1. Educational Network Center of Tainan City Anti-SPAM Report Kuo-Kuang Chu

2. Configuration in TN Mail spool account DNS Client or Other SMTP servers MX record for SMTP? A record for SMTP ? SMTP, IMAP, POP3, webmail Mail Exchanger Remote Filter messages 10025 mail.tn.edu..tw ms1.tn.edu..tw ms2.tn.edu..tw Mail.tn.edu.tw: P4 3.2G, 1GB ram, 40+150+150GB DSK CPU idle 90%-99%, used swap 4096k Ms(1|2).tn.edu.tw: P4-2.8G*2, 1GB ram, 36G DSK CPU idle 85%-99%, used swap 0k 10024 25 MX record for filter ?

3. TN Mail Anti-SPAM Process All Messages 27% Graylist 73% ClamAV Spam- Assassin 25% 17% 2% 3% Not-delivered Spam-level>16 Virus Rejected 5% Spam alert Spam-level:6-15 Passed

4. Day Report in TN Mail http://ms1.tn.edu.tw/amavis.day.html http://ms2.tn.edu.tw/amavis.day.html The load is evenly distributed between ms1 and ms2 Date Range: 2004/11/01 00:00:00 - 2004/12/01 00:00:00

5. TN Mail Filter Statistics Date Range: 2004/11/01 00:00:00 - 2004/12/01 00:00:00

6. Passed & Not-delivered Messages Add SPAM alert In Subject

7. Passed Messages Top 5 Client Hosts Top 5 Client Domains Top 5 Senders Top 5 Sender Hosts Top 5 Sender Domains

8. Not-delivered Messages Top 5 client hosts of spam Top 5 client domains of spam Top 5 senders of spam Top 5 sender hosts of spam Top 5 sender domains of spam

9. Infected Messages Top 5 Virus Top 5 Client Hosts Top 5 Client Domains Top 5 Senders Top 5 Sender Hosts Top 5 Sender Domains

10. Rejected Messages Top 5 Reject reasons Top 5 Client Hosts Top 5 Client Domains Top 5 Senders Top 5 Sender Hosts Top 5 Sender Domains

11. Rejected Connections Top 5 Reject Reasons Top 5 Client Hosts Top 5 Client Domains Top 5 Senders Top 5 Sender Hosts Top 5 Sender Domains

12. Mail Filter Log Advanced Search

13. Add SPAM Level in Subject

14. SpamAssassin local.cf Sample bodyMailName_ZH/ 姓名 / describeMailName_ZHBody contain spammer msg in chinese scoreMailName_ZH1 bodyMail_ADDR/ 住址 / describeMail_ADDRBody contain spammer msg in chinese scoreMail_ADDR1 bodyMail_MOBILE/ 手機 | 行動 / describeMail_MOBILEBody contain spammer msg in chinese scoreMail_MOBILE1 bodyMail_EMAIL/E-Mail|EMail| 電子郵件 | 電郵 | 電子信箱 / describeMail_EMAILBody contain spammer msg in chinese scoreMail_EMAIL0 bodyMail_TEL/ 電話 / describeMail_TELBody contain spammer msg in chinese scoreMail_TEL0 bodyMail_SEND/ 郵寄 / describeMail_SENDBody contain spammer msg in chinese scoreMail_SEND0 metaMail_ZHMailName_ZH && Mail_ADDR && (Mail_MOBILE || Mail_TEL ||Mail_EMAIL || Mail_SEND) describeMail_ZHBody contain spammer msg in chinese scoreMail_ZH3

15. Meta Score in local.cf

16. Reconfigure local.cf Parse local.cf –spamassassin --lint local.cf Restart amavisd –/usr/local/sbin/amavisd stop –/usr/local/sbin/amavisd start

17. TN Mail Management System

18. School Personnel Approved