{"id":608,"date":"2012-02-02T00:05:50","date_gmt":"2012-02-02T00:05:50","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=608"},"modified":"2012-02-02T00:05:50","modified_gmt":"2012-02-02T00:05:50","slug":"centos-6-mail-server%e8%a8%ad%e5%ae%9a%e4%ba%94spam%e9%81%8e%e6%bf%bespamassassin%e5%ae%89%e8%a3%9d%e8%a8%ad%e5%ae%9a","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=608","title":{"rendered":"CentOS 6 Mail Server\u8a2d\u5b9a(\u4e94)Spam\u904e\u6ffe,spamassassin\u5b89\u88dd\u8a2d\u5b9a"},"content":{"rendered":"<p>\u8981\u904e\u6ffespam ,\u53ef\u5b89\u88ddspamassassin \u4f86\u9054\u6210\u6b64\u529f\u80fd<\/p>\n<p><!--more--><\/p>\n<p>\u5229\u7528<strong> yum install spamassassin <\/strong>\u5b89\u88dd\u5373\u53ef<\/p>\n<p>\u8a2d\u5b9aMailScanner \u4f7f\u7528\u7684\u6383\u63cf\u8edf\u9ad4 \u4fee\u6539<strong> \/etc\/MailScanner\/MailScanner.conf<\/strong><\/p>\n<p><strong>Use SpamAssassin = yes (\u9810\u8a2d\u662fYES \u82e5\u4e0d\u642d\u914dspamassassin \u4f7f\u7528 \u6539\u70bano)<\/strong><\/p>\n<p>Required SpamAssassin Score = 6&#8212;&gt;\u8d85\u904e6\u7b49\u7d1a\u5c31\u8996\u70ba\u5ee3\u544a\u4fe1\uff0c\u7576\u7136\u53ef\u4ee5\u4f9d\u7167\u4f7f\u7528\u8005\u81ea\u5df2\u8a2d\u5b9a\u5566<\/p>\n<p>High SpamAssassin Score = 10&#8212;&gt;\u8d85\u904e10\u5206\u5217\u70ba\u9ad8\u7b49\u7d1a\u5ee3\u544a\u4fe1<\/p>\n<p>High Scoring Spam Actions\u00a0 =\u00a0 deliver<\/p>\n<p>SpamAssassin Auto Whitelist = yes&#8211;&gt; \u53ef\u4ee5\u6e2c\u91cf\u5f9e\u4e0d\u540c\u4f4d\u5740\u767c\u51fa\u7684\u5ee3\u544a\u4fe1\u53ca\u975e\u5ee3\u544a\u4fe1\u7684\u6bd4\u7387\u5982\u679c\u5bc4\u4fe1\u4f4d\u7684\u4fe1\u4ef6\u5927\u591a\u4e0d\u70ba\u5ee3\u544a\u4fe1\uff0c\u7cfb\u7d71\u6703\u81ea\u52d5\u7684\u589e\u52a0\u4f4d\u5740\u81f3\u5b83\u672c\u8eab\u64c1\u6709\u7684\u975e\u5ee3\u544a\u4fe1\u6e05\u55ae(whitelist)<\/p>\n<p>SpamAssassin Timeout = 75&#8212;&gt;\u8655\u7406\u7684\u90f5\u4ef6\u7684\u6700\u5927\u7b49\u5f85\u6642\u9593(\u79d2)<\/p>\n<p>Spam Score Character = * &#8212;&gt;\u8a2d\u5b9a\u5206\u6578\u7528*\u865f\u8868\u793a\uff0c\u9810\u8a2d\u662f\u7528s\uff0c\u8981\u5982\u4f55\u8868\u793a\u7576\u7136\u7531\u81ea\u5df2\u8a2d\u5b9a\u56c9<\/p>\n<p>\u4fee\u6539\u4e3b\u65e8\u8a2d\u5b9a(\u5982\u679c\u88ab\u5224\u5b9a\u70baspam\u6642\u6703\u5728\u4fe1\u4ef6\u4e3b\u65e8\u52a0\u4e0a\u7279\u8a3b\u8a18)<\/p>\n<p><strong>Spam Modify Subject = start<\/strong> <strong>( no\u5c31\u662f\u4e0d\u4fee\u6539\u4e3b\u65e8)<br \/>\nSpam Subject Text = {Spam?} &#8212;&gt; \u53ef\u4ee5\u81ea\u884c\u4fee\u6539\u60f3\u8981\u7684\u8a3b\u8a18<\/strong><\/p>\n<p><strong>High Scoring Spam Modify Subject = start<br \/>\nHigh Scoring Spam Subject Text = {Spam?}<\/strong><\/p>\n<p>\u4fee\u6539\u4e3b\u65e8\u8a2d\u5b9a(\u5982\u679c\u88ab\u5224\u5b9a\u70ba\u75c5\u6bd2\u4fe1\u6642\u6703\u5728\u4fe1\u4ef6\u4e3b\u65e8\u52a0\u4e0a\u7279\u8a3b\u8a18)<\/p>\n<p><strong>Virus Modify Subject = start\u00a0\u00a0 ( no\u5c31\u662f\u4e0d\u4fee\u6539\u4e3b\u65e8)<br \/>\nVirus Subject Text = {Virus?}<\/strong><\/p>\n<p>\u8a2d\u5b9aspamassass \u72c0\u614b\u76ee\u9304<\/p>\n<p>#SpamAssassin User State Dir = \/var\/spool\/MailScanner\/spamassassin (\u5c07#\u53d6\u6d88)<br \/>\n#SpamAssassin User State Dir = (\u52a0\u4e0a#)<\/p>\n<p>\u5efa\u7acb\u76ee\u9304<\/p>\n<p>mkdir \/var\/spool\/MailScanner\/spamassassin<\/p>\n<p>\u4fee\u6539\u6b64\u76ee\u9304\u6b0a\u9650<\/p>\n<p>chown postfix.postdrop spamassassin<\/p>\n<p>\u6e2c\u8a66 spamassassin \u662f\u5426\u7528\u4f5c:<\/p>\n<p>\u5229\u7528\u6307\u4ee4<\/p>\n<p>spamassassin &#8211;test-mode &lt; \/usr\/share\/doc\/spamassassin-3.3.1\/sample-spam.txt<\/p>\n<p>\u57f7\u884c\u5f8c\u6703\u770b\u5230\u4e0b\u9762\u7684\u8a0a\u606f(\u5982\u4e0b\u5716)<\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/02\/spam3.