DISCLAIMER!

This is a mirror of a guide previously found at http://www200.pair.com/mecham/spam/spamfilter2.html. That copy/instance no longer exists, but I had found the guide quite helpful in the past and have posted it here in case it is a helpful starting point for others in building a personal mail server. Though I've pulled copies of some referenced config files and scripts, some of the info is obviously out of date, so if you use this guide, please do consider it a starting point not a complete start-to-finish guide.

Quick and dirty installation of Postfix, Amavisd-new, SpamAssassin, Razor, DCC, Pyzor and ClamAV on Debian squeeze or Ubuntu 12.04

deb http://mirrors.xmission.com/debian/ squeeze main non-free
deb-src http://mirrors.xmission.com/debian/ squeeze main

deb http://security.debian.org/ squeeze/updates main non-free
deb-src http://security.debian.org/ squeeze/updates main

-rw-r--r-- 1 clamav clamav    11478 2010-06-06 19:52 bytecode.cvd
-rw-r--r-- 1 clamav clamav  2196135 2010-06-06 19:52 daily.cvd
-rw-r--r-- 1 clamav clamav    50400 2010-05-27 08:12 honeynet.hdb
-rw-r--r-- 1 clamav clamav  3950238 2010-06-05 08:49 junk.ndb
-rw-r--r-- 1 clamav clamav   559557 2010-06-06 19:49 jurlbl.ndb
-rw-r--r-- 1 clamav clamav 22906487 2010-06-06 19:52 main.cvd
-rw-r--r-- 1 clamav clamav       52 2010-06-06 19:52 mirrors.dat
-rw-r--r-- 1 clamav clamav  2299236 2010-06-06 09:50 phish.ndb
-rw-r--r-- 1 clamav clamav    60727 2010-06-05 08:49 rogue.hdb
-rw-r--r-- 1 clamav clamav     1116 2010-05-13 04:49 sanesecurity.ftm
-rw-r--r-- 1 clamav clamav  1712518 2010-06-04 12:54 scam.ndb
-rw-r--r-- 1 clamav clamav    75068 2010-05-27 08:12 securiteinfobat.hdb
-rw-r--r-- 1 clamav clamav   193234 2010-05-27 08:12 securiteinfodos.hdb
-rw-r--r-- 1 clamav clamav    53913 2010-05-27 08:12 securiteinfoelf.hdb
-rw-r--r-- 1 clamav clamav   225919 2010-06-02 02:53 securiteinfo.hdb
-rw-r--r-- 1 clamav clamav  1329399 2010-06-03 02:26 securiteinfohtml.hdb
-rw-r--r-- 1 clamav clamav   244083 2010-05-27 08:13 securiteinfooffice.hdb
-rw-r--r-- 1 clamav clamav   238856 2010-05-27 08:13 securiteinfopdf.hdb
-rw-r--r-- 1 clamav clamav    21106 2010-05-27 08:13 securiteinfosh.hdb
-rw-r--r-- 1 clamav clamav    52755 2010-06-06 09:50 spamimg.hdb
-rw-r--r-- 1 clamav clamav   866409 2010-06-06 19:45 winnow_malware.hdb
-rw-r--r-- 1 clamav clamav   785121 2010-06-06 19:45 winnow_malware_links.ndb

# ----------------------------------
# nice to have $log_level (1-5) available:
$log_level = 0;

# explicitly set $mydomain, $myhostname and @local_domains_maps:
# see /usr/share/doc/amavisd-new/examples/amavisd.conf-sample.gz
$mydomain = 'example.com';
$myhostname = 'sfa.example.com';
@local_domains_maps = ( ['.example.com'] );

# when amavisd-new sends notifications, they appear to come from here:
$mailfrom_notify_admin     = "postmaster\@$mydomain";
$mailfrom_notify_recip     = "postmaster\@$mydomain";
$mailfrom_notify_spamadmin = "postmaster\@$mydomain";
$hdrfrom_notify_sender = "amavisd-new <postmaster\@$mydomain>";

# Set number of processes. Rough guide for dual processor, 1GB = 6, 2GB = 12, 4GB = 24
# You MUST also change maxproc for the smtp-amavis transport to match this number, e.g:
# smtp-amavis unix -      -       n       -       2  smtp
$max_servers = 2;

# Note: If you need to set maxproc > 20, instead use:
# smtp-amavis_destination_concurrency_limit = <number>
# in /etc/postfix/main.cf and set the smtp-amavis transport like so:
# smtp-amavis unix -      -       n       -       -  smtp

