Hello people,
I am using now qmail in cluster with LDAP + Interscan Messaging Security
Suite from Trendmicro.
I need to develop a new solution with:
- postfix
- dovecot
- anti-spam
- anti-malware.
I am thankful any help or suggestion for anti-spam and anti-malware.
Thanks in advance!
--
:) cumprimentos
----------------------
Jos? Lu?s Faria
Network Eng./Administrador de Sistemas
Departamento de Inform?tica
Universidade do Minho
Braga, Portugal
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4707 bytes
Desc: S/MIME Cryptographic Signature
URL:
<http://dovecot.org/pipermail/dovecot/attachments/20101020/da0b69f5/attachment-0002.bin>
On 10/20/10 12:20 PM, Jose Luis Faria wrote:> I am using now qmail in cluster with LDAP + Interscan Messaging Security > Suite from Trendmicro. > > I need to develop a new solution with: > - postfix > - dovecot > - anti-spam > - anti-malware. > > I am thankful any help or suggestion for anti-spam and anti-malware.I'm running this combination at several sites with great success: - postfix - dovecot - SpamAssassin - ClamAV - amavisd-new Amavisd-new is an interface to SpamAssassin and ClamAV, as well as other scanners if desired. After the initial pain of getting it running, I've concluded that there's really no other reasonable way to do it. -Dave -- Dave McGuire Port Charlotte, FL
On Wed, Oct 20, 2010 at 05:20:20PM +0100, Jose Luis Faria wrote:> I am using now qmail in cluster with LDAP + Interscan Messaging Security > Suite from Trendmicro. > > I need to develop a new solution with: > - postfix > - dovecot > - anti-spam > - anti-malware.Currently, I am using a setup with Postfix + Dovecot as well. We're using these DNSBL blacklists: zen.spamhaus.org b.barracudacentral.org cbl.abuseat.org bl.spamcop.net dnsbl.njabl.org Postfix's address verification is also quite useful for popular domains like gmail.com, hotmail.com, yahoo.com, etc. This blocks over half of the spam we receive. Greylisting isn't really effective (we tested it and compared the stats), so we dropped it. We're using SpamAssassin right now, but we might migrate to bogofilter as it is more accurate and uses less resources. -- Denny Lin
Jose Luis Faria put forth on 10/20/2010 11:20 AM:> Hello people, > > I am using now qmail in cluster with LDAP + Interscan Messaging Security > Suite from Trendmicro. > > I need to develop a new solution with: > - postfix > - dovecot > - anti-spam > - anti-malware. > > I am thankful any help or suggestion for anti-spam and anti-malware. > > Thanks in advance!This will kill a huge amount of bot spam without dnsbl queries or greylisting, both of which can be resource hogs and add serious latency: http://www.hardwarefreak.com/fqrdns.pcre Use the "everything under smtpd_recipient_restrictions" style of Postfix main.cf: /etc/postfix/main.cf smtpd_recipient_restrictions permit_mynetworks permit_sasl_authenticated reject_unauth_destination ... ... check_client_access pcre:/etc/postfix/fqrdns.pcre ... ... Ask for assistance on the Postfix users list: postfix-users at postfix.org You'll get more expert advice than you will know what to do with. ;) -- Stan
Jose Luis Faria wrote on 10/20/2010:> Hello people, > > I am using now qmail in cluster with LDAP + Interscan Messaging > Security Suite from Trendmicro. > > I need to develop a new solution with: > - postfix > - dovecot > - anti-spam > - anti-malware. > > I am thankful any help or suggestion for anti-spam and anti-malware.you can use several blacklists or header/body checks to block spam or malware to save your ressources. Another useful feature is the upcoming Postfix server "postscreen" - this feature will be available in Postfix 2.8. Info: http://www.postfix.org/POSTSCREEN_README.html Some header checks and maybe zen.spamhaus.org should block 85-95% of spam. All other messages can be scanned with spamassassin/amavisd/clamav or other commercial products. To block malware you could also look at: http://www.malwarepatrol.net/ Start with some good Postfix restrictions and then you can extend your setup with other filters/blacklists... -- Daniel
