spamGuard 1.8 README
	---------------------------------------

Nearly all of today's mail system administrators face spam as their
first threat. Because of this, EnderUNIX team has written this small
application to automagically monitor malicious spammer activity in
your mail server logs.

spamGuard is written purely in C, to stop spammers hanging around.
The program supports nearly all mostly used MTAs; qmail (qSheff,
multilog, and splogger), sendmail and Postfix.

Rationale:
----------

1. spamGuard is fired via crontab within fixed intervals.
2. spamGuard scans the accumulated maillog and finds the amount of
mails users sent.
3. spamGuard loads its ignore list from its
   ignore file and badmailfiles files(badmailfrom in
   qmail and access for sendmail).
4. users whose mail count exceeds the configured threshold value(there
   are three different values: warning, block and paranoid) are treated
   as spammers. They are added to mailers' badmail file (spammer
   blacklist files).
5. Notification mails are sent to sysadmins about spammer activity,
   if present.
6. (For sendmail version, a hash database of access
   file is created).

spamGuard can process a 85 MB log file in less then 10 seconds.

Tested on: FreeBSD 4-STABLE Solaris 2.7-Sparc
Solaris 9-Sparc Slackware Linux 8.0 RedHat 9, Digital UNIX, HP-UX

If your OS is DigitalUnix, please read README.DigitalUnix.

For questions, there is a mailing list available: To subscribe send
mail to: spamguard-subscribe@yahoogroups.com


EnderUNIX SDT @ Istanbul/Turkey bug-report at enderunix dot org -
http://www.enderunix.org


Tue May 08 21:08:08 EEST 2007

README Digital Unix.
--------------------

When you launch or run spamGuard on Digital Unix, "if" spamGuard
woes for an Unaligned Access error e.g.:

[1200]#/usr/local/bin/spamguard -w 50 -b 100 -p 2000
Unaligned access pid=31946 <spamguard> va=0x14000d23c pc=0x3ff8019ce0c ra=0x3ff800d7134 inst=0xa560fff8
Unaligned access pid=31946 <spamguard> va=0x14001607c pc=0x3ff8019ce0c ra=0x3ff800d7134 inst=0xa560fff8
Unaligned access pid=31946 <spamguard> va=0x14001631c pc=0x3ff8019ce0c ra=0x3ff800d7134 inst=0xa560fff8


Solution:
---------
Before running spamGuard, run the command "/usr/bin/uac p 0" (without the quotes).
So your crontab entry can be: (all in one line)

0,5,10,15,20,25,30,35,40,45,50,55 * * * * /usr/bin/uac p 0 ;
/usr/local/bin/spamguard -w 50 -b 100 -p 2000


Credits:
--------
Thanks "Juan Enciso" <jenciso@isp.qnet.com.pe>, for notifying this.

Sendmail Specific
-----------------

* If you don't want to filter your customers/local users, simply type following command:

  # cat /etc/mail/local-host-names | sed s/^/\*\@\*\./g > $PREFIX/spam-ignore.txt