Scalix 10, Spamassassin, and OpenSuSE

[KimVette]

(I'm finally in the process of giving Exchange the heave-ho and cutting over. Woohoo!)

Since the technote on spamassassin integration is out of date (OpenSuSE does not come with milter) what is the procedure for setting up spam filtering on OpenSuSE 10? amavisd-new appears to replace milter in SuSE/OpenSuSE 10

Note: I just queried on amavisd and found http://www.scalix.com/community/viewtop ... ht=amavisd -- but a couple of questions:

- is this the method Scalix folks recommend?
- is there a method that you know of which allows for retaining sendmail?

[ScalixSupport]

Hi,

I am not sure why you say milter is going away for Opensuse users.

Postfix is not a supported MTA, meaning that support staff will roll their eyes when we come near it. That said, I have it running, many people have it running, but it simply is not supported from a platform perspective. The post you are referring to is a great how-to to get Postfix with amavisd (-new) to work. It is not endorsed by support.

Cheers,

Sascha.

[KimVette]

Hi,

I am not sure why you say milter is going away for Opensuse users.

It's not a part of the distribuion - it's replaced by Amavisd-new

[KimVette]

Don't you think it's time the sticky ( http://www.scalix.com/community/viewtopic.php?t=929 ) is updated with your recommended spamassassin integration method? :!:

[ScalixSupport]

Can you explain what you mean ? The sticky points to the knowledgebase and the article is correct.

Cheers

Dave

[ScalixSupport]

I don't think the spamass-milter was ever part of the SuSE distribution, but I could be wrong. The best way to get the latest milter is to simply download the source from http://savannah.nongnu.org/projects/spamass-milt/ and build it on your system. I did that on my SLES box and it works great.

Thanks,
Rachel

[KimVette]

Okay, will do. I wanted to stick as close to the recommended configuration as possible so that the migration goes smoothly, and did not know which spam filter mechanism was recommended for 10.0.

Thanks again! :)

[KimVette]

Virus filtering works (woohoo!) so I went on to the next step to set up spamass-milter.

OK, I have spamass-milter installed, spamd is running. spamc works (it executes anyhow), but I tried sending the classic kind of spam with the following contents:

Subject:

re: your email

body:

cheap X prescriptions!
http://cheaprx.com/X

I tried sending it as a "to" and as a "bcc" and both made it through. I tried sending from both a remote shell account and from my hotmail account.

I went to /etc/mail/spamassassin/local.cf and changed the threshold to 1.0 and restarted spamd (rcspamd) and the email still made it through - SpamAssassin is checking the emails, as you can see from the headers:

Date: Sun, 23 Apr 2006 14:57:21 -0600
From: Kimberly Lazarski <kiml@prozac.netdesign.com>
To: "Kimberly Lazarski" <kim@......com>
Message-ID: <Pine.LNX.4.44.0604231457070.9460-100000@prozac.netdesign.com>
Subject: re: your email (fwd)
X-Spam-Status: No, score=0.5 required=1.0 tests=ALL_TRUSTED,BLANK_LINES_70_80,

DRUGS_ERECTILE autolearn=no version=3.0.4
X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on mail.biyn.local
MIME-Version: 1.0
Content-Type: TEXT/PLAIN;

Now, does it appear that this is correctly configured?

Secondly, how do I feed SpamAssassin ham and spam to train it? I have thousands of each on my exchange box from an ASSP installation I could use.

[burhankhalid]

Your scored required is quote low -- 1.0? It should be around 5. Also, the spamassassin source download contains a mail that is guranteed to trigger the filter, I would suggest you try that, as it seems your spam writing skills aren't that great :D

[KimVette]

Your scored required is quote low -- 1.0? It should be around 5. Also, the spamassassin source download contains a mail that is guranteed to trigger the filter, I would suggest you try that, as it seems your spam writing skills aren't that great :D

First off, don't be so (censor) rude. I set it to 1.0 as a test (as soon as I got it to catch emails I bumped it up to 4.0), and although I've used ASSP in the past I haven't used spamassassin, I'd like to find a good FM so I can go R it.

In other words, don't be a jackass, jackass..

[ScalixSupport]

Healthy debate is one thing, personal attacks are not tolerated. Please do not do this again.

Cheers

Dave

[KimVette]

Healthy debate is one thing, personal attacks are not tolerated. Please do not do this again.

Cheers

Dave

Thanks Dave. burhankhalid's attack was totally uncalled for.

[ScalixSupport]

Healthy debate is one thing, personal attacks are not tolerated. Please do not do this again.

Cheers

Dave

Thanks Dave. burhankhalid's attack was totally uncalled for.

It seems that you misunderstood my reply. I'm not prepared to get into a debate on rights and wrongs and equally I'm not going to prolong a discussion on this so I suggest that everyone moves on.

Cheers

Dave

[KimVette]

I'd like to mention I found a good FM to R and now I know about sa-learn and found a great thread on the topic. I was really looking for an RTFM answer, burhankhalid, and merely looking for the correct term to search for.

Had I not asked, I would never learn where to find TFM. Unfortunately I did not find the right information in this thread, nor even on this site. Once I found info on sa-learn I came back here and found an excellent thread on the topic, but unfortunately that was after I already came up with a similar solution myself after finding out which man page to read.

Needless to say, I am quite disappointed in what went on here (nothing against the kind Scalix folks of course, they're great and they're obviously too busy to respond to every single thread) and it is exactly that kind of arrogance that pushes many users and corporations AWAY from even considering Linux or UNIX solutions for their business needs.

In some situations RTFM is appropriate, and others pointing people at the FAQ is appropriate, and in others "did you look for foo" would be appropriate. My situation was the latter, and once I knew the name of the tool it was a few minutes (well, 15-20 to read several man pages and look at a few examples) before I had a complete solution.

Anyway, thanks Scalix, for providing an email solution which is vastly superior to Exchange from a maintenance and performance perspective. :)