[CentOS] Rejecting spam

John Hinton wrote:
> Tim Alberts wrote:
>> John Hinton wrote:
>>>
>>> There are milters for SpamAssassin. You can set them to reject mail 
>>> at a particular score level. So, if for instance you felt 
>>> comfortable with rejecting mail at a score of 10, which is pretty 
>>> reliable, you can also do that at smtp level.
>> BINGO  That's exactly what I'm trying to do with spamass-milter.  
>> However it either won't do it, or my configuration is incorrect.  
>> Mail marked as spam is still being delivered as normal?
>
> It's how the milter is started. This is my slightly edited 
> spamass-milter init.d
> file.
>
> ---------start--------------
>
> #!/bin/bash
> #
> # Init file for Spamassassin sendmail milter.
> #
> # chkconfig: - 80 20
> # description: spamass-milter is a daemon which hooks into sendmail and
> routes \
> #              email messages to spamassassin
> #
> # processname: spamass-milter
> # config: /etc/sysconfig/spamass-milter
> # pidfile: /var/run/spamass-milter
>
> source /etc/rc.d/init.d/functions
> source /etc/sysconfig/network
>
> # Check that networking is up.
> [ ${NETWORKING} = "no" ] && exit 0
>
> [ -x /usr/sbin/spamass-milter ] || exit 1
>
> ### Default variables
> SOCKET="/var/run/spamass.sock"
> EXTRA_FLAGS="-r 10"
> SYSCONFIG="/etc/sysconfig/spamass-milter"
>
> ### Read configuration
> [ -r "$SYSCONFIG" ] && source "$SYSCONFIG"
>
> RETVAL=0
> prog="spamass-milter"
> desc="Spamassassin sendmail milter"
>
> start() {
>        echo -n $"Starting $desc ($prog): "
>        daemon $prog -p $SOCKET -f $EXTRA_FLAGS
>        RETVAL=$?
>        echo
>        [ $RETVAL -eq 0 ] && touch /var/lock/subsys/$prog
>        return $RETVAL
> }
>
> stop() {
>        echo -n $"Shutting down $desc ($prog): "
>        killproc $prog
>        RETVAL=$?
>        echo
>        [ $RETVAL -eq 0 ] && rm -f /var/lock/subsys/$prog
>        return $RETVAL
> }
>
> restart() {
>        stop
>        start
> }
>
> case "$1" in
>  start)
>        start
>        ;;
>  stop)
>        stop
>        ;;
>  restart|reload)
>        restart
>        ;;
>  condrestart)
>        [ -e /var/lock/subsys/$prog ] && restart
>        RETVAL=$?
>        ;;
>  status)
>        status $prog
>        RETVAL=$?
>        ;;
>  *)
>        echo $"Usage: $0 {start|stop|restart|condrestart|status}"
>        RETVAL=1
> esac
>
> exit $RETVAL
>
> --------- end file ---------
>
> The key line is up there with Socket.... Extra Flags. The
> EXTRA_FLAGS="-r 10" line means that any email scoring 10 or above is
> rejected. Set this to whatever level you feel comfortable with.
> Personally after many years at this stuff... I think 10 is more accurate
> than a human. Delivering spam scored between 5 and 10 is not so bad.
>
> From the docs....
>
>     -r nn   Reject scanned email if it greater than or equal to nn.  If
> -1, reject scanned email if SpamAssassin tags it as spam
>             (useful if you are also using the -u flag, and users have
> changed their required_hits value).
>
> My sendmail.mc entry
>
> INPUT_MAIL_FILTER(`spamassassin', `S=local:/var/run/spamass.sock,
> F=,T=C:15m;S:4m;R:4m;E:10m')dnl
>
> Have fun!
>
> John Hinton
Oops! I knew there was another place to do this.

In /etc/sysconfig/spamass-milter

Here's my config override. I apparently looked at the config on the 
first machine I set up this way which had it in the init file.

### Override for your different local config
#SOCKET=/var/run/spamass.sock

### Default parameter for spamass-milter is -f (work in the background)
### you may add another parameters here, see spamass-milter(1)
EXTRA_FLAGS="-r 10"

Best,
John Hinton