You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by tonjg <to...@freeuk.com> on 2010/01/13 20:22:00 UTC
newbie: configure SA to reject spam
I'm a newbie to spamassassin, I installed it today on a raq550 running
strongbolt2 which uses sendmail v8.22. I see that spam's are now being
labelled [SPAM] in the subject line but what I want to do is block those
emails from getting to my inbox. What's the next step to refecting those
emails?
Note: I don't want to delete them or divert them to another folder, I'd like
to reject them in the same way the dnsbl lists do.
thanks for any advice.
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27149042.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Christian Brel <br...@copperproductions.co.uk>.
On Thu, 14 Jan 2010 13:28:06 +0100
Robert Schetterer <ro...@schetterer.org> wrote:
> Am 14.01.2010 13:00, schrieb tonjg:
> >
> >
> > David B Funk wrote:
> >>
> >> So you need to tell us exactly how you've integrated SA into your
> >> sendmail before we can give you a precise answer.
> >
> > what I did was edit the local.cf so it contained this:
> > required_hits 8
> > rewrite_subject 1
> > report_header 1
> > use_terse_report 1
> > defang_mime 0
> > report_safe 0
> > use_bayes 1
> > auto_learn 1
> > ok_locales en
> > rewrite_header Subject [SPAM]
> > --------------
> >
> > and I edited the procmailrc file so it contained this:
> > ORGMAIL=$HOME/mbox
> > DEFAULT=$ORGMAIL
> > DROPPRIVS=yes
> >
> > :0fw
> > * < 500000
> > | /usr/bin/spamc
> > ---------------------
> >
> > if I've done the right thing then next I want sendmail to reject
> > the spam mails in the same way the dnsbl lists do.
> > I think I'm getting somewhere because my mail log has started
> > showing entries like this:
> > Jan 14 06:00:14 home spamd[17440]: spamd: connection from....
> > Jan 14 06:00:14 home spamd[17440]: spamd: setuid to....
> > Jan 14 06:00:14 home spamd[17440]: spamd: processing message....
> > Jan 14 06:00:28 home spamd[17440]: spamd: clean message
> > (3.3/8.0).... Jan 14 06:00:28 home spamd[17440]: spamd: result: .
> > 3.... Jan 14 06:00:28 home spamd[17415]: prefork: child states: II
> >
> > and a spam email just came in as I was writing this (lol) and the
> > header of that email contains this:
> > Return-Path: <po...@smartie.fsnet.co.uk>
> > X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on home.svr5
> > X-Spam-Level: *******
> > X-Spam-Status: No, score=7.9 required=8.0
> > tests=FH_DATE_PAST_20XX,HTML_MESSAGE,
> >
> > but I see this mail wasn't tagged because the score was 7.9 (lol).
> > this is what I've done so far so thanks for any further advice.
>
> you can use spamass-milter to reject spam mails over a wanted level
> at smtp income stage i.e with postfix or sendmail, rejecting later
> may cause backscatter, i recommend also use clamav-milter with
> antispam sanesecurity sigs in milter stage too, this is good enough
> for daily filtering, i would only use procmail for putting i.e marked
> mails in special imap folders ( i.e Junk ) etc, anyway
> postfix-dovecot-sieve is more nice to handle filtering then procmail,
> give it a try
>
Sound and good advice form Robert Schetterer. Spamass-milter is sturdy
and combined with the clamav-milter + Sanesecurity rules it kicks ass!
You need to help yourself a little now, use Google, look up the
documentation and come back with what you've done if you get stuck.
You won't get the most helpful responses to 'how do I' questions,
whereas the 'I have tried this but I'm stuck....' will often yield a
flurry of help.
Re: newbie: configure SA to reject spam
Posted by RW <rw...@googlemail.com>.
On Thu, 14 Jan 2010 14:38:22 +0100
Matus UHLAR - fantomas <uh...@fantomas.sk> wrote:
> > On 14-Jan-2010, at 06:22, Robert Schetterer wrote:
> > > http://savannah.nongnu.org/projects/spamass-milt/
>
> On 14.01.10 06:31, LuKreme wrote:
> > How efficient is spamass-milter? I've always been hesitant to try
> > running SA during the transaction because I was afraid it would
> > take too long.
>
> spamass-milter calls spamc, with a _little_ overhead
> spam checking is the main resource hog.
