PDA

View Full Version : Smoothwall with spamd and clamav



The_Librarian
15-03-2006, 01:01 PM
Hi there

Just to give you guys and girls some feedback :

I have recently installed DansGuardian with dspam and clamav on my smoothie, and it works just great.

ClamAV seems to be stopping all known viruses (and some phishing mails) dead, and the dspam suite is cleaning up the spam mess.

The dspam daemon is a "learning" program, once you've trained it properly (more or less after 2000+ emails) will it filter out most of the spam. Already (after 700+ mails) I can see that there is a remarkable decrease in the spam we've used to get.

Until some dimwit finds a new way to bypass it. :D And they shall, for spammers are known to find ways and means to pump you full of unwanted stuff.

Be warned though - this setup runs fine on a 800MHz Pentium with 256Mb RAM, although a faster processor and extra RAM won't hurt at all.

Unfortunately, the mail filter mod for Smoothwall is, at present, only filtering out SMTP mail and not POP3 yet.

Regards

TU

Bjorn
15-03-2006, 03:32 PM
Smoothwall is great, i have it running on a p2 300 with 384MB of RAM, been thinking about installing this mod as i saw it the homebrew section of the smoothwall forums but i dont think my Smoothwall machine is up to it, as soon as i get a better machine to replace it i will give it a go.
Looks like it could be very handy for business who doesnt want to run AV on all their machines

The_Librarian
15-03-2006, 03:42 PM
You do need AV on your machines. What I would do is to install ClamAV on the workstations and set the ClamAV system up so that the firewall will be cacheing the clamav definitions for the workstations.

This way you know that pesky buggers won't come in via email, and should somebody get a suspicious attachment or file, that it can be scanned locally before executed or opened. But suspicious attachments should be deleted immediately anyway. (Not if your name is Stef Murky...then all attachments should be opened and examined for pr0n contents... :D )

skydog
15-03-2006, 08:58 PM
Just for interest...
There is an addon for IPcop called Copfilter. that is a transparent pop3 proxy so catches viruses and spam even if someone on the network is popping there private email it will catch the buggers

The_Librarian
16-03-2006, 11:02 AM
That's good to know...

/harsh metallic voice ON

spamming is futile... your spam will be filtered and rejected by the Linux collective... :D

/harsh metallic voice OFF

Sudt
19-03-2006, 09:34 PM
I've been using this service: www.spam-stop.com, the real daddy is www.spamjab.com. It's stopped all the spam I receive. The only problem is alot of the emails I want get blocked the first time, after you set it to receive the mail it works fine. It's really low-tech for you guys, but for the average joe it might be cool