centos:mail_c7:spam_8

Dies ist eine alte Version des Dokuments!

Spamassassin für AMaViS unter CentOS 7.x

Bild: Logo Apache Spamassassin

Grundlagen

SpamAssassin ist ein weitverbreitetes Filterprogramm, mit dem unerwünschte eMails (Spam) automatisch erkannt und aussortiert werden können. Ebenso wie AMaViS ist SpamAssassin ein Perl-Programm, mit der eine inhaltliche Bewertung einer eMail erfolgt. SpamAssassin selbst ermittelt und berechnet einen Scoring-Wert einer jeden eMail und übergibt diesen Wert an AMaVis. AMaViS selbst kann nun an Hand des übermittelten Scoringwertes eine eMail durchlassen, taggen (also z.B. die Betreffzeile manipulieren) oder ablehnen. SpamAssassin ist also nur ein Backendsystem von AMaViS.


skinparam defaultFontName Courier



state " zuständiges MHS \n (Mail Handling System) \n des Absenders" as MHS1 {
state "MTA (Mail Transfer Agent) \n des Mail Service Providers" as MTA1
MTA1 : \n Versand der eMails von Kunden, Interessenten \n Geschäftspartner über deren Mail Service Provider \n zum eMail-Server (MTA) des Empfängers \n
}


state "MUA (Mail User Agent) \n des Postfachinhabers/Kunden" as MUA1
MUA1 : \n Versand der eMails unserer eigenen Kunden \n am Submission-Port \n des eigenen eMail-Server (MTA) \n




state "zuständiges MHS (Mail Handling System) des Empfängers" as MHS2 {
state "MTA (Mail Transfer Agent)" as MTA2. {

state " SMTP-Daemon \n (MTA-Traffic: Port 25) \n (MUA-Traffic: Port 587)" as SMTPD_25 {
SMTPD_25 : \n Annahme des SMTP-Verkehrs von anderen \n MTAs (Mail Transfer Agents) auf Port 25
SMTPD_25 :\n ┌──────────────────────────────────────────┐\n │ │\n │ Postfix : Version 2.11.x │\n │ Hostname: vml000087 │\n │ IP (ext): 217.91.103.19 │\n │ IP (int): 10.0.0.87 │\n │ Port (MTA-Traffic) : 25 │\n │ Port (MUA-Traffic) : 587 │\n │ │\n └──────────────────────────────────────────┘ \n
}

state "Postscreen Daemon" as POSTSCREEN {
POSTSCREEN : \n Schutz vor Überbelastung und SPAM-Abwehr: \n Prüfung der einliefernden HOSTs \n auf Zombie-/SPAM-Bot-Verhalten
POSTSCREEN : \n ┌──────────────────────────────────────────┐ \n │ │ \n │ Postfix : Version 2.11.x │ \n │ Black-/Whitelisting │ \n │ "Pre 220 SMTP Server Greeting" Tests │ \n │ "Post 220 SMTP Server Greeting" Tests │ \n │ │ \n └──────────────────────────────────────────┘ \n
}

state "Header- und Body-Checks" as BH_CHECKS {
BH_CHECKS : \n Bedarfsweise Überprüfung der Mailheader \n und der MailBodies
BH_CHECKS :\n ┌──────────────────────────────────────────┐\n │ │\n │ Postfix : Version 2.11.x │\n │ Header- und Body-checks │\n │ /etc/postfix/header_checks_map │\n │ /etc/postfix/body_checks_map │\n │ │\n └──────────────────────────────────────────┘\n
}

state "SMTP-Client des MTAs" as MX_SMTP {
MX_SMTP : \n SMTP/LMTP-Client zum Versenden von \n Nachrichten an andere SMTP/LMTP-Server \n (MTAs und Backend-Systeme)
MX_SMTP :\n ┌──────────────────────────────────────────┐\n │ │\n │ Postfix : Version 2.11.x │\n │ │\n └──────────────────────────────────────────┘\n
}

