On a Debian or Ubuntu VPS, install SpamAssassin with sudo apt-get update && sudo apt-get install spamassassin spamc, refresh its rules with sa-update, enable the packaged spamd service, and have your mail server submit messages through spamc. Fedora, CentOS and Red Hat use the distribution’s yum package; Gentoo uses Portage. The exact service unit and Postfix paths vary by release, so verify them on the VPS before enabling mail filtering.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
What you are installing
SpamAssassin has two operating parts. spamd is the long-running daemon that keeps the scanner loaded, while spamc is the small client that sends a message to that daemon and returns the scanned result. A mail transfer agent (MTA) such as Postfix should normally call spamc, not start the full spamassassin program for every message. The daemon/client arrangement avoids repeated startup work and is the pattern documented by the Apache SpamAssassin project.
As an Amazon Associate I earn from qualifying purchases.
Installation alone does not put a filter in your mail path. You must install the package, obtain current rules, configure policy, start the daemon, and then connect the MTA to the client. Keep those stages separate while testing so a service problem cannot be mistaken for a Postfix routing problem.
Before you begin
- Use a VPS with root or sudo access and a supported package repository for its exact distribution release.
- Know which MTA receives mail. The procedure below describes Postfix integration; Exim, Sendmail and other MTAs use different filter hooks.
- Make a backup of existing mail and MTA configuration before changing the delivery path. A malformed content-filter definition can delay, loop or discard legitimate mail.
- Have a controlled mailbox available for a non-destructive test. Do not begin by rejecting messages based on a copied score.
- Record the current service names with
systemctl list-unit-files | grep -i spam. Distribution packages do not always use identical unit names.
Choose an installation method
| System or method | Primary command | What you must handle afterward |
|---|---|---|
| Debian or Ubuntu package | sudo apt-get updatesudo apt-get install spamassassin spamc |
Enable the packaged daemon, inspect the unit name, configure /etc/spamassassin, and connect the MTA. |
| Fedora, CentOS or Red Hat package | sudo yum install spamassassin |
Use the release’s service unit and confirm that the client binary is installed or supplied by a companion package. |
| Gentoo package | sudo emerge mail-filter/spamassassin |
Configure the init or systemd service supplied by the selected ebuild and verify client and daemon paths. |
| Source build | perl Makefile.PLmakemake install |
Provide build dependencies, create a service definition, choose an unprivileged runtime user, manage rule-update directory ownership, and define an upgrade and rollback process. |
For most VPS operators, the distribution package is the safer starting point. It integrates with the operating system’s dependency database and service manager and is easier to remove or roll back. A source build is appropriate when you require a release or compile option not supplied by the distribution, but you assume responsibility for those lifecycle tasks.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Install on Debian or Ubuntu
1. Refresh package metadata and install both components
sudo apt-get update
sudo apt-get install spamassassin spamcThe Apache project lists apt-get install spamassassin as the Debian/Ubuntu route. Installing spamc explicitly makes the MTA dependency visible and avoids discovering a missing client only after you have edited Postfix.
2. Identify and enable the daemon
Debian documents that its packaged spamd is disabled by default. On releases that provide the spamassassin unit, the usual sequence is:
sudo systemctl enable spamassassin
sudo systemctl start spamassassin
sudo systemctl status spamassassinCheck the actual unit first. If systemctl status spamassassin reports that the unit does not exist, list matching units and read the package README rather than substituting a command from another release. Enabling a service creates the boot-time link; starting it launches the current process immediately. A successful package installation does not prove that the daemon is running.
3. Confirm the client and daemon can be found
command -v spamc
command -v spamassassin
systemctl --no-pager status spamassassinThe first command should return the client path that you will use in the MTA configuration. The second is useful for diagnostics and one-off tests, but it is not the efficient path for production mail. If the service is active, inspect its log output for startup errors before integrating Postfix.
Install on Fedora, CentOS or Red Hat
The Apache installation document lists the RPM-family command as:
sudo yum install spamassassinUse the package manager supported by the particular release if it provides a compatibility front end. Package splits differ: some releases include the client with the main package, while others expose it separately. Verify with command -v spamc and the package’s file list before writing an MTA service.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
Start and enable the service name supplied by that release, then inspect its status. Do not assume the Debian unit name or its default enablement policy applies to an RPM-based VPS. Confirm that the daemon is listening only where intended and that the client can reach it locally before Postfix is placed in front of it.
Install on Gentoo
sudo emerge mail-filter/spamassassinGentoo’s ebuild supplies the software through Portage. Follow the ebuild’s service instructions for your chosen init system, check the installed locations of spamd and spamc, and select a dedicated, unprivileged runtime account. Gentoo configuration may be split between package-managed defaults and local overrides; keep local policy in the documented site configuration location rather than editing files that upgrades replace.
