Until your email address is forged as the spam sender. The only thing you can trust in your recieved headers is the recieved line from your mail server.
To start with, get rid of mailscanner. It doesn't play safe with Postfix.
To configure a Postfix + Cyrus + mail filtering system:
Understanding the component interation: Cyrus Imapd accepts mail from the network via LMTP over a Unix socket, or a TCP port (often 24).
Postfix has a built in LTMP client.
Your webmail should speak IMAP/POP3 to the IMAP/POP server and SMTP to Postfix.
Use amavisd-new for filtering This is a daemon written in Perl which acts as a SpamAssassin and Antivirus wrapper. It understands both SMTP and LMTP on the server side, and SMTP as a client. There is a README.postfix file in the documentation, from where you need to copy and paste two entries into the master.cf file.
It needs a few Perl modules to be installed. Use CPAN for that, or you could build your own RPMs/Debs/.tgz files.
Cyrus IMAPd is the most painful of the lot. It depends on Cyrus-SASL for authentication, and that is not exactly a friendly bit of software. My normal trick with SASL is to tell it to use saslauthd which then talks to pam which uses whatever password store you like.
Setup Postfix: Set the hostname of the system to a FQDN in myhostname in main.cf. Set the trusted networks in mynetworks If you have compiled Postfix to support SMTP AUTH, optionally set that up as well. Add the destination domain to relay_domains. Set a transport_maps entry for the domain telling Postfix to relay it to Cyrus via LMTP.
Enable content filtering (content_filter = lmtp:[127.0.0.1]:10024 in main.cf)
I like Squirrelmail for webmail, but go with whatever rocks your boat.
The minimum qualification for most jobs is a degree. The people at those call centres that posters here keep whining about usually have graduates answering the phones.
If you want to do anything more than be a clerk (and out here, book keeping is very low on the totem pole in terms of respect and salary), you need either a postgrad or an engineering/medical degree. And more companies prefer engineers than postgrads (except engineering postgrads).
The bulk of the costs are borne by the ISP. Feel free to run your own mailserver if you do not want to depend on the ISP. Colocate it and pay for the bandwidth costs. Thats the cost of spam that you want to shift to other users when you don't want your ISP to do IP based filtering. I work for a large mail provider, and if we weren't so aggressive about blocking based on IP addresses, our bandwidth bill would be about 15 times what is is now (which is about 15K USD/mth).
587/tcp is the message submission port where you should be able to submit mail with SMTP AUTH. Roaming works just fine.
If your internal mail is handled by the same system, then you don't need a special transport for that. mydestination defaults to local(8). Use relayhost for the mail relaying part.
This is a cleaner solution than the one you have right now
Because if your ISP doesn't, the rest of us will block them. Sorry, some of us are past the point of blocking just spammers and letting the ISP make money off those. Don't whine about collateral damage, you supported it by using an ISP that allowed spammers to stay on its network.
Until you load those missiles with chemical and/or biological weapons. If only one of my missiles is likely to hit the target, I will try to ensure that it does as much damage as possible.
Uh? So you build once. Then just replicate the binaries from your internal server. Most enterprise systems should go the base server -> gold server -> deployment route anyway.
Re:we should see how business friendly these OSes
on
Gentoo Linux Musings
·
· Score: 1
And a budget of USD 500 for the systems. *That* is one huge factor to consider while testing (I can get a PC with 2 years with same day onsite support for that that price). Price is a major business factor to be considered.
And the USA hasn't killed a few thousand at least? Just because the US government hasn't killed Jews or US citizens doesn't mean that they haven't killed others. Afganistan and Iraq just to list the two most recent examples. (Then the CIA sponsored coups in various countries, US funding and support for governments which do the murder like China and Israel).
Oh, and you can be imprisoned with no legal resources, just like that engineer from Intel.
Collateral damage is the most effective form of stopping a spamming ISP as yet. Complain to the ISP, or change it. Don't bother those of us who do not wish to deal with your provider.
Businesses can always choose to use a smarthost elsewhere for their outbound mail.
