Collecting spam in one mailbox

[thaecker]

Hi,

i was asked a question today about zimbra and spamassassin i couldn't answer,
maybe someone can help me:

Out of the box, zimbra moves spam into the user's junk folder.
Is there a way to collect all spam in one mailbox (or it's junk folder), so that one person is able to seperate between spam and ham there and do the training for the whole domain?
False-positives should be resend to the original users mailbox.

Thank you in advance.
Greets

[KevinH]

You can run zmsatrain against any one mailbox/folder you want.

[thaecker]

probably i didn't explain my issue well, i will try again:

out of the box, spam send to user1@example.com is moved to the junk folder in user1's mailbox.
spam send to user2@example.com is moved to the junk folder in user2's mailbox.

is there a possibility to collect all spam send to example.com in one dedicated mailbox, for example spam@example.com so that one person can seperate between spam/ham for all users of example.com?
false-positives should be resend to the original recipients mailbox.

[phoenix]

You could use a Filter to check the Spam headers and forward it to another account but why do you want? Surely your appoach makes checking for spam unwieldy. Isn't the best method is to let each user check their own mail & junk folders?

[phoenix]

Actually Zimbra removes most spam before it gets to their junk folder if you've set the kill/tag percentages & rules to a reasonable level. What's left in the junk folder is stuff that not easy to classify as spam initially.

[thaecker]

The system is intended to be a mail-relay more then a real mail server.
If it makes sense is another question, but the plan is to check all emails on spam an viruses on this system and another mail-server fetches this mails via pop3.
The users will not have access to the zimbra server neither via webinterface nor via an email-client and therefor won't be able to check their junkmail folder.
That is why i am wondering if it is possible to collect all spam in one mailbox providing the admin the possibility to seperate between spam and ham there for the whole maildomain.

I know, the smarter solution would be a real mail-relay checking for spam and virus and then relaying all mails directly to the final mail-server.
But my customer asked if it would also be possible this way...

[phoenix]

Just using Zimbra as a Spam filter would seem a huge waste of resources to me. However, the slight flaw in your plan at the moment is that Zimbra doesn't have a re-send feature only a forward. So any mail in the 'global junk' folder that you describe would have to be forwarded to each user, not very productive.

I would urge you to reconsider your plan and use Zimbra in it's proper context and not use it as a relay. If you feel like sharing, what's the reason you don't want users to have access to the mail on the Zimbra server.

[thaecker]

You are right. I did not consider that Zimbra hs no re-send feature. So even if I could collect all spam in one mailbox, false-positives would have to be forwarded.
It wasn't a nice constellation either.
I will suggest a mailwasher server as a mail-relay in the dmz and a zimbra server as final mail-server in the intranet to my customer.

[phoenix]

I'm not even sure that you would need a 'mailwasher' server, I consider DSPAM + Spamassassin + ClamAV etc. to be more than adequate for catching spam and viruses but that is your call.

[thaecker]

The customer will use a mail-relay anyway so why not put mailwasher server on it and relieve the final mail-server...