On Tue, Jul 08, 2003 at 11:42:33AM +0930, [EMAIL PROTECTED] wrote:

> I've got spam assassin working like a dream on our small sendmail box.
> works like a bought one.    what i want to do is setup a gateway arrangment
> for an Exchange Server (everyone shudders, i know).
> 
> like so:
> 
> Internet  ->  Linux Sendmail with SpamAssasin ->  Exchange Server  
> 
> has anybody attempted such a thing?  i've been searching google for quite a
> while and not found any howtos...    on the sendmail box i'm attempting:
> 
> 1.  that i don't need to create accounts for everyone on the exchange
> server?

You don't. Just make sure that your sendmail box will relay  all  mail
for  domain.com (let's assume that's you domain) to your Exchange box.
A  little  side-effect: all messages sent to non-existing addresses in
your domain (errors or more likely dictionary spam attacks) will cross
your gateway two times (incoming message  and  bounced  error).  Quite
often, the bounce won't deliver so it will be stuck in  the  queue  of
your gateway.  Thus  its  load  might  be  higher  than  you  imagine.

> 2.  that it sholdn't deliver to the linux box at all, but simply scan and
> forward.  

To achieve this:
- make sure that domain.com is _not_ in /etc/mail/local-host-names, so
that your gatweway will only deliver mail  to  [EMAIL PROTECTED]
locally
- enable the use of the mailertable map in sendmail configuration
- in /etc/mail/mailertable, have a line like:
domain.com esmtp:exchangebox.domain.com

> 3.  no mail will be deleted, but will simply have the spam score in the
> message header and the Spam in the subject line.  then the users of the
> exchange server will be able to filter based on Spam Score or the subject
> line or whatever.  

This is pretty much a default  SA  configuration.  I  recommend  using
amavisd-new  (http://www.ijs.si/software/amavisd/)  to  plug  SA  into
sendmail because it interfaces very nicely with sendmail at the Milter
interface, has a very well documented setup and configuration file, is
fast and stable.

You may have to recompile sendmail  from  source  to  support  Milter,
however. It's nice and easy on all popular Unices.

> 4.  I don't need to scan outgoing mail but i guess that wouldn't hurt as
> well.

You  mean  tag spam originating from your domain? Sounds strange... or
are you talking about virus scanning here?

Greets,
_Alain_


-------------------------------------------------------
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portals, and Forums are available now.
Download today and enter to win an XBOX or Visual Studio .NET.
http://aspnet.click-url.com/go/psa00100006ave/direct;at.asp_061203_01/01
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to