SPAM Problems

[jim.thornton]

I'd like to know how to setup spam killers/filters or whatever you want to call them.

Here's the deal: I get about 200 emails a day from on user level domain that I have. How to enlarge man parts, buy pharmaceutical pills, download software. You name it, I get it. It's probably because I have my email address plastered all over the internet at forums and such.

Anyway... I'd like to implement something on a serverwide basis that will filter out all the spam somehow. I figure it can be done because I have all my emails forwarding to my blackberry and only the legitimate ones get through. The spam are ALWAYS filtered out and it seems to be 100% accurate.

I would like to implement this for not only this user level site I have, but that any site I add in the future too.

Can anyone point me in the right direction?

[mattb]

Search the forums for SpamBlocker.

SpamBlocker is a customized exim.conf file that will help you remove SPAM from your incoming email.

[GXX]

Here's the link:

http://www.directadmin.com/forum/showthread.php?t=19275

[jim.thornton]

Search the forums for SpamBlocker.

SpamBlocker is a customized exim.conf file that will help you remove SPAM from your incoming email.

Do I just copy that file to /etc/exim.conf or /usr/local/directadmin/data/templates/exim.conf

??

[chatwizrd]

You can do:




/sbin/service exim stop
perl -pi -e 's/exim=ON/exim=OFF/' /usr/local/directadmin/data/admin/services.status

mv /etc/exim.conf /etc/exim.conf.bak
mv /etc/exim.pl /etc/exim.pl.bak
mv /etc/system_filter.exim /etc/system_filter.bak

wget -O /etc/exim.conf "http://files.directadmin.com/services/exim.conf"
wget -O /etc/exim.pl "http://files.directadmin.com/services/exim.pl"
wget -O /etc/system_filter.exim "http://files.directadmin.com/services/system_filter.exim"

****READ BELOW (DOVECOT REQUIRED STEPS)****

/sbin/service exim start
perl -pi -e 's/exim=OFF/exim=ON/' /usr/local/directadmin/data/admin/services.status


Then to setup the domains to use the blocking follow this guide:

http://help.directadmin.com/item.php?id=142


****DOVECOT REQUIRED STEPS****

If you use dovecot however you need to apply a patch. Make sure that you are using dovecot if you follow these steps.

To determine if you have dovecot if you are unsure you can run this code:
ps xua | grep -v grep | grep -ce dovecot

If it comes back with any number other than a "0" then you are running dovecot.

Code to apply the exim patch for dovecot:




wget -O /usr/local/directadmin/scripts/exim.conf.dovecot.patch "http://files.directadmin.com/services/custombuild/exim.conf.dovecot.patch"
patch -p0 < /usr/local/directadmin/scripts/exim.conf.dovecot.patch

[jim.thornton]

Thank you... It seems to be working. I've had it on for about 2 hours now but the problem is that I don't seem to be getting ANY emails now.

[jim.thornton]

Seems to be working perfectly. I'm not getting my 100's of spam and my other emails seem to be coming through.

Is there a way that I can monitor it to make sure that no real emails are being deleted?

Jim

[chatwizrd]

You can check the logs:

/var/log/exim/mainlog
/var/log/exim/rejectlog

/var/log/maillog

[nobaloney]

SpamBlocker does NOT delete anything. When it sees an email from a server with a reputation for sending spam (that's what the blocklists are) it refuses the email. Reasonably behaved mailservers are supposed to send a notice back to the sender if the mail is refused, so the sender should be notified in the event of a false positive.

Be sure to search for the lines in your exim.conf file with show example.com, and change them to point to a page on your server, so any senders to your server who are misidentified as spammers will know how to get whitelisted.

There's no such thing as automated whitelisting; you'll have to read the emails you get (or the form you get, depending on how you set up your page), and whitelist manually through the shell. Or buy one of the two third-party plugins; both advertised on these forums, which will make it a bit easier.

Jeff

[jim.thornton]

That's great! Thank you.

Can you tell me, or is there a tutorial that can show me how to whitelist someone?

[GXX]

Read this:

http://www.nobaloney.net/downloads/spamblocker/DirectAdminSpamBlocker2/ReadMe.SpamBlocker.exim.conf.2.1.1.txt