Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Olivier Nicole
> And call it a quirk of mine, but I really dislike (server) software with 
> a large number of dependencies.  That rules out Spam Assassin.  But I am 

I am not sure what you call dependencies.

SA is written in Perl, using some Perl libraries, so of course you
need these, but on the other hand they install smealessly with the
port.

Others like Razor, are plugin that you may choose to install or not.

Bests,

Olivier
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread doug

On Wed, 6 Jun 2007, Richard Coleman wrote:

I am running a mail server using Postfix and Dovecot.  I would like to hear 
people's recommendation for which port to use to add server side anti-spam. 
The problem these days is a richness of choices, so it's hard to know port 
which to try.


And call it a quirk of mine, but I really dislike (server) software with a 
large number of dependencies.  That rules out Spam Assassin.  But I am fairly 
conversant with mail and Postfix/Dovecot in general, so I don't mind any 
integration work.


I apologize if this has been discussed before, but I just joined the list (I 
am already on so many FreeBSD lists already).  I appreciate any insight that 
people can offer.


Richard Coleman
[EMAIL PROTECTED]


We use bogofilter both for our customers and internally. Initially we used 
bogofilter with SpamAssassin to try and alleviate the initial training required 
with bogofilter. On the hosting side we will probably drop SpamAssassin mostly 
because we have defined an initial filter for bogofilter that works acceptably 
well. Resource usage by SpamAssassin is not a problem for us.


For myself I use bogofilter with about 6-7 common sense procmail rules. Before 
adding greylisting I was getting about 600 spams/day to the various public email 
addresses I read. My procmail/bogofilter combination is much greater than 98% 
accurate. Greylisting reduced the spams presented to 100-200/day. It does not 
seem (in theory) it should do that well. I would have never tried greylisting 
except one of the FreeBSD developers told me the mailing lists were using it 
with good results.


As mentioned earlier, the biggest problem with bogofilter is training it.


Doug
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Roland Smith
On Wed, Jun 06, 2007 at 01:21:58PM -0500, David Kelly wrote:
> > Bogofilter works very well, after you've trained it with some spam &
> > ham. You can get a head start by starting from someone else's wordlist.

BTW, I'd be happy to share my wordlist. At ≈12MB it's kinda large though.

> Yes, works very well for me too. Am running it in parallel with other
> spam filters and find if I was to have only one spam filter it would be
> bogofilter. Found SpamAssassin to be very resource intensive and its
> processing (lookup time) slow.
> 
> Bogofilter is lean and effective. Only negative is that it needs to be
> trained.
> 
> > But I'm running it from procmail on my mail only.  I've never bothered
> > to integrate it into postfix.
> 
> Would be very handy if someone were to make a port of scripts with
> something like ADD_SPAM, NOT_SPAM, and SPAM folders under IMAP to drive
> bogofilter remotely from an email client. Train as spam messages placed
> in ADD_SPAM and then move them into something like ADDED_SPAM. Have
> bogofilter place found spam in SPAM, user puts falses in NOT_SPAM.
> Scripts train bogofilter on contents of NOT_SPAM and put in something
> like NOT_SPAMMED. Users may clean out SPAM, ADDED_SPAM, and NOT_SPAMMED
> as they fill. The point is to never throw anything away with the
> scripts.

I've defined two macros in Mutt; for training bogofilter to see a
message as Ham or Spam;

macro index S "unset wait_key\n\
bogofilter -Ns\n\
set wait_key\n\
" "requalify and delete message as spam"

macro index H "unset wait_key\n\
bogofilter -Sn\n\
set wait_key\n" "requalify message as non-spam"

This is for my personal database, of course. 

But if users can send spam to a special mailbox, it should not be too hard to
run that through bogofilter as training material in a cron-job.

> Then on top of that one ought to have some means of global spam filter
> database in addition to per-user databases.

That is possible. Look at the bogofilter FAQ.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgpwDFFuikIRh.pgp
Description: PGP signature


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Thanos Rizoulis

O/H Philip Hallstrom έγραψε:
I am running a mail server using Postfix and Dovecot.  I would like 
to hear people's recommendation for which port to use to add server 
side anti-spam. The problem these days is a richness of choices, so 
it's hard to know port which to try.
How you looked into assp? It looks like a good all-arround solution. I 
say "looks like" because I have only installed it.