state "SMTP-Daemon (Port 10025)" as MX_SMTPD_10025 {
MX_SMTPD_10025 : \n Annahme des SMTP-Verkehrs \n (Notification Mails) \n vom AMaViS-Host auf Port 10025
MX_SMTPD_10025 :\n ┌──────────────────────────────────────────┐\n │ │\n │ Postfix : Version 2.11.x │\n │ IP (int): 10.0.0.87 │\n │ Port (MTA-Traffic) : 10025 │\n │ berechtigter Host │\n │ zum Einliefern : 10.0.0.67 │\n │ │\n └──────────────────────────────────────────┘\n
}
}

state "Milter-System(e) (MILTER = Mail FILTER)" as MILTER {
state "AMaViS-Milter (amavisd_milter)" as AMAVISD_MILTER {
AMAVISD_MILTER : \n Schnittstelle zwischen MTA (Port 10013) \n und AMaViS (Unix-Socket)
AMAVISD_MILTER :\n ┌──────────────────────────────────────────────────┐\n │ │\n │ amavisd-milter : Version 1.6.x │\n │ Hostname : vml000067 │\n │ IP (int): 10.0.0.67 │\n │ Anbindungen │\n │ SOCKET : 10013@10.0.0.67 │\n │ AMAVISD_SOCKET : /var/run/amavisd/amavisd.sock │\n │ │\n └──────────────────────────────────────────────────┘\n
}
state "ASAV-System (AntiSpam und AntiVirus)" as AMAVIS {
state "AMaViS (A Mail Virus Scanner)" as AMAVISD {
AMAVISD : \n Frontendsystem zur Steuerung der Hilfsprogramme \n wie Entpacker, Scanner und Spamassassin.
AMAVISD :\n ┌──────────────────────────────────────────────────┐\n │ │\n │ amavisd-new : Version 2.9.x │\n │ Hostname : vml000067 │\n │ IP (int) : 10.0.0.67 │\n │ Anbindungen │\n │ AMAVISD_SOCKET : /var/run/amavisd/amavisd.sock │\n │ AMAVISD Port : 10024 │\n │ │\n └──────────────────────────────────────────────────┘\n
}
state "SMTP-Client des MTAs" as AMAVIS_SMTP {
AMAVIS_SMTP : \n AMaViS SMTP-Client zum Versenden von \n Benachrichtigungs eMails (notifications) \n an den Postfix MTA auf Port 10025
AMAVIS_SMTP :\n ┌──────────────────────────────────────────┐\n │ │\n │ Postfix : Version 2.11.x │\n │ │\n └──────────────────────────────────────────┘\n
}
state "ApacheSpamAssassin" as SPAMASSASSIN {
SPAMASSASSIN : \n SPAM-Berwertungs Daemon zum automati-\n sierten Betrachten und Prüfen von \n ein- und ausgehender eMails auf \n unerwünschte Inhalte
SPAMASSASSIN :\n ┌──────────────────────────────────────────┐\n │ │\n │ SpamAssassin : Version 3.3.x │\n │ Hostname : vml000067 │\n │ IP (int) : 10.0.0.67 │\n │ Port : 783 │\n │ │\n └──────────────────────────────────────────┘\n
}
state "Clam Antivirus Scanner Server" as CLAMD {
CLAMD : \n Virenprüfsummen-Scanner zum Testen von \n Nachrichten und Dateianhängen auf potentielle \n Schadcode-Routinen
CLAMD :\n ┌────────────────────────────────────────────────────┐\n │ │\n │ clamav-server: Version 0.98.x │\n │ Hostname : vml000067 │\n │ IP (int) : 10.0.0.67 │\n │ LocalSocket : /var/run/clamd.amavisd/clamd.sock │\n │ │\n └────────────────────────────────────────────────────┘\n
}
}
}