# We discard (and quarantine) viruses, pass spam, 
# bounce (and quarantine) banned files and pass bad headers:
$final_virus_destiny      = D_DISCARD;
$final_banned_destiny     = D_DISCARD;
$final_spam_destiny       = D_PASS;
$final_bad_header_destiny = D_PASS;

# disable DKIM for now
$enable_dkim_verification = 0;  # enable DKIM signatures verification
$enable_dkim_signing = 0;    # load DKIM signing code, keys defined by dkim_key

# don't quarantine bad headers (no need since we pass them all):
$bad_header_quarantine_to = undef;

# Spam gets the Subject line prepended with:
$sa_spam_subject_tag = 'Spam> ';

# We tag all headers (for 'local' domains) with X-Spam info:
$sa_tag_level_deflt = undef;

# This is the system default spam tag level
$sa_tag2_level_deflt = 6.31;

# The default is to not quarantine any spam 
$sa_kill_level_deflt = 9999;

# We will quarantine viruses to /var/lib/amavis/virusmails (the default).
# We will use a cron job /etc/cron.daily/rmvirusquar to automatically delete these
# files older than 14 days from the quarantine. We can use amavisd-release to release
# quarantined messages. 

# disable quarantine subdirectories
$quarantine_subdir_levels = undef;

# more recent version
@virus_name_to_spam_score_maps =
 (new_RE(  # the order matters!
   [ qr'^Structured\.(SSN|CreditCardNumber)\b'            => 0.1 ],
   [ qr'^(Heuristics\.)?Phishing\.'                       => 0.1 ],
   [ qr'^(Email|HTML)\.Phishing\.(?!.*Sanesecurity)'      => 0.1 ],
   [ qr'^Sanesecurity\.(Malware|Rogue|Trojan)\.' => undef ],# keep as infected
   [ qr'^Sanesecurity\.'                                  => 0.1 ],
   [ qr'^Sanesecurity_PhishBar_'                          => 0   ],
   [ qr'^Sanesecurity.TestSig_'                           => 0   ],
   [ qr'^Email\.Spam\.Bounce(\.[^., ]*)*\.Sanesecurity\.' => 0   ],
   [ qr'^Email\.Spammail\b'                               => 0.1 ],
   [ qr'^MSRBL-(Images|SPAM)\b'                           => 0.1 ],
   [ qr'^VX\.Honeypot-SecuriteInfo\.com\.Joke'            => 0.1 ],
   [ qr'^VX\.not-virus_(Hoax|Joke)\..*-SecuriteInfo\.com(\.|\z)' => 0.1 ],
   [ qr'^Email\.Spam.*-SecuriteInfo\.com(\.|\z)'          => 0.1 ],
   [ qr'^Safebrowsing\.'                                  => 0.1 ],
   [ qr'^winnow\.(phish|spam)\.'                          => 0.1 ],
   [ qr'^INetMsg\.SpamDomain'                             => 0.1 ],
   [ qr'^Doppelstern\.(Scam4|Phishing|Junk)'              => 0.1 ],
   [ qr'^ScamNailer\.'                                    => 0.1 ],
   [ qr'^HTML/Bankish'                                    => 0.1 ],  # F-Prot
   [ qr'-SecuriteInfo\.com(\.|\z)'         => undef ],  # keep as infected
   [ qr'^MBL_NA\.UNOFFICIAL'               => 0.1 ],    # false positives
   [ qr'^MBL_'                             => undef ],  # keep as infected
 ));

# ---------------------------------- 
# ----------------------------------

<testgarbage@example.net>: host msa.example.com[111.111.111.111] said: 550
    <testgarbage@example.net>: Recipient address rejected: undeliverable
    address: host 777.777.777.777[777.777.777.777] said: 550 5.1.1
    <testgarbage@example.net>... User unknown (in reply to RCPT TO command)
    (in reply to RCPT TO command)

smtpd_recipient_restrictions = 
    permit_mynetworks,
    reject_unauth_destination,
    reject_unlisted_recipient,
    check_recipient_access hash:/etc/postfix/verify_domains

OPTIONAL: install Postgrey

smtpd_recipient_restrictions =
    permit_mynetworks,
    permit_sasl_authenticated,
    reject_unauth_destination,
    check_recipient_access hash:/etc/postfix/greylist_sender_exceptions,
    check_client_access cidr:/etc/postfix/cidr_greylist_network_exceptions,
    check_client_access pcre:/etc/postfix/check_client_fqdn

OPTIONAL Install Bind9