I know I do, and I'm not blacklisted anywhere yet.
Thats fancy to me. My phone needs to do voice, and Short Messaging Services (texting for those in the US). I have one which does exactly that. I need one with a better battery life though. Triband would be nice, but is not a must. Simple and functional.
Which cost FAR more per ride than cars. And pollute more than a car with two passengers. And are one of the big forces promoting ghettoization and urban sprawl. (For mass transit to work AT ALL you need a mass of people at one place who need to commute to work at another.)
If mass transit systems can't be run at a profit it means one or both of two things: there's no real demand for them or the people running them are not competent (in which case they're useless even if they COULD have been useful).
Actually, if you remove mass transit from most of the larger metros, the entire transport system will die. Properly designed mass transit systems cost much less (about 10% of a car ride for a distance of about 40 km), make substantial profits (which reduces the charges elsewhere) and pollute less. One bus carries about 50 people. That is equivalent to 25 cars on road. A train carries a much larger number of passengers, with even lesser pollution.
1NF == 1st normal form This is essentially a flat structure with lots of redundant data,
3NF == 3rd normal form Much less redundancy, but enough speed to be usable.
Going higher than 3NF is usually not required for most smaller database applications. You can look up the exact definitions in a database text, I'm too sleepy to get it right at 4 am.
Until your email address is forged as the spam sender. The only thing you can trust in your recieved headers is the recieved line from your mail server.
To start with, get rid of mailscanner. It doesn't play safe with Postfix.
To configure a Postfix + Cyrus + mail filtering system:
Understanding the component interation:
Cyrus Imapd accepts mail from the network via LMTP over a Unix socket, or a TCP port (often 24).
Postfix has a built in LTMP client.
Your webmail should speak IMAP/POP3 to the IMAP/POP server and SMTP to Postfix.
Use amavisd-new for filtering This is a daemon written in Perl which acts as a SpamAssassin and Antivirus wrapper. It understands both SMTP and LMTP on the server side, and SMTP as a client. There is a README.postfix file in the documentation, from where you need to copy and paste two entries into the master.cf file.
It needs a few Perl modules to be installed. Use CPAN for that, or you could build your own RPMs/Debs/.tgz files.
Cyrus IMAPd is the most painful of the lot. It depends on Cyrus-SASL for authentication, and that is not exactly a friendly bit of software.
My normal trick with SASL is to tell it to use saslauthd which then talks to pam which uses whatever password store you like.
Setup Postfix:
Set the hostname of the system to a FQDN in myhostname in main.cf.
Set the trusted networks in mynetworks
If you have compiled Postfix to support SMTP AUTH, optionally set that up as well.
Add the destination domain to relay_domains.
Set a transport_maps entry for the domain telling Postfix to relay it to Cyrus via LMTP.
Enable content filtering (content_filter = lmtp:[127.0.0.1]:10024 in main.cf)
I like Squirrelmail for webmail, but go with whatever rocks your boat.
You can now start all the components.
Uh? Most of the developing world is behind satellite gateways already. Canada isn't pioneering anything.
Satellite is far cheaper than pulling cable all the way to the US/Europe.
Girls in CS classes are attractive, by default :P
Its not a question of respect or esteem.
The minimum qualification for most jobs is a degree.
The people at those call centres that posters here keep whining about usually have graduates answering the phones.
If you want to do anything more than be a clerk (and out here, book keeping is very low on the totem pole in terms of respect and salary), you need either a postgrad or an engineering/medical degree. And more companies prefer engineers than postgrads (except engineering postgrads).
The bulk of the costs are borne by the ISP. Feel free to run your own mailserver if you do not want to depend on the ISP. Colocate it and pay for the bandwidth costs.
Thats the cost of spam that you want to shift to other users when you don't want your ISP to do IP based filtering.
I work for a large mail provider, and if we weren't so aggressive about blocking based on IP addresses, our bandwidth bill would be about 15 times what is is now (which is about 15K USD/mth).
587/tcp is the message submission port where you should be able to submit mail with SMTP AUTH. Roaming works just fine.
