Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Chris Buechler
On Wed, Oct 13, 2010 at 10:41 PM, Gordon Russell
 wrote:
>
> Why cobble together a VM scenario to do that, when there is packaged, simple, 
> free software achieve his ends? I don't know that a VM'ed scenario would > be 
> any less resource intensive than untangle. It would certainly be a more 
> challenging "learning experience" for one to set up though.

Yes it would definitely require a lot more expertise, but it is a way
to get more out of the same hardware if it's not a screaming fast box
and that hardware is the only option. You can scale down the resources
Untangle can have at the ESX level and if you're only pushing mail
through it that won't have any noticeable performance impact on the
environment. If you don't have that expertise or the time to get it,
getting that expertise at the $0 budget likely isn't going to happen.

Jails are a much faster, lower overhead, means of virtualization if
you want to go the DIY route to build the anti-spam setup yourself.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread James Bensley
Thank you too all for your input.

I think running two VMs on top of the host OS (although it would be
nice) is too much overhead for my liking given the spec of the box. I
like the sound of jailctl, I will give this a go and report back my
findings ;)

-- 
Regards,
James.

http://www.jamesbensley.co.cc/

There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Gordon Russell

- "Chris Buechler"  wrote:

> On Wed, Oct 13, 2010 at 9:20 PM, Gordon Russell
>  wrote:
> >
> > The base version of untangle is free
> 
> Aside from the hardware, with its considerable bloat, the hardware
> available may not be able to accommodate that scenario. Though if the
> hardware can run ESXi, putting it on a VM to do only spam (assuming
> that's possible, I'm not entirely sure), and only directing mail
> through it without putting it inline, should make that a non-factor.
> Then even if it is extremely slow it won't really matter.
> 

 I was just suggesting to the OP that there is free software out there to 
achieve his goals -- which is more of a UTM than pure firewall scenario. In the 
OP's words he needs to:
 
 "run pfSense, SpamAssassin, ClamAV, Squid and Squidgaurd to filter all traffic 
in and out bound"

Why cobble together a VM scenario to do that, when there is packaged, simple, 
free software achieve his ends? I don't know that a VM'ed scenario would be any 
less resource intensive than untangle. It would certainly be a more challenging 
"learning experience" for one to set up though.
PFsense is a great firewall platform, and Chris you do a great job with it.. 
I'm not knocking it in any way, just suggesting to the OP that another platform 
may be better suited to his needs (and experience level).

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Chris Buechler
On Wed, Oct 13, 2010 at 9:20 PM, Gordon Russell
 wrote:
>
> The base version of untangle is free

Aside from the hardware, with its considerable bloat, the hardware
available may not be able to accommodate that scenario. Though if the
hardware can run ESXi, putting it on a VM to do only spam (assuming
that's possible, I'm not entirely sure), and only directing mail
through it without putting it inline, should make that a non-factor.
Then even if it is extremely slow it won't really matter.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Gordon Russell

- Original Message -
From: "James Bensley" 
To: support@pfsense.com
Sent: Wednesday, October 13, 2010 3:10:00 PM
Subject: Re: [pfSense Support] pfSense 2.0 and SpamAssassin

On 13 October 2010 19:30, Gordon Russell  wrote:
> You may want to look at untangle then.
>
> http://www.untangle.com

I have seen that before but sadly this isn't an option either, we are
a non-profit and although they do discounted prices my budget is
£0.00.. Thats why I previously mentioned that I didn't have another
box I could separate these services over, the box we are running
pfSense on was a greatly appreciated donation.

The base version of untangle is free and will do everything you are looking for.

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Scott Lambert
On Wed, Oct 13, 2010 at 08:38:38PM +0200, Chris Buechler wrote:
> 
> On Oct 13, 2010, at 7:37 PM, James Bensley wrote:
> 
> >Hi List,
> >
> >I would like to put Spam Assassin on a pfSense 2.0 box and I see that
> >here (http://www.pfsense.com/packages/pkg_config.xml) it is listed as
> >a package to install but doesn't show up in my package list on my 2.0
> >box, is this the package list for 1.2.3 perhaps?
> 
> LONG before that (that's the 6.x package list, about 5-6 years ago).  
> That package never worked, was started and not even remotely close to  
> functional. You're in for a whole lot of work if you want to finish  
> that. The code is still in git though, knock yourself out.
> 
> But I would never run that on a firewall regardless with its security  
> track record.

How about putting that stuff in a jail on the pfSense box?

-- 
Scott LambertKC5MLE   Unix SysAdmin
lamb...@lambertfam.org


-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Chris Buechler


On Oct 13, 2010, at 9:10 PM, James Bensley wrote:



*scratches head* I could virtualise /both/ pfSense and SA on the same
box as separate VMs??!?...again I'd rather not...or would I? Noodle
baker!



