If you are running Sendmail, you can do a lot of spam filtering righ there. Build your sendmail with REGEX enabled, download and configure the check_local hack from the sendmail website, and off you go. As a sample, here is my Sendmail config
divert(0)dnl VERSIONID(`@(#)generic-linux.mc 8.9.5') OSTYPE(linux)dnl DOMAIN(generic)dnl
define(`confTO_QUEUEWARN', `24h')dnl define(`confPRIVACY_FLAGS', `authwarnings,noexpn')dnl
FEATURE(`use_cw_file')dnl FEATURE(`relay_entire_domain')dnl FEATURE(`access_db')dnl FEATURE(`dnsbl', `spews.relays.osirusoft.com')dnl FEATURE(`dnsbl', `spamhaus.relays.osirusoft.com', `Open spam relay - see http://www.spamhaus.org%27)dnl
KContentType regex -a@MATCH text/html|multipart/(replace|alternative) HACK(`check_header', `Content-type', , `ContentType',,,,,0,1, `MIME messages not accepted')dnl HACK(`check_header_end')dnl
MAILER(local)dnl MAILER(smtp)dnl
This checks for known spammers and open relays, and reject pure MIME messages, such as are sent by spammers and hackers.
On 18-Dec-2002 Laurie Brown wrote:
Tony Dietrich wrote:
[SNIP]
This also gives you the chance to run procmail on the incoming mail to the local mail server to weed out any spam, and your local users can use
I'd recommend that you use postfix (plus Courier IMAP/POP3) with spamassassin and sophos/NAI anti-virus, the set-ups for which are well-documented. We use all the above and are very happy with performance, flexibility and the ability to automate installs. I've used procmail recipes for anti-spam, and they are simply ineffective against most spam these days. To be specific, most spam is now in MIME format, and/or html, and in the latter case, spam trigger words, like FREE are rendered as FR<!--- xxx --->EE in the html, causing procmail to miss them. No doubt a procmail wizard will tell me I'm wrong, but life's too short when there's a tool like spamassassin which sorts it all out, unpacks zips et al, undoes and examines MIME, and defangs html.
Cheers, Laurie.
Laurie Brown laurie@brownowl.com
main@lists.alug.org.uk http://www.alug.org.uk/ http://lists.alug.org.uk/mailman/listinfo/main Unsubscribe? See message headers or the web site above!