Re: [exim] gathering stats about spam plus help with filteri…

Top Page
Delete this message
Reply to this message
Author: Tony Finch
Date:  
To: martin.dm.hull
CC: exim-users
Subject: Re: [exim] gathering stats about spam plus help with filtering out spam
On Fri, 27 May 2005 martin.dm.hull@??? wrote:
>
> Can I use spam assassin (or another program) as a stand alone program to
> analyse what proportion of spam is in my mail spool?


Not easily, because the spool isn't in a standard format understood by
software other than Exim.

I don't know of a plausible way of measuring your spam throughput without
installing full-blown filters configured to just classify email (not block
it) but this will not help your servers to breathe more easily! The only
way to avoid load problems caused by spam is to increase your servers'
capacity or to block spam at SMTP time.

> Also what options are available for limiting mail coming from a certain
> host?


I committed a patch that adds a ratelimit ACL condition, which will
probably let you do what you want. The patch should apply to 4.51 OK. The
documentation for the feature is near the top.

http://www.cus.cam.ac.uk/~fanf2/hermes/doc/antiforgery/exim-ratelimit.patch

Your solution would look something like:

MAXRATE = somenumber / sometime
FAST = acl_m0

# in the acls

    warn
      ratelimit = MAXRATE / strict
      set FAST  = yes


# in the routers

  divert_fast:
    driver     = manualroute
    condition  = $FAST
    route_data = divert.host.name


Tony.
--
<fanf@???> <dot@???> http://dotat.at/ ${sg{\N${sg{\
N\}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}\
\N}{([^N]*)(.)(.)(.*)}{\$1\$3\$2\$1\$3\n\$2\$3\$4\$3\n\$3\$2\$4}}