'Re: DSPAM and Sendmail'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       freebsd-isp
Subject:    Re: DSPAM and Sendmail
From:       User Ernie <ernie () puremail ! eis ! net ! au>
Date:       2005-10-27 0:20:51
Message-ID: 200510270020.j9R0KpXn006749 () puremail ! eis ! net ! au
[Download RAW message or body]

DSPAM is not a milter, it's a stand alone application that can run as a
daemon or be piped to directly. It's basically an advanced adaptive spam
filter written in C. I am currently running MailScanner -> SpamAssassin as a 
gateway feeding a bunch of hosting servers and client mailservers, it's been 
working for a year but a few problems have cropped up that make me want to
cut 
to DSPAM. Firstly the Perl nature of the current setup uses stacks of RAM as 
I add more MailScanner processess to handle the load.  Secondly a lot of
SPAM 
is creeping through as the spammers get smarter, and I am always having to  
tweak rulesets.  Lastly the whole set up is slooowww, especially if you  
use a lot of DCC/Pyzor, and other offsite checks, the average mail delay as   
reported by the vspan GUI, is about 25sec, and can be minutes in busy
periods, hence the need to seek change. DSPAM is a C program, small
footprint   
very fast especially if you use MySQL for the backend database. It has
fantastic SPAM capture rate, and a GUI for clients to edit quarantined SPAM.

I have DSPAM 3.6.0 from the ports collection running on 2 FreeBSD boxen, 
a 5.4-STABLE and a 6.0-RC1 machine, just as the Mlocal delevery agent 
which then passes to procmail on one machine and just to mail.local on the
other machine, 
both configs work fine. I thought I would be smart and set the delivery
agent 
in the dspam.conf file to /usr/sbin/sendmail and see what happened, got a
mail loop and the
queue filled up and I had to kill the process. So my problem is how to get  
DSPAM, remembering that it is set as the Mlocal program on the recieving
sendmail process, to pass the mail after it has finished with it to the
sendmail process that can do both external delivery to another email server 
or to a local delivery program like procmail? 

{Internet} --> [Sendmail IN] -->[DSPAM] --> [Sendmail OUT] --> [Other Servers]
                                                  \
                                              [procmail]-->[local users]

I sort of thought it might be the sendmail process that uses the submit.cf
file, however it does not seem
to have a Mlocal entry that makes sense to me.

- Ernie.

> Hi Ernie,
>   I don't know DSPAM, is it a "milter"  like mimedefang and 
> spamassassin?  I use mimedefang and spamassassin (mimedefang calls 
> spamassassin) in a gateway spam filter/virus scanner etc config.  In 
> my /etc/mail/hostname.mc file I put in
> dnl # icarz customizations here
> INPUT_MAIL_FILTER(`mimedefang', 
> `S=local:/var/spool/MIMEDefang/mimedefang.sock, 
> F=T,T=C:15m;S:4m;R:4m;E:10m')dnl
> define(`confINPUT_MAIL_FILTERS', `mimedefang')dnl
> dnl Custom rate limits should be OK with 1 gig
> 
> define(`confCONNECTION_RATE_THROTTLE',`10')
> define(`confMAX_DAEMON_CHILDREN', `40' )
> 
> define(`SMART_HOST', `mailhost.icarz.com')
> 
> 
> You can change the mail filter to be any mail filter.  The SMART_HOST 
> sends everything to my real mail server.  My mx records point to this 
> host.  I am sure there are better configurations,  but this was easy.
> 
> I hope this helps you with you question,
> Ken
> ----- Original Message ----- 
> From: "User Ernie" <ernie@puremail.eis.net.au>
> To: <freebsd-isp@freebsd.org>
> Sent: Tuesday, October 25, 2005 5:32 AM
> Subject: DSPAM and Sendmail
> 
> 
> >I am trying to get the DSPAM 3.6.0 port running as an SMTP relay 
> >gateway
> > receiving/filtering mail for several hosting servers. I am using
> > FreeBSD 5.4-STABLE and sendmail. On the DSPAM website it only gives
> > examples for either DSPAM as Mlocal delivery, or using Postfix as a 
> > relay.
> > I am not familiar with the FreeBSD dual sendmail instance setup, so 
> > I can't
> > get my head around how to configure Sendmail to listen to port 25 
> > and do it's
> > usual RBL checks I have set up, then pass mail to DSPAM, then finaly 
> > have DSPAM
> > pass it back to sendmail to forward it to the correct mail hosting 
> > server.
> >
> > Has anyone done this, or can anyone suggest what to try? I had a 
> > look at the
> > perl dspampd script but with no instructions I was stuck there as 
> > well.
> >
> > I also posted the question to the DSPAM mail list last week and got 
> > no
> > replies.
> >
> > - Ernie.
_______________________________________________
freebsd-isp@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
[prev in list] [next in list] [prev in thread] [next in thread] 