[PLUG] Re: [lug] Spam Filtering With Remote Access

[Wil Cooley]

On Fri, 2003-07-18 at 10:02, Cooper Stevenson wrote:
> Scott,
> > 
> > We're accomplishing the same with a slightly different setup:
> > 
> > postfix + amavisd + spamassasin + clamav + cyrus imapd

This is basically setup I use in my Mail Defender package: 
http://nakedape.cc/r/maildefender, except that I use Sophos Anti-Virus
and Sophie, a daemonized scanner, and amavisd-new.  You should also of
course include any extra scanners that SpamAssassin can use, like Razor2
and DCC.

> Right, but Cyrus's IMAP server, while very fast and scalable, does not
> (to the best of my knowledge) allow an administrator to mount Samba
> shares under it's IMAP namespace. Don't get me wrong, I love Cyrus but
> it employs it's own indexing, making it a "black box" for server shares.
> If you know a way to do this, I am all ears as I found Cyrus's IMAP
> server very reliable and fast. 

You really don't want to use a network file system for mail storage,
either for your MTA's spool or the client retrieval server.  If remote
access is the purpose, you're much better off doing it the standard way
with POP/IMAP/SMTP over SSL.  If scalability is the issue, the "Murder"
component of Cyrus let's you transparently proxy to the appropriate
host, letting you spread the load over multiple servers.  OTOH, I see no
technical reason you couldn't put the IMAP spool on a network file
server and mount it--you just have to live with the potential loss of
mail due to the way network file systems work.

> > 
> > Right now we have 2 forward facing mail relays that handle email for
> > most all of campus.  These relays run amavisd which is sort of a
> > container for all of these tools like spamassasin and clamav.  It allows
> > you to quickly and easily modify your filtering tools without having to
> > muck with Postfix.
> 
> Love Amavisd for virus scanning to protect Windows clients. Does Amavisd
> let you call SpamAssassin during the MTA phase?

amavisd-new does.  It's a fork from the original amavisd which includes
SpamAssassin scanning and has a number of other features no found in the
original.  It's also be more actively developed. 
http://www.ijs.si/software/amavisd/  The only downside is the
hokey-sounding name.

> > 
> > This summer we're switching to using lmtp to deliver to a Cyrus IMAP
> > store for all 35,000 ONID accounts.  I'm just as curious as all of you
> > are on how that is going to work ... :-)
> 
> :-) !!

I've never done an installation that large (though I'd love to), but I
know there are some.  I know Eric Harrison et al at MESD uses Cyrus, and
I'd guess they're approaching that scale.

Wil
-- 
Wil Cooley                                 wcooley at nakedape.cc
Naked Ape Consulting                        http://nakedape.cc
* * * * Linux, UNIX, Networking and Security Solutions * * * *
*     Tired of spam and viruses in your e-mail?  Get the     *
* Naked Ape Mail Defender! http://nakedape.cc/r/maildefender *
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.pdxlinux.org/pipermail/plug/attachments/20030718/da930812/attachment.asc>