Scalix Forums

Hi,

I'm running RH Enterprise 4, Scalix 10 and I was wondering how do I configure RBLs, blacklistings with Scalix's MTA? i notice from another posting that you dont support it with SMTPD. Could you give me some suggestions on how to prevent spam aside from sa-learn? Also, im still getting some spam mails from different source even though I lowered the score to 3.5. Do i have to lower it down to 2.0 just to keep it on the aggressive side?

here are the logs from maillog:



How do i check for the effectiveness of spamassassin? besides that I do not get the emails marked as SPAM by spamassasin? Am i missing something here? I followed all the instructions from the techical notes. Please enlighen.

Thanks. Kudos to the Support team of SCALIX for great service!

Don

Hi,

couple of things:

- upgrade to SA 3.1
- enable auto-learning
- 3.5 is a waaaaaaaaaaaaaay to low spam-score, 5.5 is the default for a good reason.
- I believe your spamassassin has no file access to your rules, could that be: "Still running as root: user not specified with -u, not found, or set to root. Fall back to nobody. " su to nobody and check if you can cat the rule files.

Please see the wiki on www.spamassassin.org for more information - these are not Scalix specific issues...

Cheers,

Sascha.

i followed your documentation in the technical notes. the notes never mentioned anything about changing the user to run spamassassin or spamass-milter. i cant seem to find the right docs at the spamassassin sites it said to run SA with procmail.

do we have to run procmail? do i have to create a user to run spamassassin or just run it as root?

need your help. also, spam thats getting through arent marked as spam either they dont get to the mbox or doesnt get delivered. please enlighten.

thanks.

Hi,
You can add dnsbl blacklisting to sendmail with the following
FEATURE(`dnsbl',`relays.ordb.org', `Rejected - see http://ordb.org/')dnl
FEATURE(`dnsbl',`bl.spamcop.net',`Rejected - see http://spamcop.net/')dnl
FEATURE(`dnsbl',`sbl.spamhaus.org',`Rejected - see http://www.spamhaus.org/')dnl

you can also use the Sare Rules and use Rules Du Jour to keep them updated see
http://rulesemporium.com/


Jason

jasonesman wrote:Hi,
You can add dnsbl blacklisting to sendmail with the following
FEATURE(`dnsbl',`relays.ordb.org', `Rejected - see http://ordb.org/')dnl
FEATURE(`dnsbl',`bl.spamcop.net',`Rejected - see http://spamcop.net/')dnl
FEATURE(`dnsbl',`sbl.spamhaus.org',`Rejected - see http://www.spamhaus.org/')dnl

you can also use the Sare Rules and use Rules Du Jour to keep them updated see
http://rulesemporium.com/


Jason

Hi,

In which file does this go?

Thanks

/etc/mail/sendmail.mc

After adding those lines to your sendmail.mc file all you need to do is as root execute
the following command from the /etc/mail dir.

m4 sendmail.mc > ../sendmail.cf

It would be a good idea to back up your old /etc/sendmail.cf beforehand.
After running the m4 comman restart sendmail and you are done.

TRACKS wrote:/etc/mail/sendmail.mc

After adding those lines to your sendmail.mc file all you need to do is as root execute
the following command from the /etc/mail dir.

m4 sendmail.mc > ../sendmail.cf

It would be a good idea to back up your old /etc/sendmail.cf beforehand.
After running the m4 comman restart sendmail and you are done.

Are you sure this woks without making sendmail the primary mta on port 25? Ohterwise sendmail will allways see connections from localhost which are of course never blacklisted.

grubi.

grubi wrote:
Are you sure this woks without making sendmail the primary mta on port 25? Ohterwise sendmail will allways see connections from localhost which are of course never blacklisted.

grubi.

This is the same issue I am having, is there a way to let sendmail see the original sender ip address?

viewtopic.php?t=3788&highlight=dnsbl - may help.


In sendmail the following fails gracefully when a particular DNSBL fails to respond, since the error message is not specifically defined.
Feature FEATURE(`enhdnsbl',`bl.spamcop.net')dnl
Feature FEATURE(`enhdnsbl',`dnsbl.sorbs.net')dnl
Feature FEATURE(`enhdnsbl',`sbl-xbl.spamhaus.org')dnl
Feature FEATURE(`enhdnsbl',`psbl.surriel.com')dnl
Feature FEATURE(`enhdnsbl',`cbl.abuseat.org')dnl

It may seem odd the above list, but the inclusion of some lists into others takes a significant amount of time so listing them as well makes for better protection.