Originally posted by: n0cmonkey
Originally posted by: Fuzznuts
Originally posted by: n0cmonkey
I've heard good things of spamassassin. Never used it though. Also, check out OpenBSD's spamd.
isnt spamd just a daemonized version of spam assassin? it is in redhat of course bsd may be different.
No. I don't think so.
From the DESCR for spam assassin in OpenBSD's ports (-current as of a couple of hours ago):
SpamAssassin is a mail filter to identify spam.
Using its rule base, it uses a wide range of heuristic tests on
mail headers and body text to identify "spam", also known as
unsolicited commercial email.
The spam-identification tactics used include:
header analysis:
spammers use a number of tricks to mask their
identities, fool you into thinking they've sent a
valid mail, or fool you into thinking you must have
subscribed at some stage. SpamAssassin tries to
spot these.
text analysis:
again, spam mails often have a characteristic style
(to put it politely), and some characteristic
disclaimers and CYA text. SpamAssassin can spot
these, too.
blacklists:
SpamAssassin supports many useful existing blacklists,
such as mail-abuse.org, ordb.org or others.
Razor:
Vipul's Razor is a collaborative spam-tracking
database, which works by taking a signature of spam
messages. Since spam typically operates by sending
an identical message to hundreds of people, Razor
short-circuits this by allowing the first person
to receive a spam to add it to the database -- at
which point everyone else will automatically block
it.
Once identified, the mail can then be optionally tagged as spam for
later filtering using the user's own mail user-agent application.
SpamAssassin requires very little configuration; you do not need
to continually update it with details of your mail accounts, mailing
list memberships, etc. It accomplishes filtering without this
knowledge, as much as possible.
From the man page for spamd (-release):
DESCRIPTION
spamd is a fake sendmail(8)-like daemon which rejects false mail. If the
pf(4) packet filter is configured to redirect port 25 (SMTP) to this dae-
mon, it will attempt to waste the time and resources of the spam sender.
...
spamd is designed to be very efficient so that it does not slow down the
receiving machine. Spam is never accepted, but always rejected with ei-
ther a 450 or 550 error message. The normal way that spam has been dealt
with in the past is to either accept and drop, or outright block. When
configured to use 450 responses, spamd takes neither of these actions: it
rejects the mail back to the senders' queue.
I believe some people actually use these in tandem, but I'm not possitive. I believe OpenBSD's spamd (there is a spamd in spam assassin too :Q) uses a blacklist, and bases everything on that. I haven't used it, or looked into it all that much, so I could be wrong.
Another one to look at, although it may be a bad idea for businesses:
tmda. I've heard good things about this from friends, but I haven't used this one either. Maybe it's time for me to setup my own mail server...