Results 1 to 25 of 31
-
01-29-2007, 03:20 AM #1
Howto: ASSP installation in CPanel
What is ASSP? ASSP is an Anti-Spam SMTP Proxy . The homepage can be found here. ASSP is a lightweight daemon that can filter mail based on various things such as SPF, RBLs, Bayesian word lists, as well as blocking email addresses from getting mail, or having mail filtered.
This tutorial will walk you through getting the admin interface for CPanel setup for ASSP. Currently, a paid user interface can be obtained here (note that I am in no way affiliated with, nor have I tried to use this UI, I am just offering the link to those that might find it useful)
Firstly, the setup:
You will need to activate Cpanel PRO (pro.cpanel.net/activate) for your server in order for this to fully work. This activation is currently free. Simply go to the previous mentioned URL and enter your IP address if you have not done so already.
Once you have activated CPanel PRO, go into whm->addon modules and check clamav connector, then click on "save". This will install clamav for you to use
Once you have done THIS, go to whm->service manager and UNcheck spamd (it is no longer necessary with ASSP), and again click on save/submit. Note that this IS optional, however the purpose of ASSP is to defeat spam before it GETS to SpamAssassin.
Once you have done THAT, go into whm -> tweak settings and uncheck SpamAssassin and BoxTrapper mail.
Secondly, the requirements:
ASSP needs certain perl modules established To install these, simply login (as root) to your server, and type the following
Code:/scripts/perlinstaller --force Compress::Zlib /scripts/perlinstaller --force Email::Valid /scripts/perlinstaller --force File::ReadBackwards /scripts/perlinstaller --force File::Scan::ClamAV /scripts/perlinstaller --force Mail::SPF::Query /scripts/realperlinstaller --force Mail::SRS /scripts/realperlinstaller --force Tie::RDBM /scripts/realperlinstaller Sys::Syslog /scripts/perlinstaller --force Net::LDAP /scripts/perlinstaller --force Time::HiRes /scripts/perlinstaller --force Tie::DBI
One more perl module is needed. Since the later versions of Net::DNS are known to cause issues with RBLs, SPFs and the like, it is advised to use 0.57 . This can be obtained by doing the following:
Code:mkdir /usr/local/assp cd /usr/local/assp mkdir /usr/local/assp/tmp cd /usr/local/assp/tmp wget http://www.net-dns.org/download/Net-DNS-0.57.tar.gz tar xzf Net-DNS-0.57.tar.gz cd Net-DNS-0.57 perl Makefile.PL make make test make install
Now, let's get with the program here and install ASSP:
Code:cd /usr/local/assp wget http://switch.dl.sourceforge.net/sourceforge/assp/ASSP_1.2.6-Install.zip unzip -d /usr/local/assp /usr/local/assp/ASSP_1.2.6-Install.zip mv --target-directory=/usr/local/assp /usr/local/assp/ASSP/* mv --target-directory=/usr/local/assp /usr/local/assp/ASSP/.DS_Store rm -rf /usr/local/assp/__MACOSX rm -rf /usr/local/assp/ASSP rm -f ASSP_1.2.6-Install.zip rm -f Win32-quickstart-guide.txt;rm -f freshclam.bat cd /usr/local/assp mkdir pb cd pb touch denysmtp.txt touch exportedextreme.txt touch pbdb.black.db touch pbdb.rbl.db touch pbdb.white.db cd /usr/local/assp mkdir /usr/local/assp/notspam mkdir /usr/local/assp/spam mkdir /usr/local/assp/errors mkdir /usr/local/assp/errors/notspam cd /usr/local/assp wget http://www.grscripts.com/service/start chmod 755 start wget http://www.grscripts.com/service/stop chmod 755 stop cd /etc/rc.d/init.d wget http://www.grscripts.com/service/assp chmod 755 assp
Code:cd /usr/local/assp/ mv assp.pl assp.pl_old mv spamdb spamdb.old mv rebuildspamdb.pl rebuildspamdb.pl.old mv repair.pl repair.pl.old mkdir Data mkdir Data/Lists wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/05B0C8D4-000F4555.1/info.png wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/05B0C8D4-000F4555.2/rebuildspamdb.pl wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/05B0C8D4-000F4555.3/repair.pl wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/05B0C8D4-000F4555.5/assp.css mv assp.css images wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/05B0C8D4-000F4555.6/assp.pl cd Data/Lists wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/05B0C8D4-000F4555.0/URIBLCCTLDS.txt
Now, let's get it up and running, and configure it, shall we?
