LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Software
User Name
Password
Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum.

Notices


Reply
  Search this Thread
Old 09-08-2003, 11:09 AM   #1
weezle
LQ Newbie
 
Registered: Jun 2001
Distribution: RedHat
Posts: 4

Rep: Reputation: 0
basic sendmail question


Sendmail 8.11.0-8

I'm working on upgrading sendmail and getting MailScanner+SpamAssassin to work. But in the meantime - anyone know how to configure sendmail to reject email based on subject line?

Please keep in mind I'm a very "green" sendmail admin.
 
Old 09-08-2003, 01:54 PM   #2
J_Szucs
Senior Member
 
Registered: Nov 2001
Location: Budapest, Hungary
Distribution: SuSE 6.4-11.3, Dsl linux, FreeBSD 4.3-6.2, Mandrake 8.2, Redhat, UHU, Debian Etch
Posts: 1,126

Rep: Reputation: 58
I do not think it is possible - though I am not a guru.

I use procmail to filter mails based on subject.
 
Old 09-08-2003, 04:09 PM   #3
Medievalist
Member
 
Registered: Aug 2003
Distribution: Dead Rat
Posts: 191

Rep: Reputation: 56
It certainly is possible, by several methods.

But procmail would probably do it much easier. And you might find that there are features in MailScanner that make it unnecessary.

Here's a link to a sendmail recipe that will block by subject line, strictly as an example. I do not think it's a good idea to do this sort of thing - it's usually a bad solution since you probably really want to do something based on content, not label.

I use MailScanner and like it very much, incidentally - we weathered the sobig.F virus without most users even realizing it had happened!
 
Old 09-08-2003, 08:52 PM   #4
joseph
Member
 
Registered: Jun 2003
Location: Batam
Distribution: Ubuntu 10 And Linux Mint
Posts: 414

Rep: Reputation: 30
yes, i think it is possible if you want to block an email based on the subject, ofcourse you must do some scripting, but if you don't want to mess up with that, you can use procmail, it is very easy and reliable.
 
Old 09-09-2003, 10:48 AM   #5
weezle
LQ Newbie
 
Registered: Jun 2001
Distribution: RedHat
Posts: 4

Original Poster
Rep: Reputation: 0
Thanks for the great feedback! Sounds like MailScanner/Procmail is the way to go. Does anyone have any good links for integrating Procmail with Sendmail?

Thanks again for your help!
 
Old 09-09-2003, 11:21 AM   #6
weezle
LQ Newbie
 
Registered: Jun 2001
Distribution: RedHat
Posts: 4

Original Poster
Rep: Reputation: 0
Mediavlist,
Can you provide some insight on where in MailScanner you made the adjustments for worms like SoBig? Much appreciated!
 
Old 09-09-2003, 12:12 PM   #7
Medievalist
Member
 
Registered: Aug 2003
Distribution: Dead Rat
Posts: 191

Rep: Reputation: 56
Sure. Set up your virus scanner - I use f-prot in my home network, and a couple of expensive products in the mail hub here at work. There are instructions for setting up most virus scanners (including the free ones) on the MailScanner website, in the FAQ-o-Matic section.

Then modify the file /etc/MailScanner/MailScanner.conf to include these lines:

Silent Viruses = Klez Yaha Sobig Bugbear Braid-A WinEvar
Still Deliver Silent Viruses = yes

This prevents MailScanner from sending virus notifications in response to faked source addresses (which is the first part of the solution) but still delivers the disinfected mail. Note that this works with all the virus scanners I have used, but it's triggering off the virus name returned by the scanner, so if you have an oddball virus scanner that returns some other name (BigSo?) you will have to modify this appropriately.

Once you are happy with your MailScanner setup (might take a week or two to get SpamAssassin tuned) you can change the delivery line to:

Still Deliver Silent Viruses = no

This will make all the things listed as silent viruses essentially disappear (which might be a bad thing if you are enjoying having the CEO see all the messages about how you stopped all those nasty viruses from reaching him).

The file /etc/MailScanner/MailScanner.conf is very well commented and worth reading. But don't change anything that you don't have to, at least not at first.
 
