Server wide spam rules

gabrielle · Post by **gabrielle** » 20 Jun 2008, 15:47

I have the following question: Is it possible to set up server wide spam filtering rules?

For example on our server we are getting a lot of spam with the line "Win, win with us - our cool casino.." in the message text. These messages can be filtered out on an account by account basis using the account level filtering in Cpanel, but it would be very useful to be able to do this also server wide.

If I am correct, this was possible by editing the antivirus.exim file but this file is now overwritten by MS.

Thank you very much for some advice
Gabrielle

Post by **Sarah** » 23 Jun 2008, 14:53

Hi Gabrielle,

If you want to do system-wide filtering in exim you can edit the /etc/antivirus.empty file and add your filters to it, although you should keep a backup copy of it as you may need to replace it after upgrading Mailscanner.

blweb · Post by **blweb** » 22 Sep 2008, 23:18

If it is too much to ask, would it be possible to have an example of what the antivirus.empty file might contain.

Thank You.

Sarah wrote:Hi Gabrielle,

If you want to do system-wide filtering in exim you can edit the /etc/antivirus.empty file and add your filters to it, although you should keep a backup copy of it as you may need to replace it after upgrading Mailscanner.

nabuhonodozor · Post by **nabuhonodozor** » 23 Sep 2008, 06:18

I though that MS use serverwide database to fight spam - am I wrong?

Post by **Sarah** » 23 Sep 2008, 08:52

blweb wrote:If it is too much to ask, would it be possible to have an example of what the antivirus.empty file might contain.

If you're asking how to create an exim filter I'm afraid that's beyond the scope of this forum. You will find lots of information on the exim.org website and newsgroup or by doing a Google search.

If you are using MailScanner and want to filter on words in the subject or body of the email, another option would be to use Message Content Protection (MCP). Search the MailScanner configuration file for information on this. We have not used or tested it and I suspect if would significantly increase your server load, but it is a possible alternative if you want to look into it.

Regards,
Sarah

Post by **Sarah** » 23 Sep 2008, 08:55

nabuhonodozor wrote:I though that MS use serverwide database to fight spam - am I wrong?

Not sure what you mean by serverwide database. MailScanner uses a lot of tools on a serverwide basis to identify spam, including SpamAssassin (which you can fine-tune by adding or modifying SA rules and scores), Razor, DCC, and spam lists (if you have this configured). It doesn't use a database as such. As installed by us or with our free script, it does not use exim filters either except for the RBLs which we now set up by default.

Regards,
Sarah