On Tuesday, December 10, 2002, at 03:25  PM, Michael Anderson wrote:

Hi folks, I hate to join a new list with questions, however, I'm gonna do it this time, and after searching the archives, I believe this is relevent...

Bill, I've noticed a few mails in the archives about SA and some scripts you might have. Our system (we are an ISP) hosts about 300 domains, some quite large and contains better than 5,000 mail boxes. We are looking at some ways to deploy SA/QmailScanner/ClamAV but the we have some strange needs:

1) users can turn SA on and off, plus set their limits
2) SA needs to tag at a level, quarantine at another, and outright kill at a third
While I have gotten vpopmail to work with user based (not site-wide) spam assassin, it is not yet compatible with qmailadmin. For that reason, I didn't go any further. (I plan to change that in qmailadmin when I get time).

The only hack I've referred to is a simple one in the spamassassin sub (qmail-scanner) to quarantine at a given threshold. But this is still site-wide, so it would not fill your needs. I plan to document it in the next toaster revision, which is about halfway done. I'm hoping to get it done this week.

3) QmailScanner will run on both incoming and outgoing mail servers, with clamav.
4) mysql is on backend machines (much like the cluster map you have, we were delighted to see that we came up with almost exactly the same setup as you...)
Cool. This design isn't that unique, I've just never seen it diagrammed. And splitting virus and spam scanning duties helped a lot. Plus the distribution of patches, and the caching setup help reduce latency.

5) http, https, and such may not run on the mail servers, except through a SSH tunnel

So far, we have the web admin part taken care of, basically one of our web servers runs a PHP script that executes it's commands through an SSH session. We have a VERY alpha SA running as .qmail in the users dir, that kills (no tag, no quarantine) spam, this file is created with the PHP. BTW, I have to admit, I'm a fairly decent PHP author, C and C++ are still hair pulling for me. <grin>

This said, I am not exactly sure of the correct .qmail to use for tag or quarantine of spam in this situation.

You refered to some scripts that you had to do this, would it be possible to see if we could adapt these to this system?

I hope I'm not considered an id10t or pain, just trying to get a grip on all this anti-spam stuff... <grin>
Not at all.  Sounds like you've put a lot of thought into it.

Cheers,

Bill


Reply via email to