스팸어세신 SPAMASSASSIN
작성자 정보
- 원준 작성
- 작성일
컨텐츠 정보
- 3,486 조회
- 0 추천
- 목록
본문
리눅스 서버 보안 관리 실무
책보고 스팸어세신 을 설치 했는데요
버전은 Mail-SpamAssassin-3.1.0
설치 과정에 좀 문제가 있어서...
스크립트 Makefile.PL요게 안된다고 해서
펄 프로그램을 추가 해서 설치 했습니다
따라서 기존에 펄하고 추가된 펄 프로그램은 아래와 같고요
[root@june good]# rpm -qa|grep perl
perl-Filter-1.29-3
perl-Archive-Tar-0.22-29
perl-Compress-Zlib-1.16-11
perl-DBI-1.32-5
perl-5.8.0-88.3
perl-CPAN-1.61-88.3
perl-Digest-SHA1-2.01-10
perl-HTML-Tagset-3.03-28
perl-Digest-HMAC-1.01-11
책대로 설정은 제래로 됐고
프로세서도 돌아가는듯 하고요
root 2582 1 2 23:40 ? 00:00:00 /usr/bin/spamd -d -m10 -x -H -s
root 2586 2582 3 23:40 ? 00:00:00 spamd child
root 2587 2582 0 23:40 ? 00:00:00 spamd child
root 2627 2514 0 23:40 pts/1 00:00:00 grep spamd
근데 도무지 스팸이 걸려지지 않네요
우리나라 스팸메일은 규칙이 빠져서 그렇다 쳐도
외국거라도 걸려 져야 되는데
어떻게 해야 되는지 모르겠네요
설정은 두곳에만 했습니다
/etc/procmailrc
요기 파일이 없어서 만들어서 넣었습니다
# SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
#
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
#
# The lock file ensures that only 1 spamassassin invocation happens
# at 1 time, to keep the load down.
#
:0fw: spamassassin.lock
* < 256000
| ~/local/sa/bin/spamassassin
# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: ***************
almost-certainly-spam
# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "probably-spam".
:0:
* ^X-Spam-Status: Yes
probably-spam
# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped. This will re-add it.
:0
* ^^rom[ ]
{
LOG="*** Dropped F off From_ header! Fixing up. "
:0 fhw
| sed -e '1s/^/F/'
}
그리고
/usr/share/user_prefs.template
요 파일을 user_prefs.cf 로만
# SpamAssassin user preferences file. See 'perldoc Mail::SpamAssassin::Conf'
# for details of what can be tweaked.
#*
#* Note: this file is not read by SpamAssassin until copied into the user
#* directory. At runtime, if a user has no preferences in their home directory
#* already, it will be copied for them, allowing them to perform personalised
#* customisation. If you want to make changes to the site-wide defaults,
#* create a file in /etc/spamassassin or /etc/mail/spamassassin instead.
###########################################################################
# How many points before a mail is considered spam.
required_score 5
# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
# whitelist_from someone@somewhere.com
# Add your own customised scores for some tests below. The default scores are
# read from the installed spamassassin rules files, but you can override them
# here. To see the list of tests and their default scores, go to
# http://spamassassin.apache.org/tests.html .
#
score SYMBOLIC_TEST_NAME n.nn
# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost
# definitely want to uncomment the following lines. They will switch off some
# rules that detect 8-bit characters, which commonly trigger on mails using CJK
# character sets, or that assume a western-style charset is in use.
#
score HTML_COMMENT_8BITS 0
score UPPERCASE_25_50 0
score UPPERCASE_50_75 0
score UPPERCASE_75_100 0
score OBSCURED_EMAIL 0
# Speakers of any language that uses non-English, accented characters may wish
# to uncomment the following lines. They turn off rules that fire on
# misformatted messages generated by common mail apps in contravention of the
# email RFCs.
score SUBJ_ILLEGAL_CHARS 0
rewrite_header Subject [SPAM]
~
이렇게 하는거 말고 또 설정을 해야 되나요?
/usr/share/spamassassin 안의 수많은 스팸 규칙은 두고사용하면
기본적으로 스팸이 걸려지지 않는건지......
여러분의 도움을 기다 립니다.
관련자료
-
이전
-
다음