Port:   assp-1.2.6
Path:   /usr/ports/mail/assp
Info:   Anti-Spam SMTP Proxy
Maint:  [EMAIL PROTECTED]

WWW:http://assp.sourceforge.net/




--
RTFM and STFW before anything bad happens
_
Thanos Rizoulis
Electronic Computing Systems Engineer
Larissa, Greece
FreeBSD/PCBSD user

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Philip Hallstrom
I am running a mail server using Postfix and Dovecot.  I would like to hear 
people's recommendation for which port to use to add server side anti-spam. 
The problem these days is a richness of choices, so it's hard to know port 
which to try.


And call it a quirk of mine, but I really dislike (server) software with a 
large number of dependencies.  That rules out Spam Assassin.  But I am fairly 
conversant with mail and Postfix/Dovecot in general, so I don't mind any 
integration work.


I apologize if this has been discussed before, but I just joined the list (I 
am already on so many FreeBSD lists already).  I appreciate any insight that 
people can offer.


I like the policyd-weight postfix filter... it sums up a score based on 
several conditions that you can set (dnsbl, bad smtp protocol, etc.) 
caches, results for those that hit you constantly, etc.  I probably get 
2-3 spam a day max.  Used to get 30-40.  And it does it all before 
accepting the message body which is nice.


You can also tell it just to put in a x-header with a score and pass it 
along untouched so users can do what they want using that info.


http://www.policyd-weight.org/
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Rob

Richard Coleman wrote:
hear people's recommendation for which port to use to add server side 
anti-spam.  The problem these days is a richness of choices, so it's 


I outsourced ours to AppRiver http://www.appriver.com/  It's not in the unix "roll 
your own" spirit, but:
* it works very well
* is more cost-effective than messing with it myself
* also intercepts viruses and some email mal-ware
* Has nice email & web interfaces for administration and end users, further 
reducing in-house labor to deal with the crap.

You just change your MX records to point to their servers, they filter your stuff and 
forward it to you.  Also keeps the junk from cutting into your bandwidth.  With the 
"pay the whole year in advance" discount, I think we paid around $480 for up to 
50 users (min they offer).  We only use a small fraction of that, but it's still worth it.

 -RW

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread David Kelly
On Wed, Jun 06, 2007 at 07:15:09PM +0200, Roland Smith wrote:
> On Wed, Jun 06, 2007 at 12:00:59PM -0400, Richard Coleman wrote:
> >  I am running a mail server using Postfix and Dovecot.  I would like to 
> > hear 
> >  people's recommendation for which port to use to add server side 
> > anti-spam.  
> >  The problem these days is a richness of choices, so it's hard to know port 
> >  which to try.
> > 
> >  And call it a quirk of mine, but I really dislike (server) software
> >  with a large number of dependencies.  That rules out Spam Assassin.
> >  But I am fairly conversant with mail and Postfix/Dovecot in
> >  general, so I don't mind any integration work.
> 
> Bogofilter works very well, after you've trained it with some spam &
> ham. You can get a head start by starting from someone else's wordlist.

Yes, works very well for me too. Am running it in parallel with other
spam filters and find if I was to have only one spam filter it would be
bogofilter. Found SpamAssassin to be very resource intensive and its
processing (lookup time) slow.

Bogofilter is lean and effective. Only negative is that it needs to be
trained.

> But I'm running it from procmail on my mail only.  I've never bothered
> to integrate it into postfix.

Would be very handy if someone were to make a port of scripts with
something like ADD_SPAM, NOT_SPAM, and SPAM folders under IMAP to drive
bogofilter remotely from an email client. Train as spam messages placed
in ADD_SPAM and then move them into something like ADDED_SPAM. Have
bogofilter place found spam in SPAM, user puts falses in NOT_SPAM.
Scripts train bogofilter on contents of NOT_SPAM and put in something
like NOT_SPAMMED. Users may clean out SPAM, ADDED_SPAM, and NOT_SPAMMED
as they fill. The point is to never throw anything away with the
scripts.

Then on top of that one ought to have some means of global spam filter
database in addition to per-user databases.

This is such a good idea am sure somebody has done it already, I just
don't know where.

-- 
David Kelly N4HHE, [EMAIL PROTECTED]

Whom computers would destroy, they must first drive mad.
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Gabor Kovesdan

Richard Coleman escribió:
I am running a mail server using Postfix and Dovecot.  I would like to 
hear people's recommendation for which port to use to add server side 
anti-spam.  The problem these days is a richness of choices, so it's 
hard to know port which to try.


And call it a quirk of mine, but I really dislike (server) software 
with a large number of dependencies.  That rules out Spam Assassin.  
But I am fairly conversant with mail and Postfix/Dovecot in general, 
so I don't mind any integration work.


