Qmail-spam

From Qmailwiki
(Difference between revisions)
Jump to: navigation, search
Line 11: Line 11:
 
* Jason R. Mastaler has improved [http://tmda.sourceforge.net/ TMDA], an anti-spam system.
 
* Jason R. Mastaler has improved [http://tmda.sourceforge.net/ TMDA], an anti-spam system.
  
* Lionel Widdifield</a> wrote an anti-spam patch.  Someone made some
+
* Lionel Widdifield</a> wrote an anti-spam patch.  Someone made some improvements to Lionel's patch, which Lindsay Haisley has [http://www.fmp.com/downloads/qmail-antispam4.tar.gz ported to qmail 1.03].
improvements to Lionel's patch, which Lindsay Haisley has <a
+
href="http://www.fmp.com/downloads/qmail-antispam4.tar.gz">ported to qmail 1.03</a>.
+
  
* <a name="200403290"><a
+
* [http://www.unixpimps.org/software/qregex/ qregex] provides full regexp matching on envelope addresses.</a>With REs (Regular Expresions) it becomes quite easy to filter out email addresses that
href="http://www.unixpimps.org/software/qregex/">qregex</a> provides
+
contain invalid characters or simply aren't a real address.   
full regexp matching on envelope addresses.</a>With REs (Regular
+
Expresions) it becomes quite easy to filter out email addresses that
+
contain invalid characters or simply aren't a real address.  Andrew
+
St. Jean has <a
+
href="http://www.arda.homeunix.net/store/qmail/">added</a> case
+
insensitive pattern matching and logging when a match is found.
+
  
* <a
+
* Andrew St. Jean has [http://www.arda.homeunix.net/store/qmail/ added] case insensitive pattern matching and logging when a match is found.
href="http://www.qmail.org/cgi-bin/m/cjohnsona@apalomine.net">Chris
+
Johnson</a> has a patch to implement <a
+
href="http://www.palomine.net/qmail/tarpit.html">tarpitting</a> in
+
qmail-smtpd. If you don't know what tarpitting is, it's the practice
+
of inserting a small sleep in an SMTP session for each RCPT TO after
+
some set number of RCPT TOs. The idea is to thwart spammers who would
+
hand your SMTP server a single message with a long list of RCPT
+
TOs.
+
  
* Nagy Balazs wrote a patch to
+
* Chris Johnson has a patch to implement [http://www.palomine.net/qmail/tarpit.html tarpitting] in
ensure that the domain name on the <a
+
qmail-smtpd. If you don't know what tarpitting is, it's the practice of inserting a small sleep in an SMTP session for each RCPT TO after some set number of RCPT TOs. The idea is to thwart spammers who would hand your SMTP server a single message with a long list of RCPT TOs.
href="http://js.hu/package/qmail/index.html">envelope sender is a
+
valid DNS name</a></a>. This is not terribly effective against spammers,
+
but I list it here because some people want it.
+
  
* Jon Rust wrote <a
+
* Nagy Balazs wrote a patch to ensure that the domain name on the [http://js.hu/package/qmail/index.html envelope sender is a valid DNS name].  This is not terribly effective against spammers, but I list it here because some people want it.
href="http://jon.rusts.net/qrblcheck.c">qrblcheck</a></a>, which reads
+
a message on stdin, grabs the IP address from the Received lines and
+
checks it against five different DNS-based spamlists.
+
  
 +
* Jon Rust wrote [http://jon.rusts.net/qrblcheck.c qrblcheck], which reads a message on stdin, grabs the IP address from the Received lines and checks it against five different DNS-based spamlists.
  
* Jay Soffian has a qmail-queue
+
* Jay Soffian has a qmail-queue replacement to [http://www.qmail.org/qqrbl filter against DNS spamlists.
replacement to <a href="qqrbl">filter against DNS spamlists.</a></a>.
+
It uses Bruce Guenter's QMAILQUEUE patch. Matching email is not rejected, but instead an X-RBL: header is added, for filtering at the delivery layer.
It uses Bruce Guenter's <a href="#qmailqueue">QMAILQUEUE</a> patch.
+
Matching email is not rejected, but instead an X-RBL: header is added,
+
for filtering at the delivery layer.
+
  
