KfWiki: Spam

Spam

Spamassassin configuration file

A nice site to generate spamassassin config http://www.yrex.com/spam/spamconfig.php

Installation

rpmbuild --define "srcext .bz2" -tb Mail-SpamAssassin-3.1.9.tar.bz2
cd /usr/src/redhat/RPMS/i386
rpm -Uvh perl-Mail-SpamAssassin-3.1.9-1.i386.rpm spamassassin-3.1.9-1.i386.rpm

Install spamd to run with daemontools

useradd -s /bin/nologin spamd
useradd -s /bin/nologin spamd_logger
# run
#!/bin/sh

exec 2>&1
exec envuidgid spamd /usr/bin/spamd -s stderr -c -u spamd \
--socketpath=/tmp/.spamd.sock -m 10 -H -l -x \
--virtual-config-dir=/home/vmail/.spamassassin/%d/%l

# log/run
#!/bin/sh

exec /usr/local/bin/setuidgid spamd_logger /usr/local/bin/multilog t s9999 n10 ./main

Add the following to crontab to update spamassin

sa-update --nogpg --channel updates.spamassassin.org --channel saupdates.openprotect.com >/dev/null 2>&1 && service spamd restart

DKIM proxy

http://dkimproxy.sourceforge.net/

Installing dkimproxy on FreeBSD

Install it from ports.

Generate keys

openssl genrsa -out dkim.key 1024
openssl rsa -in dkim.key -pubout -out dkim.pub

Create dkim DNS record

Remove the PEM header in dkim.pub, then join all lines into one. Pick a selector name, and add this record:

securemail1._domainkey IN TXT "k=rsa; t=s; p=MIGf...AQAB"

Verify the record with the host command host -ttxt securemail1._domainkey.mydomain.com

Starting dkimproxy

Use this rc script as the one that comes with dkimproxy does not freaking read the config files.

#!/bin/sh
# Default-Start:  3 4 5
# Default-Stop:   0 1 2 6
# Description:    Runs dkimproxy

case "$1" in
start)
/usr/local/bin/dkimproxy.out \
--user=dkim \
--group=dkim \
--pidfile=/var/run/dkimproxy.pid \
--daemonize \
--keyfile=/usr/local/etc/dkimproxy-private.pem  \
--selector=default \
--domain=local.bankofamerica.com \
--method=relaxed \
127.0.0.1:10027 127.0.0.1:10028 >> /var/log/maillog
;;

stop)
kill -9 `cat /var/run/dkimproxy.pid` && rm -f /var/run/dkimproxy.pid
;;

esac

Postfix integration

Edit master.cf and reload postfix.

smtp      inet  n       -       n       -       -       smtpd
	-o content_filter=dksign:[127.0.0.1]:10027

submission  inet  n     -       n       -       -       smtpd
	-o smtpd_etrn_restrictions=reject
	-o content_filter=dksign:[127.0.0.1]:10027
dksign    unix  -       -       n       -       10      smtp
	-o smtp_send_xforward_command=yes
	-o smtp_discard_ehlo_keywords=8bitmime,starttls
127.0.0.1:10028 inet  n  -      n       -       10      smtpd
	-o content_filter=
	-o receive_override_options=no_unknown_recipient_checks,no_header_body_checks
	-o smtpd_helo_restrictions=
	-o smtpd_client_restrictions=
	-o smtpd_sender_restrictions=
	-o smtpd_recipient_restrictions=permit_mynetworks,reject
	-o mynetworks=127.0.0.0/8
	-o smtpd_authorized_xforward_hosts=127.0.0.0/8
pickup    fifo  n       -       n       60      1       pickup
		-o content_filter=dksign:[127.0.0.1]:10027

smtp handles local smtp connection. pickup handles mail delivered by calling /usr/sbin/sendmail directly.

KfWiki : Spam