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border: 0px;\" title=\"spam3\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/02\/spam3_thumb.jpg\" alt=\"spam3\" width=\"212\" height=\"244\" border=\"0\" \/><\/a><\/p>\n<p>MailScanner\u4e2d\u7684\u767d\u540d\u55ae\u8a2d\u5b9a\u65b9\u6cd5\uff1a<\/p>\n<p>\u8a2d\u5b9a\u6a94\uff1a\/etc\/MailScanner\/rules\/spam.whitelist.rules \u91dd\u5c0d\u4f60\u5e0c\u671b\u4e0d\u88ab\u6a19\u793a\u7684\u7bc4\u570d\u9032\u884c\u52a0\u8a3b:<\/p>\n<p>\u8981\u4f7f\u7528\u767d\u540d\u55ae\u529f\u80fd\u6642\u8acb\u78ba\u5b9a\u4e0b\u9762\u529f\u80fd\u662f\u5426\u6709\u958b\u555f<\/p>\n<p>Is Definitely Not Spam = %rules-dir%\/spam.whitelist.rules<\/p>\n<p>\u5e38\u7528\u8a9e\u6cd5:<\/p>\n<p>\u5c0d\u8c61:<\/p>\n<table width=\"464\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n<tbody>\n<tr>\n<td valign=\"top\" width=\"200\">From:<\/td>\n<td valign=\"top\" width=\"262\">\u91dd\u5c0d\u4fe1\u4ef6\u7684\u5bc4\u4ef6\u8005\u9032\u884c\u6bd4\u5c0d<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\">To:<\/td>\n<td valign=\"top\" width=\"262\">\u91dd\u5c0d\u4fe1\u4ef6\u7684\u6536\u4ef6\u8005\u9032\u884c\u6bd4\u5c0d<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\">FromOrTo:<\/td>\n<td valign=\"top\" width=\"262\">\u91dd\u5c0d\u5bc4\u4ef6\u8005\u6216\u6536\u4ef6\u8005\u9032\u884c\u6bd4\u5c0d<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\">FromAndTo:<\/td>\n<td valign=\"top\" width=\"262\">\u91dd\u5c0d\u5bc4\u4ef6\u8005\u53ca\u6536\u4ef6\u8005\u5171\u540c\u9032\u884c\u6bd4\u5c0d<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>&nbsp;<\/p>\n<p>\u6bd4\u5c0d\u7684\u6a23\u672c<\/p>\n<table width=\"542\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n<tbody>\n<tr>\n<td valign=\"top\" width=\"200\"><a href=\"mailto:user@sub.domain.com\">user@sub.domain.com<\/a><\/td>\n<td valign=\"top\" width=\"340\">\u55ae\u4e00\u7684\u90f5\u4ef6\u4f4d\u5740<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\">user@*<\/td>\n<td valign=\"top\" width=\"340\">\u55ae\u4e00\u5e33\u865f(\u4e0d\u9650\u5b9a\u9818\u57df)<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\"><a href=\"mailto:*@*.domain.com\">*@*.domain.com<br \/>\n<\/a><\/td>\n<td valign=\"top\" width=\"340\">domain.com\u4e0b\u8f44 subdomin\u4e0b\u7684\u4efb\u4f55\u5e33\u865f<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\"><a href=\"mailto:*@donain.com\">*@donain.com<\/a><\/td>\n<td valign=\"top\" width=\"340\">\u7279\u5b9a domain.com \u7684\u4efb\u4f55\u5e33\u865f<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\">192.168.<\/td>\n<td valign=\"top\" width=\"340\">SMTP client IP \u7bc4\u570d 192.168.0.0\/16<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"200\">\/^192.168.1[4567].\/<\/td>\n<td valign=\"top\" width=\"340\">SMTP client IP \u7bc4\u570d 192.168.14~17<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>\u7bc4\u4f8b:<\/p>\n<p>\u5e0c\u671b\u6240\u6709\u4f86\u81f3<a href=\"mailto:*@*.mlc.edu.tw\">*@*.mlc.edu.tw<\/a> \u53ca <a href=\"mailto:*@mlc.edu.tw\">*@mlc.edu.tw<\/a> \u7684\u4fe1\u4ef6\u90fd\u4e0d\u88ab\u6a19\u8a18\u70baspam<\/p>\n<table width=\"400\" border=\"0\" cellspacing=\"0\" cellpadding=\"2\">\n<tbody>\n<tr>\n<td valign=\"top\" width=\"400\">\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 \u503c\u70bayes\u8868\u793a\u4e0d\u6703\u88ab\u6a19\u8a18\u70baspam<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"400\">From:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <a