NAME

SyslogScan::Daemon::SpamDetector::Filter - filter reports

SYNOPSIS

plugin SyslogScan::Daemon::SpamDetector as sd_

sd_plugin SyslogScan::Daemon::SpamDetector::Filter status spam match SpamAssassin field relayname acceptfirst 1 accept '(?:\bdynamic\b|\badsl\d*\b|\bcable\b|\.dhcp\.|\.dyn\.)' deny '.' debug 0

DESCRIPTION

SyslogScan::Daemon::SpamDetector::Filter looks at spam reported via SyslogScan::Daemon::SpamDetector's process_spam_match() function. It acts as a filter and can block reports.

This module can be used with the SyslogScan::Daemon::SpamDetector::SpamAssassin module and the SyslogScan::Daemon::SpamDetector::BlockList module to prevent too many sites from being blocked. The configuration in the "SYNOPSIS" is an example of how to do this.

CONFIGURATION PARAMETERS

The following configuration parameters are supported:

debug

Debugging on (1) or off (0).

logname

A string to prepend to debug and log output. (Default: FILTER)

status

What kind of report are we looking at? Choices are: ham, spam, or idmap. (Default: spam). When called from SyslogScan::Daemon::SpamDetector::BadAddr, the status will be badaddr.

match

What kind of match are we looking at? Each module that makes reports sets this parameter. Current choices are: SpamAssassin, Postfix, Sendmail, SpamSink, and various BadAddr::*. A regualar expression match is done on this field. No default.

field

Which field from %info will we examine with the accept and deny regular expressions? No default.

accept

What is the regular expression for passing this filter?

deny

What is the regular expression for being rejected by this filter?

acceptfirst

Check the accept expression first? (Default: 1).

SEE ALSO

SyslogScan::Daemon::SpamDetector SyslogScan::Daemon::SpamDetector::SpamAssassin SyslogScan::Daemon::SpamDetector::BlockList

THANK THE AUTHOR

If you need high-speed internet services (T1, T3, OC3 etc), please send me your request-for-quote. I have access to very good pricing: you'll save money and get a great service.

LICENSE

Copyright(C) 2007 David Muir Sharnoff <muir@idiom.com>. This module may be used and distributed on the same terms as Perl itself.