Imap

[Cralis]

Hi guys,

I am using Spam Blocker, but our network makes use of IMAP. The IMAP option supports Marking. The mail mail arrives in the inbox though, with a message on the top:

The attached message from "Rolex.com" <sogeg@rolex.com>
was determined by the Spam Blocker to be spam based on a score
of 32.2 where anything above 4.3 is spam.

Must I create filters on the clients? As in, in Thunderbird, I need to create some sort of filter that looks for cerain text in the message? Or can I block it from hitting the inbox from Untangle?

[sky-knight]

The only way to prevent messages from hitting the inbox is to put them into the quarantine. The only way to get into Untangle's quarantine is via the SMTP filter.

So yes, you must create rules on each client, or rules on your mail server to move messages.

[Cralis]

Thanks Rob - The SMTP filter is for use with SMTP and POP3 only, right?

So, as you say, I'll need to add some filters to my client PCs. But my problem is - Thunderbird doesn't have many options for filtering. None seem to have 'Body' as the area to search. Any idea of how a filter can be added for something that Spam Blocker adds to a message?

[sky-knight]

No, the SMTP filter is to be used for SMTP.

Mail servers generally operate on three different protocols. SMTP is used for clients to transmit e-mail, but also for e-mail servers to transmit mail to each other.

IMAP and POP3 are both delivery protocols that clients use to get mail from a mail server.

The SMTP process allows Untangle to intercept e-mail. The POP3 and IMAP processes don't, at least they wouldn't without nasty error messages and other shenanigans showing to the client.

As for filtering rules, run checks against the subject line. Untangle will mark mail with [SPAM], or [PHISH] in the subject line.

As far as the Untangle installation goes, the SMTP filter is used when Untangle is placed between the mail server and the world. The POP3 and IMAP filters are used when the Untangle is placed between the e-mail clients and the world.

[bigdessert]

I don't use thunderbird much, but maybe this link will help create the rule.
http://www2.cit.cornell.edu/email/th...d/filters.html

[dmorris]

some more background here: http://wiki.untangle.com/index.php/S...POP_or_IMAP.3F