href=\"mailto:*@*.mlc.edu.tw\">*@*.mlc.edu.tw<\/a>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 yes<\/td>\n<\/tr>\n<tr>\n<td valign=\"top\" width=\"400\">From:\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 <a href=\"mailto:*@mlc.edu.tw\">*@mlc.edu.tw<\/a>\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0\u00a0 yes<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p>spamassassin \u6e2c\u8a66<\/p>\n<p>\u5207\u63db\u76ee\u9304 cd \/usr\/share\/doc\/spamassassin-*<\/p>\n<p>\u8b80\u53d6spam\u6e2c\u8a66\u6a94,\u767c\u9001mail \u7d66roylee<\/p>\n<p>cat sample-spam.txt | mail -s &#8220;spam test&#8221; roylee<\/p>\n<p>\u67e5\u8a62maillog \u5982\u4e0b,\u767c\u73fe(\u7d05\u8272\u81ea\u90e8\u4efd)<\/p>\n<p>Feb\u00a0 2 15:45:50 localhost MailScanner[1520]: Can&#8217;t run file command (&#8220;\/usr\/bin\/file&#8221;): No such file or directory<br \/>\nFeb\u00a0 2 15:45:50 localhost MailScanner[1513]: Virus and Content Scanning: Starting<br \/>\nFeb\u00a0 2 15:45:51 localhost MailScanner[1513]: Spam Checks: <span style=\"color: #ff0000;\"><strong>Found 1 spam messages<br \/>\n<\/strong><\/span>Feb\u00a0 2 15:45:51 localhost MailScanner[1513]: Requeue: 6F5918004F.A13E3 to 1C00B80054<br \/>\nFeb\u00a0 2 15:45:51 localhost postfix\/qmgr[1500]: 1C00B80054: from=&lt;root@mail.pmail.idv.tw&gt;, size=1264, nrcpt=1 (queue active)<br \/>\nFeb\u00a0 2 15:45:51 localhost MailScanner[1513]: Uninfected: Delivered 1 messages<br \/>\nFeb\u00a0 2 15:45:51 localhost MailScanner[1513]: Deleted 1 messages from processing-database<br \/>\nFeb\u00a0 2 15:45:51 localhost postfix\/local[1525]: 1C00B80054: to=&lt;roylee@mail.pmail.idv.tw&gt;, orig_to=&lt;roylee&gt;, relay=local, delay=2.5, delays=2.4\/0.05\/0\/0.03, dsn=2.0.0, status=sent (delivered to mailbox)<br \/>\nFeb\u00a0 2 15:45:51 localhost postfix\/qmgr[1500]: 1C00B80054: removed<\/p>\n<p>User \u6536\u5230\u4fe1\u4ef6\u539f\u59cb\u6a94\u5982\u4e0b,\u4e3b\u65e8\u4e5f\u88ab\u4fee\u6539{Spam?}<\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/02\/spam2.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; padding-left: 0px; padding-right: 0px; display: inline; padding-top: 0px; border: 0px;\" title=\"spam2\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/02\/spam2_thumb.jpg\" alt=\"spam2\" width=\"244\" height=\"184\" border=\"0\" \/><\/a><\/p>\n<p>\u4e5f\u611f\u8b1d\u00a0 jamyy \u7ad9\u9577\u5354\u52a9\u00a0\u00a0\u00a0 <a title=\"http:\/\/jamyy.dyndns.org\/blog\/\" href=\"http:\/\/jamyy.dyndns.org\/blog\/\">http:\/\/jamyy.dyndns.org\/blog\/<\/a><\/p>\n<div class=\"21cd169d3c0f71e95b84db320302cb4a\" data-index=\"1\" style=\"float: right; margin:10px 0 10px 10px;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-8711325745898650\"\r\n     crossorigin=\"anonymous\"><\/script>\n<\/div>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>\u8981\u904e\u6ffespam ,\u53ef\u5b89\u88ddspamassassin \u4f86\u9054\u6210\u6b64\u529f\u80fd<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[48],"tags":[],"class_list":["post-608","post","type-post","status-publish","format-standard","hentry","category-centos"],"_links":{"self":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/608","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=608"}],"version-history":[{"count":0,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/608\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=608"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=608"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=608"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}