Koozali.org: home of the SME Server

[ANNOUNCE]: New Spam Filter Server Manager Module

Offline Knuddi

  • *
  • 540
  • +0/-0
    • http://www.scanmailx.com
[ANNOUNCE]: New Spam Filter Server Manager Module
« on: August 17, 2004, 04:04:33 PM »
The SME SpamFilter uses the new SpamAssassinV3 (release candidate 1) engine and has updated Razor2, and DCC network test modules associated. In the new Server-Manager panel it has been made very simple to configure Real Time Block/Black Lists (RBLs), White/Black Lists (WBLs) and other SpamAssasssin functions.  

See HowTo at:
http://sme.swerts-knudsen.dk/howtos/howto_29.htm

Please notice that this is a beta release so I am looking forward to get some feedback.

Rgds,
Jesper Knudsen
http://sme.swerts-knudsen.dk

mbachmann

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #1 on: August 17, 2004, 04:21:52 PM »
You are pure gold, man. Script tries to uninstall prev. versions - good.

What if i had manually added RBL using Ray Mitchell's Howto here: http://no.longer.valid/phpwiki/index.php/Spam%20blocking%20using%20smtpfront-qmail?
Are  black/whitelist-entries kept from previous versions?
What if delete_junkmail.pl is already running?

Offline Knuddi

  • *
  • 540
  • +0/-0
    • http://www.scanmailx.com
[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #2 on: August 17, 2004, 04:42:53 PM »
The install script will detect and old installation of e-smith-spamassassin and uninstall it properly. The script will then update SpamAssassin and Razor2 and DCC.

The Spam Filter has alse been designed to co-operate with ClamAV (either from my site or Pagefault.org)

The only known issue at the moment is that the daily spam reports might not count RBL rejects correctly.

/Jesper

Offline Knuddi

  • *
  • 540
  • +0/-0
    • http://www.scanmailx.com
[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #3 on: August 17, 2004, 04:45:54 PM »
Just noticed your additional questions. You need to configure RBLs again via the panel, old configs will be overwritten (default no RBLs).

You should also delete the delete_junkmail.pl script from the /etc/cron.daily folder (I will update the script to the that soon).

WBLs are also not kept as I have created a new configuration file. You can hack it but I recommend to re-configure.

/Jesper

Offline arnoldob

  • *
  • 183
  • +0/-0
[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #4 on: August 17, 2004, 06:17:49 PM »
Hi,
I just updated from your old version. I'll let you know if I see anything strange happening. Thank you very much for all your work!
Tampa, FL USA

Jon_Reynolds

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #5 on: August 18, 2004, 03:55:04 AM »
I too have just updated my spam filter from your old one to the new one. I liked the warning that it gave about finding a previous install, very nice.

On a side note, you always mention about getting rid of double-bounce messages because of dictionary attacks. I have found a contrib that first checks to see if the user exists on the system and if not throws up a 553 error rather than generating a bounce message. That contrib along with your double-bounce info has really reduced the load on my server.

You rock Jesper! Your site has been a very nice addition to my Bookmarks file. Also, I just like sayin "swerts-knudsen dude!" in that California surfer dude style.

Thanks for all your hard work,

Jon

Offline sgt-spam

  • ***
  • 84
  • +0/-0
[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #6 on: August 18, 2004, 06:19:23 AM »
Quote from: "Jon_Reynolds"
I have found a contrib that first checks to see if the user exists on the system and if not throws up a 553 error rather than generating a bounce message. That contrib along with your double-bounce info has really reduced the load on my server.


Mind sharing the name of the contrib?

Thanks.

Jon_Reynolds

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #7 on: August 18, 2004, 07:09:38 AM »
No I wont share! :)

http://mirror.contribs.org/smeserver/contribs/dmay/mitel/contrib/Mailrules/SME5.6/dmc-mitel-mailrules-0.0.1-7.noarch.rpm

It says 5.6 but I am using 6.01-01 and it is working fine...for me, as always YMMV. Also Russel Nelsons anti-virus patch blocks executable content at the smtp level. This stops a lot of viruses from ever entering your network via email which then means your AV and spam filters do not have to process them. Here is the link to that also in case you would like to look at it. Ray Mitchell wrote this one up, Thanks Ray! This is one of the patches I always put on my qmail servers until I found the joy that is SME.

http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Spam%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm

Jon

duncan

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #8 on: August 18, 2004, 10:22:00 AM »
I am using an updated version of mailrules from here http://www.dungog.net/sme/files/index.php dungog-mailblocking. Has a few more features.

Offline sgt-spam

  • ***
  • 84
  • +0/-0
Re: [ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #9 on: August 18, 2004, 03:41:40 PM »
Quote from: "Knuddi"
The SME SpamFilter uses the new SpamAssassinV3 (release candidate 1) engine and has updated Razor2, and DCC network test modules associated.


Jesper,

Using my home SME as my test box at the moment...  Wiped clean last night, reloaded with the custom distribution and promptly installed your Clam and SpamAssassin scripts.  Made double-bounce adjustments, and then followed pagefault.org's secure mail how-to.