Old 09-09-2003, 06:05 PM   #8
weezle
LQ Newbie
 
Registered: Jun 2001
Distribution: RedHat
Posts: 4

Original Poster
Rep: Reputation: 0
Medievalist,
Wow - thanks for all of the helpful insight! I've got MailScanner and SpamAssassin working! Wuuuhhhuuuuuu!

I'll keep testing it and tweaking it as needed. Thanks again for all of your input - you've been a great help!

 
Old 09-11-2003, 12:57 PM   #9
Medievalist
Member
 
Registered: Aug 2003
Distribution: Dead Rat
Posts: 191

Rep: Reputation: 56
Glad it works for you. Julian Field (in SouthHampton, UK, I think) is the guy that deserves the credit, though.

Point out to your bosses that they can send Julian some $$$ and it will go directly towards further development and refinement of MailScanner. You and I will both benefit!

Oh, and if you have Apache on the machine, you can run MailScanner-mrtg which provides gorgeous colorful graphs about all the spam and virii you are intercepting. There's a link from the MailScanner.info website.
 
Old 10-19-2003, 12:03 PM   #10
JWestwood
LQ Newbie
 
Registered: Oct 2003
Location: Scotland
Distribution: Redhat 9.x
Posts: 2

Rep: Reputation: 0
Question MailScanner MRTG setup

Sorry guys for jumping into the thread but I was wondering if any of you could point me in the direction of how to setup the MailScanner MRTG stats, I've got a Redhat 9.x box running Sendmail, MailScanner, SA, Razor, MRTG etc but I'm a bit green at using them all and to be honest Linux aswell.

Any help you can give me or links for more info would be greatly appreciated!
 
Old 10-20-2003, 12:35 PM   #11
Medievalist
Member
 
Registered: Aug 2003
Distribution: Dead Rat
Posts: 191

Rep: Reputation: 56
If you install from .rpm (get the latest ones, incidentally - the ones that worked for RH 7.x had to be tweaked to run on RH 9) all you have to do is install apache and mailscanner-mrtg, then tell your system to run httpd (apache) at boot time.

You can use your favorite runlevel editor in X, or ntsysv at the command line, to set httpd to run in your preferred bootlevel (probably either 5 (X) or 3 (text) and incidentally I'd recommend 3 for a mail hub).

Then point your browser at http://name-of-your-server.com/mailscanner-mrtg/ and you should see lots of pretty pictures.
 
Old 10-20-2003, 12:37 PM   #12
Medievalist
Member
 
Registered: Aug 2003
Distribution: Dead Rat
Posts: 191

Rep: Reputation: 56
Here's the link for the latest rpms.....

http://mailscannermrtg.sourceforge.net/


...enjoy!
 
Old 10-20-2003, 01:00 PM   #13
JWestwood
LQ Newbie
 
Registered: Oct 2003
Location: Scotland
Distribution: Redhat 9.x
Posts: 2

Rep: Reputation: 0
Got it, thanks guys. I thought there was something more to do after installing mailscanner-mrtg, but just pointing my browser at that directory has worked.

Thanks for your help!
 
Old 10-20-2003, 01:30 PM   #14
Medievalist
Member
 
Registered: Aug 2003
Distribution: Dead Rat
Posts: 191

Rep: Reputation: 56
Yah, the .rpms for mrtg and mailscanner-mrtg install the necessary config files and schedule mrtg to run every five minutes via cron. It's pretty simple, as long as you run the standard configuration.

Figuring out what the graphs MEAN in your specific environment can be trickier!
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
Basic setup of Sendmail matsgl Linux - Software 1 02-06-2005 08:15 PM
Need help with basic sendmail configuration aznluvsmc Linux - Networking 1 12-03-2004 10:55 AM
A Basic Question abw Linux - Hardware 2 10-06-2004 03:40 PM
Basic question a2715mt Linux - Newbie 9 08-25-2004 08:39 AM
basic question jaina2 Linux - Newbie 1 07-26-2003 02:44 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Software

All times are GMT -5. The time now is 05:11 AM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration