[SLUG] Anti-Spam/Anti-Virus Advice

2006-10-23 Thread Lyle Chapman
Could someone offers some advice, we already have an email server up and running communigate on an apple xserve. My manager has asked me if there are any anti-spam/anti-virus solutions that we can use as a pass-thru solution on a separate box. ie:router|anti-spam/virus solution|email server|desktop clientsI have looked at clarkconnect, e-smith, astaro etc. Is there anything that would say run on Fedora (as a bunch of daemons/services). Obviously with other distros have an email server built-in which we do not need.Any help is always appreciated. Lyle Chapman Prepress Supervisor Torch Publishing Company Pty Ltd 47 Allingham Street, Condell Park, NSW, 2200 Ph: 612 9795  Fax: 612 9795 0096  -- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-23 Thread Dave Kempe

Hi Lyle,
We don't use Fedora in general (prefer Ubuntu/Debian) but we have very 
successfully deployed a number of postfix/amavis/postgrey and Maia 
Mailguard setups to clients. Stands up very well compared to commercial 
solutions and gives you all the spam/av you could ever want.
Maia is a beast to setup, we have packages for Ubuntu which make it much 
easier. A decent setup with postfix/amavis/postgrey gets most people 
most of the way with filtering. Maia is strictly for the hardcore :)


let me know if you need more help with the actual setup.

thanks


dave

Lyle Chapman wrote:
Could someone offers some advice, we already have an email server up and 
running communigate on an apple xserve. My manager has asked me if there 
are any anti-spam/anti-virus solutions that we can use as a pass-thru 
solution on a separate box. ie:


router
|
anti-spam/virus solution
|
email server
|
desktop clients

I have looked at clarkconnect, e-smith, astaro etc. Is there anything 
that would say run on Fedora (as a bunch of daemons/services). Obviously 
with other distros have an email server built-in which we do not need.


Any help is always appreciated.

Lyle Chapman

Prepress Supervisor

Torch Publishing Company Pty Ltd

47 Allingham Street, Condell Park, NSW, 2200

Ph: 612 9795 

Fax: 612 9795 0096




--
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread Penedo
On 24/10/06, Dave Kempe <[EMAIL PROTECTED]> wrote:
easier. A decent setup with postfix/amavis/postgrey gets most peoplemost of the way with filtering. Maia is strictly for the hardcore :)Does this setup also addresses image spam?(I'm asking because I see this subject raised on a parallel Linux mailing list, I'm getting the feeling that the entire net is now trying to tackle this problem right now).
--P
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread Sonia Hamilton
* On Wed, Oct 25, 2006 at 10:23:39AM +1000, Penedo wrote:
> On 24/10/06, Dave Kempe <[EMAIL PROTECTED]> wrote:
> >
> >easier. A decent setup with postfix/amavis/postgrey gets most people
> >most of the way with filtering. Maia is strictly for the hardcore :)
> 
> 
> (I'm asking because I see this subject raised on a parallel Linux mailing
> list, I'm getting the feeling that the entire net is now trying to tackle
> this problem right now).

Penedo, see FuzzyOcrPlugin for spamassassin
http://wiki.apache.org/spamassassin/FuzzyOcrPlugin. I've written up a
quick install at http://www.snowfrog.net/?q=node/417

--
Sonia Hamilton. GPG key A8B77238.
.
One OS to rule them all, One OS to find them.
One OS to call them all, And in salvation bind them.
In the bright land of Linux, Where the hackers play. 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread Sonia Hamilton
* On Wed, Oct 25, 2006 at 01:21:37PM +1000, Sonia Hamilton wrote:
> * On Wed, Oct 25, 2006 at 10:23:39AM +1000, Penedo wrote:
> > On 24/10/06, Dave Kempe <[EMAIL PROTECTED]> wrote:
> > >
> > >easier. A decent setup with postfix/amavis/postgrey gets most people
> > >most of the way with filtering. Maia is strictly for the hardcore :)
> > 
> > 
> > (I'm asking because I see this subject raised on a parallel Linux mailing
> > list, I'm getting the feeling that the entire net is now trying to tackle
> > this problem right now).
> 
> Penedo, see FuzzyOcrPlugin for spamassassin
> http://wiki.apache.org/spamassassin/FuzzyOcrPlugin. I've written up a
> quick install at http://www.snowfrog.net/?q=node/417

PS as a quick fix in procmail - rate images higher:

# test if body contains gif, html, etc, and get procmail score
:0 Bc
* 2.5^0 Content-Type: image/gif
* 1^0 Content-Type: text/html
/dev/null
SCORE_PM=$=

# pull out SA score and required; if 2 scores > SA req'd, ISGT = 1 (true)
SCORE_SA=`formail -c -xX-Spam-Status: | awk '{print $2}' | awk -F= '{print $2}'`
REQD_SA=`formail -c -xX-Spam-Status: | awk '{print $3}' | awk -F= '{print $2}'`
ISGT=`echo "${SCORE_SA} + ${SCORE_PM} > ${REQD_SA}" | bc -l`

# test if ISGT = 1, if so, spam prob
:0 :
* ISGT ?? ^^1^^
.y_spam_probable/

--
Sonia Hamilton. GPG key A8B77238.
.
One OS to rule them all, One OS to find them.
One OS to call them all, And in salvation bind them.
In the bright land of Linux, Where the hackers play. 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html


Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread Penedo
On 25/10/06, Sonia Hamilton <[EMAIL PROTECTED]> wrote:
> Penedo, see FuzzyOcrPlugin for spamassassin> http://wiki.apache.org/spamassassin/FuzzyOcrPlugin. I've written up a> quick install at 
http://www.snowfrog.net/?q=node/417PS as a quick fix in procmail - rate images higher:Thanks very much. I've already see this link when it was sent across this forum just a few days ago.
I was just wondering about the recommendation for Maia.Cheers,--P
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread Penedo
On 25/10/06, David Kempe <[EMAIL PROTECTED]> wrote:
anything spamassassin supports, amavis and or Maia support. You can load inThanks. That answers it.Cheers,--P 
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Re: [SLUG] Anti-Spam/Anti-Virus Advice

2006-10-24 Thread David Kempe
Penedo <[EMAIL PROTECTED]> wrote:

> Does this setup also addresses image spam?
> (I'm asking because I see this subject raised on a parallel Linux mailing
> list, I'm getting the feeling that the entire net is now trying to tackle
> this problem right now).


anything spamassassin supports, amavis and or Maia support. You can load in
custom rules or use an auto-update rules service like rules-de-jour or plugin
anything you want spamassassin.
So yes it does support it, though I haven't implemented it anywhere yet. The
increased Bayesian learning from having a decent system to do it, means that
you find that the Bayesian is what gets the spam, and you don't need to sweat
the new rules so much. That being said, I agree that image spam is becoming a
real problem and no doubt I will need to do something about it soon for
someone, so I will probably just integrate the aforementioned SA plugin..

Dave


-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html