No RBL's have been specified, and except for enabling Spam Filter through the web console, settings are default.

I've noticed messages appearing in the Inbox with a spam rating above 15.  I've also noticed nothing hitting my junkmail folder.

In previous posts there is reference to adjusting procmail - manually adding filters.  In your previous SpamAssassin scripts, a console module was installed to enable/disable user access to screens, but I don't see that now.

Once I had everything the way I wanted it, I did restart the server.

Did I goof the install?


Thanks for your time!

mbachmann

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #10 on: August 18, 2004, 04:36:37 PM »
So tried it out and broke webmail.

Aug 18 16:14:49 nautilus1 HORDE[10182]: [imp] DB Error: connect failed:  [nativecode=Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)] ** Array [on line 108 of "/home/httpd/html/horde/lib/Prefs/sql.php"]

Also i'm missing the X-Spam-Checker-Version like "X-Spam-Checker-Version SpamAssassin 2.63 (2004-01-11) on servername" in the mail header lines.

spamc -V, spamd -V, Spamassassin -V all show 3.0.0-rc1-r36452.

Offline sgt-spam

  • ***
  • 84
  • +0/-0
[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #11 on: August 18, 2004, 04:48:19 PM »
Quote from: "mbachmann"
So tried it out and broke webmail.

Aug 18 16:14:49 nautilus1 HORDE[10182]: [imp] DB Error: connect failed:  [nativecode=Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (2)] ** Array [on line 108 of "/home/httpd/html/horde/lib/Prefs/sql.php"]

Also i'm missing the X-Spam-Checker-Version like "X-Spam-Checker-Version SpamAssassin 2.63 (2004-01-11) on servername" in the mail header lines.


Just curious - upgrade or clean install?  As previously noted, this is on a clean install.  Web mail is woring, and I do have the X-SPam header:

Code: [Select]
Return-Path: <itiolive@mx18.odartbal.biz>
Delivered-To: edited@interceptor.edited.com
Received: (qmail 23360 invoked by alias); 18 Aug 2004 14:36:47 -0000
Delivered-To: alias-localdelivery-edited@edited.com
Received: (qmail 23357 invoked by uid 101); 18 Aug 2004 14:36:47 -0000
Delivered-To: admin@interceptor.edited.com
Received: (qmail 23355 invoked by alias); 18 Aug 2004 14:36:46 -0000
Delivered-To: alias-localdelivery-admin@edited.com
Received: (qmail 23326 invoked from network); 18 Aug 2004 14:36:41 -0000
Received: from localhost by interceptor.edited.com
with SpamAssassin (version 3.0.0-rc1-r36452);
Wed, 18 Aug 2004 10:36:46 -0400
From: "Source Creations Worldwide" <itiolive@mx18.odartbal.biz>
To: "edited" <edited@edited.com>
Subject: [SPAM 8.6 of 5.0] Brian, Stop collector calls - Immediately
Date: Wed, 18 Aug 2004 07:36:37 -0800
Message-Id: <nfirnhjlwgtngamhggzr@mx18.odartbal.biz>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.0-rc1-r36452 (2004-08-16) on
interceptor.edited.com
X-Spam-Status: Yes, score=8.6 required=5.0 tests=BIZ_TLD,DOMAIN_RATIO,
HTML_90_100,HTML_MESSAGE,HTML_WEB_BUGS,MIME_HTML_ONLY,
MSGID_SPAM_LETTERS,RCVD_IN_SBL,URIBL_SBL,URIBL_WS_SURBL autolearn=no
version=3.0.0-rc1-r36452
X-Spam-Level: ********
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4123697E.0D8764E7"


Obviously this is one of the messages that was delivered to my inbox rather than the junkmail folder.  There are many others like it, but this one is mine.  :-)

mbachmann

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #12 on: August 18, 2004, 04:59:46 PM »
upgrade from 2.63
He tells me that
spamd (pid 3316 3315 3314 3313 3312 2520) is running.
Code: [Select]
service spamd status: spamd: unrecognized service

I killed all spamd procs, issued an /sbin/e-smith/signal-event post-upgrade, rebooted.

All fine now. Got the headers, webmail working again.

Jesper: you should point out that it is definitely necessary to post-upgrade, reboot.

Offline Knuddi

  • *
  • 540
  • +0/-0
    • http://www.scanmailx.com
[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #13 on: August 18, 2004, 06:12:24 PM »
I do not understand why a post upgrade should be nessesary? The service you want to check is actually called "spamassassin" and not spamd even though the process is called spamd (weird but true).

In the new spamfilter I per default enable procmail for all existing users and all new IF they are local users. Remember that procmail cannot filter on users that are just ebing forwarded. Do remember to enable the filter and press the Save/Restart button?

I am sitting in Beijing right and a little long away from home so further investigation will be delayed a few days I am afraid.

/Jesper

phowardcom

[ANNOUNCE]: New Spam Filter Server Manager Module
« Reply #14 on: August 18, 2004, 06:17:20 PM »
will this spam filter work if I am using the SME server to forward emails to my internal exchange server?

Or will it only work for local mailboxes?