state "Backend Systeme" as BACKEND {
state "MDA (Mail Delivery Agent)" as DOVECOT {
DOVECOT : \n Server zum Bereitstellen und Verwalten \n der Nachrichten für die Kunden
DOVECOT :\n ┌──────────────────────────────────────────┐\n │ │\n │ Dovecot IMAP/POP3-Server │\n │ Version: 2.2.15 │\n │ Host: imap.nausch.org │\n │ pop3.nausch.org │\n │ IP (ext): 217.91.103.19 │\n │ IP (int): 10.0.0.87 │\n │ Maileingang (LMTP) 24 │\n │ Mailausgang (IMAP) 143 │\n │ (POP3) 933 │\n │ Verwaltung (SIEVE) 4190 │\n │ Authentifizierung (SASL) 3659 │\n │ Quota-backend 10000 │\n │ │\n └──────────────────────────────────────────┘ \n
}
state "Mailinglisten-Server: mailman" as MAILMAN {
MAILMAN : \n Server zum Versenden von Newslettern und \n eMails an Abbonenten von Mailinglisten
MAILMAN :\n ┌──────────────────────────────────────────────────┐\n │ │\n │ Mailinglisten Server / Daemon │\n │ Version 2.1.15 │\n │ Host: mailman.dmz.nausch.org │\n │ IP: 10.0.0.97 │\n │ URL: https://lists.nausch.org/mailman/listinfo │\n │ │\n └──────────────────────────────────────────────────┘\n
}
}

}

MTA1 --> SMTPD_25
MUA1 --> SMTPD_25
SMTPD_25 --> POSTSCREEN
POSTSCREEN --> SMTPD_25
SMTPD_25 --> BH_CHECKS
BH_CHECKS --> SMTPD_25
SMTPD_25 --> MX_SMTP

SMTPD_25 --> AMAVISD_MILTER
AMAVISD_MILTER --> SMTPD_25
SMTPD_25 --> AMAVISD

MX_SMTPD_10025 -left-> MX_SMTP

AMAVIS_SMTP -left-> MX_SMTPD_10025
AMAVISD --> AMAVIS_SMTP


AMAVISD --> CLAMD
CLAMD --> AMAVISD
AMAVISD --> SPAMASSASSIN
SPAMASSASSIN --> AMAVISD

AMAVISD_MILTER --> AMAVISD
AMAVISD --> AMAVISD_MILTER

MX_SMTP -left-> DOVECOT
MX_SMTP --> MAILMAN

Für die Unterscheidung zwischen HAM1) und SPAM2) bedient sich SpamAssassin unterschiedlicher Techniken:

  • Abfrage von RBLs3).
  • Abfrage von Prüfsummenbasierten Filtern wie DCC, Pyzor und Razor.
  • Nutzung regulärer Ausdrücke zum statischen Bewerten der eMails
  • Nutzung interner Bayesscher Filter, die auf Grund der Einteilung der bisher empfangenen eMails statistisch die Wahrscheinlichkeit von HAM zu SPAM ermitteln.

Installation

Wie üblich installieren wir die benötigten Programmpakete via YUM, falls das Paket nicht gleich bei der Installation von AMaViS mitinstalliert wurde. 

 # yum install spamassassin -y

Programminfo

Was uns das Paket alle bei der Installation mitgebracht hat, zeigt uns ein Blick in das installierte rpm. 