Code:cd /usr/local/assp /etc/init.d/assp start
once it's stopped, you'll see the following file in the assp directory - assp.cfg . Edit that with whatever you want for an editor, something like:
Code:nano assp.cfg
Look for the lines that are something like:
Code:runAsGroup:= runAsUser:=
Code:runAsGroup:=root runAsUser:=root
Code:AsADaemon:=
Code:AsADaemon:=1
look for the line that is
Code:webAdminPassword:=nospam4me
Code:webAdminPassword:=insertrandompasswordhere
Code:localDomains:=
Code:localDomains:=file:/etc/localdomains
Look for the line that is something like
Code:smtpDestination:=127.0.0.1:225
Code:smtpDestination:=127.0.0.1:125
and one more change
change the line that looks like
Code:listenPort:=125
Code:listenPort:=25
Now, let's get ASSP fired up again
Code:/etc/init.d/assp start
Code:chkconfig --add assp
crontab -eCode:10 4 * * * cd /usr/local/assp;/usr/local/assp/rebuildspamdb.pl
Open up another file on the server, my example will be /bin/asspcheck. In this file, add the following contents
Code:assplog=/usr/local/assp/check.log DATE=`date "+%m-%d-%y [%k:%M]"` pidof=/usr/local/assp/pid thispid=`cat $pidof` if [ ! -d /proc/$thispid ];then rm -rf $pidof; /etc/init.d/assp start echo "$DATE - ASSP - restarted" >> $assplog else echo "$DATE - ASSP - ok" >> $assplog fi
Code:chmod u+x /bin/asspcheck
crontab -eCode:* * * * * /bin/asspcheck
In exim configuration editor, click on "advanced editor"
Clear out EVERYTHING from all of the existing boxes. Keeping these with data can cause ASSP to not function as it should
When you've done that, add the following to the top box:
Code:# assp local_interfaces = 127.0.0.1.125
Code:smtpDestination:=127.0.0.1:125
Click on Save
Exim will restart and you now have a working installation of assp
Now, let's go to it and work with it a bit, shall we?
go to http://yourip:55555 , enter the user admin and the password you changed nospam4me to. This will get you logged in and you can tweak the settings as you feel necessary.
ASSP is a great and powerful proxy for any mail server, which blocks using RBLS, whitelists, etc. It is advisable to setup the email interface and let your customers know of this so that you can get them to help you in reporting and addressing spam.
Parts of this howto were taken from this page, however much of that data has been found to be outdated as far as downloads from CVS and the like go, and I've added quite a bit of useful information into it as well.
Go through the ASSP configuration VERY carefully, and ONLY change what you're sure of. Start with the RBLs, increase the list to 5 and max hits to 2 as suggested.
If you notice problems with this or know how it might be better, hey, feel free to post in here and I'll keep it as updated as possible :)Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
01-29-2007, 07:31 AM #2Junior Guru Wannabe
- Join Date
- Dec 2006
- Posts
- 35
Nice sum-up
0
-
01-29-2007, 04:55 PM #3Web Hosting Evangelist
- Join Date
- Apr 2006
- Posts
- 520
great how to!
0
-
01-30-2007, 05:15 PM #4Aspiring Evangelist
- Join Date
- Mar 2005
- Posts
- 361
Very good. Thanks very much.