* O'Shaughnessy Evans has a set of
+
* O'Shaughnessy Evans has a set of shell scripts that comprise a spam-filtering system called [http://isle.wumpus.org/cgi-bin/pikie?SpamRule spamrule].
shell scripts that comprise a spam-filtering system called "<a
+
href="http://isle.wumpus.org/cgi-bin/pikie?SpamRule">spamrule</a>".</a>
+
  
* Ask Bj&oslash;rn Hansen wrote <a
+
* Ask Bj&oslash;rn Hansen wrote [http://develooper.com/code/qpsmtpd/ qpsmtpd], a smtp server with filtering tools.  It's written in perl.
href="http://develooper.com/code/qpsmtpd/">qpsmtpd</a>, a smtp server
+
with filtering tools</a>.  It's written in perl.
+
  
* Erwin Hoffman's <a
+
* Erwin Hoffman's [http://www.fehcom.de/qmail/spamcontrol.html SPAMCONTROL] combines many spam control features.  Includes SMTP Auth with CRAM-MD5 support.
href="http://www.fehcom.de/qmail/spamcontrol.html">SPAMCONTROL</a>
+
combines many spam control features</a>.  Includes SMTP Auth with
+
CRAM-MD5 support.
+
  
* EnderUNIX Team wrote <a
+
* EnderUNIX Team wrote [http://www.enderunix.org/spamguard spamGuard], which scans your log files for "too much" email from a particular user, and adds them to badmailfrom.
href="http://www.enderunix.org/spamguard">spamGuard</a></a>, which
+
scans your log files for "too much" email from a particular user, and
+
adds them to badmailfrom.
+
  
* Russell Nelson has a patch to <a
+
* Russell Nelson has a patch to [http://www.qmail.org/qmail-smtpd-relay-reject reject relay probes] generated by so-called anti-spammers. These relay probes have '!', '%' and '@'in the local (username) part of the address.
href="qmail-smtpd-relay-reject">reject relay probes</a> generated by
+
so-called anti-spammers.</a> These relay probes have '!', '%' and '@'
+
in the local (username) part of the address.
+
  
* Dale Woolridge, James Law, and
+
* Dale Woolridge, James Law, and Moto Kawasaki's [http://spamthrottle.qmail.ca/ spam throttle] patch provides a method to rate limit/stutter spam (message throughput) via a highly parameterized control interface.  As of release 2.01, tcpserver is no longer a strict requirement.
Moto Kawasaki's <a href="http://spamthrottle.qmail.ca/">spam throttle</a></a>
+
patch provides a method to rate limit/stutter spam (message throughput)
+
via a highly parameterized control interface.  As of release 2.01,
+
tcpserver is no longer a strict requirement.
+
  
* James Grinter has instructions on
+
* James Grinter has instructions on [http://www.gbnet.net/~jrg/qmail/ifspamh using SpamAssassin]. It's a script that runs from a .qmail file.
<a href="http://www.gbnet.net/~jrg/qmail/ifspamh">using
+
SpamAssassin</a></a>. It's a script that runs from a .qmail file.
+
  
* Chris Kennedy has written the
+
* Chris Kennedy has written the [http://sourceforge.net/projects/blackholespam/ BlackHole] spam/virus filter.
<a
+
href="http://sourceforge.net/projects/blackholespam/">BlackHole</a>
+
spam/virus filter</a>.
+
  
* Noel Mistula wrote <a
+
* Noel Mistula wrote [http://ngm.id.au/checkhab checkhab], which checks for HTML, attachments, and binaries in email, and blocks them.
href="http://ngm.id.au/checkhab">checkhab</a></a>, which checks
+
for HTML, attachments, and binaries in email, and blocks them.
+
  
* Gerrit Pape wrote <a
+
* Gerrit Pape wrote [http://smarden.org/qconfirm/ qconfirm], a delivery confirmation process for a mail address.
href="http://smarden.org/qconfirm/">qconfirm</a></a>, a delivery
+
confirmation process for a mail address.
+
  
* Chris Johnson
+
* Chris Johnson wrote [http://www.palomine.net/qdated/ qdated] to create and verify timestamped e-mail addresses.  These addresses expire after a user-configurable period of time; any mail sent to an
wrote <a href="http://www.palomine.net/qdated/">qdated</a></a> to
+
create and verify timestamped e-mail addresses.  These addresses
+
expire after a user-configurable period of time; any mail sent to an
+
 
expired address will bounce.
 
expired address will bounce.
  
* Roger Merchberger has some
+
* Roger Merchberger has some techniques to deal with [http://www.30below.com/~zmerch/qmail/ double-bouncing
techniques to deal with <a
+
email].
href="http://www.30below.com/~zmerch/qmail/">double-bouncing
+
email</a></a>.
+
  
* <a
+
* [http://q-sorter.sourceforge.net q-sorter] sorts your email into separate inboxes.
href="http://q-sorter.sourceforge.net">q-sorter</a> sorts your email
+
into separate inboxes.</a>
+
  
* <a
+
* [http://search.cpan.org/author/JRAFTERY/ Net::QMTP] - This perl module implements an object oriented interface to a Quick Mail Transfer Protocol (QMTP) client which enables a perl program to
href="http://search.cpan.org/author/JRAFTERY/">Net::QMTP</a> - This
+
perl module implements an object oriented interface to a Quick Mail
+
Transfer Protocol (QMTP) client</a> which enables a perl program to
+
 
send email by QMTP.
 
send email by QMTP.
  
 +
* Georg Lehner tells how to configure [http://www.magma.com.ni/~jorge/spamassassin.html Qmail with Spamassassin.
  
* Georg Lehner tells how to
+
* Jeffrey Clement wrote a time-limited email-address program called [http://jclement.ca/software/datedmail.py/ datedmail].
configure <a
+
href="http://www.magma.com.ni/~jorge/spamassassin.html">Qmail with
+
Spamassassin</a></a>.
+
  
* Jeffrey Clement wrote a
+
* Luca Morettoni wrote [http://morettoni.net/qmail-rblchk.en.html qmail-rblchk], which checks the IP address in the Received: line of an email message on stdin against named DNSBLs.
time-limited email-address program called <a
+
href="http://jclement.ca/software/datedmail.py/">datedmail</a></a>.
+
  
* Luca Morettoni wrote <a
+
* Jean-Eudes ONFRAY wrote a [http://www.qmail.org/rhsbl.patch rhsbl patch[ for tcpserver. This lets you block or whitelist email based on the reverse-DNS hostname rather than IP.
href="http://morettoni.net/qmail-rblchk.en.html">qmail-rblchk</a></a>,
+
which checks the IP address in the Received: line of an email message
+
on stdin against named DNSBLs.
+
  
* Jean-Eudes ONFRAY wrote a <a
+
* Philip Gladstone wrote a delivery-time [http://pond.gladstonefamily.net/do-spf.pl SPF checker]. More on [http://spf.pobox.com SPF].
href="rhsbl.patch">rhsbl patch</a> for tcpserver</a>. This lets you
+
block or whitelist email based on the reverse-DNS hostname rather than
+
IP.
+
  
* Philip Gladstone wrote a
+
* Christophe Saout wrote a [http://www.saout.de/misc/spf/ SPF checker] that runs inside qmail-smtpd and is written using the native dns and string functions that come with qmail.
delivery-time <a href="http://pond.gladstonefamily.net/do-spf.pl">SPF
+
checker</a>.</a> More on <a href="http://spf.pobox.com">SPF</a>.
+
  
 +
* Markus Stumpf has a patch for qmail-smtpd that [http://www.lamer.de/maex/creative/software/qmail/105-sober-g/ rejects W32/Sober-G] at the SMTP level.
  
* Christophe Saout wrote a <a
+
* Jay Soffian has modifies qmail-smtpd to [http://www.soffian.org/downloads/qmail/qmail-smtpd-doc.html fork/exec $RCPTCHECK] at the RCPT TO:</a>. $RCPTCHECK is run in the same environment as qmail-smtpd. Additionally $SENDER is set to the envelope from and $RECIPIENT is set to the envelope recipient (for the
href="http://www.saout.de/misc/spf/">SPF checker</a></a> that runs
+
current rcpt to:). Based on the return code (exit value) of $RCPTCHECK, the rcpt to: address will either be accepted or rejected.
inside qmail-smtpd and is written using the native dns and string
+
functions that come with qmail.
+
 
+
* Markus Stumpf has a patch for
+
qmail-smtpd that <a
+
href="http://www.lamer.de/maex/creative/software/qmail/105-sober-g/">rejects
+
W32/Sober-G</a> at the SMTP level.</a>
+
 