 # rpm -qil spamassassin
Name        : spamassassin                                                                                                                                   
Version     : 3.3.2                                                                                                                                          
Release     : 18.el7                                                                                                                                         
Architecture: x86_64                                                                                                                                         
Install Date: Fri 14 Nov 2014 02:10:06 PM CET                                                                                                                
Group       : Applications/Internet                                                                                                                          
Size        : 3332061                                                                                                                                        
License     : ASL 2.0                                                                                                                                        
Signature   : RSA/SHA256, Fri 04 Jul 2014 07:03:21 AM CEST, Key ID 24c6a8a7f4a80eb5                                                                          
Source RPM  : spamassassin-3.3.2-18.el7.src.rpm                                                                                                              
Build Date  : Tue 10 Jun 2014 07:31:27 AM CEST                                                                                                               
Build Host  : worker1.bsys.centos.org                                                                                                                        
Relocations : (not relocatable)                                                                                                                              
Packager    : CentOS BuildSystem <http://bugs.centos.org>                                                                                                    
Vendor      : CentOS                                                                                                                                         
URL         : http://spamassassin.apache.org/                                                                                                                
Summary     : Spam filter for email which can be invoked from mail delivery agents                                                                           
Description :                                                                                                                                                
SpamAssassin provides you with a way to reduce if not completely eliminate                                                                                   
Unsolicited Commercial Email (SPAM) from your incoming email.  It can                                                                                        
be invoked by a MDA such as sendmail or postfix, or can be called from                                                                                       
a procmail script, .forward file, etc.  It uses a genetic-algorithm                                                                                          
evolved scoring system to identify messages which look spammy, then                                                                                          
adds headers to the message so they can be filtered by the user's mail                                                                                       
reading software.  This distribution includes the spamd/spamc components                                                                                     
which create a server that considerably speeds processing of mail.                                                                                           

To enable spamassassin, if you are receiving mail locally, simply add
this line to your ~/.procmailrc:                                     
INCLUDERC=/etc/mail/spamassassin/spamassassin-default.rc             