0
-
02-19-2007, 08:05 PM #5Web Hosting Master
- Join Date
- Jun 2003
- Location
- Indiana, US
- Posts
- 1,355
Will this How-To also work for the new 1.3.0?
0
-
02-19-2007, 08:30 PM #6Originally Posted by Ran
Once this is an official release, I'll update the howtoTom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
02-20-2007, 09:34 AM #7
This should work without problems to update to 1.3.0. IF you already have assp installed:
-- Login to your server (ssh) as root
-- STOP assp
Code:/etc/init.d/assp stop
Code:cd /usr/local/assp mkdir files cd files wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.4/ipwl.txt wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.5/ipnp.txt wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.10/nodelay.txt wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.8/invalidptr.txt wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.7/blackdomains.txt wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.11/bombre.txt wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.0/URIBLCCTLDS.txt cd ../images/ rm -rf assp.css wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.1/info.png wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.2/assp.css cd ../ ls mv assp.pl assp.pl.stable mv rebuildspamdb.pl rebuildspamdb.stable mv repair.pl repair.pl.stable wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.6/repair.pl wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.3/rebuildspamdb.pl wget http://www.magicvillage.de/~Fritz_Borgstedt/assp/S05B0C8D4.12/assp.pl
Code:/etc/init.d/assp start
Follow the instructions in the FIRST post UP TO
The core of ASSP is now installed. However, the development versions have updated functions to use for users. Of course, this is completely optional, but is recommended completely. This can be done by the following in SSH
Skip that entire section in the original post
Once you've done the beta update stuff, then you can resume the instructions in the ORIGINAL post, beginning with:
chmod u+x /usr/local/assp/*.pl
Now, let's get it up and running, and configure it, shall we?Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
02-24-2007, 02:38 AM #8New Member
- Join Date
- Feb 2007
- Posts
- 3
secure smtp service is not available anymore, it stop after we applied assp on our server. is there anyway to enable secure smtp again?
0
-
03-02-2007, 05:12 PM #9Disabled
- Join Date
- Dec 2006
- Posts
- 21
Hi,
How can I know if it's really work when my installation is just new on the server ? Thank you.
Best Regards,0
-
03-03-2007, 03:23 PM #10Newbie
- Join Date
- Mar 2006
- Posts
- 10
I have some CPU High Loads...
ASSP require a High load? ASSP stop any e-mail where not is SPAM?
Thank's for How To...!http://www.webrazuca.com/ - weBrazuca do Brasil0
-
03-04-2007, 07:54 AM #11Originally Posted by weBrazuca
Originally Posted by weBrazuca
Originally Posted by VVIP
Originally Posted by wafer
Q: Can ASSP be run with SSL / TLS connections?
No - not natively. Natively, ASSP only works with non-SSL connections. However, there are possibilities to use SSL for your email users to protect their authentication process. Third party utilities such as stunnel (http://stunnel.mirt.net) allow you to use SSL/TLS to encrypt connections between your outside party and ASSP. There is only one caveat; stunnel works as a proxy between your outside connection and ASSP. Consequently, ASSP sees the connection as originating from stunnel (typically 127.0.0.2), and not the sending party. This means that all connection checks (delaying, greylisting, RBL, etc) would not work with these connections. Consequently, if you want to use stunnel to protect any SMTP authentication process with your clients, you should prevent all non-AUTH connections to this port. This can be accomplished by setting the endport of stunnel to "Another Listen Port" (in Network Setup), and enabling "Enforce AUTH before MAIL FROM when connecting to second SMTP port". This will prevent any non-authenticated users from sending email through the encrypted stunnel connection.
Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
03-05-2007, 10:54 PM #12AKA "Faze"
- Join Date
- Mar 2007
- Location
- Washington State
- Posts
- 1,088
Is this worth it, what are your opinions on this. Do you guys like it?
0
-
03-07-2007, 11:03 AM #13Junior Guru
- Join Date
- Mar 2007
- Location
- 1010010101
- Posts
- 235
ASSP looks good for Internet webmail access but when clients use Outlook or ThunderBird to download (POP3) e-mails from the server and they receive a spam e-mail, what do they do to mark that e-mail is a spam and how ASSP on the server will know about that to add in its database list ?
Gestion Nexus
www.gestionnexus.qc.ca0
-
03-07-2007, 11:12 AM #14
ASSP has nothing to do with the "mail client" at all. It has everything to do with the SMTP server, as it forwards all mail to the REAL SMTP server after the garbage is filtered out.
what do they do to mark that e-mail is a spam
Is it worth it? Most definitely. Regardless of the mail client you're using, it is worth it. Regardless of the setup you are using, it is worth it. You won't find much else as smart as ASSP is.Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
03-07-2007, 11:23 AM #15Junior Guru
- Join Date
- Mar 2007
- Location
- 1010010101
- Posts
- 235
Is the special folder has to be the same name as the one on the server: spam & not spam ? Will ASSP update this folder on next download ?
Gestion Nexus
www.gestionnexus.qc.ca0
-
03-08-2007, 11:35 PM #16Newbie
- Join Date
- Mar 2006
- Posts
- 10
Hi...
Thank's for anwser...can be installed for cPanel?http://www.webrazuca.com/ - weBrazuca do Brasil0
-
03-08-2007, 11:57 PM #17Junior Guru
- Join Date
- Mar 2007
- Location
- 1010010101
- Posts
- 235
The tutorial is based on Cpanel installation.
Gestion Nexus
www.gestionnexus.qc.ca0
-
03-10-2007, 10:19 PM #18Web Hosting Master
- Join Date
- Feb 2004
- Posts
- 631
easiest way to install assp on cpanel? use isprohosting.com's assp installer.
from his cpanel forums post:
You may try to install our FREE ASSP addon from http://www.sultanserver.com/projects/asspx.tar.gz
It works for us already in production and actually it works better than Exim-tweaks based setup.
We are working on cPanel interface so soon it will be the great free script0
-
03-10-2007, 10:36 PM #19Junior Guru
- Join Date
- Mar 2007
- Location
- 1010010101
- Posts
- 235
Originally Posted by boeki
Actually, in version.txt file says 1.0.7. Do you know if it is a version of their script or the version of assp it uses ? Thank you.Gestion Nexus
www.gestionnexus.qc.ca0
-
03-11-2007, 12:41 AM #20Web Hosting Master
- Join Date
- Feb 2004
- Posts
- 631
Originally Posted by MyHostingTalk
i was struggling with assp's gazillion settings but this script set everything (well, almost) for me and it run fine.
plus, it'll post in whm anything it finds wrong with the setup.
ps. i am not the developer. i also just downloaded it from isprohosting's site.0
-
03-11-2007, 05:04 AM #21Originally Posted by boeki
root@server [~/assp/asspx/asspscripts]# pico asspcheckCode:#!/bin/sh # License: Copyright (c) 2006-2007 by SultanServer.com # Read included LICENSE.TXT for terms and conditions of use. # # Version: Read included asspxversion.txt # # Description: ASSP X WHM addon to manage ASSP installation and configure ASSP on per domain level on cPanel servers. # ASSP daemon automatic check and restart. assplog=/usr/local/assp/check.log DATE=`date "+%m-%d-%y [%k:%M]"` pidof='/usr/local/assp/pid' if [ -e "$pidof" ]; then thispid=`cat $pidof` if [ ! -d "/proc/$thispid" ]; then /bin/rm -rf $pidof; /etc/init.d/assp stop # false proof /etc/init.d/assp start echo "$DATE - ASSP - restarted" >> $assplog else echo "$DATE - ASSP - ok" >> $assplog fi else /etc/init.d/assp stop # false proof /etc/init.d/assp start echo "$DATE - ASSP - restarted" >> $assplog fi
This is why people are so hesitant to do stuff like this for free and "open source" any more . People take it, steal it, then claim "oh , it's MY work", trying to copyright it
Is it a good resource? It might be, however trying to steal someone else's work and call it yours, not going to cut it. I mean come on now!!!Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
03-11-2007, 05:38 AM #22Web Hosting Master
- Join Date
- Feb 2004
- Posts
- 631
i actually started off with linux-tech's how-to but i had a lot of trouble with it as some of the links (wget to the txt and pl files) point to the wrong stuff (e.g., scripts contain regex list, html, etc.)