Presumably the issue is not the overhead but that you need to handle
traffic in real-time rather than queue then it up and handle the
average traffic.
Re: newbie: configure SA to reject spam
Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
> On 14-Jan-2010, at 06:22, Robert Schetterer wrote:
> > http://savannah.nongnu.org/projects/spamass-milt/
On 14.01.10 06:31, LuKreme wrote:
> How efficient is spamass-milter? I've always been hesitant to try running SA during the transaction because I was afraid it would take too long.
spamass-milter calls spamc, with a _little_ overhead
spam checking is the main resource hog.
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fucking windows! Bring Bill Gates! (Southpark the movie)
Re: newbie: configure SA to reject spam
Posted by d....@yournetplus.com.
Quoting Kai Schaetzl <ma...@conactive.com>:
> LuKreme wrote on Thu, 14 Jan 2010 06:31:48 -0700:
>
>> I've always been hesitant to try
>> running SA during the transaction because I was afraid it would take
>> too long.
>
> Indeed, that's why I would not consider it. And I assume if you do it this
> way that also means you have to scan *every* message and not only the 10%
> that make it thru normal MTA rejection by policy.
Virus and spam scanning get done here in the data phase within Exim.
That is well after RBL rejection, greylisting, etc. High scoring spam
gets rejected at SMTP time. Average message scan times are between 0.2
and 1.5 seconds.
Re: newbie: configure SA to reject spam
Posted by Robert Schetterer <ro...@schetterer.org>.
Am 14.01.2010 15:48, schrieb LuKreme:
> On 14-Jan-2010, at 07:31, Kai Schaetzl wrote:
>> Indeed, that's why I would not consider it. And I assume if you do it this
>> way that also means you have to scan *every* message and not only the 10%
>> that make it thru normal MTA rejection by policy.
>
>
> I suppose it depends on exactly where the milter runs. I would certainly not consider running it before checks to RBLS, internal blacklists, and HELO checks.
>
As i said no Problem on mid range traffic mailservers and
spamass-milters and timeouts etc ( i.e with traditional postfix rbl/helo
etc checks ), after all
you can use rbl milters , greylist milters etc in chain as you like
i myself use dkim milters this way
the biggest vote for milters are rejecting on smtp income
which makes life much more easy in a few setups
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: newbie: configure SA to reject spam
Posted by LuKreme <kr...@kreme.com>.
On 14-Jan-2010, at 07:31, Kai Schaetzl wrote:
> Indeed, that's why I would not consider it. And I assume if you do it this
> way that also means you have to scan *every* message and not only the 10%
> that make it thru normal MTA rejection by policy.
I suppose it depends on exactly where the milter runs. I would certainly not consider running it before checks to RBLS, internal blacklists, and HELO checks.
--
Oh and I could be a genius if I just put my mind to it And I, I
could do anything if only I could get 'round to it.
Re: newbie: configure SA to reject spam
Posted by Kai Schaetzl <ma...@conactive.com>.
LuKreme wrote on Thu, 14 Jan 2010 06:31:48 -0700:
> I've always been hesitant to try
> running SA during the transaction because I was afraid it would take
> too long.
Indeed, that's why I would not consider it. And I assume if you do it this
way that also means you have to scan *every* message and not only the 10%
that make it thru normal MTA rejection by policy.
Kai
--
Get your web at Conactive Internet Services: http://www.conactive.com
SA at SMTP time (was Re: newbie: configure SA to reject spam)
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Thu, 14 Jan 2010, LuKreme wrote:
> On 14-Jan-2010, at 06:22, Robert Schetterer wrote:
> > http://savannah.nongnu.org/projects/spamass-milt/
>
> How efficient is spamass-milter? I've always been hesitant to try running SA during the transaction because I was afraid it would take too long.
>
I cannot speak for spamass-milter as I use a different milter
(milterassassin) but the general concept of filtering at SMTP time is
viable (depending upon your load) with a few considerations.
1) structure your filter stack so that SA runs after all lightweight
filters (DNSBL, helo checks, valid recipient checks, gray-listing, etc).
2) Make sure that your milter uses SA intelligently, not opening premature
connections to spamd (if your milter uses spamd rather than running SA
directly in the milter; EG amavisd). The milter I use talks the SA
net protocol directly (as opposed to forking spamc) and originally opened
the connection to spamd when it got the receipt-from info. This would
waste connections as unnecessary as recipient checks often would kill the
SMTP transaction. I re-coded it to collect headers and not open the
spamd connection until it reached the data-phase.
