townx - Simple Spamassassin setup with Postfix and Dovecot on Ubuntu Breezy - Comments

dui lawyer cost What an

praid_nespunch — Wed, 22 May 2013 14:09:38 -0500

dui lawyer cost
What an amazing place - it really looks stunning. I like the authentic cowboy hats too!

viagra Thanks for sharing, I

tedius_lemyur — Mon, 20 May 2013 11:46:46 -0500

viagra
Thanks for sharing, I Think that is what I have been looking for.

pear

ginger_toppy — Sun, 12 May 2013 12:37:55 -0500

cash advance online
Well this is very interesting indeed.Would love to read a little more of this. admire the valuable information you offer in your articles.

What a surprise! I must say

frankie55 — Wed, 08 May 2013 13:23:43 -0500

What a surprise! I must say that I am reading this information for the first time in my life and I am loving it badly. I will bookmark this post for sure and get back here later.
Regards, Frank from pass a drug test

Great Post. I have not been

Guest — Fri, 26 Apr 2013 00:51:32 -0500

Great Post. I have not been visiting the site recently. Took a visit again and there were some great comments on the site. Excellent post. Keep up the good work.
Belgravia Villas

Really helpful even in december 2012

Tom Frank Christensen — Thu, 13 Dec 2012 01:59:01 -0600

This was really helpful even in december 2012.

I just launched Snup.nu, and tries to avoid spam from the emails listed on the frontpage. This I hope helps.

What is the -f option for

Justin — Sat, 23 Jun 2012 16:16:04 -0500

spamassassin unix - n n - - pipe
user=spamd argv=/usr/bin/spamc -f -e
/usr/sbin/sendmail -oi -f ${sender} ${recipient}

This is a very elegant way of doing it - I have seen several examples that use a script to call spamc and in turn sendmail.
What is the -f for in the spamc call? It isn't in the man for spamc. Is this a typo?
Also the man page for spamc says for the -e option "Note that there is a very slight chance mail will be lost here, because if the fork-and-exec fails there's no place to put the mail message." I still like this option.

corpora

bandie — Fri, 10 Feb 2012 08:57:15 -0600

correct form is 'corpora' (decl. IV.)

> apt-get install

Guest — Fri, 04 Nov 2011 16:20:00 -0500

> apt-get install spamassassin spamc
Seems like a misprint.

Crikey, I haven't got a clue

elliot — Wed, 19 Oct 2011 09:54:00 -0500

Crikey, I haven't got a clue I'm afraid. It's been a long time since I did this. Apologies for not being able to help.

Help! i cannot start spamassassin

Serene — Thu, 06 Oct 2011 03:59:05 -0500

I tried to follow but i got this error instead. I cannot start the spam assassin

Error as follow:

warn: archive-iterator: no access to start: 2 at /usr/share/perl5/Mail/SpamAssassin/ArchiveIterator.pm line 771.

Please help..

Thanks!

richard — Sun, 07 Aug 2011 18:27:24 -0500

Very helpful indeed.

Very useful

Fer — Fri, 22 Jul 2011 16:31:48 -0500

Thank you for this detailed guide, it works perfect in my Ubuntu Server 11.04.
Best regards!

Apologies, I intended my

elliot — Tue, 19 Jul 2011 04:07:45 -0500

Apologies, I intended my response in a light-hearted fashion. Should have done a smiley probably. :)

Huh?

Madsen — Mon, 20 Jun 2011 17:32:56 -0500

After writing "There are probably spam corpuses (corpi?) you can use for this", you didn't expect anyone to comment with the correct form? Personally I couldn't care less which form people use, but it seemed like you actually wanted to know. Sorry if I offended you, that wasn't the intention.

Simple Spamassassin setup with Postfix and Dovecot on Ubuntu Breezy

elliot — Fri, 26 Jan 2007 09:00:05 -0600

Below is a simple Spamassassin setup for use with Postfix; I also cover how to train Spamassassin on a Maildir mail box (I use Dovecot).

Some of the below is cribbed from http://www.debuntu.org/postfix-and-pamassassin-how-to-filter-spam. I've simplified it and left more of the configuration at the defaults. You don't have to do this on a locally-hosted Postfix server: the instructions are the same for any email server which can receive email (it just so happens mine isn't open to the outside world and is just passed email by fetchmail). I'm working on Ubuntu Breezy.

Disclaimer: Use these instructions at your own risk. I am not an expert on spam filtering: this set of instructions just gave me what I needed to do my own local spam filtering. If you set it up and it loses you the email clinching a one million dollar contract, I assume no responsibility.

By the way, you need to do all of the below as root.

Install Spamassassin

apt-get install spamassassin spamc

Configure Spamassassin user and group

We want it to run as non-root, so add a spamd user and group:

# groupadd spamd
# useradd -g spamd -s /bin/false -d /var/log/spamassassin spamd
# mkdir /var/log/spamassassin
# chown spamd:spamd /var/log/spamassassin

(This sets the spamd user's home directory as /var/log/spamassassin.)

Configure Spamassassin

Edit /etc/default/spamassassin so these options are set:

ENABLED=1

SAHOME="/var/log/spamassassin/"

OPTIONS="--create-prefs --max-children 2 --username spamd \
-H ${SAHOME} -s ${SAHOME}spamd.log"

--max-children spawns the specified number of child processes (you might need more on a busy server), --username specifies the username spamd runs under, -H sets the home directory, -s sets the log file.

