Koozali.org: home of the SME Server

E-smith's own antispam solution

Adserg

E-smith's own antispam solution
« on: January 27, 2003, 09:41:29 PM »
Hi all

I have gone through a number of antispam solutions to try and get running on all platforms from 4.1.2, 5.0, 5.1.2 on so on and so on.

How about e-smith's own antispam which can be installed by rpm and put's it's self in the server manager.

Just a thought guys n gals

best regards

ADSERG

Steve

Re: E-smith's own antispam solution
« Reply #1 on: January 28, 2003, 01:12:54 AM »

Adserg

Re: E-smith's own antispam solution
« Reply #2 on: January 28, 2003, 02:28:38 PM »
Cool

Thank You Steve I'll give it a go

Regards.

Adserg

Re: E-smith's own antispam solution
« Reply #3 on: January 28, 2003, 04:20:26 PM »
Ok steve i have had a look at this, it states id need to play around with mx record and the like?

how did you install it?

Steve

Re: E-smith's own antispam solution
« Reply #4 on: January 28, 2003, 04:49:37 PM »
ok first of all it uses data:dump module which sme didnt have but i have since learned out it can be rem'ed out. Also you need to rem out the use strict and use warnings in the code. some windows paths need to be changed to unix paths

I installed on a seperate 'server only' sme 5.1.2 (not enough ram for 5.5 or 5.6) and set it to listen on port 125 and set send to my other sme server on port 25 (therefore my main server required NO changes)

I then modified my router to recieve on port 25 and pass to port 125 of the server which has assp installed.

I did not need to change any mx records as i aready received my email via smtp and a single static ip address.

If i knew how to disabled existing smtpserver  on port 25 - i would be able to use port 25 all the way thru and/or use one server. I choose my method as it required less alterations.

Other configurations may be possible eg. to use one one sme but this was the easiest for me.

Adserg

Re: E-smith's own antispam solution
« Reply #5 on: January 28, 2003, 06:32:07 PM »
Thank You Steve.

David Stanton

Re: E-smith's own antispam solution
« Reply #6 on: February 01, 2003, 03:10:36 AM »
How to change qmail smtp port 25 to another port
I believe you can just copy:
/etc/e-smith/templates/etc/services/10standard to
/etc/e-smith/templates-custom/etc/services/10standard
then edit the line that says:

smtp                 25/tcp                  mail

to say:

smtp                 /tcp        mail

Just make sure you don't put it on top of another service...  ;-)

How about a how-to. I'm going to try myself... Maybe we can compare notes.

David Stanton

Re: E-smith's own antispam solution
« Reply #7 on: February 01, 2003, 03:38:56 AM »
Sorry I guess it took the brackets as a tag, here it is again.

 How to change qmail smtp port 25 to another port
 I believe you can just copy:
 /etc/e-smith/templates/etc/services/10standard
to:
 /etc/e-smith/templates-custom/etc/services/10standard
 then edit the line that says:
  smtp                 25/tcp                  mail
  to say:
  smtp                 (your port number)/tcp        mail

(of course substituting a real number for (your port number))
  Just make sure you don't put it on top of another service...
 ;-)

Steve

Re: E-smith's own antispam solution
« Reply #8 on: February 01, 2003, 01:48:16 PM »
Thanks David,

I did mange to disable smtp (as i am running assp on a seperate server) and set assp to listen & send on 25, therfore allowing the new box to be in IP terms 'inserted' between the net and existing SME

Here are my results over a week. I am very happy with the results but please bear in mind i did not start with a set of reference spam and results will improve.

As of Sat Feb  1 10:35:03 2003 the mail logfile shows:
1451 messages, 114 were spam (7.9%) in 7 days
 for 207.3 messages per day or 16.3 spams per day
10 additions to / verifications of the whitelist (1.4 per day)
4 were judged spam by the bayesian filter (3.5% of spam)
110 were to spam addresses (96.5% of spam)
 were rejected for executable attachments (0% of spam)
 were sent from local clients (0.0% of nonspam)
23 were from whitelisted addresses (1.7% of nonspam)
1314 were ok after a bayesian check (98.3% of nonspam)

This is set & forget system for all mailboxes. Far simpler than TDMA to run and install.

guestHH

Re: E-smith's own antispam solution
« Reply #9 on: February 01, 2003, 02:30:23 PM »
Hi Steve,

Care to write up a little how-to?

TIA

Regards,
guestHH

Steve

Re: E-smith's own antispam solution
« Reply #10 on: February 01, 2003, 03:35:19 PM »
Hi,

Not sure that one is required as its a perl script and very easy to install. A new version was released yesterday that is improved and will install with little modification. Follow the authors docs. I will say that you will need to alter a couple of windows paths to unix eg. remove the drive letter 'c:' and this isnt documented.

The mods to SME itself will depend on if you run stanalone box or on same box a your mailserver. In which you need to either disable smtp or move the port.

Add entries to cron.daily or cron.weekly as desired to rebuild the spamdb and update opendnsbl data.

If you get stuck shout and i will try to help.

David Stanton

Re: E-smith's own antispam solution
« Reply #11 on: February 13, 2003, 02:05:44 AM »
There is currently at least one problem with ASSP up to version 0.1.2, it currently drops 57 bytes every 285k transferred, corrupting any file attachments. There have been other problems.

Nuff said I wouldn't try using it for production right now...

