On Mon, Jan 22, 2007 at 11:38:06AM -0800, Bob Eby wrote:
> [EMAIL PROTECTED]
> > freeze is not available as package, you need to install it from the
> > ports tree.
> 
> Good to know, but painful to hear.  Guess I'll have to work on learning
> ports...

It's not that difficult; in this case,

cd /usr/ports/archivers/freeze
make install

will do the trick.

> [EMAIL PROTECTED]

> > If you want to know more about freeze-2.5 you can easily type:
> >   # cd /usr/ports
> >   # make search key=freeze
> 
> Ok, so freeze is a compression library, and a few other packages rely on
> it.  Not sure how that helps me other than raising questions about why
> amavisd uses it...

Since amavisd also does virus scanning, it should be able to look inside
all sorts of archives. Or so the reasoning goes - I'm not a big fan of
such archaic stuff myself.

> > In general, the anti-virus scanners have a lot of dependencies and
> > not all of the dependencies (or all scanners) are licensed to allow
> > redistribution. 
> 
> Okay, you've got me.  I don't really care that much about virus scanning
> anyways.  It was "bayes filtering" and "web interface" + "steps I could
> actually follow" that hooked me in to this particular HOWTO.  If you've
> got a better HOWTO for doing bayes filtering plus a reasonably easy to
> use interface for training the filter then I'm all ears.  (web
> interface, mail interface, it's all the same to me if it's fairly easy
> to use.)  Bonus points if it's something a novice like me has a chance
> of installing in some reasonable time-frame.  
> 
> For the record, I'm doing this stuff in a commercial setting, but I'm
> in-house so I'm only really in need of freedom 0 at this point.  

dspam might work, although I'm not sure if it's CGI will work with
OpenBSD at all.

Otherwise, amavisd, while somewhat complex and rather slow, is a
well-known solution; there are probably some web front-ends for it,
although I've found their Bayesian implementation rather deficient.

> > All of this means you'll be using the ports tree to install your 
> > antivirus gateway.
> 
> Well, from what little I know, I'd like to avoid this if at all
> possible...  Then again, I probably should at least stay current with
> the latest "stable" and I believe I read the word ports somewhere in
> that process.
> 
> Of course the download line from the HOWTO I've been using:
> lynx http://www.ijs.si/software/amavisd/amavisd-new-20030616-p10.tar.gz
> 
> Made me think this was a manual install, rather than a use of ports.  
> 
> ---<everyone>---
> 
> You guys have definitely answered:
> Question #1: Why can't I find freeze?  
> 
> The only thing I'm still pondering a bit is:
> Question #2: What am I missing? 
> 
> ie: Would I be better off doing something else?  I almost chose sendmail
> early on since it is built into OpenBSD, but was a bit put off by all
> the configuration horror stories, so I stuck with postfix...
> 
> I'm pretty fond of OpenBSD because of all the neat things I've been able
> to do using pf and various other networking tools in the past, but I've
> definitely never tried to use it as a mail server before (built-in
> OpenBSD server management via email doesn't count), nor have I run it as
> a hardened external box in any kind of production setting...  (Okay,
> this is a DMZ, but that doesn't really change my hardening goals.)

Postfix works pretty well; sendmail might too, I've never used it.

Hardening OpenBSD is both easy and seldom necessary; the only big oops
you can run into out of the box is a fork bomb.

As to stopping spam, spamd seems pretty popular around these parts, and
I've heard good things about greylisting - which is essentially what
spamd does. You might want to give that a try, if you can take the hit
(slower mail delivery in some cases).

Spam filters, however, are a difficult problem. I've tried amavisd, and
I'll be using dspam Real Soon Now.

> P.S. - I'm a programmer, not a sys admin.  Just in case that affects
> anything.  

Not really, I think.

                Joachim

Reply via email to