[clue-admin] SpamAssassin for mailman

[Ronald Kuetemeier]

Hi Guys,
sorry couldn't make to the meeting. 
Anyhow, if you are interested to cut down on incoming spam traffic
before it hits spamassassin.  I use a program I wrote last year which
looks at the connection behavior from connecting servers, at the packet
level.  Basically how fast a server tries and retries to connect in  a
given time frame,  after my firewall plays dead. 
Got my spam down to an avg of 1 in 2 days.
Don't know if you can use it, since I also use a white list for mail
from people/servers I know to get mail from.
Grey list is controlled by my program, delays basically incoming mail
and most bots give up or are never allowed to connect since they do not
behave like a mail server while trying to open a connection to my
server. It also cuts out those nasty stealth monitoring programs that
some spammers seem to use.
Black list for really stupid people/servers, they will not even be
considered for the grey  list.
    
Anyhow if you are interested I can cook up some docs and put it under
the GPL. I keep the program mostly to myself since there is a way for
spammers  to get around it, but as long as only a few people use it it's
not worth their effort.
BTW, needs iptables and dnotify, i.e. 2.[4,6] kernel and "some"
knowledge on how to setup and change a Linux setup and firewall rules.
Also requires Berkeley DB. Since my firewall setup is so old and stable
I had to link db and libc statically from my dev machine. I use
logrotate and haven't looked at it for month, in other words seems to be
pretty stable.

Hope none of the Denver area spammers read this.

Ronald



On Sun, 2005-02-20 at 04:08 -0700, Jeff Cann wrote: 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> I finally got around to configuring SpamAssassin to auto filter incoming 
> messages to mailman lists.  Note that current spam already gets held for 
> moderation.  The goal of using SpamAssassin is to kill spam before it goes to 
> list moderation queue.
> 
> The integration is only within mailman, not postfix.  
> 
> In case something unexpected happens and mail stops flowing, you can turn off 
> the integration by editing mm_cfg.py and comment this config directive:
> 
> 	GLOBAL_PIPELINE.insert(1, 'SpamAssassin')
> 
> After making the changes to Mailman/mm_cfg.py, you will need to restart the 
> qrunner process. This can be achieved with the mailmanctl program:
> 
> 	sudo mailmanctl restart
> 
> Configuration is documented in the wiki.
> 
> Jeff
> - -- 
> "Science can purify religion from error and superstition. Religion can purify 
> science from idolatry and false absolutes."
> - - Pope John Paul II
> 
> http://isuma.org/
> 
> 
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (GNU/Linux)
> 
> iD8DBQFCGG+3i4b9OApLCmoRAmxzAJ4s/0M8MJAxfI2SX+WIWkR2UOsXHACdFVuR
> G+0MS0Ld7Iu6Xun0jWZIFus=
> =W378
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> CLUE-admin mailing list
> CLUE-admin at clue.denver.co.us
> http://clue.denver.co.us/mailman/listinfo/clue-admin
>