SpamAssassin (Paperback)

by Alan Schwartz (Author)
Key Phrases: autowhitelist database, sitewide configuration file, spam score, Spam-Checking Gateway, Learning System, Spam-Checking All Incoming Mail (more...)

Editorial Reviews

Product Description
The annoyance factor for individual users whose email is crammed with pitches for pornography, absurd moneymaking schemes, and dubious health products is fierce. But for organizations, the cost of spam in lost productivity and burned bandwidth is astronomical. While society is grappling with a solution to the burgeoning crisis of spam proliferation, the pressure is on system administrators to find a solution to this massive problem in-house. And fast.

Sys admins can field scores of complaints and spend months testing software suites that turn out to be too aggressive, too passive, or too complicated to setup only to discover that SpamAssassin (SA), the leading open source spam-fighting tool, is free, flexible, powerful, highly-regarded, and remarkably effective. The drawback? SpamAssassin's lack of published documentation.

SpamAssassin by Alan Schwartz, is the only published resource devoted to SpamAssassin and how to integrate it effectively into your networks. This clear, concise guide clarifies the installation, configuration, and use of the SpamAssassin spam-checking system (versions 2.63 and 3.0) for Unix system administrators using the Postfix, Sendmail, Exim, or qmail mail servers, helping administrators make the right integration decision for their particular environments.

It covers concrete advice on how to:
Customize SpamAssassin's rules, and even create new ones
Train SpamAssassin's Bayesian classifier, a statistical engine for detecting spam, to optimize it for the sort of email that you typically receive
Block specific addresses, hosts, and domains using third-party blacklists like the one maintained by Spamcop.net.
Whitelist known good sources of email, so that messages from clients, coworkers, and friends aren't inadvertently lost.
Configure SpamAssassin to work with newer spam-filtering methods such as Hashcash and Sender Policy Framework (SPF).
Sys admins, network administrators, and ISPs pay for spam with hours of experimentation and tedious junk email management, frayed user tempers, and their sanity.
SpamAssassin, together with this essential book, give you the tools you need to take back your organization's inboxes.

About the Author
Alan Schwartz, Ph.D. is an assistant professor of clinical decision making in the Departments of Medical Education and Pediatrics at the University of Illinois at Chicago. He is also the author of Managing Mailing Lists and the coauthor of Stopping Spam (both from O'Reilly). He serves as a consultant on Unix system administration for several ISPs. In his spare time, he develops and maintains the PennMUSH MUD server and brews beer and mead with his wife, with whom he also develops and maintains their son. Turn-ons for Alan include sailing, programming in Perl, playing duplicate bridge, and drinking Anchor Porter. Turn-offs include spam and watery American lagers.

Product Details

• Paperback: 207 pages
• Publisher: O'Reilly Media, Inc.; 1st edition (July 2004)
• Language: English
• ISBN-10: 0596007078
• ISBN-13: 978-0596007072
• Product Dimensions: 9.5 x 6.9 x 0.6 inches
• Shipping Weight: 13.4 ounces (View shipping rates and policies)
• Average Customer Review: 2.9 out of 5 stars See all reviews (8 customer reviews)
• Amazon.com Sales Rank: #423,374 in Books (See Bestsellers in Books)

  Popular in this category: (What's this?)

  #49 in

  Books > Computers & Internet > Software > Business > Utilities

Customer Reviews

Most Helpful Customer Reviews

14 of 15 people found the following review helpful:

2.0 out of 5 stars Doesn't cut down on the confusion, September 6, 2004

By	Andrew Metcalf (San Francisco, CA. via ATL) - See all my reviews (REAL NAME)

Coming into Spamassassin as a new user is very confusing, especially if you don't admin e-mail systems frequently. The spamassassin wiki and documentation are really confusing as well, it seems that nothing really explains the system as a whole very well. Finally, a real book about Spamassassin (I thought). This book skipped over a lot of topics I want to know more about (logging spamassassin activity, how to install razor and pyzor, more information about the RBLs installation and configuration). I don't think so much time should have been spent on Baysean techniques, I find Baysean to be too labor intensive and not practical at all on a site-wide level (which I think the author mentions in the book). This book was good, but not as complete as I was expecting, but as a reference for Spamassassin I suppose it's ok, but not anything better than is online.

16 of 22 people found the following review helpful:

1.0 out of 5 stars skip the book, September 2, 2004

By	Alois van Klinken (USA) - See all my reviews

Had high hopes when I got this book. Sadly letdown. The book gives a tired old treatment of using a black list to check against the header of a mail message. Now not all spammers forge the header. But many do, as known for years. And they don't just forge the From line. They can also forge the Received lines.

When the author wrote the previous review, he mentioned the Received header lines. But, in general, for an ISP, the only valid header info is what the ISP itself writes. Received lines not written by the ISP can also be forged.

So using a black list on a header can easily be defeated by a spammer. And is being done so by many of them.

But Schwartz goes on to say that SA can now apply the black list against the body links. GREAT! Awesome. This is the key difference between 3.0 and the earlier stuff. Yet, when I went thru the book, I did not see any mention of this. Okay, perhaps I missed it. But if the book actually talks about it, it is in a very obscure fashion.

The new ability in 3.0 is seminal. Because while a spammer can forge headers, if he wants users to click through to his site, he has to write a valid address for himself. When AOL implemented this idea [not using SA] earlier this year, they said it led to the first documented decrease in spam they'd seen.

I repeat- if the book didn't mention the new 3.0 ability, it is grossly deficient. If it did mention it, but scantily, ditto. It certainly deserves at least as much space as was given to Mr Bayes.

4 of 5 people found the following review helpful:

4.0 out of 5 stars Took some thinking about configuration but works great, October 14, 2004

By	Harold McFarland (Florida) - See all my reviews (TOP 50 REVIEWER)    (REAL NAME)

SpamAssassin is the immensely popular open-source spam solution for the Linux/Unix world. This book covers version 3.0, which, curiously enough, is not included with the book. This is pretty unusual in the open-source world since it costs very little to put a copy of the program onto CD and bind it into the book.

The reasons for SpamAssassin's popularity include its high level of customizability, the ability to change the rules and the weights assigned to those rules, automatically report spam to clearinghouses, ability to interface with other resources on the internet including DNS blacklists, ability to create a whitelist, and the ability to work with a wide variety of mail systems including sendmail, Postfix, qmail, and Exim. One of the really nice features is the ability for the system to automatically add a person to the whitelist if you send an outgoing email to that person.

Of course all of this requires an understanding of how SpamAssassin works and how to configure and tweak it to get it to do what you want. That is where this book comes in. The author has done an excellent job of explaining not only the concepts but also the details of how SpamAssassin works and how to tweak it to work best in your environment. This is easily one of the most clearly written and understandable books on configuring the software that I have read. SpamAssassin is highly recommended for anyone on a Unix-like system who is considering using the program as a spam control solution.

It took some time to figure out how to configure it best for my needs but my spam is down over 90% with no false positives. Don't expect the author to spoon feed you what is best for your system, but he gives you the information to design one that works for you.