Re: DSPAM and Sendmail

From: User Ernie (ernie_at_puremail.eis.net.au)
Date: 10/27/05

  • Next message: User Ernie: "Re: DSPAM and Sendmail"
    To: freebsd-isp@freebsd.org
    Date: Thu, 27 Oct 2005 10:15:06 +1000 (EST)
    
    

    DSPAM is not a milter, it's a stand alone application that can run as a
    daemon or be piped to directly. It's basically an advanced adaptive spam
    filter written in C. I am currently running MailScanner -> SpamAssassin as a
    gateway feeding a bunch of hosting servers and client mailservers, it's been
    working for a year but a few problems have cropped up that make me want to cut
    to DSPAM. Firstly the Perl nature of the current setup uses stacks of RAM as
    I add more MailScanner processess to handle the load. Secondly a lot of SPAM
    is creeping through as the spammers get smarter, and I am always having to
    tweak rulesets. Lastly the whole set up is slooowww, especially if you
    use a lot of DCC/Pyzor, and other offsite checks, the average mail delay as
    reported by the vspan GUI, is about 25sec, and can be minutes in busy
    periods, hence the need to seek change. DSPAM is a C program, small footprint
    very fast especially if you use MySQL for the backend database. It has
    fantastic SPAM capture rate, and a GUI for clients to edit quarantined SPAM.

    I have DSPAM 3.6.0 from the ports collection running on 2 FreeBSD boxen,
    a 5.4-STABLE and a 6.0-RC1 machine, just as the Mlocal delevery agent
    which then passes to procmail on one machine and just to mail.local on the other machine,
    both configs work fine. I thought I would be smart and set the delivery agent
    in the dspam.conf file to /usr/sbin/sendmail and see what happened, got a mail loop and the
    queue filled up and I had to kill the process. So my problem is how to get
    DSPAM, remembering that it is set as the Mlocal program on the recieving
    sendmail process, to pass the mail after it has finished with it to the
    sendmail process that can do both external delivery to another email server
    or to a local delivery program like procmail?

    {Internet} --> [Inbound Sendmail] -->[DSPAM] --> [Outbound Sendmail] --> [Other Mail Servers]
                                                           \
                                                         [procmail]-->[local users]

    I sort of thought it might be the sendmail process that uses the submit.cf file, however it does not seem
    to have a Mlocal entry that makes sense to me.

    - Ernie.

    > Hi Ernie,
    > I don't know DSPAM, is it a "milter" like mimedefang and
    > spamassassin? I use mimedefang and spamassassin (mimedefang calls
    > spamassassin) in a gateway spam filter/virus scanner etc config. In
    > my /etc/mail/hostname.mc file I put in
    > dnl # icarz customizations here
    > INPUT_MAIL_FILTER(`mimedefang',
    > `S=local:/var/spool/MIMEDefang/mimedefang.sock,
    > F=T,T=C:15m;S:4m;R:4m;E:10m')dnl
    > define(`confINPUT_MAIL_FILTERS', `mimedefang')dnl
    > dnl Custom rate limits should be OK with 1 gig
    >
    > define(`confCONNECTION_RATE_THROTTLE',`10')
    > define(`confMAX_DAEMON_CHILDREN', `40' )
    >
    > define(`SMART_HOST', `mailhost.icarz.com')
    >
    >
    > You can change the mail filter to be any mail filter. The SMART_HOST
    > sends everything to my real mail server. My mx records point to this
    > host. I am sure there are better configurations, but this was easy.
    >
    > I hope this helps you with you question,
    > Ken
    > ----- Original Message -----
    > From: "User Ernie" <ernie@puremail.eis.net.au>
    > To: <freebsd-isp@freebsd.org>
    > Sent: Tuesday, October 25, 2005 5:32 AM
    > Subject: DSPAM and Sendmail
    >
    >
    > >I am trying to get the DSPAM 3.6.0 port running as an SMTP relay
    > >gateway
    > > receiving/filtering mail for several hosting servers. I am using
    > > FreeBSD 5.4-STABLE and sendmail. On the DSPAM website it only gives
    > > examples for either DSPAM as Mlocal delivery, or using Postfix as a
    > > relay.
    > > I am not familiar with the FreeBSD dual sendmail instance setup, so
    > > I can't
    > > get my head around how to configure Sendmail to listen to port 25
    > > and do it's
    > > usual RBL checks I have set up, then pass mail to DSPAM, then finaly
    > > have DSPAM
    > > pass it back to sendmail to forward it to the correct mail hosting
    > > server.
    > >
    > > Has anyone done this, or can anyone suggest what to try? I had a
    > > look at the
    > > perl dspampd script but with no instructions I was stuck there as
    > > well.
    > >
    > > I also posted the question to the DSPAM mail list last week and got
    > > no
    > > replies.
    > >
    > > - Ernie.
    >
    > !DSPAM:435f7f7149181828790097!
    >
    >
    >
    >
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"


  • Next message: User Ernie: "Re: DSPAM and Sendmail"

    Relevant Pages

    • Re: How do fix a good solution against spam..
      ... On Wed, 2004-05-12 at 21:00, Jesper Wallin wrote: ... I recently switched from SpamAssassin to an open source program called ... DSPAM. ... was spam or innocent, and the spam probability of the e-mail. ...
      (FreeBSD-Security)
    • Re: DSPAM and Sendmail
      ... to DSPAM. ... fantastic SPAM capture rate, and a GUI for clients to edit quarantined SPAM. ... I thought I would be smart and set the delivery ... sendmail process that can do both external delivery to another email server ...
      (freebsd-isp)
    • Re: spam removal
      ... great idee to add a spam feature. ... I work with sendmail, no mysql db behind. ... >> I'd be grateful for some tips on how to get dspam up. ...
      (freebsd-questions)
    • Re[2]: SpamAssassian with FreeBSD and Big Mail Server
      ... >> filtering methods in dspam are miles ahead spamassassin`s (spamassassin ... >> better but the dspam mailinglist is quite helpful if you got questions. ... > runs a day or two but soon a spam wave comes in message delivery time grows ... > spamassassin on the other side with good rules maintanance is hitting fine, ...
      (freebsd-isp)