3) Adjust your MTA to limit the number of simultaneous incoming
connections to the max number of spamd processes that your SA box(s) can
reasonably handle.
With these considerations we comfortable handle 100K messages/day with
just one moderately sized SA box.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
Re: newbie: configure SA to reject spam
Posted by Robert Schetterer <ro...@schetterer.org>.
Am 14.01.2010 14:31, schrieb LuKreme:
> On 14-Jan-2010, at 06:22, Robert Schetterer wrote:
>> http://savannah.nongnu.org/projects/spamass-milt/
>
> How efficient is spamass-milter? I've always been hesitant to try running SA during the transaction because I was afraid it would take too long.
>
>
i have no Problems on a mid range traffic loaded postfix with
spamass-milter so i would recommend using it, there is a patch on the
spamassmilter site for bypass sasl auth users, which i would recommend
too ,because deliver in checks takes long for authed users but with local
deliver agents then, there is no spam check for users on the same server
( this is ok for me ), splitting authed users to submission may be a
solution too for that
you might run in problems with high traffic mailservers but you might
fix this with some load balance solution
i have also solution with clamav milter and saneseurity
( configured to reject/hold found known spam on smtp income stage )
and spamc dovecot-deliver spamassassin filter on high traffic servers
( so the lda has lots of time to classify and mark the spam and put it
into spam folders )
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: newbie: configure SA to reject spam
Posted by LuKreme <kr...@kreme.com>.
On 14-Jan-2010, at 06:22, Robert Schetterer wrote:
> http://savannah.nongnu.org/projects/spamass-milt/
How efficient is spamass-milter? I've always been hesitant to try running SA during the transaction because I was afraid it would take too long.
--
This above all, to thine own self be true And it must follow, as
the night the day, Thou canst not then be false to any man.
Re: newbie: configure SA to reject spam
Posted by Robert Schetterer <ro...@schetterer.org>.
Am 14.01.2010 13:40, schrieb tonjg:
>
>
> Robert Schetterer wrote:
>>
>> you can use spamass-milter to reject spam mails over a wanted level
>> at smtp income stage
>
> how?
> how does one use spamass-milter to reject spam mails at smtp income stage?
milters are filters in before-queue
http://www.postfix.org/MILTER_README.html
http://savannah.nongnu.org/projects/spamass-milt/
SpamAssassin Sendmail Milter Plugin
Usage: spamass-milter -p socket [-b|-B bucket] [-d xx[,yy...]] [-D host]
[-e defaultdomain] [-f] [-i networks] [-m] [-M]
[-P pidfile] [-r nn] [-u defaultuser] [-x] [-a]
[-- spamc args ]
-p socket: path to create socket
-a: don't scan messages over an authenticated connexion.
-b bucket: redirect spam to this mail address. The orignal
recipient(s) will not receive anything.
-B bucket: add this mail address as a BCC recipient of spam.
-d xx[,yy ...]: set debug flags. Logs to syslog
-D host: connect to spamd at remote host (deprecated)
-e defaultdomain: pass full email address to spamc instead of just
username. Uses 'defaultdomain' if there was none
-f: fork into background
-i: skip (ignore) checks from these IPs or netblocks
example: -i 192.168.12.5,10.0.0.0/8,172.16.0.0/255.255.0.0
-m: don't modify body, Content-type: or Subject:
-M: don't modify the message at all
-P pidfile: Put processid in pidfile
-r nn: reject messages with a score >= nn with an SMTP error.
use -1 to reject any messages tagged by SA.
-u defaultuser: pass the recipient's username to spamc.
Uses 'defaultuser' if there are multiple recipients.
-x: pass email address through alias and virtusertable expansion.
-- spamc args: pass the remaining flags to spamc.
so what you need is -r
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
Robert Schetterer wrote:
>
> you can use spamass-milter to reject spam mails over a wanted level
> at smtp income stage
how?
how does one use spamass-milter to reject spam mails at smtp income stage?
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27160668.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Robert Schetterer <ro...@schetterer.org>.
Am 14.01.2010 13:00, schrieb tonjg:
>
>
> David B Funk wrote:
>>
>> So you need to tell us exactly how you've integrated SA into your sendmail
>> before we can give you a precise answer.
