Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 18th October 2007, 10:31
AlArenal AlArenal is offline
Senior Member
 
Join Date: Feb 2007
Location: Germany
Posts: 104
Thanks: 1
Thanked 5 Times in 5 Posts
Default Using SpamAssassin for outgoing mail?

Hi!

We have several Debian Etch machines running with the famous ISPConfig using Postfix, policyd-weight, SpamAssassin, saslauth, Courier IMAP+POP3, ...

While our system proved pretty effective in regards of incoming spam mails, I am aware that today infected and otherwise compromised machines are used to send spam. What I'd like to do is check outgoing mail (from our customers and ourselves) and detect spam within them.
This would inform our customers/us if something may be wrong with a pc and may also prevent our servers from getting blacklisted (they never were, but you can never be cautious enough).

I just wonder how to achieve this.
Reply With Quote
Sponsored Links
  #2  
Old 18th October 2007, 11:47
AlArenal AlArenal is offline
Senior Member
 
Join Date: Feb 2007
Location: Germany
Posts: 104
Thanks: 1
Thanked 5 Times in 5 Posts
Default

OT:
Wow, I just found my own post in Google. Seems they're pretty fast today
Reply With Quote
  #3  
Old 19th October 2007, 12:31
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

Quote:
Originally Posted by AlArenal
Hi!

We have several Debian Etch machines running with the famous ISPConfig using Postfix, policyd-weight, SpamAssassin, saslauth, Courier IMAP+POP3, ...

While our system proved pretty effective in regards of incoming spam mails, I am aware that today infected and otherwise compromised machines are used to send spam. What I'd like to do is check outgoing mail (from our customers and ourselves) and detect spam within them.
This would inform our customers/us if something may be wrong with a pc and may also prevent our servers from getting blacklisted (they never were, but you can never be cautious enough).

I just wonder how to achieve this.
You could do this by integrating amavisd-new into Postfix: http://www.howtoforge.com/amavisd_postfix_debian_ubuntu
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #4  
Old 19th October 2007, 13:12
AlArenal AlArenal is offline
Senior Member
 
Join Date: Feb 2007
Location: Germany
Posts: 104
Thanks: 1
Thanked 5 Times in 5 Posts
Default

Let me see, if I get it right:

While in my case SpamAssassin is invoked via procmail whenever a mail is delivered to a local mailbox/-dir amavis-new fetches every queued mail, invokes some actions and then reöinserts it into the queue?

Just curious, but while communication is done over network, would it be possible to set up a dedicated machine, running amavis-new, SA and ClamAV that does nothing more than spam- and virus scanning and acts as kind of workhorse for frontend servers (mixed mail- / web-servers, e.g. running ISPC ) ?
Reply With Quote
  #5  
Old 21st October 2007, 00:06
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
 
Default

Quote:
Originally Posted by AlArenal
amavis-new fetches every queued mail, invokes some actions and then reöinserts it into the queue?
Yes, that's right.

Quote:
Originally Posted by AlArenal
Just curious, but while communication is done over network, would it be possible to set up a dedicated machine, running amavis-new, SA and ClamAV that does nothing more than spam- and virus scanning and acts as kind of workhorse for frontend servers (mixed mail- / web-servers, e.g. running ISPC ) ?
That should be possible.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Postfix & mail forwarding loop varnik Server Operation 21 9th December 2008 15:13
Postfix reject connections gabrix Server Operation 27 25th January 2007 08:37
postfix-tls sasl2 mysql courier-authmysql gabrix Server Operation 4 12th January 2007 22:09
Core 4: Error Messages on Fresh Install re CTX/SSL jjw Installation/Configuration 30 6th September 2006 12:16
Virtual Users And Domains With Postfix, Courier And MySQL (+ SMTP-AUTH, Quota, SpamAs ebbay Installation/Configuration 9 4th March 2006 11:47


All times are GMT +2. The time now is 12:45.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.