You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Gary Forrest - Netnorth <ga...@netnorth.co.uk> on 2006/06/06 15:52:35 UTC

Newbie question

Hi All

We have been using SA v3.1.1, all seems to work well :)
( FreeBSD 6.1, Sendmail 8.13.6 & few milters )

Is it possible to get SA not to scan inbound email addressed to certain
domain names.
We have looked at the various white listing functions available, by adding
into local.cf

 whitelist_from sender.com
 whitelist_to receiver.com

This sort of works, in that the email receives a negative score.
The problem is SA still spends time checking the email ( taking 3-12 seconds
to scan )

This server also performs Anti Virus function via Clam AV, and we would to
offer AV services to certain customers, with providing SA services.

Thanks in advance

Gary

|Gary Forrest
|(Director)
|Email: garyf@netnorth.co.uk
|Tel: 0845 058 2001
|Fax: 0845 058 2003
|
|Netnorth Limited
|Units 7 and 8 Queensbrook
|Bolton Technology Exchange
|Spa Road
|Bolton
|BL1 4AY
|
|Sales queries:  sales@netnorth.co.uk
|Domain name queries: domains@netnorth.co.uk
|Support queries: support@netnorth.co.uk
|Accounts queries: accounts@netnorth.co.uk




Re: Newbie question

Posted by Gary Forrest <ga...@netnorth.co.uk>.
Hi David / Other kind people who replied

Details are our setup

 FreeBSD 6.1
 Sendmail 8.13.6 - complied from source
 Spam Assassin 3.1.1 - installed from FreeBSD ports
 spamass-milter-0.3.0_1 - installed from FreeBSD ports
 clamav-0.88.2_1 - installed from FreeBSD ports
 clamav-milter - installed from FreeBSD ports

Relavent Milter lines from our MC file
 INPUT_MAIL_FILTER(`spamassassin',`S=local:/var/run/spamass-milter.sock, 
F=, T=C:15m;S:4m;R:4m;E:10m')dnl
 INPUT_MAIL_FILTER(`clmilter', `S=local:/var/run/clamav/clmilter.sock, 
F=, T=S:4m;R:4m')dnl
 define(`confINPUT_MAIL_FILTERS', `clmilter,spamassassin')dnl

I have looked into the docs for spamass-milter, it has support for 
passing email through with using SA for IP based hosts
But appears to nothing to do with passing through based on domain names

Thanks in advance
Gary


David B Funk wrote:
> On Tue, 6 Jun 2006, Gary Forrest - Netnorth wrote:
>
>   
>> Hi All
>>
>> We have been using SA v3.1.1, all seems to work well :)
>> ( FreeBSD 6.1, Sendmail 8.13.6 & few milters )
>>
>> Is it possible to get SA not to scan inbound email addressed to certain
>> domain names.
>> We have looked at the various white listing functions available, by adding
>> into local.cf
>>
>>  whitelist_from sender.com
>>  whitelist_to receiver.com
>>
>> This sort of works, in that the email receives a negative score.
>> The problem is SA still spends time checking the email ( taking 3-12 seconds
>> to scan )
>>
>> This server also performs Anti Virus function via Clam AV, and we would to
>> offer AV services to certain customers, with providing SA services.
>>     
>
> That would be the function of the milter. sendmail hands a copy of each
> incoming message to all the configured milters and it is each milter's
> business to decide what to do with it. So you want to look into how
> to configure the milter that you are using as the bridge between sendmail
> and spamd. You need to configure it to just give a "pass" on the
> desired message.
> You need to provied us with details of your milter config before we can
> help you any more.
>
>
>   


Re: Newbie question

Posted by David B Funk <db...@engineering.uiowa.edu>.
On Tue, 6 Jun 2006, Gary Forrest - Netnorth wrote:

> Hi All
>
> We have been using SA v3.1.1, all seems to work well :)
> ( FreeBSD 6.1, Sendmail 8.13.6 & few milters )
>
> Is it possible to get SA not to scan inbound email addressed to certain
> domain names.
> We have looked at the various white listing functions available, by adding
> into local.cf
>
>  whitelist_from sender.com
>  whitelist_to receiver.com
>
> This sort of works, in that the email receives a negative score.
> The problem is SA still spends time checking the email ( taking 3-12 seconds
> to scan )
>
> This server also performs Anti Virus function via Clam AV, and we would to
> offer AV services to certain customers, with providing SA services.

