Are there any good write ups out there on how to configure the above three programs to work in conjunction with each other? I was googling for alittle bit and couldn't find anything? I found article for redhat and the above products but can I used the Red Hat write up?

I know it's a noobie questions I did read the read me's on the programs and started to get lost...

Thanks,

BiG

PS

I have Fedora Core 1 and Postfix working just fine but with the increase of spam is making me angry.

There's a spot in the main.cf file where you can specify a .procmail file which will invoke spamassassin. It's called mailbox_command. My line looks like "mailbox_command = /usr/bin/procmail" without the quotes. I then have a .procmailrc file in each of my user's Home folder. I also have Clamassassin working to eliminate virus'. Also, as a last reminder, don't forget to check permissions of files/folders if you're having issues! Hope this helps you out! My .procmailrc file looks like this:

#start here -- the pound sign (#) makes a line into a comment

#Set on when debugging
VERBOSE=off

#Your mail directory
MAILDIR=$HOME/mail

#Directory for storing procmail log and rc files
PMDIR=$HOME

#Log file
LOGFILE=procmail.log

#Recipes
:0fw
| /usr/local/bin/clamassassin
:0:
* ^X-Virus-Status: Yes
/dev/null

:0fw
* < 2560000
| spamc

#end here

Well I made the .procmail in everyone’s home directory and gave them rights with chown & chmod. I tried sending some test spam in with some nasty words in the subject and body and they still came in? I was also using tail –f on /var/log/maillog to see if there were any error messages and it looks like mail is flowing in and out. When the mail 1st comes in it hits ("|/usr/bin/procmail") then get’s delivered? I check rights and they looked ok. The only thing I did was commented out:

#Recipes
:0fw
| /usr/local/bin/clamassassin
:0:
* ^X-Virus-Status: Yes
/dev/null

:0fw
* < 2560000
| spamc

I just wanted to see if spamassassin worked before invoking Clamassassin. Any suggestions? I also added mailbox_command = /usr/bin/procmail into my main.cf file in the */postfix directory.


Thanks in Advance,
BiG

Hmm. Sounds like everything is working correctly. However, try this. Open up Outlook Express and send yourself a test message. Right click on the message and go to properties. Under the details section, look for something like this:

X-AntiAbuse: Sender Address Domain -
X-Source:
X-Source-Args:
X-Source-Dir:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on npfusa.org
X-Spam-Level:
X-Spam-Status: No, hits=0.2 required=6.0 tests=AWL,NO_REAL_NAME autolearn=no
version=2.63
Status:


If it says something like that, then spamassassin is working, but got past it for whatever reason (usually because it's either set too high, or it thinks you are you. Anyways, let me know what you find!!

Travis

I'm using squirrelmail and Outlook 2003 and I have been playing with Thunderbird too. I tried sending test e-mails from random hotmail and yahoo accounts too? I have included in the subject XXX, and all the good four letters words I even included Viagra which is a big spam word these days? I checked my mail this morning and had 20 spam emails and all my test e-mails came through too? Is there any thing to configure in the spamassassin config maybe? aaarrggghh

Here's what my .procmailrc file looks like:

#start here -- the pound sign (#) makes a line into a comment

#Set on when debugging
VERBOSE=off

#Your mail directory
MAILDIR=$HOME/mail

#Directory for storing procmail log and rc files
PMDIR=$HOME

#Log file
LOGFILE=procmail.log

#Recipes
#:0fw
#| /usr/local/bin/clamassassin
#:0:
#* ^X-Virus-Status: Yes
#/dev/null

#:0fw
#* < 2560000
#| spamc

#end here


Does the $HOME variable mean I have to include the path to the home directory??

I think I see your problem. Take out the # symbols for every line under Recipies until End here. You can leave the # for the End Here line. The # symbols will make it so that that line is disregarded. Try that out, restart your mail service (just in case) and try it again. Keep me posted! We'll get this problem licked.

Travis

Ok I pasted in the following in my /home/user/.procmailrc

#start here -- the pound sign (#) makes a line into a comment

#Set on when debugging
VERBOSE=off

#Your mail directory
MAILDIR=$HOME/mail

#Directory for storing procmail log and rc files
PMDIR=$HOME

#Log file
LOGFILE=procmail.log

#Recipes
:0fw
| /usr/local/bin/clamassassin
:0:
* ^X-Virus-Status: Yes
/dev/null

:0fw
* < 2560000
| spamc

#end here

And then I did /etc/init.d/postfix restart and I was still able to send e-mails form my yahoo and hotmail with the subject of xxx and what not.

