Koozali.org: home of the SME Server

Legacy Forums => General Discussion (Legacy) => Topic started by: rmoria on August 19, 2005, 03:36:37 PM

Title: Spamassasin and ClamAV order
Post by: rmoria on August 19, 2005, 03:36:37 PM

Hi,

I have installed Clamav and Spamassasin on my SME6.0.1 using the scripts found on the site of Knuddi.

When looking at the daily reports I saw that all spam was being scanned by the virrusscanner. This uses up a lot of time on the system and it seems pretty useless to virusscan mail that gets deleted anyway.
Is it possible to have the spam removed before the mail reaches the virusscanner ?

Moria

Title: Re: Spamassasin and ClamAV order
Post by: gordonr on August 19, 2005, 10:28:26 PM

Quote from: "rmoria"

When looking at the daily reports I saw that all spam was being scanned by the virrusscanner. This uses up a lot of time on the system and it seems pretty useless to virusscan mail that gets deleted anyway.
Is it possible to have the spam removed before the mail reaches the virusscanner ?

We do them the other way around in 7.0, but you raise an interesting point. I'm actually not sure which order is more efficient - spam scanning is slow.

Title: Spamassasin and ClamAV order
Post by: mdo on August 20, 2005, 12:01:35 AM

Quote

pretty useless to virusscan mail that gets deleted anyway.

Spam does not get deleted always. We usually sort it into each users 'junkmail' folder for the user to have a chance to look at it. It needs to be scanned for viruses in case the user wants to open the mail.

Michael

Title: Re: Spamassasin and ClamAV order
Post by: raem on August 20, 2005, 01:50:29 AM

rmoria

> Is it possible to have the spam removed before the > mail reaches the virusscanner ?

Have you enabled RBL lists, as that will reject a lot of spma before it even enters your server.
This feature is in knuddis spam filter contrib, but for further info see
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Spam%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm

For additional virus protection (in sme 6.0.x), with a side effect being a reduction in spam (rejection also), you could install the pattern matching executable content contrib. All messages with the enabled exe type content will be rejected by the server. You can also block other types of attachments.
It has been in use since March 2004 and is very effective.
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Virus%20and%20file%20blocking%20HOWTO%20using%20smtpfront-qmail%20for%20sme%20server.htm

These additional steps will reduce your email virus scanning and spam scanning load quite dramatically.

Pattern matching is included by default in sme 6.5 and in the sme 7beta1

For some other tips to control server mail loads see
http://mirror.contribs.org/smeserver/contribs/rmitchell/smeserver/howto/Mail%20system%20tweaks%20HOWTO%20for%20sme%20server.htm

Title: Spamassasin and ClamAV order
Post by: rmoria on August 20, 2005, 10:18:11 AM

Tnx,

I see an evening tweaking up ahead  :-)