Build from source when you have a specific reason
The Apache project documents this basic source sequence after extracting a release archive and entering its Mail-SpamAssassin-* directory:
perl Makefile.PL
make
sudo make installIf SSL support is required by the build, pass the documented option during configuration:
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →perl Makefile.PL ENABLE_SSL=yes
make
sudo make installA source installation does not automatically give you the distribution’s service unit, account policy, log rotation, package upgrade path or rollback mechanism. Before accepting mail, define all of the following:
- Which account owns and runs
spamd; it should not run with unnecessary root privileges. - Where rule updates are stored and which account may write those directories.
- How the daemon starts at boot, restarts after failure and receives a controlled configuration reload.
- How you will record the installed version and remove it without leaving a second copy of the executables on the VPS.
- How a failed upgrade returns the MTA to the previous scanner or to an unfiltered but functioning delivery path.
Refresh the rules safely
Run the updater after installing SpamAssassin:
sa-updatesa-update downloads and installs updated rule sets. The updater should match the SpamAssassin modules installed on the VPS. Apache’s documentation also advises safe ownership of the update directories and cautions against blindly running the updater as root. Use the normal SpamAssassin service account where the package instructions permit it, and verify that this account can write the update location without granting broad filesystem access.
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
An update is not a daemon reload. Debian’s sa-update(1p) manual explicitly states that sa-update does not restart spamd or make it reload the new rules automatically. After a successful update, perform the service action supported by your unit:
sudo systemctl restart spamassassin
sudo systemctl --no-pager status spamassassinIf the unit supports a safe reload and you prefer it, use that documented action instead. Read the log after the action; a restart that returns immediately can still be followed by a configuration or permission failure.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Automating updates
Use the operating system’s scheduler or timer to run the updater as the intended service account, then trigger an explicit daemon reload or restart. Stagger the operation so it cannot collide with package upgrades, and log both the updater result and the service action. Keep a copy of the previous rule directory or package state if your operational policy requires rapid rollback.
Configure site policy
Debian identifies /etc/spamassassin as the site-specific configuration directory. A common local policy file is /etc/spamassassin/local.cf. Back it up before editing:
sudo cp -a /etc/spamassassin/local.cf /etc/spamassassin/local.cf.backupIf the file does not yet exist, create it with the ownership and permissions used by the package’s other configuration files. Keep local decisions in this file instead of changing vendor defaults, so package upgrades remain understandable.
Decisions to make before writing directives
- Subject handling: decide whether suspected spam receives a subject marker or remains unchanged while headers carry the result.
- Score threshold: decide at which score to tag, quarantine or escalate a message. Debian documents a default tagging threshold of 5.0; that is a starting default, not proof that every message at that score should be rejected.
- Trusted networks: list only networks that you genuinely control. Trusting an entire provider range can allow forged mail to bypass useful checks.
- Action: tagging is safer during rollout than rejection. Reject only after observing your own traffic, false positives and recovery procedure.
Do not paste a sample policy without checking its effect on your MTA. A directive that changes headers, rewrites subjects or alters report formatting can affect downstream filtering and user support. After editing, restart or reload spamd and test a real message path.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Understand the packaged defaults
Debian documents a default spam score threshold of 5.0 for tagging. It also documents preservation of the original message as a message/rfc822 attachment in the generated report. The threshold describes the scanner’s default classification behavior; it is not a universal recommendation to discard mail. Preserve the original during initial deployment so recipients and administrators can inspect why a message was classified.
Review the headers on a test delivery rather than relying only on the subject. The report normally includes the score and rule results, which are more useful for tuning trusted networks and local policy than a single yes-or-no label.
Connect Postfix to SpamAssassin
Postfix needs a content-filter path that hands each message to /usr/bin/spamc and then returns the processed message to the local delivery command. Debian’s documented example adds a content-filter setting and a pipe service in master.cf; that pipe invokes spamc and then /usr/sbin/sendmail. Exact paths, service names, flags and the delivery user depend on the installed package, so treat the example as a model and adapt it to the files on your VPS.
Safe integration sequence
- Back up
/etc/postfix/main.cf,/etc/postfix/master.cfand any transport or virtual-alias files. - Confirm the absolute path returned by
command -v spamcand the sendmail-compatible reinjection command supplied by Postfix. - Add the content-filter setting in
main.cfand the corresponding pipe service inmaster.cf, following the Debian package example for argument order and an unprivileged filter user. - Run Postfix’s configuration check before reloading. Correct syntax, permissions and ownership errors first.
- Reload Postfix, send a controlled test message and watch the queue, service log and destination mailbox at the same time.
- Keep the previous files and a documented command to remove the filter. If mail loops, stalls or disappears, revert the filter and reload Postfix before investigating further.
The filter must return mail to Postfix exactly once. A wrong reinjection endpoint can create a delivery loop; an incorrect user or permission can cause deferred mail; and a missing client socket can leave the queue retrying indefinitely. Debian warns that integration mistakes can lose valid mail, which is why rollback and queue monitoring are part of the installation rather than optional cleanup.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Verify the complete path without rejecting mail
Check the daemon
sudo systemctl --no-pager status spamassassin
sudo journalctl -u spamassassin --since todayUse the unit name actually installed on your system. Look for a running daemon, successful rule loading and the absence of permission or bind errors.
