BumQ

วันเสาร์ที่ 7 เมษายน พ.ศ. 2555

How to install SpamFilter

The SME SpamFilter uses the new SpamAssassinV3 engine and has updated Razor2, and DCC network test modules associated. In the new Server-Manager panel  it has been made very simple to configure Real Time Block/Black Lists (RBLs), White/Black Lists (WBLs) and other Spamassassin functions. The installation script will migrate RBL if configured as per Ray Mitchell's HowTo and WBL settings if configured in the old Spamassassin server manager module. See RBL information below for details on this.

[root@e-smith]# cd /root
[root@e-smith]# sh spamfilter_install.sh


When installation is complete you should now configure and enable the Spam Filter via the Spam Filter configuration menu in the Server Manager. Please notice that the admin account is not being scanned by the Spam Filter. If you get spam on this account (properly via postmaster or another alias) then I recommend that you redirect admin email to a "real" user via server-manager->Configuration->E-mail->forwarding address.

Quite often spammer are trying to reach all kinds of non-existing account on your server from potentially also non-existing email accounts. This can result in many double bounce messages to your postmaster account. Use the "How to delete double bounce messages" to avoid this.

See FAQ below if you have any questions before mailing me.


Real Time Block/Black List (RBL) Information



Using more lists will result in more queries being sent & received over your Internet connection but should result in more spam being rejected. Some lists are included on other lists so be careful not to include "double listings" as these only result in extra unnecessary queries, potentially slowing down the list servers response times. Choose RBL lists carefully to ensure they meet your needs. Some lists are very aggressive in the implementation of their "inclusion" policy, and while using those lists may block more spam they will also block legitimate messages. You can read the "criteria for inclusion policies" on each list at the list owners web site. The web site addresses are readily discernible from the list names. See Web sites section below.
For example using the bl.spamcop.net list will result in email messages from yahoo, hotmail and earthlink accounts being rejected. If you have legitimate users sending messages from those types of accounts, then do not use the bl.spamcop.net list. This also applies to some other lists.
Inclusion on a list can happen for many reasons, including being a known spammer or having a dynamic dial up IP number or sending via open relay servers or having incorrect address information or being listed by a system admin after receiving a spate of unsolicited email. Inclusion on "conservative" lists usually requires a positive identification of spamming or similar type activity. It is possible for legitimate users to be listed as part of a "block listing" of an IP number range such as has happened with Telstra Bigpond, AOL & other "large" ISP's etc. These listings are generally temporary until the specific spam culprit is identified and has their account cancelled by the ISP.
Here is a list of what appear to be "conservative & safe" lists ie there is justifiable or provable reason for being included on these lists. This is by no means an exhaustive list but is the result of my own investigations and conclusions.
Note that all the lists except spamhaus.org include open relays, so using these lists will block email sent via open relays.

Conservative lists
  • sbl-xbl.spamhaus.org - (a combination of cbl.abuseat.org and opm.blitzed.org)
  • dsn.rfc-ignorant.org
  • postmaster.rfc-ignorant.org
  • abuse.rfc-ignorant.org
  • whois.rfc-ignorant.org
  • ipwhois.rfc-ignorant.org
  • bogusmx.rfc-ignorant.org
  • dnsbl.njabl.org
  • relays.ordb.org
  • dnsbl.sorbs.net
  • contacts.abuse.net
  • list.dsbl.org
Registration required/Commercial list
  • blackholes.mail-abuse.org
  • relays.mail-abuse.org
  • dialups.mail-abuse.org
Aggressive lists
  • dynablock.njabl.org - (was dynablock.easynet.nl)
  • bl.spamcop.net
Web sites for further information
ที่

ไม่มีความคิดเห็น:

แสดงความคิดเห็น

สมัครสมาชิก: ส่งความคิดเห็น (Atom)