SyslogScan::Daemon::SpamDetector::Filter 0.55

SyslogScan::Daemon::SpamDetector::Filter contains filter reports.

SYNOPSIS

plugin SyslogScan::Daemon::SpamDetector as sd_
sd_plugin SyslogScan::Daemon::SpamDetector::Filter status spam match SpamAssassin field relayname acceptfirst 1 accept (?:bdynamicb|badsld*b|bcableb|.dhcp.|.dyn.) deny . debug 0

SyslogScan::Daemon::SpamDetector::Filter looks at spam reported via SyslogScan::Daemon::SpamDetectors process_spam_match() function. It acts as a filter and can block reports.

This module can be used with the SyslogScan::Daemon::SpamDetector::SpamAssassin module and the SyslogScan::Daemon::SpamDetector::BlockList module to prevent too many sites from being blocked. The configuration in the "SYNOPSIS" is an example of how to do this.

CONFIGURATION PARAMETERS

The following configuration parameters are supported:

debug

Debugging on (1) or off (0).

logname

A string to prepend to debug and log output. (Default: FILTER)

status

What kind of report are we looking at? Choices are: ham, spam, or idmap. (Default: spam). When called from SyslogScan::Daemon::SpamDetector::BadAddr, the status will be badaddr.

match

What kind of match are we looking at? Each module that makes reports sets this parameter. Current choices are: SpamAssassin, Postfix, Sendmail, SpamSink, and various BadAddr::*. A regualar expression match is done on this field. No default.

field

Which field from %info will we examine with the accept and deny regular expressions? No default.

accept

What is the regular expression for passing this filter?

deny

What is the regular expression for being rejected by this filter?

acceptfirst

Check the accept expression first? (Default: 1).