To filter spam for all users, add that line to /etc/procmailrc
(creating if necessary).                                      
/etc/cron.d/sa-update                                         
/etc/logrotate.d/sa-update                                    
/etc/mail                                                     
/etc/mail/spamassassin                                        
/etc/mail/spamassassin/channel.d                              
/etc/mail/spamassassin/channel.d/sought.conf                  
/etc/mail/spamassassin/channel.d/spamassassin-official.conf   
/etc/mail/spamassassin/init.pre                               
/etc/mail/spamassassin/local.cf                               
/etc/mail/spamassassin/sa-update-keys                         
/etc/mail/spamassassin/spamassassin-default.rc                
/etc/mail/spamassassin/spamassassin-helper.sh                 
/etc/mail/spamassassin/spamassassin-spamc.rc                  
/etc/mail/spamassassin/v310.pre                               
/etc/mail/spamassassin/v312.pre                               
/etc/mail/spamassassin/v320.pre                               
/etc/mail/spamassassin/v330.pre                               
/etc/portreserve/spamd                                        
/etc/sysconfig/sa-update                                      
/etc/sysconfig/spamassassin                                   
/usr/bin/sa-awl                                               
/usr/bin/sa-check_spamd                                       
/usr/bin/sa-compile                                           
/usr/bin/sa-learn                                             
/usr/bin/sa-update                                            
/usr/bin/spamassassin                                         
/usr/bin/spamc                                                
/usr/bin/spamd                                                
/usr/lib/systemd/system/spamassassin.service                  
/usr/share/doc/spamassassin-3.3.2                             
/usr/share/doc/spamassassin-3.3.2/CREDITS                     
/usr/share/doc/spamassassin-3.3.2/Changes                     
/usr/share/doc/spamassassin-3.3.2/LICENSE                     
/usr/share/doc/spamassassin-3.3.2/NOTICE                      
/usr/share/doc/spamassassin-3.3.2/README                      
/usr/share/doc/spamassassin-3.3.2/README.RHEL.Fedora          
/usr/share/doc/spamassassin-3.3.2/TRADEMARK                   
/usr/share/doc/spamassassin-3.3.2/UPGRADE                     
/usr/share/doc/spamassassin-3.3.2/USAGE                       
/usr/share/doc/spamassassin-3.3.2/sample-nonspam.txt          
/usr/share/doc/spamassassin-3.3.2/sample-spam.txt             
/usr/share/man/man1/sa-awl.1.gz                               
/usr/share/man/man1/sa-compile.1.gz                           
/usr/share/man/man1/sa-learn.1.gz                             
/usr/share/man/man1/sa-update.1.gz                            
/usr/share/man/man1/spamassassin-run.1.gz                     
/usr/share/man/man1/spamassassin.1.gz                         
/usr/share/man/man1/spamc.1.gz                                
/usr/share/man/man1/spamd.1.gz                                
/usr/share/man/man3/Mail::SpamAssassin.3pm.gz                 
/usr/share/man/man3/Mail::SpamAssassin::AICache.3pm.gz        
/usr/share/man/man3/Mail::SpamAssassin::ArchiveIterator.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::AsyncLoop.3pm.gz      
/usr/share/man/man3/Mail::SpamAssassin::AutoWhitelist.3pm.gz  
/usr/share/man/man3/Mail::SpamAssassin::Bayes.3pm.gz          
/usr/share/man/man3/Mail::SpamAssassin::BayesStore.3pm.gz     
/usr/share/man/man3/Mail::SpamAssassin::BayesStore::BDB.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::BayesStore::MySQL.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::BayesStore::PgSQL.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::BayesStore::SQL.3pm.gz  
/usr/share/man/man3/Mail::SpamAssassin::Client.3pm.gz           
/usr/share/man/man3/Mail::SpamAssassin::Conf.3pm.gz             
/usr/share/man/man3/Mail::SpamAssassin::Conf::LDAP.3pm.gz       
/usr/share/man/man3/Mail::SpamAssassin::Conf::Parser.3pm.gz     
/usr/share/man/man3/Mail::SpamAssassin::Conf::SQL.3pm.gz        
/usr/share/man/man3/Mail::SpamAssassin::DnsResolver.3pm.gz      
/usr/share/man/man3/Mail::SpamAssassin::Logger.3pm.gz           
/usr/share/man/man3/Mail::SpamAssassin::Logger::File.3pm.gz     
/usr/share/man/man3/Mail::SpamAssassin::Logger::Stderr.3pm.gz   
/usr/share/man/man3/Mail::SpamAssassin::Logger::Syslog.3pm.gz   
/usr/share/man/man3/Mail::SpamAssassin::Message.3pm.gz          
/usr/share/man/man3/Mail::SpamAssassin::Message::Metadata.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::Message::Node.3pm.gz    
/usr/share/man/man3/Mail::SpamAssassin::PerMsgLearner.3pm.gz    
/usr/share/man/man3/Mail::SpamAssassin::PerMsgStatus.3pm.gz     
/usr/share/man/man3/Mail::SpamAssassin::PersistentAddrList.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::Plugin.3pm.gz            
/usr/share/man/man3/Mail::SpamAssassin::Plugin::ASN.3pm.gz       
/usr/share/man/man3/Mail::SpamAssassin::Plugin::AWL.3pm.gz       
/usr/share/man/man3/Mail::SpamAssassin::Plugin::AccessDB.3pm.gz  
/usr/share/man/man3/Mail::SpamAssassin::Plugin::AntiVirus.3pm.gz 
/usr/share/man/man3/Mail::SpamAssassin::Plugin::AutoLearnThreshold.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Bayes.3pm.gz             
/usr/share/man/man3/Mail::SpamAssassin::Plugin::BodyRuleBaseExtractor.3pm.gz
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Check.3pm.gz                
/usr/share/man/man3/Mail::SpamAssassin::Plugin::DCC.3pm.gz                  
/usr/share/man/man3/Mail::SpamAssassin::Plugin::DKIM.3pm.gz                 
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Hashcash.3pm.gz             
/usr/share/man/man3/Mail::SpamAssassin::Plugin::MIMEHeader.3pm.gz           
/usr/share/man/man3/Mail::SpamAssassin::Plugin::OneLineBodyRuleType.3pm.gz  
/usr/share/man/man3/Mail::SpamAssassin::Plugin::PhishTag.3pm.gz             
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Pyzor.3pm.gz                
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Razor2.3pm.gz               