(I left the rest of the file alone, and didn't touch /etc/spamassassin/local.cf.)

Start the Spamassassin daemon (spamd)

/etc/init.d/spamassassin start

(By default, spamassassin gets added to the startup scripts by Ubuntu, so it will start/stop with your system.)

Configure Postfix to use Spamassassin as a filter

This makes Postfix pipe email to Spamassassin once it's been received. Edit /etc/postfix/master.cf and add this line as the first line of the file:

smtp      inet  n       -       -       -       -       smtpd
        -o content_filter=spamassassin

Add this to the end of the same file:

spamassassin unix -     n       n       -       -       pipe
        user=spamd argv=/usr/bin/spamc -f -e  
        /usr/sbin/sendmail -oi -f ${sender} ${recipient}

I bet you're asking yourself "What the hell?!". I know I was. As far as I can tell, this sets up an after-queue content filter, and this config. does the following:

Sets up a content filter called spamassassin with type unix (i.e. listening on a Unix socket).
"- n n - -" means the filter is private, privileged (any pipe daemon needs privileges), not chrooted (pipe daemons can't be chrooted), has no wakeup set, and uses the default for maximum processes spawned, respectively.
pipe sets the filter up using the pipe daemon: stuff gets passed into it by Postfix, then it either returns what was passed in, possibly changed (e.g. with headers added or the body sanitised), or a code indicating what the filter did.
userd specifies the user to run the filter as.
argv sets the command for the pipe daemon to run over messages (i.e. this is the actual filter command). In this case, the command is:
/usr/bin/spamc -f -e /usr/sbin/sendmail -oi -f ${sender} ${recipient}
This runs spamc (the Spamassassin client program), piping its output into the sendmail command; spamc passes the email being filtered to the Spamassassin daemon (spamd) which is running in the background; spamc gets the email back with a few spam headers to show the email has been checked, and possibly with its content rewritten to show the standard Spamassassin "Spam detection software, running on the system 'briar', has identified this incoming email as possible spam" if the email is spam. The ${sender} and ${recipient} markers are interpolated by Postfix, so that sendmail can take the output from spamc and deliver the message with the correct from and to addresses.

Reload Postfix for the configuration to take:

/etc/init.d/postfix reload

Train the Spamassassin filter

This was the bit where I had to do the most research. I'm using Maildir format for my email, under dovecot; email for localhost accounts goes in /home/user/Maildir.

To do my training, I created a new Junk folder for my localhost Postfix account: I did this by adding the folder via Thunderbird. Next I got a load of existing spam from my Trash folder, and moved it to the Junk folder.

Then, to train the filter on the Junk folder, I used sa-learn like this (you need to be root, which is why the sudo is there):

sudo sa-learn --spam -u spamd --dir /home/ell/Maildir/.Junk/* -D

You can also train it what the good stuff looks like, e.g. run it over a clean inbox (no spam):

sudo sa-learn --ham -u spamd --dir /home/ell/Maildir/.INBOX/* -D

There are probably spam corpuses (corpi?) you can use for this or some other smart method I missed, but this seems to work.

Testing

Get the content out of an existing spam, send it to an account on your protected server from a free email account (you could even set up a Hotmail account to get the most accurate spam scenario), and see if Spamassassin marks it. Check the logs (/var/log/spamassassin and /var/log/mail.log) to see what happened to the email. If Postfix is using Spamassassin properly, you should see something like this in the logs:

Jan 26 14:56:10 localhost postfix/pipe[12139]: 9CBD5DA4BF: \
to=<ell@localhost>, relay=spamassassin, delay=17, status=sent (localhost)

(Notice the mention of postfix/pipe.)

Spamassassin might not mark the email, as it will be coming from a legitimate email address. The important thing is that the logs report that Spamassassin was applied.

Results

I now get very little spam delivered to my inbox: most of it gets marked as spam by the Postfix server using Spamassassin, and Thunderbird deletes any emails with a SpamAssassin spam header for me. I periodically train the filter to make it improve, using the stuff Thunderbird has decided is junk.

Why?

Originally, this was at the top of this post, but it's kind of irrelevant. I've included it here so you know why I put myself through this lunacy.

I have a couple of legacy email accounts which still get the occasional proper email, plus endless spam. I use the excellent fetchmail to download email from these moribund accounts and send it to my local Postfix server instead. I then read my local email account via the Dovecot imap server (setup to use Maildir layouts) in the Thunderbird email client. A fairly complex setup, but one which has worked well for me over the past three or four years.

However, a vast amount of spam used to hit my old email accounts, and I'd have to wait for Thunderbird to sort it out (which it does well) once fetchmail passed it to the local Postfix server. I got tired of having to teach the Thunderbird junk controls, so decided instead to setup my local Postfix server with Spamassassin: the stuff that fetchmail then pulls down and sends to my local Postfix server goes through Spamassassin before it hits Thunderbird. As you can tell Thunderbird to trust Spamassassin SPAM headers, it will automatically delete anything which Spamassassin has already decided is spam. Which means I don't have to teach Thunderbird, and can just teach Spamassassin instead (which is an automatic process), and let it learn by itself too as it finds more spam.