Control WebPanel Wiki » spamassassin

Test SpamAssassin and ClamAV

publisher — Mon, 27 Dec 2021 12:41:56 +0000

By default when you rebuild the mail server in CWP with antispam then it comes with enabled ClamAV & SpamAssassin protection.
You can enable it from CWP.admin by going to MailServer Manager.

Test ClamAV

Send an email with content

X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H*

If ClamAV works you will see the following in the log: /var/log/maillog

Dec 27 07:22:42 cwp1 clamd[17958]: /var/spool/amavisd/tmp/amavis-20211227T071305-18132-Ocyoo8yY/parts/p001: {HEX}EICAR.TEST.3.UNOFFICIAL FOUND

Dec 27 07:22:42 cwp1 amavis[18132]: (18132-02) Blocked INFECTED ({HEX}EICAR.TEST.3.UNOFFICIAL) {DiscardedOpenRelay,Quarantined}, [209.85.216.47]:46925 [209.85.216.47]  -> , Queue-ID: 9762E703FD2, Message-ID: , mail_id: TKHZnGx2Bs7T, Hits: -, size: 3868, dkim_sd=20210112:gmail.com, 111 ms

Dec 27 07:22:42 cwp1 postfix/smtp[12663]: 9762E703FD2: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=0.34, delays=0.21/0.02/0/0.11, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=18132-02 - INFECTED: {HEX}EICAR.TEST.3.UNOFFICIAL)

Test SpamAssassin

Send an email with content:

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

If SpamAssassin works you will see the following in the log: /var/log/maillog

Dec 27 07:25:37 cwp1 amavis[18133]: (18133-02) Blocked SPAM {DiscardedOpenRelay,Quarantined}, [209.85.215.174]:37637 [209.85.215.174]  -> , Queue-ID: 59C16703FD2, Message-ID: , mail_id: vES-jRB7LKPt, Hits: 999.904, size: 3903, dkim_sd=20210112:gmail.com, 579 ms

How to configure Spamassassin

publisher — Tue, 02 Jul 2019 08:26:15 +0000

Hi, there is how to configure Spamassassin + CWP's mail server.

NOTE: You should enable Anti-SPAM from CWP.admin under MailServer Manager.

* Please note that these changes can disable ClamAV protection and Dovecot rules or custom filters.

First, we have to edit Postifx and SpamAssassin configs.
The /etc/postfix/master.cf has few variants at the time (january 2019)
a) mail server built without ClamAV+SA+Amavis (you must install SpamAssassin manually)

smtp      inet  n       -       n       -       -       smtpd
#  -o content_filter=smtp-amavis:127.0.0.1:10024
#  -o receive_override_options=no_address_mappings

b) mail server built with ClamAV+SA+Amavis

smtp inet n - n - - smtpd -o content_filter=smtp-amavis:127.0.0.1:10024 -o receive_override_options=no_address_mappings

So, there must be added the line below (do NOT forget about two spaces before -o:

  -o content_filter=spamassassin

You must get the one of options below:

a)
smtp      inet  n       -       n       -       -       smtpd
#  -o content_filter=smtp-amavis:127.0.0.1:10024
#  -o receive_override_options=no_address_mappings
  -o content_filter=spamassassin
b)
smtp      inet  n       -       n       -       -       smtpd
  -o content_filter=smtp-amavis:127.0.0.1:10024
  -o receive_override_options=no_address_mappings
  -o content_filter=spamassassin

Once it done you have to add the lines below at the bottom /etc/postfix/master.cf

spamassassin      unix -      n      n      -      -      pipe
  user=nobody argv=/usr/bin/spamc -f -e
  /usr/sbin/sendmail -oi -f ${sender} ${recipient}

Next, we have to edit /etc/sysconfig/spamassassin with the code below:

SAHOME="/var/lib/spamassassin/"
SPAMDOPTIONS="-d -c -m5 -u nobody -s ${SAHOME}spamd.log"

Options there:
-d Detach from starting process and run in background (daemonize).
-c Create user preferences files if they don't exist.
-C Set config path.
-m This option specifies the maximum number of children to spawn.
-u Run as the named user.
-s Specify the syslog facility

(do not forget to check if /var/lib/spamassassin/ owned by nobody).

Configure /usr/share/spamassassin/local.cf with default options below:

rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
required_score 5.0
use_bayes 1
bayes_auto_learn 1
bayes_ignore_header X-Bogosity
bayes_ignore_header X-Spam-Flag
bayes_ignore_header X-Spam-Status
include /usr/share/spamassassin/

Configuration is complete.


sa-update
systemctl restart postfix spamassassin

How to Rebuild Postfix Mail Server ?

publisher — Tue, 24 Feb 2015 19:16:45 +0000

Starting from the CWP version 0.9.6+ you have a new awesome Postfix Mail Server Manager (Re-Builder)
With a single click you can select additional Mail Server options and ReBuild your mail server according to your needs.

Location in the CWP.admin area
Left Menu --> Email --> Postfix Manager

Options
- AntiSpam and AntiVirus Protection (Spamassassin and ClamAV are scanning all your incoming emails, this requires server with min. 1Gb of RAM).
- rDNS check (Drop all emails if no rDNS/PTR)
- Reject Unknown Hostname (Reject unless the hostname has valid DNS record, IGNORE as you could be blocked also)

AntiSpam and AntiVirus
It's possible that ClamAV Antivirus will work with 512MB RAM server but its recommended to have at least 1GB+ RAM.