Recommended SA Plugins

[MiamiJack]

Hello All,

We are seeing too much spam, and wondering if you could share what plugins you are using which are blocking without many false positives.

Thanks!

 

[MiamiJack]

BUMP!
Nobody?

 

[dcsapak]

what kind of plugins do you talk about? for us the default spamassassin config works quite well

 

[MiamiJack]

We still get a ton of spam, and I understand there are other rules which can be added as well as some plugins to help further quarantine junk.

After the upgrade we had several plugins that were missing, and using cpan I installed some of those modules, but still have some that aren't working and I can't install with cpan.

I know under Centos we can install certain cpan modules with RPM, not as familiar with Debian.

Below is the current status of my ProxMox Mail Gateway in respect to SA.

 sa-update --nogpg --channel sa.schaal-it.net -D
Apr 20 12:20:23.989 [185807] dbg: logger: adding facilities: all
Apr 20 12:20:23.989 [185807] dbg: logger: logging level is DBG
Apr 20 12:20:23.989 [185807] dbg: generic: SpamAssassin version 4.0.0
Apr 20 12:20:23.989 [185807] dbg: generic: Perl 5.032001, PREFIX=/usr, DEF_RULES_DIR=/usr/share/spamassassin, LOCAL_RULES_DIR=/etc/mail/spamassassin, LOCAL_STATE_DIR=/var/lib/spamassassin
Apr 20 12:20:23.989 [185807] dbg: config: timing enabled
Apr 20 12:20:23.990 [185807] dbg: config: score set 0 chosen.
Apr 20 12:20:23.994 [185807] dbg: generic: sa-update version 4.0.0 / svn1900642
Apr 20 12:20:23.994 [185807] dbg: generic: using update directory: /var/lib/spamassassin/4.000000
Apr 20 12:20:26.105 [185807] dbg: diag: perl platform: 5.032001 linux
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: Digest::SHA, version 6.02
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: HTML::Parser, version 3.75
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: Net::DNS, version 1.29
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: NetAddr::IP, version  4.079
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: Time::HiRes, version 1.9764
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: Archive::Tar, version 2.36
Apr 20 12:20:26.105 [185807] dbg: diag: [...] module installed: IO::Zlib, version 1.10
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: Digest::SHA1 ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: MIME::Base64, version 3.15
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: DB_File, version 1.853
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Net::SMTP, version 3.11
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Net::LibIDN2, version 1.01
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: Net::LibIDN ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Mail::SPF, version v2.009
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: MaxMind::DB::Reader ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: MaxMind::DB::Reader::XS ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Geo::IP, version 1.51
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: IP::Country::DB_File ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: IP::Country::Fast, version 604.001
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Razor2::Client::Agent, version 2.84
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: IO::Socket::IP, version 0.39
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: IO::Socket::INET6, version 2.72
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: IO::Socket::SSL, version 2.069
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Compress::Zlib, version 2.101
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Mail::DKIM, version 1.20200907
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: DBI, version 1.643
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: DBD::SQLite, version 1.66
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: LWP::UserAgent, version 6.52
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Encode::Detect::Detector, version 1.01
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: Net::Patricia ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Net::CIDR::Lite, version 0.22
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Net::DNS::Nameserver, version 1813
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module not installed: BSD::Resource ('require' failed)
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Archive::Zip, version 1.68
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: IO::String, version 1.08
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Email::Address::XS, version 1.04
Apr 20 12:20:26.105 [185807] dbg: diag: [...] optional module installed: Mail::DMARC, version 1.20211209
Apr 20 12:20:26.108 [185807] dbg: util: secure_tmpfile created a temporary file /tmp/.spamassassin185807hnEbYftmp
Apr 20 12:20:26.108 [185807] dbg: channel: attempting channel sa.schaal-it.net
Apr 20 12:20:26.108 [185807] dbg: channel: using existing directory /var/lib/spamassassin/4.000000/sa_schaal-it_net
Apr 20 12:20:26.108 [185807] dbg: channel: channel cf file /var/lib/spamassassin/4.000000/sa_schaal-it_net.cf
Apr 20 12:20:26.108 [185807] dbg: channel: channel pre file /var/lib/spamassassin/4.000000/sa_schaal-it_net.pre
Apr 20 12:20:28.208 [185807] dbg: dns: query failed: 0.0.4.sa.schaal-it.net => NXDOMAIN
Apr 20 12:20:30.373 [185807] dbg: channel: no updates available, skipping channel
Apr 20 12:20:30.373 [185807] dbg: diag: updates complete, exiting with code 1

 

[dcsapak]

After the upgrade we had several plugins that were missing, and using cpan I installed some of those modules, but still have some that aren't working and I can't install with cpan.

which were missing?
note that hashcash was removed without replacement, see the spamassassin changelogs:

HashCash module, formerly deprecated, has now been removed completely

i would not install anything directly from cpan on a debian installation, this can break your setup (many parts of debian rely on perl, and pulling in code from cpan which might be incompatible can break that)
instead check if there is already a debian package, the naming goes like this:

libpackage-name-perl

e.g. the perl package 'Text::Glob' is the debian package libtext-glob-perl