On 13 Nov 2002, James Pifer wrote:

> I hope people on this list don't mind me asking another question about
> Mailscanner with Sendmail/f-prot/SpamAssassin. I know MailScanner has a
> forum, but this is by far the place with the most knowledge. I've also
> looked at the FAQ on MailScanner's site. That being said....

Actually, the people on the MailScanner forum are extremely knowledgeable 
about this subject.  Most of them are professional mail administrators for 
large universities or corporations.  They are specialists in what you're 
trying to do.
 
> I have it all installed, mostly with defaults, but spam still seems to
> be getting through. I've received 6 spam messages since last night. How
> can I tell if its working at all? /var/log/maillog doesn't seem to show
> me much except sendmail delivering (forwarding in my case) the messages.
> Are there some logs somewhere for MailScanner, SpamAssassin (and f-prot
> for that matter)? 

What do you mean that spam is still getting through?  Is the spam being
marked as spam and coming through or is it just slipping through
undetected?  Spamassassin just scores the message depending on how
"spammy" it seems.  If over a threshold that you set then the subject will
be marked with something like "SPAM?".  Spamassassin also provides the
ability to add a line containing a character like a "*" for each point of
spam found in the message.  Spam isn't stopped from coming right on
through though unless you filter for it by checking for the "SPAM?" 
subject change or checking the header line for the number of "*".

> In another post Steve Cowles made mention of Procmail. It looks like
> Procmail was installed by default when I installed RH8. Do I need to
> disable or configure anything in there?

If you read the spamassassin doc's they tell you how to check if
spamassassin is actually working.  You will find that in the spamassassin
directory you will have two files.  One is called sample-nonspam.txt and
sample-spam.txt.  Run those through spamassassin to check if it's working 
(how to do this is in the doc's).

Assuming your messages are being marked as spam then you need to filter
those messages out.  You can use procmail on your server to check for the
"SPAM?" header or check if the number of "*" exceed the threshold you set.  
procmail can be used to send all marked spam to a special spam folder 
where it can be verified as actually spam or if you feel courageous it 
can be sent to /dev/null.  Once again this is all in the spamassassin 
doc's.

Users may not appreciate you filtering their mail at the server though.  
If you're in that kind of environment you can allow all the marked spam to 
go right through and they can filter using their mail clients.

Of course, MailScanner shouldn't be letting any virus come through at all.  
Those messages will all be quarantined.  There are several options on how 
to handle both spam and virii in the MailScanner.conf file.


-- 
Gerry

"The lyfe so short, the craft so long to learne"  Chaucer



-- 
redhat-list mailing list
unsubscribe mailto:redhat-list-request@;redhat.com?subject=unsubscribe
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to