deleted) and let the user take care of the email themselves. Power to the people ;)

Regards,

Shane.

shane_hjorth at 2007-7-7 3:15:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 2
Shane, the old UBE filter allowed some minimal header testing for keywords. It didn't work all that well, and required full restarts for any changes.I suspect you could build Sieve rules to replace it pretty easily.
jay_plesset at 2007-7-7 3:15:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 3

here is some entry of my UBEfilter.cfg for NMS 4.1, it can not handle tone of spam, but still can kill some high risk virus/spam that we don't want to deliver to my user.

:"noBlockIPRange" Host-From "210.50.199.*" EXIT

:"admin" User-From "admin@*" DROP "dumpmail"

Subject "Bank[ :]* URGENT SECURITY NOTIFICATION" DROP "dumpmail"

Subject "Commonwealth Bank: C[lI]ient's Data Verification" DROP "dumpmail"

Subject "^(Re: )*V[a-z]*A[a-z]*G[a-z]*R[a-z]*A$" DROP "dumpmail"

$ANY "GLOBAL AUSTRIAN SYNDICATE" DROP "dumpmail"

$ANY "(Microsoft Corporation)(.*)(Security)" DROP "dumpmail"

Could you give me a sample sieve script to handle these case? Any where can I find a good tutorial for Sieve script? SpamAssassin only return score, how let it sort spam to centre mailbox, instead of user's mailbox? I guess it should be done in spamfilter1_string_action, but I don't know how:-( please give me a sample, Thanks!

Jerry_Goconnect at 2007-7-7 3:15:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 4

I got idea from this post

http://forum.sun.com/jive/thread.jspa?threadID=109607&tstart=0

as Shane said, create spamassassin.filter

and modify ims-ms channel

destinationfilter file:IMTA_TABLE:spamassassin.filter

put whatever sieve script I need in the spamassassin.filter

use {redirect "dumpmail@mydomain.net"} to drop in centre mailbox.

Browse RFC3028, found lots example, need to study more.

Jerry_Goconnect at 2007-7-7 3:15:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...
# 5

Hi,

For the pattern matching style rules, it is much better including them as SpamAssassin header/body checks and giving those checks a high score so the emails are marked as spam. You can use sieve filters for the header checks but its more efficient to just use SpamAssassin if you are already checking the emails.

With regards to the blocking of IP addresses, you can do this using a mappings table entry e.g.

PORT_ACCESS

! Remove leading ! to activate rule

! TCP|*|25|210.50.199.*|* $N500$ IP$ Address$ Blocked

Note I included the ! because the forum strips out spaces otherwise.

Regards,

Shane.

shane_hjorth at 2007-7-7 3:15:46 > top of Java-index,E-Mail, Calendar, & Collaboration,Sun Java System Messaging Server...