This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
защита_почты_от_вирусов_и_spamа [2020/08/31 08:27] val [Защита почты от спама] |
защита_почты_от_вирусов_и_spamа [2020/08/31 08:49] val [Технология Grey List] |
||
---|---|---|---|
Line 96: | Line 96: | ||
<code> | <code> | ||
root@gate:~# apt install spamassassin | root@gate:~# apt install spamassassin | ||
- | |||
- | root@gate:~# cd /etc/spamassassin/ | ||
- | </code> | ||
- | |||
- | == FreeBSD == | ||
- | <code> | ||
- | [gate:~] # pkg install spamassassin | ||
- | |||
- | [gate:~] # cd /usr/local/etc/mail/spamassassin/ | ||
</code> | </code> | ||
=== Настройка и тестирование === | === Настройка и тестирование === | ||
- | == FreeBSD/Debian/Ubuntu == | + | == Debian/Ubuntu == |
<code> | <code> | ||
- | gate# cat local.cf | + | gate# cat /etc/spamassassin/local.cf |
</code><code> | </code><code> | ||
rewrite_header Subject *****SPAM***** | rewrite_header Subject *****SPAM***** | ||
Line 121: | Line 112: | ||
# score RCVD_IN_BL_SPAMCOP_NET 10.0 | # score RCVD_IN_BL_SPAMCOP_NET 10.0 | ||
</code><code> | </code><code> | ||
- | gate# spamassassin --lint #check config | + | gate# spamassassin --lint # Проверка конфигурации |
gate# sa-update | gate# sa-update | ||
Line 132: | Line 123: | ||
=== Запуск === | === Запуск === | ||
- | == FreeBSD == | + | == Debian/Ubuntu == |
<code> | <code> | ||
- | [gate:~] # cat /etc/rc.conf | + | root@gate:~# cat /etc/default/spamassassin |
</code><code> | </code><code> | ||
... | ... | ||
- | spamd_enable=yes | + | CRON=1 |
+ | ... | ||
</code><code> | </code><code> | ||
- | [gate:~] # service sa-spamd start | + | root@gate:~# systemctl enable spamassassin |
- | [gate:~] # cat /usr/local/etc/periodic/daily/sa-update.sh | + | root@gate:~# service spamassassin start |
- | </code><code> | + | |
- | #!/bin/sh | + | |
- | echo sa-update | + | |
- | /usr/local/bin/sa-update && /usr/local/etc/rc.d/sa-spamd restart | + | |
- | </code><code> | + | |
- | [gate:~] # chmod +x /usr/local/etc/periodic/daily/sa-update.sh | + | |
</code> | </code> | ||
- | == Debian/Ubuntu == | + | === Подключение SpamAssassin через milter интерфейс === |
+ | |||
+ | == Postfix (Debian/Ubuntu) == | ||
<code> | <code> | ||
- | root@gate:~# cat /etc/default/spamassassin | + | root@gate:~# apt install spamass-milter |
+ | |||
+ | root@gate:~# less /etc/default/spamass-milter | ||
+ | |||
+ | root@gate:~# service spamass-milter restart | ||
+ | |||
+ | root@gate:~# cat /etc/postfix/main.cf | ||
</code><code> | </code><code> | ||
... | ... | ||
- | ENABLED=1 | + | smtpd_milters = unix:/clamav/clamav-milter.ctl unix:/spamass/spamass.sock |
- | ... | + | |
- | CRON=1 | + | |
- | ... | + | |
</code><code> | </code><code> | ||
- | root@gate:~# service spamassassin start | + | root@gate:~# service postfix restart |
</code> | </code> | ||
- | |||
- | === Подключение SpamAssassin через milter интерфейс === | ||
== Sendmail (FreeBSD) == | == Sendmail (FreeBSD) == | ||
Line 190: | Line 179: | ||
[gate:~] # /etc/rc.d/sendmail restart | [gate:~] # /etc/rc.d/sendmail restart | ||
- | </code> | ||
- | |||
- | == Postfix (Debian/Ubuntu) == | ||
- | <code> | ||
- | root@gate:~# apt install spamass-milter | ||
- | |||
- | root@gate:~# less /etc/default/spamass-milter | ||
- | |||
- | root@gate:~# service spamass-milter restart | ||
- | |||
- | root@gate:~# cat /etc/postfix/main.cf | ||
- | </code><code> | ||
- | ... | ||
- | smtpd_milters = unix:/clamav/clamav-milter.ctl unix:/spamass/spamass.sock | ||
- | </code><code> | ||
- | root@gate:~# service postfix restart | ||
</code> | </code> | ||
Line 221: | Line 194: | ||
==== Технология Grey List ==== | ==== Технология Grey List ==== | ||
- | * [[http://ru.wikipedia.org/wiki/Серый_список]] | + | * [[https://ru.wikipedia.org/wiki/%D0%A1%D0%B5%D1%80%D1%8B%D0%B9_%D1%81%D0%BF%D0%B8%D1%81%D0%BE%D0%BA|Серый список]] |
* RFC 2821 4.5.4.1 ([[http://rfc.com.ru/rfc2821.htm]]) | * RFC 2821 4.5.4.1 ([[http://rfc.com.ru/rfc2821.htm]]) | ||
+ | |||
+ | === Postfix (Debian/Ubuntu) === | ||
+ | |||
+ | [[http://vladimir-stupin.blogspot.com/2009/09/postfix-postgrey.html]] | ||
+ | |||
+ | <code> | ||
+ | root@gate:~# apt install postgrey | ||
+ | |||
+ | root@gate:~# less /etc/default/postgrey | ||
+ | |||
+ | root@gate:~# cat /etc/postfix/main.cf | ||
+ | </code><code> | ||
+ | ... | ||
+ | smtpd_recipient_restrictions = permit_mynetworks, | ||
+ | reject_unauth_destination, | ||
+ | check_policy_service inet:127.0.0.1:10023 | ||
+ | </code><code> | ||
+ | root@gate:~# ls /var/lib/postgrey/ | ||
+ | |||
+ | root@gate:~# postgreyreport < /var/log/mail.log | ||
+ | </code> | ||
=== Semdmail (FreeBSD) === | === Semdmail (FreeBSD) === | ||
Line 271: | Line 265: | ||
[gate:~] # cat /var/milter-greylist/greylist.db | [gate:~] # cat /var/milter-greylist/greylist.db | ||
</code> | </code> | ||
- | |||
- | === Postfix (Debian/Ubuntu) === | ||
- | |||
- | [[http://vladimir-stupin.blogspot.com/2009/09/postfix-postgrey.html]] | ||
- | |||
- | <code> | ||
- | root@gate:~# apt-get install postgrey | ||
- | |||
- | root@gate:~# less /etc/default/postgrey | ||
- | |||
- | root@gate:~# cat /etc/postfix/main.cf | ||
- | </code><code> | ||
- | ... | ||
- | smtpd_recipient_restrictions = permit_mynetworks, | ||
- | reject_unauth_destination, | ||
- | check_policy_service inet:127.0.0.1:10023 | ||
- | </code><code> | ||
- | root@gate:~# ls /var/lib/postgrey/ | ||
- | |||
- | root@gate:~# postgreyreport < /var/log/mail.log | ||
- | </code> | ||
- | |||
===== Использование пакета AmavisNew для контексной фильрации почты ===== | ===== Использование пакета AmavisNew для контексной фильрации почты ===== | ||
https://help.ubuntu.com/community/PostfixAmavisNew | https://help.ubuntu.com/community/PostfixAmavisNew |