postfix+spamassassin, RBL, white list

I would like to use spamassassin at my work and if I was to do a per user configuration with white list senario, how in the world do my users get to configure their files that are kept in ~/.spamassassin. Is there some pretty little front end these microsoft lovers can use? I'm sure there has got to be some reasoning behind this. I'm just not sure how this is suppose to work.

If I was to use a SQL database or a LDAP database for my users contact list is there anyway to use that database of choice for a sitewide white list?
I guess if I could do things this way I would not need to allow my uses to edit their auto-whitelist file in ~/.spamassassin.
Infact this would be the prefered method.

Just out of curiosity where in the world does spamassassin keep its list of open relay servers it uses to check mail against? As I understand it spamassassin does this check by default, and it seems to be working. I am just curious about where the list of servers spamassassin uses is kept?

I would also like to get my users away from using outlook. Does anyone have a good solution for a MUA that runs on microsoft windows 2000 and XP. Maybe thunderbird by mozilla. It would need to communicate with a UW-IMAP server.
Who is Participating?

Improve company productivity with a Business Account.Sign Up

Alf666Connect With a Mentor Commented:
Many questions in one. Good it's worth a lot :-)

I/ Question 1 : How to allow users to edit their SpamAssassin prefs

You could try this :

I have not used it myself. Just typed SpamAssassin in Freshmeat :-). It looks like it supports MySQL as a preferences backend.

II/ RBL lists in SpamAssassin

SpamAssassin does not keep itself a list of open servers. It queries external services to do that. These services are nothing else than DNS servers which respond positively or negatively to an address query (e.g: In this example, the is the RBL I'm querying for domain).

If you have a look at (usually located around /usr/share/spamassassin, or /usr/local/share/spamassassin), you will find the tests, along with the addresses of the query servers.

III/ MUAs on Windows

If your users do not need Outlook's groupware functionalities, Outlook Express is a good choice. I've been usig it for years with different IMAP accounts without any problem (except that you definitely have to disable the "Compress messages in background" feature which can lead to serious mailbox corruption).

There's pletora of MUAs for Windows. Pegasus, for example is known to be a good one. Check the following link :

illtbaguAuthor Commented:
500 points going once, going twice. Is there no takers or no answers?
illtbaguAuthor Commented:
Thanks you sir. The full 500 points is yours. I was starting to worry that these questions were to hard :)

It always seems that if I make a question worth 500 points I am less likely to get anyone to answer it than if I made the question worth 300 points. If I make the question worth 300 points then I get more responses. I don't get it. I always make my question worth 500 points because I think my questions are hard. I usually don't post a question unless I cant find any good anwers after googling for a few hours.

My first question about users preferences with spamassassin has always bothered me. All of these linux admins cry out loud how great spamassassin is because each user can set his/her preferences but no one ever says how the usres can do this. I think most admins are not set up for this kind of thing but they like to brag that its possible. Thanks for that link sounds really promising.

I would really like to use OPENLDAP for my address book. It sounds like that is pretty much the standard. It would be nice to whitelist every email address in that LDAP address book. Maybe a nightly script that saves all of the entries in LDAP to a text file.

II/ RBL lists in SpamAssassin

SpamAssassin does not keep itself a list of open servers. It queries external services to do that. These services are nothing else than DNS servers which respond positively or negatively to an address query (e.g: In this example, the is the RBL I'm querying for domain).
Exactly I knew that :), I guess my question wasnt really clear. What I was asking was: where is the list of RBL servers kept that spamassassin uses to query email address against. example would be You answered that in your next sentence I hope
If you have a look at (usually located around /usr/share/spamassassin, or /usr/local/share/spamassassin), you will find the tests, along with the addresses of the query servers.
I will check this first chance I get.

Thunderbird still looks to be the best MUA in my opinion. I just wanted someones opinion on what they prefered for their users thats all :)
Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Thanks for the points :-) (you have not yet closed the question, btw).

About LDAP, yes. A suitable cron job will do the trick pretty well.

A couple more tips for free :-) :

If you want to speed up the RBL lookups in case one is broken, you can add the following to :

# No more than 1 second for RBLs
rbl_timeout                     3

3 seconds is fine for a well connected box. 5 might be better for a slow connection.

You can also disable some RBLs manually if you want to. Here under is an example of what I did when Osirusoft stopped working :

score   X_OSIRU_DUL             0
score   X_OSIRU_DUL_FH          0
score   X_OSIRU_OPEN_RELAY      0
score   X_OSIRU_SPAM_SRC        0

Good luck with your setup. And, yes, people are right. SpamAssassin is a very good product.
illtbaguAuthor Commented:
I already have the rbl timeout in my file thanks though, but I do have it set to 30 seconds, I probably should trim the time down some.

I agree spamassassin is a great product, I agree with that 100%. I am only getting about 65 percent of my spam detected though. I was at one time getting around 95% but the percentage has droped drastically in the past few months. I always keep up to date with spamassassin too. I have gone to a rpm installation of spamassassin. The required hits for mail to be considered spam is 3 the default was 5 but when it was set at 5 hits it detected probly around 25%.

Thanks for everything
You should not hesitate ta make your own rules.
Plus, training the bayesian classifier greatly improved my SPAM score.
I do only get once spam every now and then, plus very few false positives.

And, once again, do not forget to close your question.
illtbaguAuthor Commented:
The question is closed and you have the points. If you don't have the points lets get ahold of the moderator.

Plus, training the bayesian classifier greatly improved my SPAM score
I tried to do this once but it made matters worse. I had collected around 900 spam messages that were not detected. I tried to train spamassassin on these emails. If you read the man pages it tells you that you must collect a few thousand spam messages to do this with or it could have the opisite affects.
man sa-learn

Could you elaborate a little on how to make your own rules with spamassassin I have not done this.
Question is closed all right. Thanks.

Very simple. The only thing you have to have a little knowledge about are regular expressions.

Spamassassin is mainly based on them to recognize patterns in some part(s) of the email.
If the pattern is recognized, then it adds the score which is defined by the rule. Mainly, all the rules that are inside SpamAssassin have scores calculated automatically at "SpamAssassin labs" based on a rich corpus of spams and hams. So, when you write your own rules, you have to assign a score manually, and that's where you want to be absolutely sure of what you're doing.

A simple example is worth a thousand words, so here is one of mine.

Beeing French, I rarely have emails talking about porn or incest ! So i have this simple rule, which weights 2 points :

body ALF_SIMPLE_PORN            /(porn[o]*|incest)/i
describe ALF_SIMPLE_PORN        Porn Word(s)
score ALF_SIMPLE_PORN           2

The first line says that I'm looking for any occurence of (porn (or porno)) or incest.
The "/i" says that the comparison will be case independant.
The "body" says that I'm looking for these words inside the body part of the email.

The second line is a text description of the rule
The third line is the score.

To test this, I get an offending email which I put inside a file, and then, run the SpamAssassin command line tool.

For more information, see the "Rule Wiki" which is a very good resource about writing your own rules :
illtbaguAuthor Commented:
You have been of great help to me sir, many thanks.
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.