That would be the function of the milter. sendmail hands a copy of each
incoming message to all the configured milters and it is each milter's
business to decide what to do with it. So you want to look into how
to configure the milter that you are using as the bridge between sendmail
and spamd. You need to configure it to just give a "pass" on the
desired message.
You need to provied us with details of your milter config before we can
help you any more.


-- 
Dave Funk                                  University of Iowa
<dbfunk (at) engineering.uiowa.edu>        College of Engineering
319/335-5751   FAX: 319/384-0549           1256 Seamans Center
Sys_admin/Postmaster/cell_admin            Iowa City, IA 52242-1527
#include <std_disclaimer.h>
Better is not better, 'standard' is better. B{

Re: Newbie question

Posted by Radoslaw Zielinski <ra...@gmail.com>.
Gary Forrest - Netnorth <ga...@netnorth.co.uk> [06-06-2006 15:52]:
[...]
> This sort of works, in that the email receives a negative score.
> The problem is SA still spends time checking the email ( taking 3-12 seconds
> to scan )

Well, there was that short-circuit idea (with implementation), but it
got kicked off to a branch; IIRC -- without a single technical argument.
You might want to apply the patch yourself.

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=3109

-- 
Radosław Zieliński <ra...@pld-linux.org>

Re: Newbie question

Posted by Jim Maul <jm...@elih.org>.
Gary Forrest - Netnorth wrote:
> Hi All
> 
> We have been using SA v3.1.1, all seems to work well :)
> ( FreeBSD 6.1, Sendmail 8.13.6 & few milters )
> 
> Is it possible to get SA not to scan inbound email addressed to certain
> domain names.


Yes, but not with SA itself.

> We have looked at the various white listing functions available, by adding
> into local.cf
> 
>  whitelist_from sender.com
>  whitelist_to receiver.com
> 
> This sort of works, in that the email receives a negative score.
> The problem is SA still spends time checking the email ( taking 3-12 seconds
> to scan )

The better way is to not call SA at all for these accounts.

> 
> This server also performs Anti Virus function via Clam AV, and we would to
> offer AV services to certain customers, with providing SA services.
> 

The "few milters" you are using should be able to call 
SA/clamav/whatever selectively based on various rules you set up.

-Jim

Re: Newbie question

Posted by Timothy Burt <sa...@timburt.com>.
A handful of our email addresses get excessive amounts of spam, due to a 
webmaster who put them on the website for a year or so...

I created a forwarding alias in the postfix virtual file to forward them 
to a devnull alias.  But SA (amavisd, actually) was still checking each 
one.  With a high load on the box, being the result.

I added the devnull address to the spam-lovers list, and the load dropped 
right away.  The devnull address links to /dev/null.

In my situation, using postfix and amavisd, adding the destination address 
(devnull) to the spam-lovers list has had the result that you are looking 
for.

I hope this helps!

--------------------
Timothy Burt
Los Angeles, Calif. USA

On Tue, 6 Jun 2006, Gary Forrest - Netnorth wrote:

> Hi All
>
> We have been using SA v3.1.1, all seems to work well :)
> ( FreeBSD 6.1, Sendmail 8.13.6 & few milters )
>
> Is it possible to get SA not to scan inbound email addressed to certain
> domain names.
> We have looked at the various white listing functions available, by adding
> into local.cf
>
> whitelist_from sender.com
> whitelist_to receiver.com
>
> This sort of works, in that the email receives a negative score.
> The problem is SA still spends time checking the email ( taking 3-12 seconds
> to scan )
>
> This server also performs Anti Virus function via Clam AV, and we would to
> offer AV services to certain customers, with providing SA services.
>
> Thanks in advance
>
> Gary
>
> |Gary Forrest
> |(Director)
> |Email: garyf@netnorth.co.uk
> |Tel: 0845 058 2001
> |Fax: 0845 058 2003
> |
> |Netnorth Limited
> |Units 7 and 8 Queensbrook
> |Bolton Technology Exchange
> |Spa Road
> |Bolton
> |BL1 4AY
> |
> |Sales queries:  sales@netnorth.co.uk
> |Domain name queries: domains@netnorth.co.uk
> |Support queries: support@netnorth.co.uk
> |Accounts queries: accounts@netnorth.co.uk
>
>
>