[rt-users] Spam. Enough?

[Chris Hardie]

On Fri, 11 Apr 2003, shimi wrote:

>
> What would you guys suggest for handling spam?
>
> I mean, I don't want it even to get a ticket opened.
>
> What would be the best approach? Procmail? Scrips?

SpamAssassin is a good first approach.  We use an alternate method I
thought I'd throw out:

When a message first comes into our qmail mail server (destined for RT or
not), we check it against several RBLs, and append an "X-RBL" header for
each RBL where IP addresses in the headers of the message are blacklisted.
(This is nice for user-level filtering too.)

We then use TMDA <http://tmda.net/> to confirm any sender with an RBL
listing before their message is inserted to RT.  The end result is that
anyone can get through to RT if they want to (well, unless they're on our
TMDA blacklist), but senders from known spam-related IPs have to take one
extra step to confirm that they're legit.

These policies could obviously be tweaked according to your needs:
everyone has to confirm themselves first, relax the criteria for requiring
confirmation, etc.

Chris