>
> what I did was edit the local.cf so it contained this:
> required_hits 8
> rewrite_subject 1
> report_header 1
> use_terse_report 1
> defang_mime 0
> report_safe 0
> use_bayes 1
> auto_learn 1
> ok_locales en
> rewrite_header Subject [SPAM]
> --------------
>
> and I edited the procmailrc file so it contained this:
> ORGMAIL=$HOME/mbox
> DEFAULT=$ORGMAIL
> DROPPRIVS=yes
>
> :0fw
> * < 500000
> | /usr/bin/spamc
> ---------------------
>
> if I've done the right thing then next I want sendmail to reject the spam
> mails in the same way the dnsbl lists do.
> I think I'm getting somewhere because my mail log has started showing
> entries like this:
> Jan 14 06:00:14 home spamd[17440]: spamd: connection from....
> Jan 14 06:00:14 home spamd[17440]: spamd: setuid to....
> Jan 14 06:00:14 home spamd[17440]: spamd: processing message....
> Jan 14 06:00:28 home spamd[17440]: spamd: clean message (3.3/8.0)....
> Jan 14 06:00:28 home spamd[17440]: spamd: result: . 3....
> Jan 14 06:00:28 home spamd[17415]: prefork: child states: II
>
> and a spam email just came in as I was writing this (lol) and the header of
> that email contains this:
> Return-Path: <po...@smartie.fsnet.co.uk>
> X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on home.svr5
> X-Spam-Level: *******
> X-Spam-Status: No, score=7.9 required=8.0
> tests=FH_DATE_PAST_20XX,HTML_MESSAGE,
>
> but I see this mail wasn't tagged because the score was 7.9 (lol).
> this is what I've done so far so thanks for any further advice.
you can use spamass-milter to reject spam mails over a wanted level
at smtp income stage i.e with postfix or sendmail, rejecting later
may cause backscatter, i recommend also use clamav-milter with antispam
sanesecurity sigs in milter stage too, this is good enough for daily
filtering, i would only use procmail for putting i.e marked mails in
special imap folders ( i.e Junk ) etc, anyway postfix-dovecot-sieve is
more nice to handle filtering then procmail, give it a try
--
Best Regards
MfG Robert Schetterer
Germany/Munich/Bavaria
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
David B Funk wrote:
>
> So you need to tell us exactly how you've integrated SA into your sendmail
> before we can give you a precise answer.
what I did was edit the local.cf so it contained this:
required_hits 8
rewrite_subject 1
report_header 1
use_terse_report 1
defang_mime 0
report_safe 0
use_bayes 1
auto_learn 1
ok_locales en
rewrite_header Subject [SPAM]
--------------
and I edited the procmailrc file so it contained this:
ORGMAIL=$HOME/mbox
DEFAULT=$ORGMAIL
DROPPRIVS=yes
:0fw
* < 500000
| /usr/bin/spamc
---------------------
if I've done the right thing then next I want sendmail to reject the spam
mails in the same way the dnsbl lists do.
I think I'm getting somewhere because my mail log has started showing
entries like this:
Jan 14 06:00:14 home spamd[17440]: spamd: connection from....
Jan 14 06:00:14 home spamd[17440]: spamd: setuid to....
Jan 14 06:00:14 home spamd[17440]: spamd: processing message....
Jan 14 06:00:28 home spamd[17440]: spamd: clean message (3.3/8.0)....
Jan 14 06:00:28 home spamd[17440]: spamd: result: . 3....
Jan 14 06:00:28 home spamd[17415]: prefork: child states: II
and a spam email just came in as I was writing this (lol) and the header of
that email contains this:
Return-Path: <po...@smartie.fsnet.co.uk>
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on home.svr5
X-Spam-Level: *******
X-Spam-Status: No, score=7.9 required=8.0
tests=FH_DATE_PAST_20XX,HTML_MESSAGE,
but I see this mail wasn't tagged because the score was 7.9 (lol).
this is what I've done so far so thanks for any further advice.
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27160220.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by David B Funk <db...@engineering.uiowa.edu>.
On Wed, 13 Jan 2010, tonjg wrote:
>
> yes thanks bowie I've managed to integrate SA into sendmail as per the link
> you gave but that page has no instructions for how to get sendmail to reject
> the spam.
