On Monday 22 January 2007 13:38, Bob Eby wrote:
> [EMAIL PROTECTED]
>
> > freeze is not available as package, you need to install it from the
>
> ports > tree.
>
> Good to know, but painful to hear. Guess I'll have to work on learning
> ports...
>
> [EMAIL PROTECTED]
>
> > <disclaimer>
> > I don't use anti-virus mail scanners.
> > </disclaimer>
>
> Well, I'm really just interested in a bayes based anti-spam mail gateway
> that allows for fairly easy end-user training. I chose that HOWTO
> because it is very complete and I can follow it fairly easily (my
> internal server also happens to be Exchange). I really don't want to be
> spending a lot of time on this, and in fact, I'm within an inch or two
> of just going out and buying a proprietary solution (assuming something
> even exists). In the past we've used bayes filtering via OpenBSD and
> postfix on an external mail gateway, but we never got the bayes training
> into a useable state, so filter performance started out sketchy and has
> become useless over time.
>
> > The most likely reason why pkg_add died is because you do not have
>
> your
>
> > PKG_PATH variable set to your nearest mirror.
>
> Mine is:
> PKG_PATH=ftp://mirror.sg.depaul.edu/pub/OpenBSD/4.0/packages/i386/
> Dunno much about "nearest" but it appears quick.
>
> > If you want to know more about freeze-2.5 you can easily type:
> > # cd /usr/ports
> > # make search key=freeze
>
> Ok, so freeze is a compression library, and a few other packages rely on
> it. Not sure how that helps me other than raising questions about why
> amavisd uses it...
>
> > In general, the anti-virus scanners have a lot of dependencies and not
> >
> > all of the dependencies (or all scanners) are licensed to allow
> > redistribution.
>
> Okay, you've got me. I don't really care that much about virus scanning
> anyways. It was "bayes filtering" and "web interface" + "steps I could
> actually follow" that hooked me in to this particular HOWTO. If you've
> got a better HOWTO for doing bayes filtering plus a reasonably easy to
> use interface for training the filter then I'm all ears. (web
> interface, mail interface, it's all the same to me if it's fairly easy
> to use.) Bonus points if it's something a novice like me has a chance
> of installing in some reasonable time-frame.
>
> For the record, I'm doing this stuff in a commercial setting, but I'm
> in-house so I'm only really in need of freedom 0 at this point.
Good day,
I found dspam plus OpenBSD's spamd a great combination for anti-spam. I had to
read the documents very thoroughly but once that was done, setting it up was
reasonably easy. Its performance. after training, is comparable to Barracuda,
in my experience. It also does various nice things like auto whitelisting for
people who send you email regularly, AV through clamd, etc.
Here are the current statistics for my email account from dspam. Most of the
451 false negatives you see were from the initial training period and
currently the spam filtering is close to 98.9% accurate. Today I have had
only 2 spam messages that came through to my account and that was caught by
spamassassin on the client:
vsankar:
TP True Positives: 1386
TN True Negatives: 2831
FP False Positives: 1
FN False Negatives: 451
SC Spam Corpusfed: 137
NC Nonspam Corpusfed: 1
TL Training Left: 0
SHR Spam Hit Rate 75.45%
HSR Ham Strike Rate: 0.04%
OCA Overall Accuracy: 90.32%
Training for dspam can be done through web or by forwarding all spam messages
to the [EMAIL PROTECTED]
Vijay
>
> > All of this means you'll be using the ports tree to install your
> > antivirus gateway.
>
> Well, from what little I know, I'd like to avoid this if at all
> possible... Then again, I probably should at least stay current with
> the latest "stable" and I believe I read the word ports somewhere in
> that process.
>
> Of course the download line from the HOWTO I've been using:
> lynx http://www.ijs.si/software/amavisd/amavisd-new-20030616-p10.tar.gz
>
> Made me think this was a manual install, rather than a use of ports.
>
> ---<everyone>---
>
> You guys have definitely answered:
> Question #1: Why can't I find freeze?
>
> The only thing I'm still pondering a bit is:
> Question #2: What am I missing?
>
> ie: Would I be better off doing something else? I almost chose sendmail
> early on since it is built into OpenBSD, but was a bit put off by all
> the configuration horror stories, so I stuck with postfix...
>
> I'm pretty fond of OpenBSD because of all the neat things I've been able
> to do using pf and various other networking tools in the past, but I've
> definitely never tried to use it as a mail server before (built-in
> OpenBSD server management via email doesn't count), nor have I run it as
> a hardened external box in any kind of production setting... (Okay,
> this is a DMZ, but that doesn't really change my hardening goals.)
>
> Thanks for your time and input.
>
> -Bob
> [EMAIL PROTECTED]
>
> P.S. - I'm a programmer, not a sys admin. Just in case that affects
> anything.
>
>
> !DSPAM:1,45b5144c57201744846740!
--
Vijay Sankar
ForeTell Technologies Limited
59 Flamingo Avenue, Winnipeg, MB, Canada R3J 0X6
E-Mail: [EMAIL PROTECTED], Phone: +1 (204) 885 9535
