Topic: ASSP on SME 7

[mapangojoe]

Hello all you fine SME users out there.  Can anybody tell me if the contrib called ASSP (spam filter) will work with SME7.  I have ASSP on a 5.5 box I would like reinstall and upgrade to 7, but ASSP is a must.

Thanks to all who reply!

[sonoracomm]

SME 7 has spam filtering built in.  I haven't tried it, but I will before I update the ASSP howto for SME 7.

Now if you wouldn't mind sending me the changes to the howto...I'd be happy to update it.  Or if you compare the two methods, I'd sure appreciate your insight.

G

current:
http://www.sonoracomm.com/sonoracomm/pdf/ASSP_HOWTO.pdf

[mapangojoe]

When/if I get some time (or if I can get my bench guy) to build up a little test SME7 box and attempt the install.  I'll gladly post/reply with any news, good or bad.  I'm not a programmer.   If it does not install easily, I won't get it working.  

I have not tried SME7, but I use the same "contribs" for filtering that 7 uses, and I'm very happy with them.  Not perfect, but lots of control.  I have a customer with a 5.5 box that I really need to get upgraded.

Thanks for the reply!


Chris Curtis'

SME 7 has spam filtering built in.  I haven't tried it, but I will before I update the ASSP howto for SME 7.

Now if you wouldn't mind sending me the changes to the howto...I'd be happy to update it.  Or if you compare the two methods, I'd sure appreciate your insight.

G

current:
http://www.sonoracomm.com/sonoracomm/pdf/ASSP_HOWTO.pdf

[wallyrp]

Good Evening,

I'm attempting to install ASSP 1.2.3 on SME 7. I changed the services to redirect the SMTP port to 125 as is needed by ASSP. The changes seem to be in place in the /etc/services file but when I do a netstat -an|grep LISTEN it lists smtp at port 25 instead of the 125 like I specified. When I attempt to connect to port 125 it refuses the connection. Any ideas on how I can change this setting?

[wallyrp]

Good Evening,

Ok, after more searching, I came across this thread: http://forums.contribs.org/index.php?topic=32732.0

It's not exactly an answer but I'll go sniffing down that trail.

[wallyrp]

Good Evening again,

Ok, I'm posting as I attempt to go through this process to avoid the RTFM responses.

I've used the following command in an attempt to change the stmp port:

/sbin/e-smith/config setprop smtp TCPPort 125

No success.

1. I turned off the smtp proxy.
2. Disabled everything regarding SpamAssassin and ClamAV.
3. Changed the service file to reflect the port change.

Still poking around.

[wallyrp]

Good Evening,

Ok, I did the /sbin/e-smith/config setprop smtpd TCPPort 125 and successfully changed the port. Now, I ran ASSP. Here were the results:

Jul-19-06 23:31:21 Option list file './redre.txt' reloaded (redRe)
Jul-19-06 23:31:21 Option list file './nodelay.txt' reloaded (noDelay)
Jul-19-06 23:31:21 ASSP version 1.2.3(0) (Perl 5.008005) initializing
Jul-19-06 23:31:21 ASSP running on server: test
Jul-19-06 23:31:21 Net::LDAP module version 0.31 installed and available
Jul-19-06 23:31:21 Net::DNS module version 0.48 installed and available
Jul-19-06 23:31:21 Email::Valid module not installed
Jul-19-06 23:31:21 Mail::SPF::Query module version 1.999001 installed and availa                                              ble
Jul-19-06 23:31:21 Mail::SRS module not installed - Sender Rewriting Scheme disa                                              bled
Jul-19-06 23:31:21 Compress::Zlib module version 1.41 installed - HTTP compressi                                              on available
Jul-19-06 23:31:21 Digest::MD5 module version 2.33 installed - delaying will use                                               MD5 keys for hashes
Jul-19-06 23:31:21 File::ReadBackwards module not installed - searching of log f                                              iles disabled
Jul-19-06 23:31:21 Time::HiRes module version 1.55 installed - CPU usage statist                                              ics available
Jul-19-06 23:31:21 PerlIO::scalar module version 0.02 installed - chroot savy
Jul-19-06 23:31:21 Sys::Syslog module version 0.08 installed - centralized loggi                                              ng enabled
Jul-19-06 23:31:21 Couldn't create server socket on port '125' -- maybe another                                               service is running or I'm not root (uid=0)?
Jul-19-06 23:31:21 Listening for mail connections at 125 and admin connections a                                              t 55555
Jul-19-06 23:31:21 Warning: Bayesian spam database is small or empty: './spamdb'
Jul-19-06 23:31:21 Warning: whitelist is small or empty: './whitelist' (ignore i                                              f this is a new install)
Jul-19-06 23:31:21 Loading virus definitions ...
Jul-19-06 23:31:21 Virus definitions loaded; count=0
Jul-19-06 23:31:21 Starting

perl-MLDBM is needed by perl-Mail-SRS-0.31-1.c4.noarch

Now, according to the quote above, assp wasn't able to create the 125 port but was able to create the 55555 port. Now when I run it, it states that it can't create the port 55555 as well. I'm going to reboot the unit to see what happens with port 125. Even though it stated that it couldn't create port 55555, I was able to attach to it.

