spamtrak - Spamtrak spam tracking system.
spamtrak-mssg ...
spamtrak-dbop ...
spamtrak-query ...
The Spamtrak system tracks sources of email spam. It maintains a database of identified spam sources. Sources are identified by host address and by (/24) network address. It provides two metrics: a total count of the spam messages originating from the source, and a score that represents a 90-day rolling average.
The user interface to the Spamtrak system is provided through three commands: spamtrak-mssg, spamtrak-dbop and spamtrak-query. See the individual man pages of those commands for more information.
The three Spamtrak user commands are actually links to spamtrak-wrapper. This is a script that initializes the environment with Spamtrak configuration information, and then invokes a processor from the Spamtrak library directory.
The spamtrak-wrapper MUST be configured for the local installation. The following parameters must be set:
At this time, shared databases are not supported. Each Spamtrak user should have their own database, probably under their home directory.
- host addresses (such as "127.0.0.1")
- network addresses with a trailing dot (such as "127.0.0.")
It is IMPORTANT to get this list set correctly. When Spamtrak examines mail headers, it ignores addresses in this list. Once it finds an address not listed, it identifies that as the address that sent us the spam.
These values may also be defined in the environment, thus overriding the value contained in spamtrak-wrapper.
This is not a generalized spam database system. In spite of the presence of a spamtrak-query command, it lacks significant data mining capability. This package is designed to be small and efficient, so that it may run inline with mail delivery.
The individual man pages detail specific limitations of the system.
spamtrak-dbop(1), spamtrak-mssg(1), spamtrak-query(1) spamassassin(1), procmail(1)
Chip Rosenthal Unicom Systems Development <chip@unicom.com>
$Id: spamtrak.pod,v 1.1 2002/07/27 00:29:59 chip Exp $