Difference between revisions of "SpamAssassin/ClamAV"
From CSEE Documentation
Line 1: | Line 1: | ||
==Overview== | ==Overview== | ||
− | Spam Assassin 3.1.4 and Clam Assassin 1.2.3 are now available for use. Spam Assassin is used to identify e-mails which have spam characteristics, while Clam Assassin uses [http://www.clamav.net/ ClamAV] to identify virus signatures. Short instructions are available to add Clam Assassin Only if the Spam Assassin check has been implemented. | + | Spam Assassin 3.1.4 and Clam Assassin 1.2.3 are now available for use. Spam Assassin is used to identify e-mails which have spam characteristics, while Clam Assassin uses [http://www.clamav.net/ ClamAV] to identify virus signatures. Short instructions are available to add Clam Assassin Only if the Spam Assassin check has been implemented at [[#SpamAssassin/ClamAV 3]]. |
− | Neither Spam Assassin nor Clam Assassin are enabled by default. Even though these are some of the best tools available, they are also known to filter out valid emails too. They are to be used at your own risk. | + | Neither Spam Assassin nor Clam Assassin are enabled by default. Even though these are some of the best tools available, they are also known to filter out valid emails too. They are to be used at your own risk. |
==Setting Up Spam Assassin and Clam Assassin== | ==Setting Up Spam Assassin and Clam Assassin== |
Revision as of 22:52, 10 January 2007
Overview
Spam Assassin 3.1.4 and Clam Assassin 1.2.3 are now available for use. Spam Assassin is used to identify e-mails which have spam characteristics, while Clam Assassin uses ClamAV to identify virus signatures. Short instructions are available to add Clam Assassin Only if the Spam Assassin check has been implemented at #SpamAssassin/ClamAV 3.
Neither Spam Assassin nor Clam Assassin are enabled by default. Even though these are some of the best tools available, they are also known to filter out valid emails too. They are to be used at your own risk.
Setting Up Spam Assassin and Clam Assassin
- Log into your CSEE UNIX shell account.
- Edit/create a ~/.forward file in your home directory (this sample .forward can be downloaded.)
- You want a single line which pipes all mail to procmail as shown here (replace your_username with your actual username):
"|IFS=' ' && exec /usr/local/bin/procmail -f- || exit 75 #your_username"
example:"|IFS=' ' && exec /usr/local/bin/procmail -f- || exit 75 #brianb"
- You want a single line which pipes all mail to procmail as shown here (replace your_username with your actual username):
- Edit/create a ~/.procmailrc file (this sample .procmailrc can be downloaded).
- If you do not have a .procmailrc file, this is needed:
MAILDIR=$HOME/mail
:0fw
| /cs/bin/spamassassin
:0:
* ^X-Spam-Status: Yes
caughtspam
:0fw
| /cs/bin/clamassassin
:0:
* ^X-Virus-Status: Yes
virus
- If you have a working .procmailrc file, copy all of the lines above except for the line beginning with
MAILDIR
and place them near or at the top of your rules.
- If you do not have a .procmailrc file, this is needed:
- Let a few emails arrive. Spam Assassin will automatically create a .spamassassin directory and files within that directory.
- Frequently review your "caughtspam" mail folder. Messages older than 60 days will automatically get purged. Messages that are identified as viruses will be stored in the "virus" mail folder. Do not attempt to open any e-mails placed in the "virus" folder since they may take advantage of a bug in a mail client and automatically execute. Please contact the CSEEIT Systems group if you need to safely review any message with viruses.
- Options are available in the
~/.spamassassin/user_prefs
file to better catch spam messages (and better prevent false positives). See the User Preferences section in the Spam Assassin Configuration Page for details.
Adding Only Clam Assassin (with Spam Assassin already enabled)
- Log into your CSEE UNIX shell account.
- Edit ~/.procmailrc . Find the lines:
:0fw
| /cs/bin/spamassassin
:0:
* ^X-Spam-Status: Yes
caughtspam
and add::0fw
| /cs/bin/clamassassin
:0:
* ^X-Virus-Status: Yes
virus