HomePage :: TechnicalProjects :: SpamAssassin

SpamAssassin

My posts on the nolug list:

http://joeykelly.net/nolugarchives/3842.html — deals with SoBig virus bouces.
http://joeykelly.net/nolugarchives/3804.html — a way to proactively delete virus-laden emails using procmail.

SpamAssassin's homepage: http://spamassassin.org.

A Guide to Writing your own Add-On Rules for pamAssassin)

How to integrate SpamAssassin with your MTA (link)

Using Amavis-new to pipe through SA (link)

Direct link to the VirusBounceRules page: http://www.exit0.us/index.php/VirusBounceRules (here's a more up-to-date page)

Way cool procmail recipe to nuke malware: http://agriroot.aua.gr/nikant/nkvir/

Windows-bound? Try SAproxy.

Other options for fighting spam

[Stopping spam with Linux http://www.linuxplanet.com/linuxplanet/tutorials/201/1/]
http://www.sng.ecs.soton.ac.uk/mailscanner/
DNS Blacklist Packet Filter (link)
[Rejecting bogus virus bounces with Postfix http://www.t29.dk/antiantivirus.txt]
[Enhancing E-Mail Security With Procmail http://www.impsec.org/email-tools/procmail-security.html]
Postfix tips

My ideal layered approach would be:
postfix with postgrey and clamav
sane RBLs (I do this already with sendmail)
spamassassin
that deal that scans for embedded URLs in spam
attachment filtering of banned extensions
intelligent procmail recipes, see above
host-based antivirus scanning

What I've implemented so far...