The one problem is I don't have clamassassin installed? So I hope the above config will not hurt anything. I did a apt-get search clam and found:

clamav - End-user tools for the Clam Antivirus scanner
clamav-data - The virus-signatures for clamav
clamav-devel - Headerfiles and libraries for the Clam Antivirus scanner
clamav-lib - Dynamic libraries for the Clam Antivirus scanner
clamav-milter - A sendmail-milter for clamav
clamav-server - The clamav server
clamav-update - Auto-updater for clamav data-files

But I'm not sure if I should install any of these yet until I get SpamAssasin working. Any other suggestions would be greatly appreciated.

Thanks,

BiG

If you'd like, you can take out the line with clamassassin and the line below it. Quick question, do you have webmin installed? If so, (or your familiar to editing the spamassassin config file) which is located at /etc/mail/spamassassin/local.cf (at least it is with me. ) blacklist your yahoo account. Add the line blacklist_from youraccount@yahoo.com and it should work. Just basically say that your yahoo account will always be counted as spam. Then, restart the services and try to send the message from your yahoo account. If it's working right, you'll never see the message. Hope that helps!

Travis

Yeeaah!! Thanks for staying with me on this thread. I never did a reboot after doing apt-get :/ and the reboot seemed to fix the issue go figure.

Now the spam came in like with this title?

[SPAM] Score: 104.18/05.00 - xxx

And I edited the local.cf file and added the blacklist entry. How do I set it up to automatically delete spam? I guess I could set a rule in outlook to take anything with SPAM in the subject and move it to a spam folder?

I hate spam and I just want it deleted


Thanks Again,

BiG

PS

Is clamassassin the same as clamav?

SA is not clamav..
clamav is an anti-virus solution (www.clamav.net)

an alternative to SA is dspam... http://www.nuclearelephant.com/projects/dspam/

also very good anti-spam software.

I think if you put back in the lines :0:
* ^X-Virus-Status: Yes
/dev/null
that you took out earlier, it'll delete them automatically. Congratulations! Very rarely, a reboot in Linux will fix up your issue. Normally you would just restart the service. No problem. I'm glad to be of help. Everyone on here was VERY helpful to me when I was linux newbie and needed help, so I'm returning the favor. You'll find that once you get linux up and running, unless you have a hardware failure or power outage, you'll never have to touch it again. You can even set up a nightly yum update for security patches and the like. I did and now my job is just maintainence instead of finding out why the server crashed and I have a billion people telling me "do you know the server's down?" Linux has made my Microsoft Hair Loss go away! Anyways, if you have any further problems or questions, feel free to give me a buzz.

Travis

I do have the following lines in my config?

:0:
* ^X-Virus-Status: Yes
/dev/null

I actually just pasted your entire config into my .procmailrc and unconmented everything. I had 42 e-mails last night and three spam made it through not being marked as spam. The subject read on the spam e-mails as the following: [SPAM] Score: 09.60/05.00, [SPAM] Score: 05.95/05.00. So the software is working great it’s just not deleting the spam. Once That happens I will out of your hair

I understand your woes when it comes to Micro$oft! That’s all I work with day in and day out. The 2000 environment it pretty stable I can’t complain. But Fedora / RedHat has never given me any problems at all! It so damn stable it’s sick plus it’s not plagued with hacks and virus attacks every other day! I use apt-get to update my system I guess maybe yum would be better to use? I'm not sure?

Thanks,
BiG

PS

And the spam that does make it through how should I train spamassassin to delete e-mails from *@whateverdomain.com. Should I add a line to blacklist them or does Spamassassin need trained somehow?

Oh ok, I thought you took those lines out. Also, check your /etc/procmail file. Mine at home looks like this:


:0fw
| /usr/bin/spamassassin
:0
* ^X-Spam-Status: Yes
/dev/null
:0B
* filename=readme\.exe
/dev/null


Yeah you can add the line *@whateverdomain.com if you'd like. I have my users email me any spam that does get through and I ban it accordingly. Eventually, we got down to almost 0 spams. At first, you might get a few, but you can set it to autolearn. I think it's auto_learn 1 in the local.cf file. Sounds like it's coming along though! Yeah I can't blame you for hating microsoft. We have a 2k/xp environment for users (we were on a strict 2k environment for a while until the top brass starting wanting xp) (I absolutely refused to budge when it comes to my servers though. We're on a strict Linux environment there. ) and after I got us onto a samba PDC, we're doing pretty well. Anyways, keep me posted!

Travis