SPF

From Zimbra :: Wiki

Jump to: navigation, search

Ubuntu 8.04

apt-get install libmail-spf-query-perl:

Reading package lists... Done
Building dependency tree       
Reading state information... Done
The following extra packages will be installed:
  libnet-cidr-lite-perl libnet-dns-perl libnet-ip-perl libsys-hostname-long-perl
The following NEW packages will be installed:
  libmail-spf-query-perl libnet-cidr-lite-perl libnet-dns-perl libnet-ip-perl libsys-hostname-long-perl
0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
Need to get 388kB of archives.
After this operation, 1430kB of additional disk space will be used.
Do you want to continue [Y/n]? Y
Get:1 http://us.archive.ubuntu.com hardy/universe libsys-hostname-long-perl 1.4-1 [11.1kB]
Get:2 http://us.archive.ubuntu.com hardy/universe libnet-ip-perl 1.25-2 [30.3kB]
Get:3 http://us.archive.ubuntu.com hardy/universe libnet-dns-perl 0.63-1 [261kB]
Get:4 http://us.archive.ubuntu.com hardy/universe libnet-cidr-lite-perl 0.20-1 [13.6kB]                                                                               
Get:5 http://us.archive.ubuntu.com hardy/universe libmail-spf-query-perl 1:1.999.1-3 [71.7kB]                                                                         
Fetched 388kB in 16s (23.7kB/s)                                                                                                                                       
Selecting previously deselected package libsys-hostname-long-perl.
(Reading database ... 46646 files and directories currently installed.)
Unpacking libsys-hostname-long-perl (from .../libsys-hostname-long-perl_1.4-1_all.deb) ...
Selecting previously deselected package libnet-ip-perl.
Unpacking libnet-ip-perl (from .../libnet-ip-perl_1.25-2_all.deb) ...
Selecting previously deselected package libnet-dns-perl.
Unpacking libnet-dns-perl (from .../libnet-dns-perl_0.63-1_amd64.deb) ...
Selecting previously deselected package libnet-cidr-lite-perl.
Unpacking libnet-cidr-lite-perl (from .../libnet-cidr-lite-perl_0.20-1_all.deb) ...
Selecting previously deselected package libmail-spf-query-perl.
Unpacking libmail-spf-query-perl (from .../libmail-spf-query-perl_1%3a1.999.1-3_all.deb) ...
Setting up libsys-hostname-long-perl (1.4-1) ...
Setting up libnet-ip-perl (1.25-2) ...
Setting up libnet-dns-perl (0.63-1) ...
Setting up libnet-cidr-lite-perl (0.20-1) ...
Setting up libmail-spf-query-perl (1:1.999.1-3) ...

Edit spamassassin config at /opt/zimbra/conf/spamassassin/local.cf and add something like this (customize it on your own):

ok_languages en es 
ok_locales en es 
trusted_networks 127. 10.70. 192.168.
use_bayes 1
skip_rbl_checks 0
dns_available yes 

## Optional Score Increases 
## Choose your preferred values...
score DCC_CHECK 4.000
score SPF_FAIL 10.000  
score SPF_HELO_FAIL 10.000
score BAYES_99 4.300
score BAYES_90 3.500
score BAYES_80 3.000
bayes_ignore_header Received: from mail3.example.com
bayes_ignore_header Received: from localhost
bayes_ignore_header Received: from mail1.example.com
bayes_ignore_header Received: from mail2.example.com

sample /opt/zimbra/conf/salocal.cf.in (from zcs-NETWORK-5.0.15_GA_2851.UBUNTU8_64)

"always change the .in files because they are used to build the .cf files. If you change the .cf files and then restart zimbra the changes will be overwriten by the .cf.in file" - (http://www.zimbra.com/forums/administrators/14359-local-cf-vs-local-cf.html#post73303)

# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
###########################################################################
#
# rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock

header DSPAM_SPAM X-DSPAM-Result =~ /^Spam$/
describe DSPAM_SPAM DSPAM claims it is spam
score DSPAM_SPAM 1.5

header DSPAM_HAM X-DSPAM-Result =~ /^Innocent$/
describe DSPAM_HAM DSPAM claims it is ham
score DSPAM_HAM -0.5

%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%%
%%uncomment VAR:zimbraMtaAntiSpamLockMethod%%lock_method %%zimbraMtaAntiSpamLockMethod%%

rewrite_header Subject *SPAM* _STARS(*)_
bayes_auto_learn 1
bayes_min_spam_num 60
bayes_min_ham_num 60
clear_headers
add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
add_header all Level _STARS(*)_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on _HOSTNAME_

References

http://wiki.zimbra.com/index.php?title=Improving_Anti-spam_system#SPF

http://wiki.zimbra.com/index.php?title=Ajcody-MTA-Postfix-Topics#What.27s_Your_SPF_Records_Say.2C_When_Getting_.22does_not_designate_74.x.x.x_as_permitted_sender_Errors.22

https://www.zimbra.com/forums/installation/10480-spf-question.html

Verified Against: Zimbra Collaboration Suite 5.0 Date Created: 5/16/2009
Article ID: http://wiki.zimbra.com/index.php?title=SPF Date Modified: 05/18/2009
Personal tools