Craig, If you want to offer only spam scanning and not have the irritating problem of verifying users you can have receive the mail and then forward to your scanning cluster from their simscan application. That way postfix and other mail programs could send you mail for scanning. I have a similar setup and all you have to do is recompile simscan with a spamc option which points to a dns name. The dns name then points to several servers. Works like a charm and offloads the incredible load scanning mail causes our servers. Just make sure you setup your scanning servers to accept mail for their domains.
Simscan compile options: ############# You can do it locally with this: --enable-spamc-args='-f -H -d 127.0.0.1\ Or remotely with this: --enable-spamc-args='-f -H -d scanner.yourdomain.com'\ This is my build option (don't use these CFLAGS unless you know you have a multiprocessor p4 box that needs it or you'll be sorry!) CFLAGS='-march=nocona -O2 -pipe' \ ./configure --enable-user=clamav \ --enable-clamav=y \ --enable-spam=y \ --enable-spam-passthru=y \ --enable-per-domain=y \ --enable-ripmime \ --enable-attach=y \ --enable-custom-smtp-reject \ --enable-spam-hits=10 \ --enable-regex=y \ --enable-spamc-args='-f -H -d scanner.yourdomain.com' \ --enable-received=y Simscan has many more options (like -U /tmp/spamd.sock \ ) ----- Original Message ----- From: "Craig Smith" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, September 15, 2006 5:27 AM Subject: RE: [qmailtoaster] 3rd party spamassassin scanning service Thanks Erik, I already had the format for the smtproutes file. I've already run several tests and it works like a charm. Can't believe it's that easy. Thanks again. Also in the tests I ran, I've done it both with and without the port referance and it works either way. It probably checks 25 by default, at least that's what I assume it does, but I will include the info in wiki. > Will qmail accept the mail even though users don't exist? If you add the > smtp route for domainx, does qmail just interpret that as "forward all mail > for domainx to this address and don't check locally?" >>No, re-read my original e-mail. You must add it to rcpthosts (tells >>Qmail to accept for that domain) then add an a line in smtproutes for >>Qmail to figure out where the destination truly lies. Sorry Erik I wasn't very clear here, what I meant was that doing the above (your text) tells qmail to just route the mail to point x based on smtptroutes and rcpthosts and not worry about local authentication/account checkup. However I've already answered this question myself through the testing. Thanks again, I'm sure my boss will be pleased. Regards Craig -----Original Message----- From: Erik Espinoza [mailto:[EMAIL PROTECTED] Sent: 15 September 2006 11:24 To: [email protected] Subject: Re: [qmailtoaster] 3rd party spamassassin scanning service > That's excellent thanks. Are there any pitfalls potential loops etc I > should be aware of. > I guess if company x sets up a catch all account it will prevent the double > bounce. Is there any danger of that double > bounce becoming a loop, or possibly leading to our server being listed as a > spam source? Anythings possible. You will be notified of double bounces, otherwise you will just do a regular bounce to users. > Last question, is it really that easy? :-) If so that is excellent news, > and news that I'm sure will earn me some good points > with the boss. Thanks for that. Yes, it really is that easy. > As for the Wiki, I will indeed add the info, is there anything else I should > include, or is the basic premise, change Mx to point to scanning server, add > smtproute to receiving server and add domain to rcpthosts? Ensure that you follow the format of domain:remoteserver:port from /var/qmail/doc/README.remote-auth For example: gmail.com:mail.gmail.com:25 Otherwise this will not work. I just mention it, since the default smtproutes doesn't need port. > Will qmail accept the mail even though users don't exist? If you add the > smtp route for domainx, does qmail just interpret that as "forward all mail > for domainx to this address and don't check locally?" No, re-read my original e-mail. You must add it to rcpthosts (tells Qmail to accept for that domain) then add an a line in smtproutes for Qmail to figure out where the destination truly lies. > Thanks again for the replies, this list is the best. > > Regards > Craig > > -----Original Message----- > From: Erik Espinoza [mailto:[EMAIL PROTECTED] > Sent: 15 September 2006 01:47 > To: [email protected] > Subject: Re: [qmailtoaster] 3rd party spamassassin scanning service > > The answer is yes. You can scan other domains frm your box. > > The mx points to you. You put an smtproute that points to their server > and you add the domain to rcpthosts. > > The problem is going to be double bounces. Since your box doesn't have > a list of valid users, it will accept any mail addressed to > companyx..com. If a [EMAIL PROTECTED] doesn't exist, your box will get > a rejection which it will try to send to the sender. Since this is > usually spam, the sender address probably won't exist and you will be > notified of the transaction. > > Erik > > On 9/14/06, Craig Smith <[EMAIL PROTECTED]> wrote: > > Hello all, > > > > I hope this is the right board for this query. We are using the latest > > Qmailtoaster install on a Fedora core 5 box. > > Currently all email domains that we host are very successfully scanned by > > clamav and spamassassin. My boss has asked if > > we would be able to offer the scanning service to emails that we don't > > technically host. > > > > Now all I can tell him at this point, is we would need to have company x's > > mx record pointing at our server, but from there > > I'm lost. > > > > Is it possible, to scan company x's mail, (even though we don't hold their > > domain, or host their email), and then pass the mail on to their servers? > > My first instinct was that this should be quiet possible, unfortunately, > I'm > > still relatively new to qmail and spamassassin, so I don't know where to > > start. > > > > Any help you boffins can provide would be greatly appreciated. > > > > Thanks > > Craig > > > > > > > > ------------------------------------------------------- > > Craig Smith - Systems Engineer - Doctor Net > > t. 0870 770 4990 - f. 0870 770 4991 > > > > Visit www.doc-net.com - let us be your key to success > > Visit www.eMailCampaigner.com - close sales cheaper and faster > > Visit www.SprintCRM.com - understand your customers better and increase > > sales > > ------------------------------------------------------- > > The information transmitted is intended only for the person or entity to > > which it is addressed and may contain confidential and/or privileged > > material. If you received this in error, please contact the sender and > > delete the material. > > > > > > --------------------------------------------------------------------- > > QmailToaster hosted by: VR Hosted <http://www.vr.org> > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [EMAIL PROTECTED] > > For additional commands, e-mail: [EMAIL PROTECTED] > > > > > > --------------------------------------------------------------------- > QmailToaster hosted by: VR Hosted <http://www.vr.org> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > > > --------------------------------------------------------------------- > QmailToaster hosted by: VR Hosted <http://www.vr.org> > --------------------------------------------------------------------- > To unsubscribe, e-mail: [EMAIL PROTECTED] > For additional commands, e-mail: [EMAIL PROTECTED] > > --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] --------------------------------------------------------------------- QmailToaster hosted by: VR Hosted <http://www.vr.org> --------------------------------------------------------------------- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED]
