질문&답변
클라우드/리눅스에 관한 질문과 답변을 주고 받는 곳입니다.
리눅스 분류

스팸어세신 SPAMASSASSIN

작성자 정보

  • 원준 작성
  • 작성일

컨텐츠 정보

본문

리눅스 서버 보안 관리 실무
책보고 스팸어세신 을 설치 했는데요
버전은 Mail-SpamAssassin-3.1.0
설치 과정에 좀 문제가 있어서...
스크립트 Makefile.PL요게 안된다고 해서
펄 프로그램을 추가 해서 설치 했습니다
따라서 기존에 펄하고 추가된 펄 프로그램은 아래와 같고요
[root@june good]# rpm -qa|grep perl
perl-Filter-1.29-3
perl-Archive-Tar-0.22-29
perl-Compress-Zlib-1.16-11
perl-DBI-1.32-5
perl-5.8.0-88.3
perl-CPAN-1.61-88.3
perl-Digest-SHA1-2.01-10
perl-HTML-Tagset-3.03-28
perl-Digest-HMAC-1.01-11

책대로 설정은 제래로 됐고
프로세서도 돌아가는듯 하고요
root      2582     1  2 23:40 ?        00:00:00 /usr/bin/spamd -d -m10 -x -H -s
root      2586  2582  3 23:40 ?        00:00:00 spamd child
root      2587  2582  0 23:40 ?        00:00:00 spamd child
root      2627  2514  0 23:40 pts/1    00:00:00 grep spamd

근데 도무지 스팸이 걸려지지 않네요
우리나라 스팸메일은 규칙이 빠져서 그렇다 쳐도
외국거라도 걸려 져야 되는데
어떻게 해야 되는지 모르겠네요
설정은 두곳에만 했습니다
/etc/procmailrc
요기 파일이 없어서 만들어서 넣었습니다
# SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
#
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
#
# The lock file ensures that only 1 spamassassin invocation happens
# at 1 time, to keep the load down.
#
:0fw: spamassassin.lock
* < 256000
| ~/local/sa/bin/spamassassin

# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: ***************
almost-certainly-spam

# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "probably-spam".
:0:
* ^X-Spam-Status: Yes
probably-spam

# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped.  This will re-add it.
:0
* ^^rom[ ]
{
  LOG="*** Dropped F off From_ header! Fixing up. "

  :0 fhw
  | sed -e '1s/^/F/'
}

그리고

/usr/share/user_prefs.template
요 파일을 user_prefs.cf 로만
# SpamAssassin user preferences file.  See 'perldoc Mail::SpamAssassin::Conf'
# for details of what can be tweaked.
#*
#* Note: this file is not read by SpamAssassin until copied into the user
#* directory. At runtime, if a user has no preferences in their home directory
#* already, it will be copied for them, allowing them to perform personalised
#* customisation.  If you want to make changes to the site-wide defaults,
#* create a file in /etc/spamassassin or /etc/mail/spamassassin instead.
###########################################################################

# How many points before a mail is considered spam.
 required_score         5

# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
# whitelist_from        someone@somewhere.com

# Add your own customised scores for some tests below.  The default scores are
# read from the installed spamassassin rules files, but you can override them
# here.  To see the list of tests and their default scores, go to
# http://spamassassin.apache.org/tests.html .
#
 score SYMBOLIC_TEST_NAME n.nn

# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost
# definitely want to uncomment the following lines.  They will switch off some
# rules that detect 8-bit characters, which commonly trigger on mails using CJK
# character sets, or that assume a western-style charset is in use.
#
 score HTML_COMMENT_8BITS       0
 score UPPERCASE_25_50          0
 score UPPERCASE_50_75          0
 score UPPERCASE_75_100 0
 score OBSCURED_EMAIL          0

# Speakers of any language that uses non-English, accented characters may wish
# to uncomment the following lines.   They turn off rules that fire on
# misformatted messages generated by common mail apps in contravention of the
# email RFCs.

 score SUBJ_ILLEGAL_CHARS      0
 rewrite_header Subject  [SPAM]
~

이렇게 하는거 말고 또 설정을 해야 되나요?

/usr/share/spamassassin 안의 수많은 스팸 규칙은 두고사용하면
기본적으로 스팸이 걸려지지 않는건지......

여러분의 도움을 기다 립니다.




관련자료

댓글 0
등록된 댓글이 없습니다.

공지사항


뉴스광장


  • 현재 회원수 :  60,041 명
  • 현재 강좌수 :  35,855 개
  • 현재 접속자 :  113 명