Brian Kendig

Q: Where do I configure spamassassin in Mountain Lion Server?

Where, in Mountain Lion Server, can I configure SpamAssassin?

 

I've tried modifying /Library/Server/Mail/Config/spamassassin/local.cf, but the changes I made there don't have any effect.

Mac mini, Mac OS X (10.7)

Posted on Aug 5, 2012 8:51 PM

Close

Q: Where do I configure spamassassin in Mountain Lion Server?

  • All replies
  • Helpful answers

Page 1 of 5 last Next
  • by redshift82r,

    redshift82r redshift82r Aug 7, 2012 3:41 PM in response to Brian Kendig
    Level 2 (325 points)
    Aug 7, 2012 3:41 PM in response to Brian Kendig

    Hi Brian, what changes did you make?

  • by Brian Kendig,

    Brian Kendig Brian Kendig Aug 7, 2012 4:47 PM in response to redshift82r
    Level 2 (185 points)
    Windows Software
    Aug 7, 2012 4:47 PM in response to redshift82r

    I added a few new rules (that had worked fine while I was running Lion Server). These rules are no longer taking effect, even after I restarted the Mail Server.

  • by redshift82r,

    redshift82r redshift82r Aug 7, 2012 5:05 PM in response to Brian Kendig
    Level 2 (325 points)
    Aug 7, 2012 5:05 PM in response to Brian Kendig

    That seems to be the file that Server.app modifies when you change the number of hits, so you're in the right place.  The doco is probably your friend - good luck

  • by Brian Kendig,

    Brian Kendig Brian Kendig Aug 7, 2012 5:10 PM in response to redshift82r
    Level 2 (185 points)
    Windows Software
    Aug 7, 2012 5:10 PM in response to redshift82r

    Documentation for spamassassin in this environment is nonexistent. Yes, this is the file that Server.app modifies, but note that it changes the number backwards: set the required hits to 40 in Server.app and it gets written as 0 in local.cf, and vice-versa. (I submitted feedback to Apple to report this problem.)

  • by redshift82r,

    redshift82r redshift82r Aug 7, 2012 5:21 PM in response to Brian Kendig
    Level 2 (325 points)
    Aug 7, 2012 5:21 PM in response to Brian Kendig

    Yep it's less than non existent, but, there's still a unix system hidden in the depths somewhere!  By doco , I meant the spam assassin wiki, not the nonexistent apple doco.  Good luck

  • by Brian Kendig,

    Brian Kendig Brian Kendig Aug 8, 2012 1:17 PM in response to redshift82r
    Level 2 (185 points)
    Windows Software
    Aug 8, 2012 1:17 PM in response to redshift82r

    I'm following the documentation for SpamAssassin, and what worked in Lion Server isn't working in Mountain Lion Server. I just need more information about how to get it to work in 10.8.

  • by niwrik,

    niwrik niwrik Aug 9, 2012 5:06 AM in response to Brian Kendig
    Level 1 (0 points)
    Aug 9, 2012 5:06 AM in response to Brian Kendig

    Please let us know if you make any progress here. Spamassassin isn't catching anything on our server.  It doesn't seem to matter where I set the slider.  Thanks

  • by niwrik,

    niwrik niwrik Aug 15, 2012 7:29 PM in response to Brian Kendig
    Level 1 (0 points)
    Aug 15, 2012 7:29 PM in response to Brian Kendig

    I noticed the same issue with the slider for scoring that appears to be inversed.  I assumed that it was by design.  I can now confirm that the it does in fact appear to be a bug.  I've chased my tail for a week, thinking that I had permissions wrong somewhere or that I'd modified a setting, rendering amavisd non-functional.  When I finally got it going by modifying the configuration files manually.  Upon testing with some fake spam signatures, I found that the thresholds were inversed.  Thanks Apple.  I now know more than I ever wanted to know about spamassassin.  Please keep me informed of your progress.  I'm sure to need to add some whitelists, etc.  If I get rules up and running, I would gladly share syntax.

