LinuxQuestions.org
Review your favorite Linux distribution.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-13-2003, 09:48 AM   #1
MrJoshua
Member
 
Registered: Apr 2002
Location: Houston Texas
Distribution: Debian / Gentoo / RHEL
Posts: 209

Rep: Reputation: 31
Spam Assasin


I have recently been trying to reduce the amount of spam my company recieves. I am running Redhat 7.3 , with Sendmail 8.11.6-25. I also just installed Spam Assasin. I follwed the man pages, and the INSTALL docs but it acts like nothing is happening. Do I have to use Procmail for my pop delivery agent? I am using CUCIPOP for my mail delivery agent. This is a company server with about 50 e-mail address'.
 
Old 09-13-2003, 11:50 AM   #2
MrJoshua
Member
 
Registered: Apr 2002
Location: Houston Texas
Distribution: Debian / Gentoo / RHEL
Posts: 209

Original Poster
Rep: Reputation: 31
Also I would like to add that, using virtual hosting.
 
Old 09-13-2003, 04:41 PM   #3
J_Szucs
Senior Member
 
Registered: Nov 2001
Location: Budapest, Hungary
Distribution: SuSE 6.4-11.3, Dsl linux, FreeBSD 4.3-6.2, Mandrake 8.2, Redhat, UHU, Debian Etch
Posts: 1,126

Rep: Reputation: 58
I think you need not call it from procmail (refer to the install instructions of Spam Assassin).

However, if you start it from procmail, you might benefit from the possibility that procmail can create a backup copy of the original message before fed to SpamAssassin, and it can either rescue and deliver the message if Spam Assassin crashes.
I myself use procmail, and call Spam Assassin by this procmail recipe:

:0 fw
| /usr/local/bin/spamassassin -P -C /usr/local/rules -x -p /etc/mail/spamassassin/user_prefs

As for sendmail: I think version 8.11.6 has a critical security vulnerability, which makes it possible for an attacker to gain root privileges on the server by means of a simple malformatted letter.
I think sendmail 8.11.7 is the last security patch release addressing this issue in the no longer supported 8.11.x branch.
Since sendmail advertises its version number in many different ways, you should upgrade or patch your sendmail as soon as possible.

Last edited by J_Szucs; 09-13-2003 at 05:03 PM.
 
Old 09-19-2003, 12:39 PM   #4
MrJoshua
Member
 
Registered: Apr 2002
Location: Houston Texas
Distribution: Debian / Gentoo / RHEL
Posts: 209

Original Poster
Rep: Reputation: 31
Thanks for the help. I am using Redhat RPMS, so I am pretty sure that they patched sendmail. I swore I remember reading that.
 
Old 09-20-2003, 02:04 AM   #5
J_Szucs
Senior Member
 
Registered: Nov 2001
Location: Budapest, Hungary
Distribution: SuSE 6.4-11.3, Dsl linux, FreeBSD 4.3-6.2, Mandrake 8.2, Redhat, UHU, Debian Etch
Posts: 1,126

Rep: Reputation: 58
Quote:
I am using Redhat RPMS, so I am pretty sure that they patched sendmail.
I think if RedHat patched sendmail, then your sendmail version number should be 8.11.7, since there were no patches issued to sendmail 8.11.6 addressing this vulnerability.
A new, complete release 8.11.7 was issued, instead.

You should make absolutely sure that the patch is there, since the risk is very high!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
procmail and spam -- do not send out of office auto replay to spam draix Linux - Software 0 12-30-2004 08:35 AM
I need some spam... tuxq Linux - Networking 2 12-17-2004 10:26 AM
Spam jeanrev Linux - Newbie 3 02-24-2004 01:05 PM
What other anti-spam for Linux that can be used, other than Spam assassin? johnportiz Linux - Software 6 01-27-2004 03:17 AM
Spam? Nezar Linux - Security 1 06-20-2001 08:25 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 12:29 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration