next »

[lambert]

It looks like the OpenBSD spamd package has died from non-interest.

I have a project at work where I need to setup two to N OpenBSD spamd boxes to reduce the spam load on my mail servers.  In order to prevent the company having to depend on me to keep it running, I thought, "Hey, pfSense has a spamd package.   I can use that and the CARP failover stuff to make everything all reliable and 'clicky' in case I get hit by a truck."  Unfortunately, there is no spamd package in 1.2RC3.

It looks like rcarr has probably invested a lot of time toward getting it fixed but may not have found the time/motivation to get it complete/committed.

I would like to have these boxes up and running in about a week, and will go with a vanilla FreeBSD and spamd install if I need to to get it up.

I've not previously managed a spamd installation so my requirements will be met by getting the package working and committed to the project with, at least the functionality it had back when sullrich initially built it plus the fixed^Hs for issues rcarr noted in his post.  I don't know enough about spamd to have further requirements at this time.  I'm trying to avoid having to learn it in too much detail too... :-)  Too many projects running right now.

http://forum.pfsense.org/index.php/topic,5660.msg33728.html#msg33728

If someone can get it working that far, I can find out what I want changed, if anything, beyond that and offer another bounty.

[flachance]

Any news on this?  I'd be interested in this package too, but I don't have money to add to the bounty.

On the other hand, I'd be willing to look at the code to make it work.  The package is no longer available to be installed, but I can still see some files that seem to be related on the pfSense CVS Repository (http://pfsense.com/cgi-bin/cvsweb.cgi/tools/packages/?hideattic=0;sortby=date;f=h#dirlist).

Also, I took a look at the file http://www.pfsense.com/packages/pkg_config.xml and from the looks of it, I should be able to see the spamd package at the very end, but it just doesn't show up.  It looks like the XML is not right as there are lots of packages that are outside of the <packages></packages> tags.  I have modified that XML file and put it on my own repository so that I can try the spamd package.

I'll let you know what I find out.

[lambert]

So far, no one has been interested.

I'm good for the bounty for the foreseeable future.

The xml seems to support moving broken packages to an area where they are disabled, but not completely removed.  That's about as far as I have had time to dig into it.

[dhipo]

take a look on mailscanner  project ... it's a great job to kill UCE... i have used for years with good detection ...

[lambert]

Mailscanner solves a completely different problem.   OpenBSD's spamd project can sit on a box in front of something like a mailscanner and reduce the amount of mail that the other box has to scan.  I have a cluster of Barracuda Networks Spam Firewall boxes which do a decent job without needing too much of my attention.  I would like to have a cluster of pfSense boxes with OpenBSD's spamd utility sitting in front of the Barracuda's to try to bring the 500,000 message sending attempts via each box down to something like 300,000 attempts, or less.  Otherwise, I need to spend money on an additional Barracuda to maintain acceptable performance for my end users.

I have used several spam scanning systems built around SpamAssassin and ClamAV plus other stuff, including the Barracudas.  They all tend to be about the same in terms of effectiveness in an ISP environment where a global bayes database is impossible.   The Barracudas are handling more mail per box with a prettier (for the users) interface than the assembly required stuff available when I switched to them.  The administration time savings have made them worth the subscription renewal pricing.

[dhipo]

ok ... i understood...

in some customers i used an pool of mailscanners combined with: Dns tests, (reverse IP, SPF) bayes DB, spam balcklists are downloaded to my servers each 15 minutes, i use two lines of AV .. (bitdefender and Clamav).
To decide what the host to be used, my dns responses are in round-robin way with low time in cache, to assure diferent replys.  in one customer 500.000 UCE are blocked per day and 50.000 clean and valid emails are receveid all day in 1.000 mailboxes of an M$ server.

[flachance]

That's what I would call Defense In Depth!

 

[xibalba]

i would be very interested in spamd being brought back into pfSense. We have two pfSense CARP routers sitting infront of a mail server that takes in 30-50k emails per day most of which is spam. I would love to see and have spamd implemented on pfSense. This would also be significantly helpful so we don't have to expose Exchange machines to the internet. right now we use postfix at our colo and deliver it ot the exchange machine via ipsec.
I am willing to throw down $250 for this in the next few weeks. i would like to give the money directly to the project and have them payout someone who completes this bounty.
thanks,

[lambert]

okay, call my pledge $250 too.

That makes $500 total.

[submicron]

Centipede Networks will offer an additional $300 to this bounty for the following:

1) The spamd package must work with 1.2-RELEASE
2) The spamd package must provide support for multiple destination mail servers
3) The spamd package must work with a CARP or ProxyARP virtual IP address
4) Configuration settings for the spamd package must be mirrorable to other CARP members

optional
5) It would be especially nice if the spamd package can work in a bridged configuration.  If this isn't possible, no big.

signing bonus:
If this project is completed prior to Friday, April 18th, Centipede Networks will pay an additional $200 to the bounty. 

[lambert]

Centipede Networks will offer an additional $300 to this bounty for the following: 

Sweet!  Thanks!

[dhipo]

ok ....

i will give a try to spamd package .. can someone give access to old package will be aa good start point ...

[hoba]

You'll find everything here http://cvs.pfsense.org/cgi-bin/cvsweb.cgi/tools/packages/ .

[submicron]

ok ....

i will give a try to spamd package .. can someone give access to old package will be aa good start point ...

Are you actively working on this bounty?

[dhipo]

yes, 
i´m looking to understand and knows the package .... i only worked before on Mailscanner... but now i am in learning mode ....

in  this moment it´s an experimental .. not for bounty .. .just for comunity ..