>
tonjg
The link that Bowie gave you lists several different ways to integrate SA
into sendmail. Which specific one did you use?
Some of those methods preclude rejecting spam (EG using procmail), others
are a simple configutation or command line argument settings (EG the '-r'
command line option to spamass-milter).
So you need to tell us exactly how you've integrated SA into your sendmail
before we can give you a precise answer.
--
Dave Funk University of Iowa
<dbfunk (at) engineering.uiowa.edu> College of Engineering
319/335-5751 FAX: 319/384-0549 1256 Seamans Center
Sys_admin/Postmaster/cell_admin Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{
Re: newbie: configure SA to reject spam
Posted by Kai Schaetzl <ma...@conactive.com>.
Tonjg wrote on Wed, 13 Jan 2010 13:57:53 -0800 (PST):
> yes thanks bowie I've managed to integrate SA into sendmail as per the link
> you gave but that page has no instructions for how to get sendmail to reject
> the spam.
Then look in the documentation for that unknown tool that you used to
"integrate".
Kai
--
Get your web at Conactive Internet Services: http://www.conactive.com
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
yes thanks bowie I've managed to integrate SA into sendmail as per the link
you gave but that page has no instructions for how to get sendmail to reject
the spam.
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27152771.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Bowie Bailey <Bo...@BUC.com>.
tonjg wrote:
> On 01/13/2010 07:22 PM, tonjg wrote:
>
> thanks for your response Ned.
> your last line describes exactly what I want to do - reject mail, do it at
> the smtp stage in sendmail - but I don't know how to achieve this.
>
Take a look at the Sendmail section of this page:
http://wiki.apache.org/spamassassin/IntegratedInMta
I don't use Sendmail myself, so I can't give you any definite answers,
but I know it can be done.
--
Bowie
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
Charles Gregory wrote:
>
> If you are able to scan the mail *during* the SMTP (sendmail) process, you
> can issue an 'exit code' to sendmail that will cause sendmail to 'reject'
> the mail,
that's exactly what I want, but I can't find any instructions how to do it.
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27153195.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Charles Gregory <cg...@hwcn.org>.
On Wed, 13 Jan 2010, tonjg wrote:
: thanks for your response Ned.
: your last line describes exactly what I want to do - reject mail, do it at
: the smtp stage in sendmail - but I don't know how to achieve this.
Welcome!
Permit me to state what may be considered 'obvious' to many, but which may
not have yet come to the attention of someone 'new':
One person's spam is another person's legitimate mail.
No matter how hard we try, SpamAssassin will *always* classify some spam
as 'wanted' mail (ham) and classify some wanted mail as spam. This happens
because the criteria, and individual mail differ for everyone.
It is for this reason that SpamAssassin operates to *flag* e-mail,
but otherwise does not do anything with it. It does not 'delete' nor move
it to a special folder. Those are YOUR decisions. They are left to you
because they cannot be made until YOU test your own filter settings, and
perhaps adjust scores for individual rules that are appropriate only
for your specific circumstance. You may even create some of your own
custom rules for special cases unique to your system.
With a bit of experimentation, you will discover that all (or most) of
your 'ham' arrives with a score lower than a certain level, and adjust
the score leve in your SA to match. You then get to decide what to DO
with mail flagged as spam.....
You can 'quarantine' it, putting it into a special folder. This is a
'safe' option, provided you remember to check that folder occasionally and
empty it out. This option allows you to score more aggressively, with a
higher risk of 'false postitives' (legitimate mail flagged as spam).
You can opt to delete the mail marked as spam, in which case you will
probably want to choose a more conservative score level for your filter (
higher number), so that the risk of false positives is minimized.
If you are able to scan the mail *during* the SMTP (sendmail) process, you
can issue an 'exit code' to sendmail that will cause sendmail to 'reject'
the mail, at which point the sending system must figure out what to do
with it. This allows a legit sender to know their mail didn't make it.
IMPORTANT: Note the use of the word 'reject' and that it is in the
context of an SMTP mail connection. This is different from a BOUNCE which
is mail created by your server and SENT to whoever it THINKS sent the
mail. Very often the sending address of spam is FORGED and so you are
sending what is known as 'backscatter' if you try to stop the mail after
it has been 'accepted' by sendmail. The importance of this cannot be
stressed enough. If you cannot REJECT mail by running SA within the
context of the sendmail filtering/miltering, then please just quarantine
or delete it.