/usr/share/man/man3/Mail::SpamAssassin::Plugin::RelayCountry.3pm.gz         
/usr/share/man/man3/Mail::SpamAssassin::Plugin::ReplaceTags.3pm.gz          
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Reuse.3pm.gz                
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Rule2XSBody.3pm.gz          
/usr/share/man/man3/Mail::SpamAssassin::Plugin::SPF.3pm.gz                  
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Shortcircuit.3pm.gz         
/usr/share/man/man3/Mail::SpamAssassin::Plugin::SpamCop.3pm.gz              
/usr/share/man/man3/Mail::SpamAssassin::Plugin::Test.3pm.gz                 
/usr/share/man/man3/Mail::SpamAssassin::Plugin::TextCat.3pm.gz              
/usr/share/man/man3/Mail::SpamAssassin::Plugin::URIDNSBL.3pm.gz             
/usr/share/man/man3/Mail::SpamAssassin::Plugin::URIDetail.3pm.gz            
/usr/share/man/man3/Mail::SpamAssassin::Plugin::VBounce.3pm.gz              
/usr/share/man/man3/Mail::SpamAssassin::Plugin::WhiteListSubject.3pm.gz     
/usr/share/man/man3/Mail::SpamAssassin::PluginHandler.3pm.gz                
/usr/share/man/man3/Mail::SpamAssassin::SQLBasedAddrList.3pm.gz             
/usr/share/man/man3/Mail::SpamAssassin::SubProcBackChannel.3pm.gz           
/usr/share/man/man3/Mail::SpamAssassin::Timeout.3pm.gz                      
/usr/share/man/man3/Mail::SpamAssassin::Util.3pm.gz                         
/usr/share/man/man3/Mail::SpamAssassin::Util::DependencyInfo.3pm.gz         
/usr/share/man/man3/Mail::SpamAssassin::Util::Progress.3pm.gz               
/usr/share/man/man3/Mail::SpamAssassin::Util::RegistrarBoundaries.3pm.gz    
/usr/share/man/man3/spamassassin-run.3pm.gz                                 
/usr/share/perl5/vendor_perl/Mail                                           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin                              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin.pm                           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/AICache.pm                   
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/ArchiveIterator.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/AsyncLoop.pm                 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/AutoWhitelist.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Bayes                        
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Bayes.pm                     
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Bayes/CombineChi.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Bayes/CombineNaiveBayes.pm   
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore                   
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore.pm                
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/BDB.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/DBM.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/MySQL.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/PgSQL.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/SDBM.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/SQL.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Client.pm                    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Conf                         
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Conf.pm                      
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Conf/LDAP.pm                 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Conf/Parser.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Conf/SQL.pm                  
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Constants.pm                 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/DBBasedAddrList.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Dns.pm                       
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/DnsResolver.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/HTML.pm                      
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Locales.pm                   
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Locker                       
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Locker.pm                    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Locker/Flock.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Locker/UnixNFSSafe.pm        
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Locker/Win32.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Logger                       
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Logger.pm                    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Logger/File.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Logger/Stderr.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Logger/Syslog.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/MailingList.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Message                      
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Message.pm                   
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Message/Metadata             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Message/Metadata.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Message/Metadata/Received.pm 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Message/Node.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/NetSet.pm                    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/PerMsgLearner.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/PerMsgStatus.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/PersistentAddrList.pm        
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin                       
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin.pm                    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/ASN.pm                
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/AWL.pm                
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/AccessDB.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/AntiVirus.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/AutoLearnThreshold.pm 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Bayes.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/BodyEval.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Check.pm                