     

    -BK

  • by redshift82r,

    redshift82r redshift82r Aug 15, 2012 10:01 PM in response to niwrik
    Level 2 (325 points)
    Aug 15, 2012 10:01 PM in response to niwrik

    Hi guys - the best way to do it is to add soft whitelist scores to /:L/Server/Mail/Config/amavisd/amavisd.conf

    (Because amavis-new may disregard spamassasson rules)

     

    Look for this line

     

    #  read_hash("/Library/Server/Mail/Data/scanner/amavis/sender_scores_sitewide"),

    and directly nbelow that you will see a list of email addresses with NEGATIVE scores beside them.

     

    'nobody@cert.org'                        => -3.0,

    'cert-advisory@us-cert.gov'              => -3.0,

    'owner-alert@iss.net'                    => -3.0,

     

    add yours to the bottom of this list comma-separated

     

    i.e.

     

    '.myschool.edu'                => -5.0,

    '*@newsletter.nba.com'     => -5.0,

     

    The more negative a number, the more STRONGLY whitelisted the address or domain.

     

    Ditto Positive numbers for soft blacklist.

     

    Hope that helps

    cheers

    Gerry

  • by angryiphoneuser,

    angryiphoneuser angryiphoneuser Oct 9, 2012 12:40 PM in response to Brian Kendig
    Level 1 (0 points)
    Oct 9, 2012 12:40 PM in response to Brian Kendig

    I can confirm the junk filter slider is still reversed in 10.8.2 and 2.1.1 of Server Admin - so much for apple fixing it!  The spam filter set up un MLS Server is very unstable - I have enabled Administrator notification of spam which seems to stop Spamassassin modifying the subject of the affected email and AMVISD then picks up the forwarded spam to the Adminstrator as a Virus email and deletes it!  And it is also identified as spam when it is forwarded by root.

     

    PLEASE APPLE can you improve the mail handling of MLS Server back to SLS standards!  Or does someone have a good configuation guide on how to configure the MLS mail architecture to actually work and stop spam?

  • by Mark23,

    Mark23 Mark23 Oct 9, 2012 12:49 PM in response to angryiphoneuser
    Level 3 (975 points)
    Oct 9, 2012 12:49 PM in response to angryiphoneuser

    Have you set a blacklist in the Server app's Mail Filtering section? You can now apply multiple filters, zen.spamhaus.org and bl.spamcop.net for instance.

  • by angryiphoneuser,

    angryiphoneuser angryiphoneuser Oct 9, 2012 12:58 PM in response to Brian Kendig
    Level 1 (0 points)
    Oct 9, 2012 12:58 PM in response to Brian Kendig

    I have spamhaus - is there a separator character if you add any more?  I have given up messing about in the config files due to the susequent erratic behaviour of spam filtering for even seemimgly innocuous changes - such as copying an administrator on spam!

  • by Mark23,

    Mark23 Mark23 Oct 9, 2012 1:06 PM in response to angryiphoneuser
    Level 3 (975 points)
    Oct 9, 2012 1:06 PM in response to angryiphoneuser

    The separator is ,

  • by angryiphoneuser,

    angryiphoneuser angryiphoneuser Oct 9, 2012 2:02 PM in response to Mark23
    Level 1 (0 points)
    Oct 9, 2012 2:02 PM in response to Mark23

    Many thanks Mark - I will see if it improves the problem. 

     

    Would you know if it is possible to forward spam to a junk account under MLS (as was possible with SLS). I have tried changing the Spam_Action command in postfix - options seem to be delete or deliver.  Deliver to quarantine or admin would be helpful if possible?

     

    I have a lot of iOS devices deployed - without client junk mail filters - so need to be as strict and accurate  as possible with the server side filtering.  Having a 'catch' for wrongly tagged spam was helpful on SLS so I could o back and add problem senders to the whitelists and retrieve the email from a holding account.  Is there any way to replicate this with MLS?

Page 1 of 5 last Next