On Thu, 2 May 2002, Onie Camara wrote:

> I'm running postfix with local delivery. I have installed spam assassin.
> I've tried the sample-nospam.txt and sample-spam.txt and it works.
>
> Now, since I have already spam assassin installed, I just need confirmation
> about my configuration file, main.cf in postfix. I have there header_checks,
> body_checks and RBL lookups. Should I disable it now?

Depends on what and why you have the _checks. Postfix's RBL implementation
will reject mail at the door. You may trust some blacklists enough that
you -want- to reject mail from listed servers at the door, but not for
others. In that case, you could put some blacklists in into Postfix and
turn them off in SA.

My postfix _checks are mostly to combat viruses and abuse; SA doesn't do
that for me, so I still have some header_ and body_ checks.

> What about attachments that I don't like. I have a rule in postfix so
> that if the attachment is .scr, .vbs, .exe and other nasty windows
> attachments, it should not be delivered. How does spam assassin deal
> with this?

It doesn't, at all.

> I actually haven't played around with the spam assassin's configuration
> files. Which files should I play with?

Erm. The ones that have options that look useful to you?

I don't let users adjust their rules or scoring, and have a site-wide
/etc/mail/spamassassin/local.cf. I've added some rules, set the
thresholds, and re-scored some rules in there.

> Another one, what if a mail is legitimate, and it was tagged by SA as a
> spam. How do we fix it? What file should I edit?

You determine why it was a false positive, from looking at the
X-Spam-Status and X-Spam-Report headers. You determine if you should
whitelist the message in some way, or if one of the current tests is
in-accurate. You can also send them to the list and ask for help.

> Does SA still deliver mail that was convicted as spam?

In general: it depends. In my config, spamassassin doesn't deliver at all
- it's just a "pipe" filter that I feed mail through. But basically, no,
SA never "rejects" or "drops" spam, not the way it comes from the factory.

> Is the sender notified when his email is rejected.

As noted, SA doesn't reject mail. Their is a flag to spamassassin that
enables message "reporting" like this - but I highly recommend against it.
The chance of a spam being from a forged address is very high, and you
will typically get a bounced message back - putting load on your system.

Generally, spammers are liars and thieves, and don't care about your
rejection anyway.

> I've got another postfix mail server but it's configured as a relay
> server. This means that I don't have local users. Postfix forwards mail
> to our internal MS Exchange server. I used header, body checks and RBL.
> How would I use SA in this kind of scenario? Has anyone come up with a
> HOWTO or DOCUMENT that discusses the procedures or steps in configuring
> SA and Postfix as a relay server?

Look at spamproxy. It can be used as a postfix content_filter.

-- 
Charlie Watts
[EMAIL PROTECTED]
Frontier Internet, Inc.
http://www.frontier.net/


_______________________________________________________________

Have big pipes? SourceForge.net is looking for download mirrors. We supply
the hardware. You get the recognition. Email Us: [EMAIL PROTECTED]
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to