Re: SpamAssassin plugin overwrites values on submit

>> >> >> > I?ve been researching this problem to no avail for sometime.  We
>> >> >> > use the (very old) SpamAssassin plugin
>> >> >> > (http://squirrelmail.org/plugin_view.php?id=146) with our
>> > Squirrelmail.
>> >> >> > This plugin serves us well in terms of ease of use and we can
>> >> >> > connect it easily to our mail server spamassassin.  The only
>> >> >> > issue that any time a
>> >> > user
>> >> >> > makes a change (like adding an email to the
>> >> >> > blacklist/whitelist), all
>> >> > prior
>> >> >> > changes are overwritten.  In the README, there is a note that
>> >> >> > this was a
>> >> >> bug
>> >> >> > but resolved.
>> >> >> >
>> >> >> >
>> >> >> >
>> >> >> > Does anyone have any exp with this plugin and resolved this issue?
>> >> >> > Or
>> >> > is
>> >> >> > there an older thread regarding this plugin/issue that someone
>> >> >> > could
>> >> > point
>> >> >> > me to?  Thanks for any help you guys can offer.
>> >> >>
>> >> >> Please think about migrating to the Server Settings plugin, which
>> >> >> is actively maintained and should be able to do anything that the
>> >> >> various outdated SpamAssassin front end plugins can do.  There are
>> >> >> plenty of examples in the sample configuration files it comes with.
>> >> >> If you find something that it cannot replicate, let me know.
>> >> >
>> >> > Thanks for the reply, I just received the digest.  I changed my
>> >> > options so I can get a more immediate reply.  I downloaded Server
>> >> > Settings, a bit confused by the configuration examples but I chose
>> >> > one
>> > that
>> >> seemed to fit.
>> >> > When I check the SA configuration validation, it says everything is
>> > working.
>> >> > In the Options, there are various selections related to the plugin
>> >> > but choosing any of them generates this fatal error:
>> >> >
>> >> > Fatal error: Call to undefined function retrieve_server_setting()
>> >> > in
>> >> >
>> >>
>> /var/www/webmail.neoterichovercraft.com/plugins/server_settings/optio
>> >> n
>> >> > s.php
>> >> > on line 281
>> >> >
>> >> > Is there a step that I've missed?  I get it regardless of which
>> >> > configuration example I try to implement, but my initial thought is
>> >> > that the config_example_file_using_php.php or
>> >> > config_example_ftp.php matches our environment more closely.
>> >>
>> >> You probably didn't install the Server Settings Backend plugin.
>> >> Should be referenced in the docs I think.
>> >
>> > That did help, I will need to learn some more about how this works.
>> > Do you know off the top of your head if there is an additional plugin
>> > or configuration that allows one-click white/blacklist from with an
> email?
>>
>> There was a blacklist feature in a couple different plugins, but whether
> or not
>> you can use that depends on where the blacklist is kept on your server.
>> That's why the Server Settings Backend can be helpful
>> - it abstracts the backend from the user interface - the blacklist can be
>> anywhere you need it to be.
>>
>> > From what I'm reading I think I can setup other spam configuration
>> > options within the server setting plugin and I will mess around with
>> > that, but I think the most desired function was the ability to easily
>> > white/blacklist a sender or domain directly from an email.
>>
>> I don't recall if I included examples of how to put "blacklist" or
> "whitelist"
>> links on the read message screen that use the Server Settings (Backend)
>> infrastructure, but it can probably be done without too much trouble.
>> HOWEVER, this is the last thing you should be looking to implement.  What
>> would you blacklist - the "From" address?
>> That address is the first thing spammers spoof.  In general, exposing
> blacklists
>> to users is misleading and unproductive.  Whitelists, yes, perhaps, but
> you
>> really should focus on implementing a high quality anti-spam system for
> your
>> users.
>
> Thanks for the reply.  We already have a SpamAssassin system on the mail
> server.  However, the president of the company still gets spam that he says
> is consistently from the same organization/individual or contains words such
> as "male enlargement", etc.

Two thoughts:

1) Maybe your SA configuration or MTA configuration needs to be
reviewed.  Maybe you need to add another anti-spam layer

2) Have you actually verified the president's claim?  Just the fact
that he continues to receive this spam from the same place after
having been using the blacklist feature shows that it does not work
for this purpose.

> So he requests the ability to blacklist, which

It's your job to educate him as to why this is an ineffective,
inefficient and inadvisable tactic.

> is a feature that exists in SpamAssassin so I'm not sure why we would not
> want to use it.

Because you are using it for the wrong reasons.

> Regardless, he pays the bills so I will try to accommodate
> him.  I hope you can understand this.

I'd hope he's paying you to be smart and do a good job.

> The former plugin I mentioned was
> setup perfectly to allow fine tune control over the SpamAssassin
> configuration (black/whitelist, threshold, rules, etc).   Of course that
> plugin has a major bug, so all we need is some basic front end functionality
> in the K.I.S.S. mentality.  The former plugin could blacklist both domain
> and sender, but we might want to whitelist as well (supported by the
> plugin).
>
> So is it possible to modify the front end to allow the black/white list
> functionality from within the message?  I've come to understand how the
> options page works and I believe I can set that up to duplicate the main
> SpamAssassin config we need, but he would get confused trying to find the
> option page and really wants the feature directly in the reading view.

If that's not supported with some configuration changes (IRIC it
isn't), it would be easy to create another plugin or an extension to
Server Settings that uses Server Settings Backend to do what you want.
 I might try to look at a Server Settings adaptation for this, but my
time to do unpaid work is a bit limited at the moment, so it might
take me a week or more.

-- 
Paul Lesniewski
SquirrelMail Team
Please support Open Source Software by donating to SquirrelMail!
http://squirrelmail.org/donate_paul_lesniewski.php

------------------------------------------------------------------------------
Master Java SE, Java EE, Eclipse, Spring, Hibernate, JavaScript, jQuery
and much more. Keep your Java skills current with LearnJavaNow -
200+ hours of step-by-step video tutorials by Java experts.
SALE $49.99 this month only -- learn more at:
http://p.sf.net/sfu/learnmore_122612 
-----
squirrelmail-plugins mailing list
Posting guidelines: http://squirrelmail.org/postingguidelines
List address: [email protected]
List archives: http://news.gmane.org/gmane.mail.squirrelmail.plugins
List info (subscribe/unsubscribe/change options): https://lists.sourceforge.net/lists/listinfo/squirrelmail-plugins