Postfix, relay MX - Revision history

Jimbo: Reverted edits by 174.129.118.26 (Talk) to last revision by Jimbo

2011-08-01T20:12:38Z

Reverted edits by 174.129.118.26 (Talk) to last revision by Jimbo

174.129.118.26: wS6nUM http://dnY2o9vn4CqP1dHf7l83Tn.com

2011-07-28T21:54:54Z

wS6nUM http://dnY2o9vn4CqP1dHf7l83Tn.com

Jimbo at 22:01, 25 May 2010

2010-05-25T22:01:02Z

Jimbo: /* /usr/local/bin/filter.sh */

2009-11-14T16:03:38Z

/usr/local/bin/filter.sh

Jimbo at 03:51, 7 October 2009

2009-10-07T03:51:04Z

Jimbo at 01:08, 7 October 2009

2009-10-07T01:08:42Z

Jimbo at 00:59, 7 October 2009

2009-10-07T00:59:43Z

Jimbo at 00:33, 7 October 2009

2009-10-07T00:33:16Z

Jimbo at 00:31, 7 October 2009

2009-10-07T00:31:37Z

Jimbo at 00:26, 7 October 2009

2009-10-07T00:26:33Z

@@ Line 1: / Line 1: @@
 The goal here is to set up a spam and virus filtering relay MX, capable of acting as one of potentially many relays which show as the primary MX record for a domain.  Ideally, the true destination MX will not show up in DNS at all - to prevent spammers from trying to target it directly.  (Also ideally, that final destination MX will ONLY accept inbound mail from your relays, for hopefully obvious reasons.)
-wS6nUM http://dnY2o9vn4CqP1dHf7l83Tn.com
+==necessary software==
 ==/usr/local/etc/postfix/main.cf==

@@ Line 1: / Line 1: @@
 The goal here is to set up a spam and virus filtering relay MX, capable of acting as one of potentially many relays which show as the primary MX record for a domain.  Ideally, the true destination MX will not show up in DNS at all - to prevent spammers from trying to target it directly.  (Also ideally, that final destination MX will ONLY accept inbound mail from your relays, for hopefully obvious reasons.)
-==necessary software==
+wS6nUM http://dnY2o9vn4CqP1dHf7l83Tn.com
-−
-Build /usr/ports/mail/postfix, /usr/ports/mail/spamassassin, and /usr/ports/security/clamav from [[ports]].
-−
-Once they're built, you'll need to enable them in /etc/rc.conf and start them:
-−
- # '''echo 'spamd_enable="YES"' >> /etc/rc.conf'''
- # '''echo 'clamav_freshclam_enable="YES"' >> /etc/rc.conf'''
- # '''echo 'clamav_clamd_enable="YES"' >> /etc/rc.conf'''
- # '''echo 'sendmail_enable="NONE"' >> /etc/rc.conf'''
- # '''echo 'postfix_enable="YES"' >> /etc/rc.conf'''
- # '''killall sendmail'''
- # '''/usr/local/etc/rc.d/postfix start'''
- # '''/usr/local/etc/rc.d/clamav-clamd start '''
- # '''/usr/local/etc/rc.d/clamav-freshclam start'''
- # '''/usr/local/etc/rc.d/sa-spamd start'''
- # '''/usr/local/etc/rc.d/postfix start'''
-−
-You'll also need Postprox, which is not in the ports tree.  Get it from http://www.ivarch.com/programs/quickref/postprox.shtml - un[[tar]] it, get into the directory the source code is in, and '''./configure''' and '''make install''' without parameters.  This will dump the binary in /usr/local/sbin and the manpages into the appropriate places.
-−
 ==/usr/local/etc/postfix/main.cf==

← Older revision		Revision as of 22:01, 25 May 2010
Line 72:		Line 72:

	#!/bin/sh		#!/bin/sh
		+
		+	# If you don't export a HOME, you get 554 "~/.mailrc: No match" errors.
		+	HOME=/home/filter ; export HOME

	/usr/local/bin/clamdscan --no-summary --stdout - < "$EMAIL"		/usr/local/bin/clamdscan --no-summary --stdout - < "$EMAIL"

