{"id":128,"date":"2008-08-22T11:39:35","date_gmt":"2008-08-22T16:39:35","guid":{"rendered":"http:\/\/it.thelibrarie.com\/weblog\/?p=128"},"modified":"2008-09-16T15:12:21","modified_gmt":"2008-09-16T20:12:21","slug":"anti-spam-smtp-gateway","status":"publish","type":"post","link":"https:\/\/it.thelibrarie.com\/weblog\/2008\/08\/anti-spam-smtp-gateway\/","title":{"rendered":"Anti-SPAM SMTP Gateway"},"content":{"rendered":"<p>Ah joy of joys.  One good, and bad, thing about Exchange 2007 is that you need to run a separate installation of an SMTP gateway.  It&#8217;s good for security and also for lowering the load on the exchange server.  It&#8217;s bad because that&#8217;s one extra point of failure, and it won&#8217;t work straight out of the box.<\/p>\n<p>Up until recently we&#8217;ve been running a custom installed MAIA\/Postfix\/ClamAV\/SpamAssassin server.  The problem we&#8217;re encountering is the huge database files created by MAIA.  Logging of every email is necessary, but we&#8217;re growing by 1GB every week.  MySQL is a nice server, but even it has limits.  One of those limits is when the server grows to the max of the HD &#8211; then all services stop.  Never a fun time.<\/p>\n<p>So as a backup plan, we installed a standard Ubuntu server running a standard SMTP postfix configuration.  Only issue with that is it doesn&#8217;t have the anti-SPAM\/greylisting (at least it has the AV installed).  So instead of 99% of SPAM being blocked, it&#8217;s at 0%.  Not fun.<\/p>\n<p>Since I&#8217;m not the best at Postfix configuration, I decided to go with a package deal: ESVA (Email Security Virtual Appliance).  Yes, it&#8217;s a virtual machine.  You need to run a VMWare server of sorts (or workstation) in order to use this software suite.  <a href=\"http:\/\/www.global-domination.org\/ESVA20.php\">Click here for the website<\/a>.  So far it&#8217;s been a breeze to setup &#8211; it&#8217;s maintained by several people, has a forum board, and a few whitepapers on how to install\/administer.  I&#8217;ll be fully testing it out on a maiden voyage soon, so look for an update.<\/p>\n<p>***UPDATE***<\/p>\n<p>Here&#8217;s a few items that I learned during setup:<br \/>\nStop &#8220;SPAM Not Delivered&#8221; messages<br \/>\n<code>Edit \/etc\/MailScanner\/MailScanner.conf and remove \"notify\" from the spam actions line.<\/code><br \/>\nWebmin stops working after an update or during initial setup.  You MUST open webmin using the admin panel interface link (under tools).<br \/>\nIf you want to edit the message body tags (the &#8220;scanned by ESVA&#8221; blah blah) go here:<br \/>\n<code>\/etc\/MailScanner\/reports\/en<\/code><br \/>\nAnd edit the files you see (txt and html).<br \/>\nTo keep \/var low, do the following:<br \/>\n<code>Turn on the script in \/etc\/cron.daily\/clean.quarantine by changing the number 0 1<\/code><br \/>\n<code>$days_to_keep = 14; in \/etc\/cron.daily\/clean.quarantine<\/code><br \/>\n<code>define(QUARANTINE_DAYS_TO_KEEP, 14); in \/var\/www\/html\/conf.php<\/code><br \/>\n<code>INTERVAL 14 DAY in \/usr\/local\/bin\/mailwatch\/tools\/db_clean.php<\/code><br \/>\nesva-update and esva-configure are your friends<br \/>\n<code>\/etc\/hosts<\/code> is your friend too &#8211; You might need to add the IP of your mailserver and the name here<\/p>\n<p>As a final update: I&#8217;m getting roughly 500MB worth of mail every day (SPAM and regular).  It doesn&#8217;t appear to actually delete the SPAM as I have stated per the rules, but I set the days to keep quarantine to be 7 days instead of 14.  7 days X 500MB = 3.5GB.  Weekends receive a ton less mail, so we&#8217;d probably be fine with 14, but I just want to make sure.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Ah joy of joys. One good, and bad, thing about Exchange 2007 is that you need to run a separate installation of an SMTP gateway. It&#8217;s good for security and also for lowering the load on the exchange server. It&#8217;s bad because that&#8217;s one extra point of failure, and it won&#8217;t work straight out of &hellip; <a href=\"https:\/\/it.thelibrarie.com\/weblog\/2008\/08\/anti-spam-smtp-gateway\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">Anti-SPAM SMTP Gateway<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"class_list":["post-128","post","type-post","status-publish","format-standard","hentry","category-linux"],"_links":{"self":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/128","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/comments?post=128"}],"version-history":[{"count":4,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/128\/revisions"}],"predecessor-version":[{"id":130,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/posts\/128\/revisions\/130"}],"wp:attachment":[{"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/media?parent=128"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/categories?post=128"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/it.thelibrarie.com\/weblog\/wp-json\/wp\/v2\/tags?post=128"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}