Dragoncrest wrote:
Not sure if this is a procmail thing or an SA thing, so I'm asking the procmail people the same thing just in case. :)
Procmail is usually your LDA, or "Local Delivery Agent". That should answer the question about procmail and outbound mail. (Although I believe you can hack things together so that outbound mail is processed by procmail).
What I'm wanting to do is to start filtering all of our outbound mail for spam and viruses sometime soon. We're getting enough of our clients who work off our SMTP server farm who are either trying to spam and get away with it, or getting viruses and spamming everyone on the planet with those. I'd like to put the kabosh on that right now. Since the only services that these 4 servers run is ssh and smtp (via qmail) and their current max load is at best 25% I'd like to start now before things start growing too much and this becomes difficult. The SMTP farm is to provide a reliable outgoing mail server to our customers, (no incoming) but at the same time I don't want us to become a menace to the internet.
Two things I'd like to do on our outgoing mail servers.
1. Filter all outgoing mail for spam and viruses and trash all flagged emails or store them in a folder till I can get a look at them.
Look at Amavis for virus filtering. Can tie into SA if desired, can quarantine, bounce, forward, whatever. I believe Amavis ties nicely into qmail, but haven't tried it. This will quench all the Klez and Bugbear traffic you're probably seeing.
If you're worried about users actually spamming, they'll probably just connect to other mail servers, not your local SMTP server, since spamming is pretty noisy (bounces, complaints to postmaster, etc.). Make sure your user agreement allows you to cut them off immediately, and collect $$$ for damages if they use you for spamming.
2. Count how many times a given IP sends a message that is filtered out then generate a log and send it to me every day, or store it somewhere that I can ssh in and retrieve that information.
Probably have to roll your own script for this one. A dozen lines of perl running through your mail logs should work fine.
--Rich
_________________________________________________________
Rich Puhek ETN Systems Inc. 2125 1st Ave East Hibbing MN 55746
tel: 218.262.1130 email: [EMAIL PROTECTED] _________________________________________________________
------------------------------------------------------- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums are available now. Download today and enter to win an XBOX or Visual Studio .NET. http://aspnet.click-url.com/go/psa00100003ave/direct;at.aspnet_072303_01/01 _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
