|
|
(6 intermediate revisions by 3 users not shown) |
Line 1: |
Line 1: |
| == Ubuntu 8.04 ==
| | #REDIRECT [[Best_Practices_on_Email_Protection:_SPF,_DKIM_and_DMARC]] |
| | |
| <tt>apt-get install libmail-spf-query-perl</tt>:
| |
| | |
| <pre>
| |
| Reading package lists... Done
| |
| Building dependency tree
| |
| Reading state information... Done
| |
| The following extra packages will be installed:
| |
| libnet-cidr-lite-perl libnet-dns-perl libnet-ip-perl libsys-hostname-long-perl
| |
| The following NEW packages will be installed:
| |
| libmail-spf-query-perl libnet-cidr-lite-perl libnet-dns-perl libnet-ip-perl libsys-hostname-long-perl
| |
| 0 upgraded, 5 newly installed, 0 to remove and 0 not upgraded.
| |
| Need to get 388kB of archives.
| |
| After this operation, 1430kB of additional disk space will be used.
| |
| Do you want to continue [Y/n]? Y
| |
| Get:1 http://us.archive.ubuntu.com hardy/universe libsys-hostname-long-perl 1.4-1 [11.1kB]
| |
| Get:2 http://us.archive.ubuntu.com hardy/universe libnet-ip-perl 1.25-2 [30.3kB]
| |
| Get:3 http://us.archive.ubuntu.com hardy/universe libnet-dns-perl 0.63-1 [261kB]
| |
| Get:4 http://us.archive.ubuntu.com hardy/universe libnet-cidr-lite-perl 0.20-1 [13.6kB]
| |
| Get:5 http://us.archive.ubuntu.com hardy/universe libmail-spf-query-perl 1:1.999.1-3 [71.7kB]
| |
| Fetched 388kB in 16s (23.7kB/s)
| |
| Selecting previously deselected package libsys-hostname-long-perl.
| |
| (Reading database ... 46646 files and directories currently installed.)
| |
| Unpacking libsys-hostname-long-perl (from .../libsys-hostname-long-perl_1.4-1_all.deb) ...
| |
| Selecting previously deselected package libnet-ip-perl.
| |
| Unpacking libnet-ip-perl (from .../libnet-ip-perl_1.25-2_all.deb) ...
| |
| Selecting previously deselected package libnet-dns-perl.
| |
| Unpacking libnet-dns-perl (from .../libnet-dns-perl_0.63-1_amd64.deb) ...
| |
| Selecting previously deselected package libnet-cidr-lite-perl.
| |
| Unpacking libnet-cidr-lite-perl (from .../libnet-cidr-lite-perl_0.20-1_all.deb) ...
| |
| Selecting previously deselected package libmail-spf-query-perl.
| |
| Unpacking libmail-spf-query-perl (from .../libmail-spf-query-perl_1%3a1.999.1-3_all.deb) ...
| |
| Setting up libsys-hostname-long-perl (1.4-1) ...
| |
| Setting up libnet-ip-perl (1.25-2) ...
| |
| Setting up libnet-dns-perl (0.63-1) ...
| |
| Setting up libnet-cidr-lite-perl (0.20-1) ...
| |
| Setting up libmail-spf-query-perl (1:1.999.1-3) ...
| |
| </pre>
| |
| | |
| Edit spamassassin config at <tt>/opt/zimbra/conf/spamassassin/local.cf</tt> and add something like this (customize it on your own):
| |
| | |
| <pre>
| |
| ok_languages en es
| |
| ok_locales en es
| |
| trusted_networks 127. 10.70. 192.168.
| |
| use_bayes 1
| |
| skip_rbl_checks 0
| |
| dns_available yes
| |
| | |
| ## Optional Score Increases
| |
| ## Choose your preferred values...
| |
| score DCC_CHECK 4.000
| |
| score SPF_FAIL 10.000
| |
| score SPF_HELO_FAIL 10.000
| |
| score BAYES_99 4.300
| |
| score BAYES_90 3.500
| |
| score BAYES_80 3.000
| |
| bayes_ignore_header Received: from mail3.example.com
| |
| bayes_ignore_header Received: from localhost
| |
| bayes_ignore_header Received: from mail1.example.com
| |
| bayes_ignore_header Received: from mail2.example.com
| |
| </pre>
| |
| | |
| == sample /opt/zimbra/conf/salocal.cf (from zcs-NETWORK-5.0.15_GA_2851.UBUNTU8_64) ==
| |
| | |
| <pre>
| |
| # This is the right place to customize your installation of SpamAssassin.
| |
| #
| |
| # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
| |
| # tweaked.
| |
| #
| |
| ###########################################################################
| |
| #
| |
| # rewrite_header Subject *****SPAM*****
| |
| # report_safe 1
| |
| # trusted_networks 212.17.35.
| |
| # lock_method flock
| |
| | |
| header DSPAM_SPAM X-DSPAM-Result =~ /^Spam$/
| |
| describe DSPAM_SPAM DSPAM claims it is spam
| |
| score DSPAM_SPAM 1.5
| |
| | |
| header DSPAM_HAM X-DSPAM-Result =~ /^Innocent$/
| |
| describe DSPAM_HAM DSPAM claims it is ham
| |
| score DSPAM_HAM -0.5
| |
| | |
| trusted_networks 10.150.0.0/16, 127.0.0.1/32,
| |
| lock_method flock
| |
| | |
| rewrite_header Subject *SPAM* _STARS(*)_
| |
| bayes_auto_learn 1
| |
| bayes_min_spam_num 60
| |
| bayes_min_ham_num 60
| |
| clear_headers
| |
| add_header spam Flag _YESNOCAPS_
| |
| add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
| |
| add_header all Level _STARS(*)_
| |
| add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on _HOSTNAME_
| |
| </pre>
| |
| | |
| == References ==
| |
| | |
| http://wiki.zimbra.com/index.php?title=Improving_Anti-spam_system#SPF
| |
| | |
| http://wiki.zimbra.com/index.php?title=Ajcody-MTA-Postfix-Topics#What.27s_Your_SPF_Records_Say.2C_When_Getting_.22does_not_designate_74.x.x.x_as_permitted_sender_Errors.22
| |
| | |
| https://www.zimbra.com/forums/installation/10480-spf-question.html
| |