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/DCC.pm                  
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/DKIM.pm                 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/DNSEval.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/FreeMail.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/HTMLEval.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/HTTPSMismatch.pm        
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Hashcash.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/HeaderEval.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/ImageInfo.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/MIMEEval.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/MIMEHeader.pm           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/OneLineBodyRuleType.pm  
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/PhishTag.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Pyzor.pm                
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Razor2.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/RelayCountry.pm         
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/RelayEval.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/ReplaceTags.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Reuse.pm                
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Rule2XSBody.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/SPF.pm                  
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Shortcircuit.pm         
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/SpamCop.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/Test.pm                 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/TextCat.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/URIDNSBL.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/URIDetail.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/URIEval.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/VBounce.pm              
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/WLBLEval.pm             
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Plugin/WhiteListSubject.pm     
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/PluginHandler.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Reporter.pm                    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/SQLBasedAddrList.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/SpamdForkScaling.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/SubProcBackChannel.pm          
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Timeout.pm                     
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util                           
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util.pm                        
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util/DependencyInfo.pm         
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util/Progress.pm               
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util/RegistrarBoundaries.pm    
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util/ScopedTimer.pm            
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/Util/TieOneStringHash.pm       
/usr/share/perl5/vendor_perl/spamassassin-run.pod                             
/usr/share/spamassassin                                                       
/usr/share/spamassassin/10_default_prefs.cf                                   
/usr/share/spamassassin/20_advance_fee.cf                                     
/usr/share/spamassassin/20_aux_tlds.cf                                        
/usr/share/spamassassin/20_body_tests.cf                                      
/usr/share/spamassassin/20_compensate.cf                                      
/usr/share/spamassassin/20_dnsbl_tests.cf                                     
/usr/share/spamassassin/20_drugs.cf                                           
/usr/share/spamassassin/20_dynrdns.cf                                         
/usr/share/spamassassin/20_fake_helo_tests.cf                                 
/usr/share/spamassassin/20_freemail.cf                                        
/usr/share/spamassassin/20_freemail_domains.cf
/usr/share/spamassassin/20_head_tests.cf
/usr/share/spamassassin/20_html_tests.cf
/usr/share/spamassassin/20_imageinfo.cf
/usr/share/spamassassin/20_meta_tests.cf
/usr/share/spamassassin/20_net_tests.cf
/usr/share/spamassassin/20_phrases.cf
/usr/share/spamassassin/20_porn.cf
/usr/share/spamassassin/20_ratware.cf
/usr/share/spamassassin/20_uri_tests.cf
/usr/share/spamassassin/20_vbounce.cf
/usr/share/spamassassin/23_bayes.cf
/usr/share/spamassassin/25_accessdb.cf
/usr/share/spamassassin/25_antivirus.cf
/usr/share/spamassassin/25_asn.cf
/usr/share/spamassassin/25_dcc.cf
/usr/share/spamassassin/25_dkim.cf
/usr/share/spamassassin/25_hashcash.cf
/usr/share/spamassassin/25_pyzor.cf
/usr/share/spamassassin/25_razor2.cf
/usr/share/spamassassin/25_replace.cf
/usr/share/spamassassin/25_spf.cf
/usr/share/spamassassin/25_textcat.cf
/usr/share/spamassassin/25_uribl.cf
/usr/share/spamassassin/30_text_de.cf
/usr/share/spamassassin/30_text_fr.cf
/usr/share/spamassassin/30_text_it.cf
/usr/share/spamassassin/30_text_nl.cf
/usr/share/spamassassin/30_text_pl.cf
/usr/share/spamassassin/30_text_pt_br.cf
/usr/share/spamassassin/50_scores.cf
/usr/share/spamassassin/60_adsp_override_dkim.cf
/usr/share/spamassassin/60_awl.cf
/usr/share/spamassassin/60_shortcircuit.cf
/usr/share/spamassassin/60_whitelist.cf
/usr/share/spamassassin/60_whitelist_dkim.cf
/usr/share/spamassassin/60_whitelist_spf.cf
/usr/share/spamassassin/60_whitelist_subject.cf
/usr/share/spamassassin/72_active.cf
/usr/share/spamassassin/72_scores.cf
/usr/share/spamassassin/73_sandbox_manual_scores.cf
/usr/share/spamassassin/STATISTICS-set0-72_scores.cf.txt
/usr/share/spamassassin/STATISTICS-set1-72_scores.cf.txt
/usr/share/spamassassin/STATISTICS-set2-72_scores.cf.txt
/usr/share/spamassassin/STATISTICS-set3-72_scores.cf.txt
/usr/share/spamassassin/languages
/usr/share/spamassassin/local.cf
/usr/share/spamassassin/regression_tests.cf
/usr/share/spamassassin/sa-update-pubkey.txt
/usr/share/spamassassin/sa-update.cron
/usr/share/spamassassin/user_prefs.template
/var/lib/spamassassin
/var/run/spamassassin