Steve

Re: E-smith's own antispam solution
« Reply #12 on: February 13, 2003, 07:55:35 AM »
David,

I have passed your comments to the author. He has been keen to fix any issues. I have seen the odd mail formed message but had no problem with a few word docs. Can you detail your other problems ? and pass to the author.

David Stanton

Re: E-smith's own antispam solution
« Reply #13 on: February 14, 2003, 05:42:10 PM »
I've been in touch with him every day...  ;-)

I think he fixed it last night. I've been beating on it all day and it's good so far.

I'm hoping that the fix has taken care of the mail bouncing issue too...

Steve wrote:
>
> David,
>
> I have passed your comments to the author. He has been keen
> to fix any issues. I have seen the odd mail formed message
> but had no problem with a few word docs. Can you detail your
> other problems ? and pass to the author.

David Stanton

Re: E-smith's own antispam solution
« Reply #14 on: February 14, 2003, 07:11:27 PM »
I like it quite a bit myself, I'm just trying to help rattle out the bugs. Right now I've got my users testing for bounce messages (was a problem before the last patch).

So how are you running the server itself... i.e. where and as what user?  I'm still running at the command line for right now.

Also do you check the messages on the sourceforge site. This thread would probably be more appropriate there...


Steve wrote:
>
> Thanks David,
>
> I did mange to disable smtp (as i am running assp on a
> seperate server) and set assp to listen & send on 25,
> therfore allowing the new box to be in IP terms 'inserted'
> between the net and existing SME
>
> Here are my results over a week. I am very happy with the
> results but please bear in mind i did not start with a set of
> reference spam and results will improve.
>
> As of Sat Feb  1 10:35:03 2003 the mail logfile shows:
> 1451 messages, 114 were spam (7.9%) in 7 days
>  for 207.3 messages per day or 16.3 spams per day
> 10 additions to / verifications of the whitelist (1.4 per day)
> 4 were judged spam by the bayesian filter (3.5% of spam)
> 110 were to spam addresses (96.5% of spam)
>  were rejected for executable attachments (0% of spam)
>  were sent from local clients (0.0% of nonspam)
> 23 were from whitelisted addresses (1.7% of nonspam)
> 1314 were ok after a bayesian check (98.3% of nonspam)
>
> This is set & forget system for all mailboxes. Far simpler
> than TDMA to run and install.

Steve

Re: E-smith's own antispam solution
« Reply #15 on: February 15, 2003, 12:27:07 AM »
David,

I am sure this can be the near perfect solution to spam. John seems very willing and able. Remember its still evolving.

I mailed John as he had introduced a small bug into .13 and he fixed in a flash. (remove a return on line 520 of assp.pl)

Its now pulled 735 spams out of almost 5000 email in 20 days and improving as i didnt seed it. Only an odd one has got by.

I am running it on an old 586 with 5.1.2 as root from command line at the moment with cron jobs for rebuildspam and update dnsbl. It should be easy to start from rc.local. My mail server is on another box with SME 5.6

I did it this way so it was impossible to screw up my existing set up.

Alejandro

Re: E-smith's own antispam solution
« Reply #16 on: February 27, 2003, 05:47:48 PM »
Steve:
You wrote: "If you get stuck shout and i will try to help."

I got stucked

Could someone help a newbie?
I have to automate assp, to start with sme, even with reboots or upgrades, how would it be?
templates procedure?
local.rc file?
I really dont know how to do it
need help with the scrips and/or templates
I have never write a script before, i just made the port 25 modification to port 125 , and seems to be ok

did someone got the reportspam thing working, my assp doesn't seem to be collecting mails from the reportspam account i've created
many thanks in advance

Welsh

Re: E-smith's own antispam solution
« Reply #17 on: March 06, 2003, 10:33:04 AM »
I installed Assp with 5.5 but it seems not working.
I changed /etc/services/smtp port to 125 and I configurate my email clients to use 125 to send mail. Assp suppose listen to port 25 but no banner appeared when I telnet it. I have tried to use my hotmail to send myself a test mail but it failed. My email client also failed to use port 125 to send mail too.
Can anyone give me some direction please?

alejandro

Re: E-smith's own antispam solution
« Reply #18 on: March 06, 2003, 03:39:51 PM »
you should start assp, it seems not to be working
use "cd /yourassplocation/assp.pl " and then "perl assp.pl &"
Check with "telnet 127.0.0.1 25" to see your smtp response server through assp proxy

you can go to http://assp.sourceforge.net  phorums and faqs
as our last three messages could be a little off side from the meaning of this thread
Alejandro

Welsh

Re: E-smith's own antispam solution
« Reply #19 on: March 07, 2003, 05:08:14 AM »
Thanks Alejandro!
I am going to check it out. Thanks .

Graeme Robinson

Re: E-smith's own antispam solution
« Reply #20 on: March 29, 2003, 05:59:42 AM »
Mmmm, interesting. But this template change doesn't affect Mailfront.

KeVin M

Re: E-smith's own antispam solution
« Reply #21 on: May 24, 2003, 01:40:38 PM »
Looks nice and I can get it going under sendmail . Have tried editing the  template mentioned a few reposnes ago but no effect on changing the port (using SME5.6).

I have hunted through  livingwithqmail.org and a number of other internet searches. Those sources refer to config files that don't exist in the SME environment.

Does anyine have it working under SME5.6 - if so how did you get the port changed?

Help appreciated, regards
kevin

KeVin M

Re: E-smith's own antispam solution
« Reply #22 on: May 24, 2003, 01:58:14 PM »
Hmm,

Answer my own query. after expanding the templates and restarting *several times*  it now works.

regards
kevin