Yeah if you can run VMware ESXi on the box and then run whatever VMs  
you need, that's a good solution. Or you can look at the jailctl  
package and run a full jail for spamassassin and whatever else you  
want to throw on it.



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread James Bensley
On 13 October 2010 19:30, Gordon Russell  wrote:
> You may want to look at untangle then.
>
> http://www.untangle.com

I have seen that before but sadly this isn't an option either, we are
a non-profit and although they do discounted prices my budget is
£0.00.. Thats why I previously mentioned that I didn't have another
box I could separate these services over, the box we are running
pfSense on was a greatly appreciated donation.

On 13 October 2010 19:38, Chris Buechler  wrote:
> But I would never run that on a firewall regardless with its security track
> record.

I see, this wasn't something I was aware off, I had contemplated
running it as a virtual machine on the pfSense box and given your
comments on security this might possibly elude such security flaws
however I am unaware of any security flaws (because I'm new to  spam
assassin and need to do some homework first!) but I don't think I like
the idea of running a VM on top of pfSense I would rather run SA along
side it on the same box.

*scratches head* I could virtualise /both/ pfSense and SA on the same
box as separate VMs??!?...again I'd rather not...or would I? Noodle
baker!

-- 
Regards,
James.

http://www.jamesbensley.co.cc/

There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Chris Buechler


On Oct 13, 2010, at 7:37 PM, James Bensley wrote:


Hi List,

I would like to put Spam Assassin on a pfSense 2.0 box and I see that
here (http://www.pfsense.com/packages/pkg_config.xml) it is listed as
a package to install but doesn't show up in my package list on my 2.0
box, is this the package list for 1.2.3 perhaps?


LONG before that (that's the 6.x package list, about 5-6 years ago).  
That package never worked, was started and not even remotely close to  
functional. You're in for a whole lot of work if you want to finish  
that. The code is still in git though, knock yourself out.


But I would never run that on a firewall regardless with its security  
track record.



-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Gordon Russell

- Original Message -
From: "James Bensley" 
To: support@pfsense.com
Sent: Wednesday, October 13, 2010 2:22:00 PM
Subject: Re: [pfSense Support] pfSense 2.0 and SpamAssassin

On 13 October 2010 19:00, Jim Pingle  wrote:
> You'd be better of installing SpamAssassin on a box that isn't a secure
> firewall. :-)

Sadly the isn't an option for me, I'm setting up a network edge box to
run pfSense, SpamAssassin, ClamAV, Squid and Squidgaurd to filter all
traffic in and out bound and I have no other boxes to achieve this
with so I'm going for an all in wonder :)

-- 
Regards,
James.

http://www.jamesbensley.co.cc/

There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org

You may want to look at untangle then.

http://www.untangle.com

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread James Bensley
On 13 October 2010 19:00, Jim Pingle  wrote:
> You'd be better of installing SpamAssassin on a box that isn't a secure
> firewall. :-)

Sadly the isn't an option for me, I'm setting up a network edge box to
run pfSense, SpamAssassin, ClamAV, Squid and Squidgaurd to filter all
traffic in and out bound and I have no other boxes to achieve this
with so I'm going for an all in wonder :)

-- 
Regards,
James.

http://www.jamesbensley.co.cc/

There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



Re: [pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread Jim Pingle
On 10/13/2010 1:37 PM, James Bensley wrote:
> Hi List,
> 
> I would like to put Spam Assassin on a pfSense 2.0 box and I see that
> here (http://www.pfsense.com/packages/pkg_config.xml) it is listed as
> a package to install but doesn't show up in my package list on my 2.0
> box, is this the package list for 1.2.3 perhaps? If so, is there any
> intention of making a package for it or am I better off just
> installing Spam Assassin onto my pfSense box manually?
> 
> Any tips or points would be greatly appreciated :)

You'd be better of installing SpamAssassin on a box that isn't a secure
firewall. :-)

Jim

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org



[pfSense Support] pfSense 2.0 and SpamAssassin

2010-10-13 Thread James Bensley
Hi List,

I would like to put Spam Assassin on a pfSense 2.0 box and I see that
here (http://www.pfsense.com/packages/pkg_config.xml) it is listed as
a package to install but doesn't show up in my package list on my 2.0
box, is this the package list for 1.2.3 perhaps? If so, is there any
intention of making a package for it or am I better off just
installing Spam Assassin onto my pfSense box manually?

Any tips or points would be greatly appreciated :)

-- 
Regards,
James.

http://www.jamesbensley.co.cc/

There are 10 kinds of people in the world; Those who understand
Vigesimal, and J others...?

-
To unsubscribe, e-mail: support-unsubscr...@pfsense.com
For additional commands, e-mail: support-h...@pfsense.com

Commercial support available - https://portal.pfsense.org