I apologize if this has been discussed before, but I just joined the 
list (I am already on so many FreeBSD lists already).  I appreciate 
any insight that people can offer.



Hello Richard,

I think the most common (and thus more mature) solution for this are 
amavisd-new + SpamAssassin + clamav, they have a lot of dependencies, 
though. Clamav catches all the viruses, just the spams had caused 
problems with this configuration, before I started to use postgrey.


I see your concerns about dependencies, but I think sometimes we have to 
make sacrifices for the most appropriate choice. This also applies to 
the next solution I recommend you and this is greylisting with postgrey. 
It does not have too much dependency, but it works in a way, that you 
can loose important mails as well.


The concept of greylisting is that the server responds to the sender 
with an error code meaning a temporary failure and places the sender to 
a list called greylist when a mail is being sent. After some minutes (5 
or so), well-configured STMP servers resend the mail, when your server 
notices, that the given server was greylisted, and now it can be 
trusted. Spam bots don't usually resend mails, they are too primitive 
for this atm. It can change in the future, but for now, the method 
works, it's been very well for me. The only problem is that there are 
STMP server that are configured in a weird way and they don't send out 
mails later again. Postgrey offers a solution, though. You can place 
such servers to a whitelist and they will be excluded from the greylisting.


I have heard good experiences about dspam as well, but haven't used it, 
thus I can't form any opinion.


Regards,

--
Gabor Kovesdan
FreeBSD Volunteer

EMAIL: [EMAIL PROTECTED] .:|:. [EMAIL PROTECTED]
WEB:   http://people.FreeBSD.org/~gabor .:|:. http://kovesdan.org

___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Roland Smith
On Wed, Jun 06, 2007 at 12:00:59PM -0400, Richard Coleman wrote:
>  I am running a mail server using Postfix and Dovecot.  I would like to hear 
>  people's recommendation for which port to use to add server side anti-spam.  
>  The problem these days is a richness of choices, so it's hard to know port 
>  which to try.
> 
>  And call it a quirk of mine, but I really dislike (server) software with a 
>  large number of dependencies.  That rules out Spam Assassin.  But I am 
>  fairly conversant with mail and Postfix/Dovecot in general, so I don't mind 
>  any integration work.

Bogofilter works very well, after you've trained it with some spam &
ham. You can get a head start by starting from someone else's wordlist.

But I'm running it from procmail on my mail only.  I've never bothered
to integrate it into postfix.

Roland
-- 
R.F.Smith   http://www.xs4all.nl/~rsmith/
[plain text _non-HTML_ PGP/GnuPG encrypted/signed email much appreciated]
pgp: 1A2B 477F 9970 BA3C 2914  B7CE 1277 EFB0 C321 A725 (KeyID: C321A725)


pgprTTKB3GExr.pgp
Description: PGP signature


Re: Seeking recommendation for anti-spam software

2007-06-06 Thread Eric

Richard Coleman wrote:
I am running a mail server using Postfix and Dovecot.  I would like to 
hear people's recommendation for which port to use to add server side 
anti-spam.  The problem these days is a richness of choices, so it's 
hard to know port which to try.


And call it a quirk of mine, but I really dislike (server) software with 
a large number of dependencies.  That rules out Spam Assassin.  But I am 
fairly conversant with mail and Postfix/Dovecot in general, so I don't 
mind any integration work.


I apologize if this has been discussed before, but I just joined the 
list (I am already on so many FreeBSD lists already).  I appreciate any 
insight that people can offer.


Richard Coleman
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to 
"[EMAIL PROTECTED]"


I use the same 2 programs as you for mail and postgrey works great. I 
use it with amavisd/SA/clamav and it all works very well.


integrate postgrey and see how your numbers drop. it works very well.

Eric
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Seeking recommendation for anti-spam software

2007-06-06 Thread Richard Coleman
I am running a mail server using Postfix and Dovecot.  I would like to 
hear people's recommendation for which port to use to add server side 
anti-spam.  The problem these days is a richness of choices, so it's 
hard to know port which to try.


And call it a quirk of mine, but I really dislike (server) software with 
a large number of dependencies.  That rules out Spam Assassin.  But I am 
fairly conversant with mail and Postfix/Dovecot in general, so I don't 
mind any integration work.


I apologize if this has been discussed before, but I just joined the 
list (I am already on so many FreeBSD lists already).  I appreciate any 
insight that people can offer.


Richard Coleman
[EMAIL PROTECTED]
___
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"