OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
Re: Losing My SPAM Battle

From: Brian Evans (grknightscent-team.com)
Date: Tue Apr 01 2008 - 08:42:35 CDT


Carlos Williams wrote:
> I am running Postfix 2.3 as a corporate email server. I love running
> Postfix and don't want to switch to something else however SPAM is
> getting way out of control on my companies domain. Everyone is
> complaining about SPAM and I have to find a solution to this. Right
> now I have the following installed:
>
> - CentOS 5.1 = OS
> - Postfix 2.3 = MTA
> - Dovecot 1.0 = MDA
> - Amavisd-new = Not Configured
> - Spamassassin = Not Configured
> - ClamAV = Not Configured
> - Procmail = Not Configured
>
> My problem is that I am being suggested online to have ClamAV and
> Spamassassin run via Amavisd-new. I have never done this before and I
> am very scared I will end up losing control of this email server in
> place for Exchange or something like that. I want to do everything in
> my power to keep Postfix running here but I need to find a way to
> integrate SPAM scoring and SPAM filtering along side with the MTA / MDA.
>
As others have said, changing MTAs will not help this.
> Does anyone have a complete guide or anything they recommend? I have
> read Postfix.org <http://Postfix.org> and there are so many different
> manuals and all of them seem to do things their own way. I just want
> one that works. At this point the company I work for would even wire a
> consultant to come out to Orlando and help us get this running.
Personally I use amavisd-new and policyd-weight.

Policyd-weight is a front line defense that scores both RBLs and
HELO/DNS results. This results in my Postfix accepting only 10% spam at
the most.
Legitimate emails are rarely ever rejected and are usually caused by a
broken config on the far end. http://www.policyd-weight.org (note,
project is going through a maintainer shift)

Amavisd-new is very configurable and the basic install document is here:
http://www.ijs.si/software/amavisd/README.postfix

Brian