Topic: E-smith's own antispam solution

[Adserg]

Hi all

I have gone through a number of antispam solutions to try and get running on all platforms from 4.1.2, 5.0, 5.1.2 on so on and so on.

How about e-smith's own antispam which can be installed by rpm and put's it's self in the server manager.

Just a thought guys n gals

best regards

ADSERG

[Steve]

http://assp.sourceforge.net

This one works

[Adserg]

Cool

Thank You Steve I'll give it a go

Regards.

[Adserg]

Ok steve i have had a look at this, it states id need to play around with mx record and the like?

how did you install it?

[Steve]

ok first of all it uses data:dump module which sme didnt have but i have since learned out it can be rem'ed out. Also you need to rem out the use strict and use warnings in the code. some windows paths need to be changed to unix paths

I installed on a seperate 'server only' sme 5.1.2 (not enough ram for 5.5 or 5.6) and set it to listen on port 125 and set send to my other sme server on port 25 (therefore my main server required NO changes)

I then modified my router to recieve on port 25 and pass to port 125 of the server which has assp installed.

I did not need to change any mx records as i aready received my email via smtp and a single static ip address.

If i knew how to disabled existing smtpserver  on port 25 - i would be able to use port 25 all the way thru and/or use one server. I choose my method as it required less alterations.

Other configurations may be possible eg. to use one one sme but this was the easiest for me.

[Adserg]

Thank You Steve.

[David Stanton]

How to change qmail smtp port 25 to another port
I believe you can just copy:
/etc/e-smith/templates/etc/services/10standard to
/etc/e-smith/templates-custom/etc/services/10standard
then edit the line that says:

smtp                 25/tcp                  mail

to say:

smtp                 /tcp        mail

Just make sure you don't put it on top of another service...  

How about a how-to. I'm going to try myself... Maybe we can compare notes.

[David Stanton]

Sorry I guess it took the brackets as a tag, here it is again.

 How to change qmail smtp port 25 to another port
 I believe you can just copy:
 /etc/e-smith/templates/etc/services/10standard
to:
 /etc/e-smith/templates-custom/etc/services/10standard
 then edit the line that says:
  smtp                 25/tcp                  mail
  to say:
  smtp                 (your port number)/tcp        mail

(of course substituting a real number for (your port number))
  Just make sure you don't put it on top of another service...
 

[Steve]

Thanks David,

I did mange to disable smtp (as i am running assp on a seperate server) and set assp to listen & send on 25, therfore allowing the new box to be in IP terms 'inserted' between the net and existing SME

Here are my results over a week. I am very happy with the results but please bear in mind i did not start with a set of reference spam and results will improve.

As of Sat Feb  1 10:35:03 2003 the mail logfile shows:
1451 messages, 114 were spam (7.9%) in 7 days
 for 207.3 messages per day or 16.3 spams per day
10 additions to / verifications of the whitelist (1.4 per day)
4 were judged spam by the bayesian filter (3.5% of spam)
110 were to spam addresses (96.5% of spam)
 were rejected for executable attachments (0% of spam)
 were sent from local clients (0.0% of nonspam)
23 were from whitelisted addresses (1.7% of nonspam)
1314 were ok after a bayesian check (98.3% of nonspam)

This is set & forget system for all mailboxes. Far simpler than TDMA to run and install.

[guestHH]

Hi Steve,

Care to write up a little how-to?

TIA

Regards,
guestHH

[Steve]

Hi,

Not sure that one is required as its a perl script and very easy to install. A new version was released yesterday that is improved and will install with little modification. Follow the authors docs. I will say that you will need to alter a couple of windows paths to unix eg. remove the drive letter 'c:' and this isnt documented.

The mods to SME itself will depend on if you run stanalone box or on same box a your mailserver. In which you need to either disable smtp or move the port.

Add entries to cron.daily or cron.weekly as desired to rebuild the spamdb and update opendnsbl data.

If you get stuck shout and i will try to help.

[David Stanton]

There is currently at least one problem with ASSP up to version 0.1.2, it currently drops 57 bytes every 285k transferred, corrupting any file attachments. There have been other problems.

Nuff said I wouldn't try using it for production right now...

[Steve]

David,

I have passed your comments to the author. He has been keen to fix any issues. I have seen the odd mail formed message but had no problem with a few word docs. Can you detail your other problems ? and pass to the author.

[David Stanton]

I've been in touch with him every day...  

I think he fixed it last night. I've been beating on it all day and it's good so far.

I'm hoping that the fix has taken care of the mail bouncing issue too...

Steve wrote:
>
> David,
>
> I have passed your comments to the author. He has been keen
> to fix any issues. I have seen the odd mail formed message
> but had no problem with a few word docs. Can you detail your
> other problems ? and pass to the author.

[David Stanton]

I like it quite a bit myself, I'm just trying to help rattle out the bugs. Right now I've got my users testing for bounce messages (was a problem before the last patch).

So how are you running the server itself... i.e. where and as what user?  I'm still running at the command line for right now.

Also do you check the messages on the sourceforge site. This thread would probably be more appropriate there...


Steve wrote:
>
> Thanks David,
>
> I did mange to disable smtp (as i am running assp on a
> seperate server) and set assp to listen & send on 25,
> therfore allowing the new box to be in IP terms 'inserted'
> between the net and existing SME
>
> Here are my results over a week. I am very happy with the
> results but please bear in mind i did not start with a set of
> reference spam and results will improve.
>
> As of Sat Feb  1 10:35:03 2003 the mail logfile shows:
> 1451 messages, 114 were spam (7.9%) in 7 days
>  for 207.3 messages per day or 16.3 spams per day
> 10 additions to / verifications of the whitelist (1.4 per day)
> 4 were judged spam by the bayesian filter (3.5% of spam)
> 110 were to spam addresses (96.5% of spam)
>  were rejected for executable attachments (0% of spam)
>  were sent from local clients (0.0% of nonspam)
> 23 were from whitelisted addresses (1.7% of nonspam)
> 1314 were ok after a bayesian check (98.3% of nonspam)
>
> This is set & forget system for all mailboxes. Far simpler
> than TDMA to run and install.