Here on my system, I split the first and third option.
I run SA during my SMTP session, so I REJECT anything that scores higher
than 10 points. It is extremely unlikely that legitimate mail will score
that high, and if it does, this usually indicates that the sender has BIG
problems with their mail setup. A legitimate sender will see an error
message explaining what they did wrong.
Mail that scores below 10 is then compared to a user-selected score value,
and based on that user's choice, either delivered normally, or placed into
that user's 'spamtrap' quarantine file.
This two-level approach keeps the spamtrap folder relatively small, which
helps when encouraging users to review it occasionally. :)
THE EASY WAY: If you opt for the quarantine or delete options, you
don't have to try and perform the messy task of integrating SA into your
sendmail. You can run it from your procmailrc file. Just be sure that
procmail always considers the mail 'delivered', so that you don't generate
'bounces'.
Hope this helps!
- Charles
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
Mike Grau wrote:
>
> Call spamassassin from within a milter.
I'm sorry to be the dumb newbie but how does one call spamassassin from
within a milter?
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27153159.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Mike Grau <m....@kcc.state.ks.us>.
tonjg wrote:
>
> On 01/13/2010 07:22 PM, tonjg wrote:
>
> thanks for your response Ned.
> your last line describes exactly what I want to do - reject mail, do it at
> the smtp stage in sendmail - but I don't know how to achieve this.
Call spamassassin from within a milter. I use Mimedefang, but there are
others.
RE: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
R-Elists wrote:
>
> http://lmgtfy.com/?q=sendmail+reject+spam+smtp
wow thanks a million
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27174842.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
RE: newbie: configure SA to reject spam
Posted by R-Elists <li...@abbacomm.net>.
> From: tonjg [mailto:tonj@freeuk.com]
> On 01/13/2010 07:22 PM, tonjg wrote:
>
> thanks for your response Ned.
> your last line describes exactly what I want to do - reject
> mail, do it at the smtp stage in sendmail - but I don't know
> how to achieve this.
> --
TonJ,
http://lmgtfy.com/?q=sendmail+reject+spam+smtp
- rh
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
On 01/13/2010 07:22 PM, tonjg wrote:
thanks for your response Ned.
your last line describes exactly what I want to do - reject mail, do it at
the smtp stage in sendmail - but I don't know how to achieve this.
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27152138.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Ned Slider <ne...@unixmail.co.uk>.
On 01/13/2010 07:22 PM, tonjg wrote:
>
> I'm a newbie to spamassassin, I installed it today on a raq550 running
> strongbolt2 which uses sendmail v8.22. I see that spam's are now being
> labelled [SPAM] in the subject line but what I want to do is block those
> emails from getting to my inbox. What's the next step to refecting those
> emails?
> Note: I don't want to delete them or divert them to another folder, I'd like
> to reject them in the same way the dnsbl lists do.
> thanks for any advice.
SpamAssassin doesn't do anything to mail apart from label it - that's
all it does.
If you want something to delete/quarantine mail based on SpamAssassin's
score, then you need a separate application to do that.
Furthermore, you can't (or rather shouldn't) reject mail once you've
accepted it and scanned it with SA, as you'll likely be sending the
bounce to a forged (innocent) sender address (this is called
backscatter), at which point you are now part of the problem, not part
of the solution. So simply delete (redirect to /dev/null) any mail you
don't want or quarantine it.
If you want to reject mail, do it at the smtp stage in sendmail as you
do with dnsbl lists.
Hope that helps.
Re: newbie: configure SA to reject spam
Posted by tonjg <to...@freeuk.com>.
Kai Schaetzl wrote:
>
> SA does not do this for you. You would need to use some milter or so.
but I thought SA had a way of instructing sendmail to reject/drop the
spam...
--
View this message in context: http://old.nabble.com/newbie%3A-configure-SA-to-reject-spam-tp27149042p27152807.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: newbie: configure SA to reject spam
Posted by Kai Schaetzl <ma...@conactive.com>.
Tonjg wrote on Wed, 13 Jan 2010 11:22:00 -0800 (PST):
> Note: I don't want to delete them or divert them to another folder, I'd like
> to reject them in the same way the dnsbl lists do.
SA does not do this for you. You would need to use some milter or so.
Kai
--
Get your web at Conactive Internet Services: http://www.conactive.com