mail server setup
Janina Sajka
janina at rednote.net
Mon Jan 18 17:17:34 EST 2016
Well, John. You might just change my mind about spamassassin. Care to
share your configuration somewhere? I'm willing to give it another try.
I agree that crowd-sourced enhancements could indeed be powerful in this
use case.
Janina
John G Heim writes:
> I don't think there is a better spam filtering tool than spamassassin. I ran
> the mail server for my department and all by myself, I was able to get
> filtering as efficient as the campus mail server which used a commercial
> product and had a full-time employee tuning it. The secret is crowd
> sourcing. I had it download a new set of rules nightly and configured it to
> use 3 crowd sourced systems, dcc, razor and pyzor. It took a while to set
> all that up but once it was done, all I had to do was sit back and let the
> world tune my spam filter.
>
> Spamassassin is a bigger resource hog than anything else in a mail system. I
> think that is probably true of any spam/virus filter. There is just a lot to
> do. And really, it's the virus scanning part that is the worst. You don't
> want to skip that. We had about 200 users on a machine with 16 cores and 32
> Gb of ram. It never had a problem with the load.
>
> On 01/11/2016 01:43 PM, Janina Sajka wrote:
> >Hi,
> >
> >I've got my crm set up via my personal ~/.procmailrc . It can also be
> >setup system wide, however I haven't needed that recently.
> >
> >The crm home page does discuss site wide deployment:
> >http://crm114.sourceforge.net/wiki/doku.php
> >
> >I note one can even use it with Spamassassin. I didn't go that way. I
> >dropped Spamassassin because it was spawning far too many processes that
> >were absorbing far too much of my available system resources, so that
> >other tasks on my server were suffering.
> >
> >Am I completely happy with the results? No. I still get too many false
> >positives and consequently still need to look at my spam folder from
> >time to time. I've white-listed many more email sources than I would
> >have expected.
> >
> >However, I see no more than a dozen or so emails in my inbox daily, and
> >that's a big improvement over what I was getting from Spamassassin.
> >
> >hth
> >
> >Janina
> >
> >
> >covici at ccs.covici.com writes:
> >>How would you use crm114 for spam filtering? Also, I am unfamiliar with
> >>dkim and dmark, -- I do have sendmail -- how would those help?
> >>
> >>Janina Sajka <janina at rednote.net> wrote:
> >>
> >>>Juan Hernandez writes:
> >>>>I need webmail, imap, virtual domains, spam/antivirus protection, etc.
> >>>Let's take them one at a time ...
> >>>
> >>>webmail
> >>>This one is easy. Go with squirrelmail .
> >>>
> >>> imap
> >>> Another easy one, dovecot .
> >>>
> >>> virtual domains
> >>> Any mta worth its salt will give you this. It's pretty trivial, e.g. in
> >>> sendmail you simply add domains into a config file, one per line. If
> >>> need be, you can get more elaborate, e.g. direct mail addressed to
> >>> a at b.c. to d at e.f. It's all very doable.
> >>>
> >>> spam/antivirus protection
> >>> This one is more complicated, and more important. I'm sure you're not
> >>> interested in becoming an open relay for every spammer on the planet?
> >>> So:
> >>>
> >>> Antivirus -- You probably only care if you have users on Windows.
> >>> clamav is my choice for this, though mine is curently broken--I don't
> >>> have windows clients.
> >>>
> >>> anti-spam -- much of this depends on a good mta configuration. Today's
> >>> mta's, you'll probably select either sendmail or procmail, set you up
> >>> by default with a pretty good configuration. You'll want to carefully
> >>> read your way through the config file to understand what's going on.
> >>> This is the starting point.
> >>>
> >>> Next is the process of sorting the mail that arrives into "probably OK"
> >>> and "probably junk" piles. People used to rely on spamassassin for
> >>> that, but I found it far too resource heavy and stopped using it about
> >>> two years ago. I'm now using crm114. And, with Jason White, I'm looking
> >>> at possibly moving to rstampd .
> >>>
> >>> In any case, you'll want to configure dkim and dmark for your mta.
> >>> These assist the net in assuring you and everyone else that what you
> >>> receive, and what you send is legit.
> >>>
> >>> Spam is a never ending battle. Expect to need to work on your
> >>> configurations and approaches from time to time as the months and years
> >>> go by.
> >>>
> >>> If this sounds daunting, that's probably good. It's not a trivial task,
> >>> but it can be fun and certainly can be rewarding. I certainly have no
> >>> interest in giving up my setup for some service somewhere else.
> >>>
> >>> hth
> >>>
> >>> Janina
> >>>
> >>>
> >>>
> >>>--
> >>>
> >>>Janina Sajka, Phone: +1.443.300.2200
> >>> sip:janina at asterisk.rednote.net
> >>> Email: janina at rednote.net
> >>>
> >>>Linux Foundation Fellow
> >>>Executive Chair, Accessibility Workgroup: http://a11y.org
> >>>
> >>>The World Wide Web Consortium (W3C), Web Accessibility Initiative (WAI)
> >>>Chair, Accessible Platform Architectures http://www.w3.org/wai/apa
> >>>
> >>>_______________________________________________
> >>>Speakup mailing list
> >>>Speakup at linux-speakup.org
> >>>http://linux-speakup.org/cgi-bin/mailman/listinfo/speakup
> >>>
> >>--
> >>Your life is like a penny. You're going to lose it. The question is:
> >>How do
> >>you spend it?
> >>
> >> John Covici
> >> covici at ccs.covici.com
> >>_______________________________________________
> >>Speakup mailing list
> >>Speakup at linux-speakup.org
> >>http://linux-speakup.org/cgi-bin/mailman/listinfo/speakup
>
> _______________________________________________
> Speakup mailing list
> Speakup at linux-speakup.org
> http://linux-speakup.org/cgi-bin/mailman/listinfo/speakup
--
Janina Sajka, Phone: +1.443.300.2200
sip:janina at asterisk.rednote.net
Email: janina at rednote.net
Linux Foundation Fellow
Executive Chair, Accessibility Workgroup: http://a11y.org
The World Wide Web Consortium (W3C), Web Accessibility Initiative (WAI)
Chair, Accessible Platform Architectures http://www.w3.org/wai/apa
More information about the Speakup
mailing list