Re: Spam and virus filter for mailserver

2003-09-22 Thread Chuck Swiger
Daniela wrote:
[ ... ]
What MTA would you recommend (sendmail is too insecure)?
The two main choices are probably postfix and qmail.

Can I just put the mail in the respective user's home directory with 
fetchmail, and configure their MUA's to get mail from there? Or do I put it 
in /var/mail/?
FreeBSD expects new mail to go in /var/mail/$USERNAME.  Per se, local delivery 
is handled by the LDA (ie, procmail, /usr/libexec/mail.local), not by the MTA.

> Can I run an MTA in a chroot environment with an unprivileged UID?

You can run an MTA in a chroot'ed environment.  The MTA needs to be started as 
root, or setuid-root in order to bind to port 25, but can then drop privileges 
afterwards.

--
-Chuck
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Spam and virus filter for mailserver

2003-09-22 Thread Dan Pelleg
Daniela <[EMAIL PROTECTED]> writes:

> Thanks a lot for your reply, fetchmail seems just right for the job.
> I'll try Clam together with amavis, or is there a better way to run it?

You definitely want amavisd-new. Not amavis-perl, not amavisd, but
amavisd-new. They're all in the ports. But amavisd-new seemed to work
better out of the box, at least together with postfix.

Note this month's DaemonNews has an article covering this configuration.

-- 

  Dan Pelleg
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Spam and virus filter for mailserver

2003-09-21 Thread Alin-Adrian Anton
Daniela wrote:

Hi!

We have the following situation and don't know what to do:

I have one POP3 account with alias adresses for the network clients, and every 
client configured the mailer not to get mail destined for the other clients.
Now we get so much spam and viruses, and I decided to set up a mail server, 
recieve the mail for all the clients, and the clients get their mail from my 
mail server, keeping their current mail adresses.

The clients run M$ Winblows eXPensive, so I need an antivirus program that 
runs on FreeBSD (should be free). Can anyone recommend a good mail reader 
that can fetch mail as a daemon, stores mail in a format readable by KMail or 
Evolution, and has a console interface (I don't run X often)? It should also 
be somehow able to put the mail in different folders based on the value of 
some headers.

And what mail server should I use? It should be secure and not use up many 
resources (security has the highest priority).

Is this stuff possible at all? Please help us.
Thanks in advance.
Daniela

___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
 

I think qmail is the most suitable mail server. I think and many others 
do, that it's the most secure and resource-saver mail server out there. 
And it's free, of course, you'll find it in the ports.

Qmail-scanner is a virus scanner for qmail, but I do not recommend it, 
concerning resources and security. The most lightweight filtering system 
for qmail which comes to my mind seems to be qmail-qfilter (a small C 
proggie), google for it and use it. See the sample scripts, one of them 
filters any executable attachment, like .vbs,.etc... Add .scr, .pif and 
.bat to them ;).

I use it and my 'new' qmail-queue file looks like this now (read the 
docs, it is a script, hackish):
-
#!/bin/sh
exec /var/qmail/bin/qmail-qfilter /var/qmail/bin/filter1 -- 
/var/qmail/bin/qmail-inject -n
-

Where filter1 is a script which filters mail using the header details.

PS: parse the headers carefully ;)
Alin.



smime.p7s
Description: S/MIME Cryptographic Signature


Re: Spam and virus filter for mailserver

2003-09-21 Thread Daniela
On Sunday 21 September 2003 12:27, Steve Sapovits wrote:
> On Sun, 21 Sep 2003 12:55:20 +
>
> Daniela <[EMAIL PROTECTED]> wrote:
> > Can anyone recommend a good mail reader that can fetch mail as a daemon,
> > stores mail in a format readable by KMail or Evolution, and has a console
> > interface (I don't run X often)? It should also be somehow able to put
> > the mail in different folders based on the value of some headers.
>
> Have you looked at fetchmail?  http://catb.org/~esr/fetchmail/
>
> fetchmail can fetch from designated accounts and forward to your local
> mail server.   The way I'm set up, fetchmail fetches from various POP
> and IMAP accounts, forwarding everything to sendmail.   At that point
> you can use sendmail's anti-spam (or that of the MTA in use), and plug
> in anti-virus software on the server.  Clam is the anti-virus software
> I personally want to look into (haven't yet): 
> http://clamav.elektrapro.com/

Thanks a lot for your reply, fetchmail seems just right for the job.
I'll try Clam together with amavis, or is there a better way to run it?
What MTA would you recommend (sendmail is too insecure)?
Can I just put the mail in the respective user's home directory with 
fetchmail, and configure their MUA's to get mail from there? Or do I put it 
in /var/mail/? Can I run an MTA in a chroot environment with an 
unprivileged UID? Am I asking too much?
I read the fetchmail FAQ, but I still don't have a clue.
My users are lazy, so they shouldn't notice a change at all, if possible.

Needless to say, I have little experience with mail servers, I never had one.

Best regards,
Daniela


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Re: Spam and virus filter for mailserver

2003-09-21 Thread Steve Sapovits
On Sun, 21 Sep 2003 12:55:20 +
Daniela <[EMAIL PROTECTED]> wrote:

> Can anyone recommend a good mail reader that can fetch mail as a daemon, 
> stores mail in a format readable by KMail or Evolution, and has a console
> interface (I don't run X often)? It should also be somehow able to put the
> mail in different folders based on the value of some headers.

Have you looked at fetchmail?  http://catb.org/~esr/fetchmail/

fetchmail can fetch from designated accounts and forward to your local
mail server.   The way I'm set up, fetchmail fetches from various POP 
and IMAP accounts, forwarding everything to sendmail.   At that point
you can use sendmail's anti-spam (or that of the MTA in use), and plug 
in anti-virus software on the server.  Clam is the anti-virus software
I personally want to look into (haven't yet):  http://clamav.elektrapro.com/

On my own mail server, I set up an IMAP server for my clients using Cyrus: 
http://www.jtan.com/doc/imapd/.   fetchmail forwards to sendmail; sendmail
is configured to hand messages over to Cyrus.

-- 
Steve Sapovits  [EMAIL PROTECTED] 
___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"


Spam and virus filter for mailserver

2003-09-21 Thread Daniela
Hi!

We have the following situation and don't know what to do:

I have one POP3 account with alias adresses for the network clients, and every 
client configured the mailer not to get mail destined for the other clients.
Now we get so much spam and viruses, and I decided to set up a mail server, 
recieve the mail for all the clients, and the clients get their mail from my 
mail server, keeping their current mail adresses.

The clients run M$ Winblows eXPensive, so I need an antivirus program that 
runs on FreeBSD (should be free). Can anyone recommend a good mail reader 
that can fetch mail as a daemon, stores mail in a format readable by KMail or 
Evolution, and has a console interface (I don't run X often)? It should also 
be somehow able to put the mail in different folders based on the value of 
some headers.

And what mail server should I use? It should be secure and not use up many 
resources (security has the highest priority).

Is this stuff possible at all? Please help us.
Thanks in advance.

Daniela


___
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"