First so I don’t offend anyone, I’m not useing the word Nazi in a bad sense, only like Seinfield in the Soup Nazi episode. We have began actually following RFC821.
So what is an RFC? Well it is a Request for Comments. It is the standards that defines the Internet and how it operates. It also refers to the way RFC documents are discussed and approved by the Internet community.
It is holiday time again, and everyone wants to be the “Little Tech Elf” and send their friends and family E-Cards. Well I’m going to tell you why you shouldn’t.
What ever you are going to call it as some call it backscatter and some call it Joe Jobs, well it is annoying. People where complaining, it was an direct attack of this junk. No fear tho, I have added to my Ninja weapons. This time, I have activated…. vbounce. It was really that easy since it comes with Spamassassin 3.2.x and you are using that version right? Well you should be.
/etc/mail/spamassassin/v320.pre
Change:
# VBounce – anti-bounce-message rules, see rules/20_vbounce.cf
#
#loadplugin Mail::SpamAssassin::Plugin::VBounce
to
# VBounce – anti-bounce-message rules, see rules/20_vbounce.cf
#
loadplugin Mail::SpamAssassin::Plugin::VBounce
and then turn on if you have not shortcircuit see Justin Mason’s entry at the Spamassassin Wiki here.
Then in /etc/mail/spamassassin/local.cf add
whitelist_bounce_relays myrelay.myhost.net you should add every server that sends email on your behalf. You must enable this or none of this will work correctly. Now also in /etc/mail/spamassassin/local.cf add score BOUNCE_MESSAGE 5.0.
So now when backscatter comes in, we are going to check and see if it came from one of our servers. If it does then we are going to mark it with vbounce and send it on in. Now if it is not from one of our servers it is going to hit BOUNCE_MESSAGE and get marked spam. I have enabled this on all my servers and have not yet got another complaint. This is one of those tools I think are going to be very important.
So if you run ClamAV (and you should) to scan incoming email, the current release had some issue or did on several of my servers. The errors put out where:
cdiff.o(.text+0x190a): In function `cdiff_apply': ../shared/cdiff.c:984: undefined reference to `gzdopen'
cdiff.o(.text+0x1950):../shared/cdiff.c:994: undefined reference to `gzgets'
cdiff.o(.text+0x19a5):../shared/cdiff.c:1016: undefined reference to `gzclose'
cdiff.o(.text+0x19f5):../shared/cdiff.c:1010: undefined reference to `gzclose'
tar.o(.text+0xd4): In function `tar_addfile':../shared/tar.c:82: undefined reference to `gzwrite'
tar.o(.text+0x109):../shared/tar.c:95: undefined reference to `gzwrite'
tar.o(.text+0x1a3):../shared/tar.c:111: undefined reference to `gzwrite'
etc..... then
collect2: ld returned 1 exit statusmake[2]: *** [freshclam] Error 1make[2]: Leaving directory `/usr/local/src/clamav0.93/freshclam'make[1]: *** [all-recursive] Error 1make[1]: Leaving directory `/usr/local/src/clamav-0.93'make: *** [all] Error 2
To fix recompile Zlib with --shared
Don't forget to sponsor me for March of Babies use the Badge at the right to sponsor me. The walk is this weekend.
The Birmingham Pulse is available and kicking online http://bhampulse.zerosource.org check it out!
Why Microsoft Hosted Exchange?
Lets start out with, I am NOT an Exchange Administrator. We brand others for that. I am an *nix Administrator, but I know more then most on Exchange. We tried to provide hosted services using different platforms on Linux only to be left hanging from either lack of support and or stuff that just didn’t work right. If you want Exchange, the best thing is well Exchange period.
Read more …