On Sun, 27 Oct 2002, John Rudd wrote:
>
> On Wednesday, Oct 23, 2002, at 14:22 US/Pacific,
> [EMAIL PROTECTED] wrote:
>
> > mailscanner started to choke whenever loads of e-mail came in.
>
> Sounds like my servers. Any time we get a big chunk of messages come
> in, I have to worry about whether or not Mailscanner will keep up. I
> also sort of don't like the "dual queue" thing. It just leaves a bad
> taste in my mouth.
>
> Are you doing yours via a local program that the sendmail/milter
> invokes, or a daemon that sendmail/milter talks to? (did you have to
> get spamd running? I haven't really tried too hard to get spamd to
> compile on solaris, but it didn't work automagically)
mimedefang can be run in two different ways... invoke the filter for every
message, or run as a maintained forking deamon. Deamon is recommended.
You don't have to get spamd to work in either case, as mimedefang loads
the spamassassin modules into itself. If you run mimedefang as a deamon,
spamassassin only needs to load once.
OT: someone told me mailscanner-4 is much improved and works a lot better.
I haven't tried it, but if you're already using mailscanner (and are using
a 3.x) you might want to give it a try first.
>
> > As far as including spamassassin's headers, I don't remember how to do
> > that with mailscanner. mimedefang makes it fairly easy though.
>
> Can mimedefang make the headers read a particular way? For example, we
> already use mailscanner for virus scanning (but not yet for spam
> assassin, that's only on our test server). I don't want users to have
> to switch away from their current header filtering, so I want it to say
> "X-UCSC-MailScanner: found to be clean/infected", and then have the
> spam check say "X-UCSC-MailScanner-Spamcheck: (not) spam" and then
> followed by the spam assassin total and which rules were tripped.
>
> And also maybe keep in the Spamassassin * count with a header named
> "X-UCSC-MailScanner-Spamlevel:" or something.
>
> Oh, and, Subject modification for Viruses, but not Spam.
>
> That'd be ideal to me. (we added the "UCSC" to the mailscanner headers
> so you'd know which site the results came from)
>
Short answer, yes. And is honestly very easy.
You will have to know a *little* bit of perl. What makes mimedefang
powerful, also makes it a bit difficult for some to change it's default
behavior. The default filter is a 317 line perl script that:
does spamassassin checks
virus checking w/ automatic support for multiple scanners
file extension blocking
adds a bunch of extra headers based on the above
There is no real configuration file, you just customize the filter to do
what you want. It's setup in a nicely organized way, and provides all the
functions you need to do stuff to the message.
To add your header, after you do your spamassassin check, you'd just call:
action_add_header("X-UCSC-MailScanner-Spamlevel",("*" x $hits));
If you wanted to delete the message cause you got enough hits:
if ($hits > 12) { return action_discard(); }
You'll have to download it and take a look at it to see if it's a product
that'll suit you.
> > BTW, sopho's is also supported by mimedefang, so you won't have to
> > worry
> > about getting/using a different virus scanner.
>
>
> Are integrating Sophos and Spam Assassin into Mimedefang fairly
> straight forward? (also, my production machines are Solaris 8 ...
> though, my test machine is a redhat box, if that helps with determining
> how straight forward things are)
The default filter for mimedefang has them integrated already.
When you install it, it'll detect what supported stuff you have installed,
and use anything you've got (spamassassin, anonymy html cleaner, bunches
of virus scanners, etc).
If you just use the default filter, and change what values it puts into
the message headers, it should be very very easy.
--
Josh I
-------------------------------------------------------
This SF.net email is sponsored by: ApacheCon, November 18-21 in
Las Vegas (supported by COMDEX), the only Apache event to be
fully supported by the ASF. http://www.apachecon.com
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