On Thu, 21 Oct 2010 11:37:40 -0200, Fabricio Archanjo <farchanjo at gmail.com> wrote:> Does someone run dspam or just me?? > I like very much this antispam solution. >I use dspam + sqlgrey + policyd-weight to prevent spam. 60% rejects are invalid recipient drop 30% nonreturning from sqlgrey 10% goes to dspam with autolearning. -- Pozdrawiam Pawe? Madej
On 10/20/2010 9:20 AM, Jose Luis Faria wrote:> Hello people, > > I am using now qmail in cluster with LDAP + Interscan Messaging > Security Suite from Trendmicro. > > I need to develop a new solution with: > - postfix > - dovecot > - anti-spam > - anti-malware. > > I am thankful any help or suggestion for anti-spam and anti-malware. > > Thanks in advance! >You can try a front end spam filter service and not have to deal with it at all. http://www.junkemailfilter.com
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA384 Am 25.10.2010 um 19:40 schrieb Marc Perkel:> On 10/20/2010 9:20 AM, Jose Luis Faria wrote: >> Hello people, >> >> I am using now qmail in cluster with LDAP + Interscan Messaging Security Suite from Trendmicro. >> >> I need to develop a new solution with: >> - postfix >> - dovecot >> - anti-spam >> - anti-malware. >> >> I am thankful any help or suggestion for anti-spam and anti-malware. >> >> Thanks in advance! >> > > You can try a front end spam filter service and not have to deal with it at all. > http://www.junkemailfilter.comThe best anti-spam system is ASSP. Install it, train it and you have 99.8% of all spam eliminated on the server. We use it since years with very good results. - -- Robert M. M?nch Mobil: +49 177 245 2802 http://www.saphirion.com Smarter|Better|Faster Saphirion Ltd & Co KG Schumannstr. 3 D - 76185 Karlsruhe Tel : +49 721 5978501 Fax: +49 721 5978502 Registergericht: Amtsgericht Mannheim HRA 105339 Alleinige pers?nlich haftende Gesellschafterin: Quiyo Verwaltungs Limited Registered Office: 76 High Street, Newport Pagnell, Milton Keynes, MK 16 8AQ, Great Britain. Company Number: 5705018 Vertretungsberechtigter Gesch?ftsf?hrer: Robert M. M?nch Umsatzsteuer-Identifikationsnummer gem?? ? 27 a Umsatzsteuergesetz: DE 24939452. Inhaltlich Verantwortlicher gem?? ? 10 Absatz 3 MDStV: Robert M. M?nch (Anschrift wie oben) -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 10.0.2 (Build 13) Charset: iso-8859-1 wsBVAwUBTMXgEHSQa/BbHGLwAQlZagf/a36cq4Y+sf6dqW8oOcQDBhohDedMEuoi HH6MmKw2Xvvcy4g6FS4nvsTwKhQyl7EVd2RP9rfUNbxeaisINnF4HMf7l1bWAzlL kjJ8RjKieis2bYBanyaQ7OpWddkvpgvMc0m25c3zNhvMaO26CO8f1/59UcrgOb8r F8V1KdJbwcLL/UVHCPVnMwm9uKlEdh5t4YFCjdo2eplgzhaPDYk0mw7N8929ZmlN uDVHd2xPMnyNFl3rUsQPCAanDCL/Z3anYo8pXhAR49B6ZxjF11V/zYZj2yOjWXiM /I9CVsyyyD4YalCVphZSqZpAa0luVQxMVV7hoOFKlCcmke49CN2a4A==wgDg -----END PGP SIGNATURE-----
Il giorno 20/ott/2010, alle ore 18.20, Jose Luis Faria ha scritto:> Hello people, > > I am using now qmail in cluster with LDAP + Interscan Messaging Security Suite from Trendmicro. > > I need to develop a new solution with: > - postfix > - dovecot > - anti-spam > - anti-malware. > > I am thankful any help or suggestion for anti-spam and anti-malware. > > Thanks in advance! > > ?+1 for ASSP. I?ve installed it three months ago, left it in learning mode for two weeks, then set it up, then after a month refined configuration. 99.97% spam blocked here! Regards A.