Now regarding ClamAV that is installed with SME7, where is the main.db and daily.db files located? I'm not good and searching for files on linux.

[wallyrp]

Good Evening,

Well, I guess I got everything working just fine. I don't have it in production yet but everything looks good on the test bench. Regarding the ClamAV, I just ran the freshclam.sh file located in the assp folder and used the files created by this process. All that's left it tweaking it and putting it into production.

Yeehaw!

I've promised in the future to put together various how-to's with nothing being produced. Maybe someone can compile my rambling notes and merge it into the fabulous how-to that was done for SME v6.x.

[CharlieBrady]

I have ASSP on a 5.5 box I would like reinstall and upgrade to 7, but ASSP is a must.

Why? Do you have any evidence that ASSP is superior to SME7 as it comes out of the box?

[wallyrp]

Good Morning,

I know the previous post wasn't exactly directed at me but I thought I'd put in my two cents.

Well, I personally like to drive a Ford PowerStroke instead of a Dodge Cummins. That aside, I like ASSP over SpamAssassin. I don't really want to start a debate because all the facts are out there anyways. It basically goes back to me wanting to drive a Ford PowerStroke.

The one thing that I like about ASSP is that I can tell the users of the email server to teach it instead of me doing all the work. Based on what I read about SpamAssassin, I have to teach it as the email administrator. The things I would teach it would be outside of what it learns automatically. I like to outsource.  

I hope that sonoracomm can use the above information that I have provided and update his how-to. I relied heavily on his how-to and appreciate his efforts.

[chrislaurie]

I used POPFILE very efffectively at a previous company and they have the same approach to ASSP. It really works. It is a good parser (that cathes a lot of the tricks) as well as a Bayesian filter that I teach starting from the first spam message. At the moment I'm getting spam messages with the following subjects that are slipping through spamassasin. A good Bayesian filter that I told about the first one or two would have stopped the all others. A well taught filter catches in excess of 98% with a negligble false positive rate.

Sample subjects coming through Spamassasin:

Re: uocen VlcAGRA
uufif VIAGeRA
xicia VIAGeRA

and body parts of:

VALIvUM from 1, 20 $
VIAGvRA from 3, 35 $
AMBIvEN
CIALxIS from 3, 75 $

simple stuff. Bayesian filters works outside of RBL lists and does not introduce long delays in querying those. It simple mathematics that leverages probabilities. That's why it gets better as it goes along. The other atraction is the speed and the fact that it works even when the rbl list hosts are not available. Checkout the success stories on http://popfile.sourceforge.net/ and http://assp.sourceforge.net/

I would love a simple way to implement popfile as the front end for smeserver.

My 2c - ymmv

Cheers

[wallyrp]

Good Morning,

Well, I put the server up at a production site. I can telnet to port 25 and get the proper response from the local network. I can send email out from the local network to outside domains. I cannot make a port 25 connection from the outside network though nor can I receive any email from outside domains.

Now I can connect to port 125 though which is what smtpd is set to. I'm kind of bumfuzzeled.

Any ideas?

[egerards]

Although I don't have an SME 6.X box anymore to check with, I get the impression that the firewall rules have changed a bit in SME 7.

Now you are running your SMTP server on tcp port 125 you should check the firewall rules with the 'iptables -L' command. Pay special attention to the 'InboundTCP_xxxx' block. Is there still an accept rule for SMTP --> tcp port 25?

Keep us informed of your progress. I'm also considering installing ASSP....

[wallyrp]

Good Evening,

Now you had me chasing all over the net trying to determine the iptables stuff.    Now, after thinking about this, and I may be wrong here, it would seem to me that port 25 is open by default. Would iptables be directing it to smtpd instead of to just any program? Remember, smtpd is only listening on 125 which is what ASSP is passing email on. ASSP is the program that would be listening to port 25 on the outside. Like I stated in an earlier thread, I can access port 25 from the local network. Now what I didn't try is to send a spam email message and see if ASSP actually was filtering the email.

[egerards]

I just temporarily changed my SMTP listening port from 25 to 125. What I saw is that the filewall ruling changed as well.

Code: [Select]


ACCEPT     tcp  --  anywhere             linuxserver.egerards.com tcp dpt:smtp

changed to:

Code: [Select]

ACCEPT     tcp  --  anywhere             linuxserver.egerards.com tcp dpt:125

So after changing the SMTP listening port, it seems to be necessary to (re)open tcp port 25 (for the outside world). Otherwise I expect it will not be possible to receive email from outside your local network.

Correct me if I am wrong....