1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
*******************************************************************************
*
* $Id: install.txt,v 1.2 1997/12/11 22:26:13 bcwhite Exp $
*
* Spam Filter Installation Instructions
*
*******************************************************************************
Introduction
~~~~~~~~~~~~
So you're sick and tired of getting junk email telling you about the latest
hot tripple-x site or how to make millions with a single phone call?
The spam (junk email) filter described here is a powerful user mail system.
By this, we mean that it runs totally under the user's control without any
special requirements from the system or the system administrator.
For a more advanced and automated system, you might want to check out the
"realtime blackhole" at "http://maps.vix.com/rbl/". It does email blocking
directly at the MTA level so spam never even gets accepted by your host.
Description
~~~~~~~~~~~
This system is broken down into the following parts:
* configuration: a description of the user and how mail is received
* rules: instructions on how to deal with mail after it has been classified
* lists: addresses that are know in some way or another
- black list: addresses that are known to send spam (ignore them)
- white list: addresses that are known and trusted (let them through)
- grey list: addresses that you have sent mail to (let them through)
To create your spam filter, simply execute the command "spamfilter" from
the command line. This will bring up this file, followed by an editor so
you can edit your configuration.
The comments within the configuration file (~/.procmailrc) should be
sufficient to set them appropriately.
As soon as you finished editing that file, your spam filter should be
operational. If you're not using procmail as your MDA (default is not),
you will need to add the line "| /usr/bin/procmail -Yf-" (without the
quotes) to your ~/.forward file.
The one other thing you must do, is set up your mailer so that copies of all
your outgoing mail are blind-copied (Bcc'd) to your address. The spam filter
will detect this and add all destination addresses to your grey list. If you
can't automatically bcc outgoing mail back to yourself, you'll have to find
some other way to update your grey list.
The install script will create symlinks back to the default rules files.
Most of these rules are empty or contain standard actions. Once you're
comfortable with the operation of the filter, you can make local copies
of these files and customize the actions to your liking.
This filter also came with a default blacklist. While it too can be
copied and maintained locally, it may be easier to leave it a symlink
to the global version and let it be updated with the rest of the
package.
Default Configuration
~~~~~~~~~~~~~~~~~~~~~
As shipped, the spamfilter will filter your mail into the PM_MAIL directory
(usually set to ~/.procmail/spool). In there, it will get separated into the
mailboxes DEFAULT, ADMINBOX, NOPWBOX, and SPAMBOX (which are set to Inbox,
Admin, Nopassword, and Spam, respectively). If you want all your mail to come
into your standard Inbox, then set DEFAULT appropriately and then set the
other three to "$DEFAULT". You could also set DEFAULT mailbox to be
/var/spool/mail/$USER, if you want your mail delivered into the standard
location. You may wish to set SPAMBOX to "/dev/null" once you are satisfied
with the operation of the filter.
Incoming mail is checked to see if it is coming from one of the Debian list
server. If so, it is filtered into one of debian-qa, debian-private,
debian-changes, debian-policy, debian-devel, debian-user, and debian-bugs
by the rules in "rules/list.rules". These rules will almost certainly have to
be changed if you are on any other mailing lists. Otherwise, messages from
those lists are likely to be detected as spam.
* Note: if you wish to use subdirectories, be sure to create them or mail
* will be lost. The mail filter will not create them automatically.
Mail from blacklisted addresses will go directly through rules/spam.rules and
then into the SPAMBOX.
Mail from a local daemon (mail, ftp, etc.) goes into ADMINBOX.
Mail from a whitelisted or greylisted address will go directly into DEFAULT.
In addition, if the file PM_TEXT/vacation.txt exists, then that msg body will
be mailed back to the originator (only once) to inform them that you are away.
Anything else is checked against some simple rules (rules/nopassword.rules) to
see if it is spam. You'll want to look these over and possibly modify them as
time goes on. Detected spam goes through rules/spam.rules and then into the
SPAMBOX while other mail goes into NOPWBOX.
Utilities
~~~~~~~~~
/usr/lib/spamfilter/bin/movemail: A special version of 'movemail' that
understands the multiple-box format. It was originally designed to be
used with netscape mail. It reads configuration information directly from
your ~/.procmailrc file and so should not need any modification. In
netscape, go under mail preferences and set the external movemail program
to be this file.
/usr/lib/spamfilter/bin/from: A special version of 'from' that understands the
multiple-box format. The 'spamfilter' program will automatically create a
link to this file in ~/bin, if that directory exists.
|