|
|
|
|
|
À̸§ : È£¼® (211.¢½.74.31) |
|
³¯Â¥ : 2006-01-04 17:37:00 |
|
Á¦¸ñ : Spamassassin ¼³Ä¡ ( spam ¸ÞÀÏ Â÷´Ü ) |
|
SpamAssassin°ú ÇÔ²² ÇÑ È¿äÀÏ | MoinMoin À§Å° 2004/05/12 13:28
http://blog.naver.com/mahajjh/140002419527
ÃÖ±Ù ½ºÆÔÀÌ ¸¹¾ÆÁ®¼ ½ºÆÔÀ» °É·¯³¾ ¹æ¹ýÀ» ã¾Æº¸¾Ò´Ù. ¿©·¯°¡Áö ¹æ¹ýÁß¿¡
Á¶¸¸°£ ¾ÆÆÄÄ¡ ÇÁ·ÎÁ§Æ®¿¡ ÇÕ·ùÇÏ°Ô µÉ SpamAssassinÀ» ½ÃµµÇØ º¸¾Ò´Ù.
SpamAssassinÀº ¿©·¯°¡Áö ¹æ¹ýÀ¸·Î ½ºÆÔÀ» ã´Â´Ù.
* Çì´õ¿Í º»¹®¿¡¼ ¹Ì¸® Á¤ÀÇÇÑ ±ÔÄ¢À» ã´Â´Ù.
http://www.spamassassin.org/tests.html À» º¸´Ï ±ÔÄ¢ÀÌ 900°³°¡ ³Ñ´Â´Ù.
* Çùµ¿ÀûÀÎ ½ºÆÔ µ¥ÀÌÅͺ£À̽º¿¡¼ µ¿ÀÏÇÑ ¸ÞÀÏÀÌ ½ºÆÔÀ¸·Î µî·ÏµÇ¾ú´ÂÁö È®ÀÎÇÑ´Ù.
DCC, Pyzor, Razor2, RBL, mail-abuse.org, ordb.org µîÀ» ÀÌ¿ëÇÑ´Ù.
* Bayesian ÇÊÅÍ
°Ë»çÇØ¿Â °á°ú, ½ºÆÔ¿¡ Æ÷ÇÔµÈ ´Ü¾îµé°ú ½ºÆÔÀÌ ¾Æ´Ñ ¸ÞÀÏ¿¡ Æ÷ÇÔµÈ ´Ü¾îµéÀÇ
È®·üÀ» °¡Áö°í ½ºÆÔ ¿©ºÎ¸¦ ÆÇ´ÜÇÑ´Ù. A Plan for Spam Âü°í.
* °Ë»çÇØ¿Â °á°ú¸¦ ¹ÙÅÁÀ¸·Î whitelist¿Í blacklist¸¦ À¯ÁöÇÑ´Ù.
* Á÷Á¢ whitelist¿Í blacklist¸¦ ÁöÁ¤ÇÒ ¼öµµ ÀÖ´Ù.
¾à 3ÀÏ°£ »ç¿ëÇغ» °á°ú ÃÑ 288°³ ½ºÆÔÁß 88%ÀÎ 254°³¸¦ °É·¯³Â°í, ½ºÆÔÀÌ ¾Æ´Ñ
¸ÞÀÏ (¿Â¶óÀÎ ¼Á¡ÀÇ ÁÖ±âÀûÀÎ È«º¸ ¸ÞÀÏ) 1°³¸¦ ½ºÆÔÀ¸·Î À߸ø ÆÇ´ÜÇÏ¿´´Ù.
----------------------------------------
SpamAssassinÀº ¸ðµç »ç¿ëÀÚ°¡ »ç¿ëÇϵµ·Ï ¼³Ä¡ÇÏ¿© ¼¹ö/Ŭ¶óÀ̾ðÆ® ¹æ½ÄÀ¸·Î
µ¿ÀÛÇÒ ¼ö ÀÖ°í, ¿©·¯ ÀÎÅÍÆäÀ̽º¸¦ »ç¿ëÇÏ¿© ÇÁ·Î±×·¡¹ÖÇÒ ¼öµµ ÀÖ´Ù. ³ª´Â
°£´ÜÈ÷ °³Àο뵵·Î »ç¿ëÇÏ·Á°í ³» Ȩµð·ºÅ丮¿¡ ¼³Ä¡ÇÏ¿´´Ù.
¼Ò½ºÄڵ带 ´Ù¿î¹Þ°í ¾ÐÃàÀ» Ǭ ´ÙÀ½,
perl Makefile.PL PREFIX=~/local/sa SYSCONFDIR=~/local/sa
make
make install
±×¸®°í ~/.procmailrc ¿¡ ÀÎÅͳݿ¡¼ ãÀº ´ÙÀ½°ú °°Àº ¼³Á¤À» Ãß°¡ÇÏ¿´´Ù.
# SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
#
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
#
# The lock file ensures that only 1 spamassassin invocation happens
# at 1 time, to keep the load down.
#
:0fw: spamassassin.lock
* < 256000
| ~/local/sa/bin/spamassassin
# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
almost-certainly-spam
# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "probably-spam".
:0:
* ^X-Spam-Status: Yes
probably-spam
# Work around procmail bug: any output on stderr will cause the "F" in "From"
# to be dropped. This will re-add it.
:0
* ^^rom[ ]
{
LOG="*** Dropped F off From_ header! Fixing up. "
:0 fhw
| sed -e '1s/^/F/'
}
SpamAssassinÀº ¸ÞÀÏ¿¡ Á¡¼ö¸¦ ¸Å°Ü¼ ƯÁ¤ Á¡¼ö(±âº»°ª 5)°¡ ³ÑÀ¸¸é ½ºÆÔÀ¸·Î
ºÐ·ùÇÑ´Ù. À§ÀÇ ¼³Á¤Àº 15Á¡ÀÌ ³ÑÀº ¸ÞÀÏÀ» almost-certainly-spam ÆíÁöÇÔ¿¡
ÀúÀåÇÏ°í, 15~5Á¡ÀÎ ¸ÞÀÏÀ» probably-spam ÆíÁöÇÔ¿¡ ÀúÀåÇÑ´Ù. Áï, Ȥ½Ã
SpamAssassinÀÌ ½ºÆÔÀÌ ¾Æ´Ñ ¸ÞÀÏÀ» ½ºÆÔÀ¸·Î ºÐ·ùÇÒÁö °ÆÁ¤ÀÌ µÈ´Ù¸é °¡²û¾¿
probably-spam ÆíÁöÇÔÀ» »ìÆ캸¸é µÈ´Ù. SpamAssassinÀº ½ºÆÔÀ¸·Î ºÐ·ùÇÑ
¸ÞÀÏ º»¹®¿¡ °£´ÜÇÑ ¼³¸í¹®±¸¿Í ´ÙÀ½°ú °°Àº Á¡¼ö ³»¿ªÀ» Ãß°¡ÇÑ´Ù.
Content analysis details: (8.4 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
2.7 SUB_HELLO Subject starts with "Hello"
0.3 NO_REAL_NAME From: does not include a real name
0.1 MICROSOFT_EXECUTABLE RAW: Message includes Microsoft executable program
3.3 MSGID_FROM_MTA_SHORT Message-Id was added by a relay
1.2 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
0.8 PRIORITY_NO_NAME Message has priority setting, but no X-Mailer
°³ÀÎÀûÀ¸·Î °É·¯ÁöÁö¾ÊÀº ½ºÆÔÀ» spam ÆíÁöÇÔ¿¡ ÀúÀåÇÏ¿©, °¡²û¾¿
~/local/sa/bin/sa-learn --spam --mbox spam
¸í·ÉÀ» ½ÇÇàÇØ ÁÖ¾ú´Ù. sa-learnÀº Bayesian ÇÊÅ͸¦ ÈƷýÃÅ°´Â ¸í·É¾î·Î,
--mbox ¿É¼ÇÀº ÆíÁöÇÔÀ» ÀÔ·ÂÀ¸·Î Áشٴ ¶æÀÌ°í, ½ºÆÔÀº --spam ¿É¼ÇÀ» ½ºÆÔÀÌ
¾Æ´Ñ ÀÏ¹Ý ¸ÞÀÏÀº --ham ¿É¼ÇÀ» ÁöÁ¤ÇÑ´Ù. ÀÌ¹Ì ÈÆ·ÃÇÑ ¸ÞÀÏÀ» ±â¾ïÇÏ°í
Àֱ⶧¹®¿¡ µ¿ÀÏÇÑ ¸ÞÀÏÇÔÀ» ¿©·¯¹ø ÈƷÿ¡ »ç¿ëÇÏ¿©µµ »õ·Î µé¾î¿Â ¸ÞÀϸ¸À»
ÈƷÿ¡ »ç¿ëÇÑ´Ù. Âü°í·Î SpamAssassinÀº ÀÚ½ÅÀÌ ½ºÆÔÀ¸·Î ºÐ·ùÇÑ ¸ÞÀÏÀ»
ÀÚµ¿À¸·Î ÈƷýÃŲ´Ù. ±×·¡¼ À߸ø ½ºÆÔÀ¸·Î ºÐ·ùµÈ ¸ÞÀÏÀº --ham ¿É¼ÇÀ¸·Î
ÈƷýÃÄÑÁÖ´Â °ÍÀÌ ÁÁ´Ù.
¾ÆÁ÷ Bayesian ÇÊÅÍÀÇ È¿°ú´Â ¾ø´Â °Í °°Áö¸¸, ½Ã°£ÀÌ Áö³ª¸é ³ª¾ÆÁö¸®¶ó°í
±â´ëÇÑ´Ù. SpamAssassin ÀÚü ¼³Á¤ÆÄÀÏÀº ~/.spamassassin/user_prefs À̸ç,
ÇÁ·Î±×·¥À» óÀ½ ½ÇÇàÇÒ¶§ (Áï, ¸ÞÀÏÀÌ Ã³À½À¸·Î µµÂøÇÒ¶§) ÀÚµ¿À¸·Î ¸¸µé¾îÁø´Ù.
Ȥ½Ã ¼³Á¤ÆÄÀÏÀ» ¼öÁ¤ÇÏ°í ½Í´Ù¸é http://www.yrex.com/spam/spamconfig.php
°¡ µµ¿òÀÌ µÉ °ÍÀÌ´Ù.
| |
|
|
|
|