mailscanner with postfix header checks vs. amavisd-new

[Martin Hepworth]

dave

what were your concerns with amavis-new?

Spamassassin is only as good the rules in it. I find it necesscary to
add more rules in to get the hit rate acceptable. www.rulesemporium.com
is a good place to start along with adding the URI RBL's from www.surbl.org

If you look on the Install bit of the FAQ, it describes how to setup
Postfix with a single instance for MailScanner.

AFAIK the rate limiting feature in MS only works with sendmail and takes
about 1 hour to kick in.

I use a different technique - get the MTA to only allow known good email
addresses in. IE reject all none existant email addresses. This reduces
my scanning load buy about 66%!

oh - paragraphs are good too :-)
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


dave wrote:
> Hello,
>     I'm a newbie to this list and am hoping to learn a great deal. I've got
> several FreeBSD and Linux mail servers running postfix 2 2.1.5 on the
> FreeBSD side and 2.1.3 on Linux. I'm wondering if anyone has experience with
> both mailscanner and amavisd-new with postfix, spamassassin, and razor plus
> an AV either clamav or fprot though the AV isn't really important? I was
> previously using amavisd-new, postfix, and spamassassin for antispam, but
> was not very happy with this setup, it did ok, but i feel it could have done
> better, maybe i'm just a perfectionist. What i'd like to know is your
> personal pros and cons of either solution, in terms of speed, reliability,
> ease of use/configuration, approx amount of spam caught, and general
> impressions. A friend of mine set up a postfix box with mailscanner about a
> year ago, the thing i didn't like was i had to use two postfix instances, i
> like to keep things as standard as possible. I checked the postfix section
> of the user's guide today when another friend said mailscanner had a
> feature, see next point, that i've been looking for and discovered that now
> you can use header checks for mailscanner. My question is where in the
> header checks file should you put the HOLD line? To me it would seem to go
> at the end, so headers get processed first, and anything unnecessary
> discarded outright before being moved through mailscanner. Or does it go at
> the beginning? Or does it matter? I'd also like more information on
> connection limiting. One of my mail servers is natted behind a firewall and
> is being blasted by connecting clients trying to spam, it does well, but i'd
> like to block the offending IP or drop it for instances if it connects
> within x times within a minute.
> Thanks for any replies.
> Dave.
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!