Konfiguration

spamassassin

Eine besondere Konfiguration von SpamAssassin ist eigentlich nicht notwendig. Im Verzeichnis /etc/mail/spamassassin/ befindet sich die Konfigurationsdatei local.cf mit Hilfe derer lokale Anpassungen an der Installation vorgenommen werden können. 

 # vim /etc/mail/spamassassin/local.cf
/etc/mail/spamassassin/local.cf
 These values can be overridden by editing ~/.spamassassin/user_prefs.cf
# (see spamassassin(1) for details)
 
# These should be safe assumptions and allow for simple visual sifting
# without risking lost emails.
 
# Ab welchem Punktestand soll eine eMail als Spam betrachtet werden?
required_hits 5
 
# Diese Option legt fest, wie SpamAssassin eine als Spam eingestufte E-Mail markieren soll. Sofern 
# report_safe 0 definiert wurde, fügt Spamassassin lediglich einige X-Spam-Header ein und lässt die
# E-Mail ansonsten unverändert.
report_safe 0
 
# Mit dieser Option wird definiert, daß eine Nachricht, welche als SPAM klassifiziert wurde, zusätzlich 
# mit dem Hinweis "[SPAM]" in der Betreffzeile gekennzeichnet werden sollen.
rewrite_header Subject [SPAM]
 
# Diese Direktive bestimmt, welche Sperrmethode verwendet wird, um die beiden Datenbanken (Bayes- und 
# Autowhitelisting) vor gleichzeitigen Zugriffen zu schützen. Wenn sichergestellt ist, daß auf die beiden 
# Datenbanken nie über ein NFS zugegriffen wird, kann auf Unix-Plattformen  erheblich an Performance 
# gewonnen werden, indem die Sperrmethode flock verwendet wird.
lock_method flock
 
# lokale Headerchecks
# Änderungen werden aufsteigend eingetragen, d.h. die neuesten Einträge sind *immer* oben zu finden!
# /i = i Case-Insensitivity (die Nichtbeachtung von Groß- und Kleinschreibung) einschalten
# /m = m Multiline-Faehigkeit - Zeilenumbrueche ignorieren
 
# basierend auf IP-Adressen im Mailheader:
 
# whitelisting
header          HEADER_RECEIVED_CHECKS_NR_1001   Received =~ /^.*198.51.100/im
score           HEADER_RECEIVED_CHECKS_NR_1001   -5
tflags          HEADER_RECEIVED_CHECKS_NR_1001   noautolearn
 
# blacklisting
header          HEADER_RECEIVED_CHECKS_NR_1000   Received =~ /^.*203.0.113/im
score           HEADER_RECEIVED_CHECKS_NR_1000   20
tflags          HEADER_RECEIVED_CHECKS_NR_1000   noautolearn
 
dogehds weida
1)
erwünschten Nachrichten
2)
unerwünschten Nachrichten
3)
Real Blackhole Lists
Diese Website verwendet Cookies. Durch die Nutzung der Website stimmen Sie dem Speichern von Cookies auf Ihrem Computer zu. Außerdem bestätigen Sie, dass Sie unsere Datenschutzbestimmungen gelesen und verstanden haben. Wenn Sie nicht einverstanden sind, verlassen Sie die Website.Weitere Information
  • centos/mail_c7/spam_8.1416410345.txt.gz
  • Zuletzt geändert: 19.11.2014 15:19.
  • von django