Check a local client request
Use a harmless sample message or a copy of a message you are allowed to inspect. Submit it through the locally installed client and review the returned headers. The exact invocation and input format can vary by package, so follow the local spamc manual rather than assuming a universal test command.
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Check an end-to-end Postfix delivery
- Send from a controlled account to a mailbox on the VPS.
- Confirm that Postfix accepts the message and that its queue eventually becomes empty or records a clear delivery result.
- Inspect the received headers for SpamAssassin results and the expected subject behavior.
- Verify that the original message remains available in the report format selected by your policy.
- Send an ordinary, known-good message and confirm it follows the same path without an unexpected rejection or delay.
There is no single universal VPS test command because service units, MTAs and mailbox layouts differ. The useful test is the one that exercises your actual inbound path while you can still undo the filter.
Package installation versus a source build
| Consideration | Distribution package | Source build |
|---|---|---|
| Upgrades | Tracked by the operating system’s package manager. | You must track the installed files and repeat the build process. |
| Service integration | Usually accompanied by a distribution service unit and conventions. | You must create and maintain the service definition. |
| Dependencies | Resolved through configured repositories. | Build and runtime dependencies must be identified and maintained manually. |
| Rule-update ownership | Package documentation generally defines the expected account and directories. | You must choose ownership and enforce it consistently. |
| Rollback | Often a package downgrade or removal plus restoration of configuration. | Requires an archived build, install manifest and a tested removal procedure. |
| Customization | Limited to the versions and options shipped by the distribution. | Allows a selected release and documented build options such as SSL support. |
Choose source installation for a requirement you can name and maintain. Otherwise, the package path reduces the number of independent failure points on a mail server.
Why the daemon/client pair is preferable to direct invocation
| Approach | How it works | Operational consequence |
|---|---|---|
Direct spamassassin invocation |
The full scanner starts for each message or command. | Higher repeated startup overhead and less convenient MTA integration. |
spamd plus spamc |
The daemon stays loaded; the client submits messages to it. | Lower client startup overhead and a natural interface for concurrent mail delivery. |
Use direct invocation for diagnostics or a one-off inspection. Use spamc in the production MTA path, and monitor the daemon as a separate service.
Troubleshooting by symptom
The package installed but no daemon is running
Check whether the distribution disables the service by default, identify the actual unit with systemctl list-unit-files, and enable and start that unit. Read the service log before retrying; a missing runtime directory, invalid configuration or permission problem must be fixed rather than hidden by repeated restarts.
spamc cannot connect
Confirm that spamd is active, that the client and daemon use the same local socket or port settings, and that a firewall or service policy is not blocking the local connection. Keep the daemon private; there is no reason to expose a scanning endpoint publicly on a mail VPS.
Free tools Windows power users keep installed
One-click scans. No signup required.
New rules are not affecting scans
Check the timestamp and ownership of the update directory, confirm that sa-update completed successfully, and restart or reload spamd. The updater does not make a running daemon reload its rules automatically.
Legitimate mail is being tagged
Inspect the report headers and the rules that contributed to the score. Review trusted networks, subject policy and the threshold in local.cf. During tuning, tag or preserve messages rather than rejecting them, and change one policy decision at a time so you can identify its effect.
Postfix mail is deferred or looping
Temporarily remove or disable the content filter, reload Postfix, and confirm that ordinary delivery works without it. Then compare the pipe command, reinjection endpoint, filter user, executable paths and argument expansion with the package’s documented example. Re-enable the filter only after a controlled message completes one pass.
Quick Recap
Ongoing administration checklist
- Keep SpamAssassin and its operating-system packages current through the chosen maintenance path.
- Run
sa-updateunder the intended account and explicitly reload or restartspamdafterward. - Monitor daemon and Postfix logs, queue growth and delivery latency.
- Review false positives before changing score thresholds or adding trusted networks.
- Back up
/etc/spamassassinand Postfix configuration before each policy or integration change. - Test the rollback path periodically, not only after a production failure.
- Keep the daemon bound to the local interface or socket unless a documented architecture requires another arrangement, and protect any required endpoint with access controls.
Final deployment sequence
- Install the package appropriate to the VPS distribution, including
spamcwhere it is separate. - Identify the service unit, then enable and start
spamdaccording to that release’s documentation. - Run
sa-updatewith correct module matching and directory ownership. - Place site policy in
/etc/spamassassin/local.cfon Debian-based systems and keep the default 5.0 threshold as a starting point rather than an automatic rejection rule. - Restart or reload the daemon so it reads the current rules and configuration.
- Connect Postfix through its documented content-filter pipe to
spamc, preserving a tested rollback. - Send controlled messages, inspect headers and logs, and confirm that normal mail still traverses the queue.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errors
