Previous Topic

Next Topic

Book Contents

Book Index

SpamAssassin

SpamAssassin is an open source project dedicated to fighting spam. This software uses a set of complex rules to ascertain whether a message is spam or genuine. Basically, these rules check against typical Spam templates.

These rules are constantly updated as new spamming techniques are introduced.

Spamassassin is very good at identifying "phishing" messages that are trying to fool a User into giving out financial information.

SpamAssassin uses wide variety of local and network tests to identify spam signs. This makes it harder for spammers to identify one aspect which they can craft their messages to work around.

IceWarp Server uses the SpamAssassin rules but has it's own in-house written engine to process them.

assassin_general

Field

Description

Active

Enables the SpamAssassin filters.

This option is recommended.

Use SURBL

Check this option to enable Spam URI Realtime Blocklist technology.

Rather than trying to identify Spam senders, SURBL works by identifying the presence of the URI's of Spam hosters in the message body. It is much more difficult for a spammer to change his host URI than anything else so this is a very reliable way of identifying them.

SURBL is an excellent way of identifying "Phishing" sources, i.e. sources that are well known for sending out messages intended to defraud people by the capture of bank login or credit card details.

You can find more information at http://www.surbl.org/.

Use SPF

Check this option to enable SPF (Sender Policy Framework) technology.

SPF Technology uses DNS to determine whether a message reported as coming from one domain and originating from another is valid. This relies on the DNS records being published, which is not always the case, and a "softfail" can occur, whereby the technology believes the sending host is not valid but cannot be sure.

Use the slider to tell IceWarp Server what to do when the SPF check returns a "softfail".

Low - Adds 0.1 to the spam score

Medium - Adds 0.5 to the spam score

High - Adds 5.0 to the spam score - very strict!

 

For an introduction to SPF please visit http://www.openspf.org/.

Use Razor2

Check this option to have IceWarp Server use the Razor2 AntiSpam Technology.

Razor2 is a distributed, collaborative, spam detection and filtering network. Through user contribution, Razor2 establishes a distributed and constantly updating catalogue of spam in propagation that is consulted by email clients to filter out known spam.

Emails are identified by a hashed random portion of the email itself. Because the portion is random, and the position of the portion is constantly changing, it is very difficult for Spammers to create a message that will bypass Razor2.

You can find out more about Razor2 at http://razor.sourceforge.net/.

NOTE: For Razor2 to function correctly, you will need to open the 2703 port on your firewall and/or router.

Use DKIM

Check this option to enable DKIM technology.

See http://antispam.yahoo.com/domainkeys/ for a full introduction.

If an incoming email from a domain which has a DNS DomainKey record is not signed, the total "spam" score is increased.

If an incoming email is not signed at all, the score is also increased (but less than in the first case).

Configuration file

Press this button to open the SpamAssassin configuration file.

Please do not change any option within this file unless you are sure you know what you are doing.

assassin_reporting

Field

Description

Enable reporting functions

Check this option if you wish to enable SpamAssassin reporting.

Choose one of the three options for how you want reporting to function.

Report is added to headers and/or subject of the original message

The message will be received with modified headers.

This option is recommended.

Generate report message (attach original message to report)

SpamAssassin report message will be received, with the original message attached.

Convert original message to text and attach to report message

SpamAssassin report message will be received, with the original message attached as a text file.

assassin_statistics

Enter a directory\file_name to have SpamAssassin statistics logged to a file. You can use the yyyymmdd style of a file name here to have the file dated.