example:
wget http://www.magicvillage.de/~Fritz_Bo...buildspamdb.pl
file content:
body, p, td {
font-size: 11pt; font-family: Verdana, Arial, Helvetica,
sans-serif; color: #666666; padding: 2px; margin: 0; background-color: #e9e9e9;
}
a {
font-weight: bold; color: #666666; }
a:hover {
color: black;
text-decoration: none; }
img {
border-style: none; }
........
........(snipped off)
isprohosting's script installed the rules and configuration files for me and it was a matter of reviewing it to see if they were suited for my boxes.
my gratitude goes to linux-tech and isprohosting.0
-
03-11-2007, 05:43 AM #23Web Hosting Master
- Join Date
- Feb 2004
- Posts
- 631
This doesn't actually do a thing to check to make sure the perl modules are installed0
-
03-11-2007, 06:23 AM #24some of the links (wget to the txt and pl files) point to the wrong stuff
the development versions have updated functions to use for users
The reason those files wouldn't download? That's because those are outdated. You should NEVER use development versions on your servers unless you know full well what you're doing and can backup quickly. The OFFICIAL version for ASSP is still 1.2.6, which still works with this:
Code:wget http://switch.dl.sourceforge.net/sourceforge/assp/ASSP_1.2.6-Install.zip
this how-to doesn't help out much on this.
This howto tells you EVERYTHING you need to change. Anything else changed is unnecessary. The documentation is very thorough and self explanatory as to what does what.
isprohosting's script installed the rules and configuration files for me and it was a matter of reviewing it to see if they were suited for my boxes.
This is yet another reason NOT to use the tar file. Using betas can be very very hazardous to your health. An example:
When moving from 1.2.6 to 1.3.0 (for the second tutorial, not the first), I suddenly found EVERYTHING was bouncing as a "relay". Why? There were problems with the perl script. Seeing this, I reverted back immediately, and resolved to try another day. When I tried last week (same configuration, same everything), everything went smoothly. The difference? A few days of development and the problem was resolved.
UNLESS you're comfortable with the very same thing happening to you, STAY with the stable version. The others for now are CVS. When they update things on sourceforge, then I'll update the post with new instructions.
Configuring ASSP is reasonably simple, it's not "tech speak". There are plenty of help links and documentation pages out specifying what does what. If you followed the instructions for modifying the initial configuration, you would have had it running in no time.Tom Whiting, WHMCS Guru extraordinaire
Linux problems? WHMCS Problems? Give me a shout
Check out my WHMCS Addons0
-
03-11-2007, 06:31 AM #25Newbie
- Join Date
- Mar 2005
- Posts
- 27
Originally Posted by linux-tech
We have got asspcheck script in the plain way with no comments so we have left it intact. I must apologize for that and you may find in the latest ASSP X 1.1.1 release that the script is entirely rewritten in perl. We may add the note to this script (like in init scripts released by Matt) that the idea is yours. PM me the line, please.http://sultanhost.com/ - sales@sultanhost.com
"The Sultans of the Hosting industry."
30 Day Moneyback, 99,9% Uptime & 100% Satisfaction Guarantees.
Unlimited Domains Reseller Accounts & Managed Servers0