14 of 16 people found the following review helpful
2.0 out of 5 stars
Doesn't cut down on the confusion, Sep 6 2004
By Andrew Metcalf - Published on Amazon.com
This review is from: SpamAssassin (Paperback)
Coming into Spamassassin as a new user is very confusing, especially if you don't admin e-mail systems frequently. The spamassassin wiki and documentation are really confusing as well, it seems that nothing really explains the system as a whole very well. Finally, a real book about Spamassassin (I thought). This book skipped over a lot of topics I want to know more about (logging spamassassin activity, how to install razor and pyzor, more information about the RBLs installation and configuration). I don't think so much time should have been spent on Baysean techniques, I find Baysean to be too labor intensive and not practical at all on a site-wide level (which I think the author mentions in the book). This book was good, but not as complete as I was expecting, but as a reference for Spamassassin I suppose it's ok, but not anything better than is online.
16 of 22 people found the following review helpful
1.0 out of 5 stars
skip the book, Sep 2 2004
By Alois van Klinken - Published on Amazon.com
This review is from: SpamAssassin (Paperback)
Had high hopes when I got this book. Sadly letdown. The book gives a tired old treatment of using a black list to check against the header of a mail message. Now not all spammers forge the header. But many do, as known for years. And they don't just forge the From line. They can also forge the Received lines.
When the author wrote the previous review, he mentioned the Received header lines. But, in general, for an ISP, the only valid header info is what the ISP itself writes. Received lines not written by the ISP can also be forged.
So using a black list on a header can easily be defeated by a spammer. And is being done so by many of them.
But Schwartz goes on to say that SA can now apply the black list against the body links. GREAT! Awesome. This is the key difference between 3.0 and the earlier stuff. Yet, when I went thru the book, I did not see any mention of this. Okay, perhaps I missed it. But if the book actually talks about it, it is in a very obscure fashion.
The new ability in 3.0 is seminal. Because while a spammer can forge headers, if he wants users to click through to his site, he has to write a valid address for himself. When AOL implemented this idea [not using SA] earlier this year, they said it led to the first documented decrease in spam they'd seen.
I repeat- if the book didn't mention the new 3.0 ability, it is grossly deficient. If it did mention it, but scantily, ditto. It certainly deserves at least as much space as was given to Mr Bayes.
4 of 5 people found the following review helpful
4.0 out of 5 stars
Took some thinking about configuration but works great, Oct 14 2004
By Harold McFarland - Published on Amazon.com
This review is from: SpamAssassin (Paperback)
SpamAssassin is the immensely popular open-source spam solution for the Linux/Unix world. This book covers version 3.0, which, curiously enough, is not included with the book. This is pretty unusual in the open-source world since it costs very little to put a copy of the program onto CD and bind it into the book.
The reasons for SpamAssassin's popularity include its high level of customizability, the ability to change the rules and the weights assigned to those rules, automatically report spam to clearinghouses, ability to interface with other resources on the internet including DNS blacklists, ability to create a whitelist, and the ability to work with a wide variety of mail systems including sendmail, Postfix, qmail, and Exim. One of the really nice features is the ability for the system to automatically add a person to the whitelist if you send an outgoing email to that person.
Of course all of this requires an understanding of how SpamAssassin works and how to configure and tweak it to get it to do what you want. That is where this book comes in. The author has done an excellent job of explaining not only the concepts but also the details of how SpamAssassin works and how to tweak it to work best in your environment. This is easily one of the most clearly written and understandable books on configuring the software that I have read. SpamAssassin is highly recommended for anyone on a Unix-like system who is considering using the program as a spam control solution.
It took some time to figure out how to configure it best for my needs but my spam is down over 90% with no false positives. Don't expect the author to spoon feed you what is best for your system, but he gives you the information to design one that works for you.