[ILUG] Postfix and spamassassin

[Justin Mason]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Dave O Connor writes:
> Niall O Broin said on Sat, Feb 14, 2004 at 12:09:32AM +0000:
> > For quite some time I've been meaning to integrate SA and postfix, and
> > now a customer requirement means that it comes off the "some fine day"
> > list and gets put on the "real soon now" list.
> > 
> > The ideal solution will integrate nicely with postifx with a minimum
> > disturbance of the existing configuration and will provide ease of
> > maintenance.
> > 
> The way I do it (and the simplest way I can think of) is to install procmail,
> then in /etc/postfix/main.cf, do:
> 
> mailbox_command = /some/where/procmail -a "$EXTENSION"
> 
> Then, simply invoke spamc from /etc/procmailrc something like this (this
> assumes maildir and verbose logging, YMMV).
> 
> DROPPRIVS=yes
> MAILDIR=$HOME/Maildir/
> DEFAULT=$HOME/Maildir/
> LOGFILE=/var/log/procmail
> VERBOSE=yes
> 
> :0fw
> * < 256000
> | spamc
> 
> This has been working just dandy for me in production for over a year now.

I'd +1 this one.

The big problem is, it seems attractive to put SpamAssassin right
into the core of the server -- but that isn't really the right
option for everyone.

Why?  Because:

- - not everyone wants their mail filtered.

- - at the SMTP level, you don't yet know which user account(s) will
  be receiving the mail -- as a result, you wind up using the same
  settings for everyone.

- - not everyone wants to use the same spamfilter settings.

- - allowing people to train their own Bayes dbs is much more accurate
  (90% -> 97% typically)

- - efficiency, when using spamc and spamd, is pretty damn high anyway.


The only failure of the procmail method is that you can't protect
mail that isn't delivered to a user -- so aliases that then go
to another host are missed.

- --j.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.3 (GNU/Linux)
Comment: Exmh CVS

iD8DBQFALXXDQTcbUG5Y7woRArxBAJ9KaRS05/t+xs3+LXZd126lFPRSOACfVRfK
bgBXH1bFmRXCEcbf5lZI1d0=
=7Qmu
-----END PGP SIGNATURE-----