If your internal mail is handled by the same system, then you don't need a special transport for that. mydestination defaults to local(8).
Use relayhost for the mail relaying part.
This is a cleaner solution than the one you have right now
Because if your ISP doesn't, the rest of us will block them.
Sorry, some of us are past the point of blocking just spammers and letting the ISP make money off those.
Don't whine about collateral damage, you supported it by using an ISP that allowed spammers to stay on its network.
Nine rings for mortal men doomed to die
Hmmm, so their next release will have just one ring?
http://www.infrastructures.org/
Use the tools you have.
A channel steeped in profanity? Not just laced with it!
Until you load those missiles with chemical and/or biological weapons. If only one of my missiles is likely to hit the target, I will try to ensure that it does as much damage as possible.
There need be only one...
See the Witty worm. It didn't target Windows, but basically infected its target, slammed out at 20K more nodes, then destroyed its host
But he does have Weapons of Mass Destruction
.
Hmmm, it has been raining for the past week. I wonder....
Uh? So you build once. Then just replicate the binaries from your internal server.
Most enterprise systems should go the base server -> gold server -> deployment route anyway.
And a budget of USD 500 for the systems.
*That* is one huge factor to consider while testing (I can get a PC with 2 years with same day onsite support for that that price).
Price is a major business factor to be considered.
And the USA hasn't killed a few thousand at least?
Just because the US government hasn't killed Jews or US citizens doesn't mean that they haven't killed others.
Afganistan and Iraq just to list the two most recent examples. (Then the CIA sponsored coups in various countries, US funding and support for governments which do the murder like China and Israel).
Oh, and you can be imprisoned with no legal resources, just like that engineer from Intel.
Try this URL
This is how to design a scalable solution with Linux. And the code to do it.
Enjoy.
Collateral damage is the most effective form of stopping a spamming ISP as yet.
Complain to the ISP, or change it. Don't bother those of us who do not wish to deal with your provider.
Businesses can always choose to use a smarthost elsewhere for their outbound mail.
I know I do, and I'm not blacklisted anywhere yet.
Exim and Postfix do. There must be a patch for qmail out there.
Thats fancy to me. My phone needs to do voice, and Short Messaging Services (texting for those in the US). I have one which does exactly that.
I need one with a better battery life though. Triband would be nice, but is not a must.
Simple and functional.
Which cost FAR more per ride than cars. And pollute more than a car with two passengers. And are one of the big forces promoting ghettoization and urban sprawl. (For mass transit to work AT ALL you need a mass of people at one place who need to commute to work at another.)
If mass transit systems can't be run at a profit it means one or both of two things: there's no real demand for them or the people running them are not competent (in which case they're useless even if they COULD have been useful).
Actually, if you remove mass transit from most of the larger metros, the entire transport system will die.
Properly designed mass transit systems cost much less (about 10% of a car ride for a distance of about 40 km), make substantial profits (which reduces the charges elsewhere) and pollute less.
One bus carries about 50 people. That is equivalent to 25 cars on road. A train carries a much larger number of passengers, with even lesser pollution.
1NF == 1st normal form
This is essentially a flat structure with lots of redundant data,
3NF == 3rd normal form
Much less redundancy, but enough speed to be usable.
Going higher than 3NF is usually not required for most smaller database applications.
You can look up the exact definitions in a database text, I'm too sleepy to get it right at 4 am.
A spreadsheet is a good DB for a single table.
If you want more tables, particularly with related items, you want a proper RDBMS.
Think 1NF instead of 3NF or better. For data manipulation, you really want 3NF or better.
For analysis, 1 NF is acceptable.
You use a view in a RDBMS to provide you with the 1 NF tableset. You could just as well use a spreadsheet for that.
For data manipulation and storage on the other hand, you do not want to use 1NF. Use 3NF instead, with foreign keys and data integrity checks.
You do know that Excel can act as a frontend to various RDBMS via ODBC right?
1> Peer review and testing.
2> Clamav need not run as root.