From: Covington, Chris (no email)
Date: Thu Dec 01 2005 - 16:22:55 EST
On Thu, Dec 01, 2005 at 04:07:04PM -0500, Jorey Bump wrote:
> Covington, Chris wrote:
>
> >this constantly gets better): The database is specially-tailored to
> >our users' email patterns, and our users continually update it themselves
> >by forwarding false positives and negatives to training addresses.
> >So if you have the patience, skills and hardware required to use
> >DSPAM, go for it!
>
> Maybe I'm missing something, but a system that requires users to
> continue to handle spam (if not actually read it) *and* to learn another
> interface to train the application seems like little more than a mail
> sorting program to me.
You don't have to use DSPAM's quarantine interface. We use Exchange's
"Junk E-mail" folder which is built-in: X-DSPAM-Result: Spam will move
a message to this folder (and all X-DSPAM* headers are removed before
they hit the DSPAM servers so this can't be spoofed). The "Junk E-mail"
folder's contents are automatically expired after 30 days. This
requires Exchange event sinks, BTW. Users need to forward mistakes
to training addresses.
> I want to reject spam immediately, during the SMTP conversation. I'm
> doing that now on a low-volume site, running SA in a before-queue
> content filter using spampd. While it may be possible to do the same
> with dspam, SA bootstraps its bayesian filter with a multitude of rules,
> so no user intervention is required. For the little bit of spam that
> gets through, I can run sa-learn, or, even better, add a local rule that
> will improve the bayesian filter after a few rejections.
That might work for a smaller site, but it doesn't scale well and it
places the administrative burden on you.
--- Chris Covington IT Plus One Health Management 75 Maiden Lane Suite 801 NY, NY 10038 646-312-6269 http://www.plusoneactive.com !DSPAM:1,438f69b3289288246520239!
|
|
|