@@ Line 72: / Line 72: @@
   #!/bin/sh
-−
   /usr/local/bin/clamdscan --no-summary --stdout - < "$EMAIL"
   VSTATUS=$?
@@ Line 112: / Line 112: @@
 It's worth noting that there is some "belt and suspenders" logic in this script - it should be impossible ever to hit the UNEXPECTED error and the exit 2 at the bottom of the script; and it should be unnecessary to check that SSTATUS is not equal to zero in the spam filtering section (since you already have a check to exit 0 if both VSTATUS and SSTATUS are 0 prior to that).  '''This is not accidental!''' Odds are relatively good that you'll decide to monkey with your filtering at some point, and "unnecessary" checks like this may make it less likely that you'll screw yourself in unexpected ways if and when you do.
 ==/etc/postfix/transport==

← Older revision		Revision as of 03:51, 7 October 2009
Line 159:		Line 159:

	If you expect to be maintaining a lot of domains or addresses, you'll probably also want to see [[Postfix, maintaining relay destinations]].		If you expect to be maintaining a lot of domains or addresses, you'll probably also want to see [[Postfix, maintaining relay destinations]].
		+
		+
		+	[[Category:Common Tasks]]
		+	[[Category:Postfix]]

← Older revision		Revision as of 01:08, 7 October 2009
Line 157:		Line 157:

	'''postfix reload''' and you should be good to go.		'''postfix reload''' and you should be good to go.
		+
		+	If you expect to be maintaining a lot of domains or addresses, you'll probably also want to see [[Postfix, maintaining relay destinations]].

@@ Line 144: / Line 144: @@
   chown /home/filter
-And since we're using site-wide scanning, we want to make sure that the same database always gets used for Bayes analysis.
+And since we're using site-wide scanning, we want to make sure that the same database always gets used for Bayes analysis.  These lines go in /usr/local/etc/mail/spamassassin/local.cf:
   bayes_path /home/filter/.spamassassin/bayes
 And restart spamd; /usr/local/etc/rc.d/sa-spamd restart.  Note that unless you manually train the Bayes database with ham and spam, it will only learn by the autolearn mechanism!  You can issue the command '''sa-learn --dump magic''' to check and see how many messages have been learned, how many tokens exist, etc.

← Older revision		Revision as of 00:33, 7 October 2009
Line 148:		Line 148:
	bayes_path /home/filter/.spamassassin/bayes		bayes_path /home/filter/.spamassassin/bayes

−	And restart spamd; /usr/local/etc/rc.d/sa-spamd restart. Note that unless you manually train the Bayes database with ham and spam, it will only learn by the autolearn mechanism!	+	And restart spamd; /usr/local/etc/rc.d/sa-spamd restart. Note that unless you manually train the Bayes database with ham and spam, it will only learn by the autolearn mechanism! You can issue the command '''sa-learn --dump magic''' to check and see how many messages have been learned, how many tokens exist, etc.

@@ Line 144: / Line 144: @@
   chown /home/filter
-==configure Bayes in SpamAssassin==
+  bayes_path /home/filter/.spamassassin/bayes
-−
-  mkdir /var/db/spamassassin/bayes
- chown filter /var/db/spamassassin/bayes
-−
-Now you need to put the following in /usr/local/etc/mail/spamassassin/local.cf:
-−
- # change to non-NFS-safe file lock on Bayes databases (for speed)
- lock_method flock
- bayes_path /var/db/spamassassin/bayes/bayes
 And restart spamd; /usr/local/etc/rc.d/sa-spamd restart.  Note that unless you manually train the Bayes database with ham and spam, it will only learn by the autolearn mechanism!

← Older revision		Revision as of 00:26, 7 October 2009
Line 143:		Line 143:
	mkdir /home/filter		mkdir /home/filter
	chown /home/filter		chown /home/filter
		+
		+
		+	==configure Bayes in SpamAssassin==
		+
		+	mkdir /var/db/spamassassin/bayes
		+	chown filter /var/db/spamassassin/bayes
		+
		+	Now you need to put the following in /usr/local/etc/mail/spamassassin/local.cf:
		+
		+	# change to non-NFS-safe file lock on Bayes databases (for speed)
		+	lock_method flock
		+	bayes_path /var/db/spamassassin/bayes/bayes
		+
		+	And restart spamd; /usr/local/etc/rc.d/sa-spamd restart. Note that unless you manually train the Bayes database with ham and spam, it will only learn by the autolearn mechanism!