Comments on The Perfect SpamSnake - Ubuntu 8.04 LTS
The Perfect SpamSnake - Ubuntu 8.04 LTS This tutorial shows how to set up an Ubuntu Hardy Heron (8.04 LTS) based server as a spamfilter in Gateway mode. In the end, you will have a SpamSnake Gateway which will relay clean emails to your MTA. You will also be able to view your incoming queue, train your SpamSnake and carry out a few more advanced operations via MailWatch.
8 Comment(s)
Comments
Can I implement this solution on a machine running as a firewall with 2 network interfaces? One for the Internet and one for the internal network?
Thanks.
In theory I don't see why not, but it probably isn't a good idea. Doing that way makes the spamsnake a bridge between the two networks that isn't protected by the firewall. The only way to make it secure is to have the firewall accept mail on the external interface, with the appropriate firewall blocking, pass it to the spamsnake on the internal interface for processing and then forward it to a mail server for distribution. If the spamsnake accepts mail on the external interface directly, it will bypass the firewall.
The more secure option is to have the spamsnake be a separate external machine, accept and process all mail there and only pass the legitimate mail to the internal network via the external interface of the firewall. The other benefit of this method is it reduces the load on the firewall since all the spam, and the associated connections, has been dumped before it reaches the firewall.
I've been using file based Greylisting for more than an year and I would say it is faster than the DB based ones. I am using tumgreyspf.
When it comes to the addons, it's really your choice which one you want to use. I've been quite lucky with the db setup so that's why I use it.
Thanks for your recommendation though. If I have any problems with my current setup, I would be more than happy to give your recommendation a shot.
Hello ! Any specific reason for using MailScanner and not AMaViS ? Just out of curiosity. Regards, Sebastian M Juergse
I tried this setup with Amavis but thought MailScanner was a bit faster.
Hello,
Large a thank you for your tutorial! I have used SpamSnake for 6 months and I am magic.
This morning, SpamSnake informs me of a very high number of message containing the Virus (Exploit.PDF-9669). Information taken, it acts of a bug in Clamav which I decide to update by a “apt-get install clamav clamav-demon clamav-fresclam” then I launch “freshclam” to recover the update of the database.
However, and in a more total way, I wishes knowledge if I could, without risk for the configuration of SpamSnake, throw a “apt-get upgrade”.
Better greetings,
I installed this. Tested it and now it is running for all our domains and it works perfect! thanks :)