+
* Jay Soffian has modifies
+
qmail-smtpd to <a
+
href="http://www.soffian.org/downloads/qmail/qmail-smtpd-doc.html">fork/exec
+
$RCPTCHECK</a> at the RCPT TO:</a>. $RCPTCHECK is run in the same
+
environment as qmail-smtpd. Additionally $SENDER is set to the
+
envelope from and $RECIPIENT is set to the envelope recipient (for the
+
current rcpt to:). Based on the return code (exit value) of
+
$RCPTCHECK, the rcpt to: address will either be accepted or rejected.
+

Revision as of 21:09, 2 February 2005

  • Dan's rblsmtpd blocks spam using the RBL and other DNS-based lists. Because of the size of the RSS zone, they have removed the necessary TXT records that rblsmtpd relies on.
  • Jason R. Mastaler has improved TMDA, an anti-spam system.
  • Lionel Widdifield</a> wrote an anti-spam patch. Someone made some improvements to Lionel's patch, which Lindsay Haisley has ported to qmail 1.03.
  • qregex provides full regexp matching on envelope addresses.</a>With REs (Regular Expresions) it becomes quite easy to filter out email addresses that

contain invalid characters or simply aren't a real address.

  • Andrew St. Jean has added case insensitive pattern matching and logging when a match is found.
  • Chris Johnson has a patch to implement tarpitting in

qmail-smtpd. If you don't know what tarpitting is, it's the practice of inserting a small sleep in an SMTP session for each RCPT TO after some set number of RCPT TOs. The idea is to thwart spammers who would hand your SMTP server a single message with a long list of RCPT TOs.

  • Nagy Balazs wrote a patch to ensure that the domain name on the envelope sender is a valid DNS name. This is not terribly effective against spammers, but I list it here because some people want it.
  • Jon Rust wrote qrblcheck, which reads a message on stdin, grabs the IP address from the Received lines and checks it against five different DNS-based spamlists.

It uses Bruce Guenter's QMAILQUEUE patch. Matching email is not rejected, but instead an X-RBL: header is added, for filtering at the delivery layer.

  • O'Shaughnessy Evans has a set of shell scripts that comprise a spam-filtering system called spamrule.
  • Ask Bjørn Hansen wrote qpsmtpd, a smtp server with filtering tools. It's written in perl.
  • Erwin Hoffman's SPAMCONTROL combines many spam control features. Includes SMTP Auth with CRAM-MD5 support.
  • EnderUNIX Team wrote spamGuard, which scans your log files for "too much" email from a particular user, and adds them to badmailfrom.
  • Russell Nelson has a patch to reject relay probes generated by so-called anti-spammers. These relay probes have '!', '%' and '@'in the local (username) part of the address.
  • Dale Woolridge, James Law, and Moto Kawasaki's spam throttle patch provides a method to rate limit/stutter spam (message throughput) via a highly parameterized control interface. As of release 2.01, tcpserver is no longer a strict requirement.
  • James Grinter has instructions on using SpamAssassin. It's a script that runs from a .qmail file.
  • Chris Kennedy has written the BlackHole spam/virus filter.
  • Noel Mistula wrote checkhab, which checks for HTML, attachments, and binaries in email, and blocks them.
  • Gerrit Pape wrote qconfirm, a delivery confirmation process for a mail address.
  • Chris Johnson wrote qdated to create and verify timestamped e-mail addresses. These addresses expire after a user-configurable period of time; any mail sent to an

expired address will bounce.

email].

  • q-sorter sorts your email into separate inboxes.
  • Net::QMTP - This perl module implements an object oriented interface to a Quick Mail Transfer Protocol (QMTP) client which enables a perl program to

send email by QMTP.

  • Jeffrey Clement wrote a time-limited email-address program called datedmail.
  • Luca Morettoni wrote qmail-rblchk, which checks the IP address in the Received: line of an email message on stdin against named DNSBLs.
  • Jean-Eudes ONFRAY wrote a [http://www.qmail.org/rhsbl.patch rhsbl patch[ for tcpserver. This lets you block or whitelist email based on the reverse-DNS hostname rather than IP.
  • Christophe Saout wrote a SPF checker that runs inside qmail-smtpd and is written using the native dns and string functions that come with qmail.
  • Jay Soffian has modifies qmail-smtpd to fork/exec $RCPTCHECK at the RCPT TO:</a>. $RCPTCHECK is run in the same environment as qmail-smtpd. Additionally $SENDER is set to the envelope from and $RECIPIENT is set to the envelope recipient (for the

current rcpt to:). Based on the return code (exit value) of $RCPTCHECK, the rcpt to: address will either be accepted or rejected.

Personal tools