RE: adjust rules and whitelist_from_rcvd
Hi, So should I write? : whitelist_from_rcvd [EMAIL PROTECTED] mydomain.ac.il OR whitelist_from_rcvd [EMAIL PROTECTED] mail.mydomain.ac.il Regards Leon -Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 15, 2006 4:57 PM To: users@spamassassin.apache.org Subject: Re: adjust rules and whitelist_from_rcvd It is probably this header generated by SquirrelMail that is causing the problem. > Received: from 217.132.226.2 > (SquirrelMail authenticated user ronits) > by mail.mydomain.ac.il with HTTP; > Tue, 14 Nov 2006 13:11:52 +0200 (IST) I'm not really sure what the solution is though. What version of SA are you running? Leon Kolchinsky wrote: > Hello All, > > I'm running several virtual domains on > Cyrus+Postfix+SquirrelMail+Amavisd-new+Spamassassin+ClamAV system. > > > There are several users sending their legitimate mails via SquirrelMail on > the same mail server but getting scored as spam. > > Here are 2 examples of X-Spam-Status for such mails. > > > X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, > NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, > RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL > X-Spam-Level: ** > > X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, > NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, > RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL > X-Spam-Level: ** > > > Below full headers for an example mail: > > > Return-Path: <[EMAIL PROTECTED]> > Received: from mail.mydomain.ac.il ([unix socket]) > by mail.mydomain.ac.il (Cyrus v2.2.3) with LMTP; Tue, 14 Nov 2006 > 13:11:57 +0200 > X-Sieve: CMU Sieve 2.2 > Received: from localhost (localhost [127.0.0.1]) > by mail.mydomain.ac.il (Postfix) with ESMTP id 3212A1B370 > for <[EMAIL PROTECTED]>; Tue, 14 Nov 2006 13:11:57 +0200 (IST) > X-Envelope-To: <[EMAIL PROTECTED]> > X-Envelope-From: <[EMAIL PROTECTED]> > X-Quarantine-id: > > Received: from mail.mydomain.ac.il (localhost [127.0.0.1]) > by mail.mydomain.ac.il (Postfix) with ESMTP id D0AB71C5CD > for <[EMAIL PROTECTED]>; Tue, 14 Nov 2006 13:11:52 +0200 (IST) > Received: from 217.132.226.2 > (SquirrelMail authenticated user ronits) > by mail.mydomain.ac.il with HTTP; > Tue, 14 Nov 2006 13:11:52 +0200 (IST) > Message-ID: <[EMAIL PROTECTED]> > Date: Tue, 14 Nov 2006 13:11:52 +0200 (IST) > Subject: =?utf-8?B?15fXqNeT15nXldeqINeR16DXmSDXkdeo16c=?= > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > User-Agent: SquirrelMail/1.4.7 > MIME-Version: 1.0 > Content-Type: text/plain;charset=utf-8 > Content-Transfer-Encoding: 8bit > X-Priority: 3 (Normal) > Importance: Normal > X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, > NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, > RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL > X-Spam-Level: ** > > > 1) Could you please tell me what rules should I adjust (and what score give > to those rules in local.cf) so these kinds of mails score below 5. > > 2) I've tried to add whitelist_from_rcvd to local.cf, but it didn't help: > > whitelist_from_rcvd [EMAIL PROTECTED] virtualdomain1.ac.il > > > Should this line look like this? > > whitelist_from_rcvd [EMAIL PROTECTED] mydomain.ac.il > > Or this? > > whitelist_from_rcvd [EMAIL PROTECTED] mail.mydomain.ac.il > > > > > Best Regards, > Leon Kolchinsky >
Re: adjust rules and whitelist_from_rcvd
It is probably this header generated by SquirrelMail that is causing the problem. > Received: from 217.132.226.2 > (SquirrelMail authenticated user ronits) > by mail.mydomain.ac.il with HTTP; > Tue, 14 Nov 2006 13:11:52 +0200 (IST) I'm not really sure what the solution is though. What version of SA are you running? Leon Kolchinsky wrote: Hello All, I'm running several virtual domains on Cyrus+Postfix+SquirrelMail+Amavisd-new+Spamassassin+ClamAV system. There are several users sending their legitimate mails via SquirrelMail on the same mail server but getting scored as spam. Here are 2 examples of X-Spam-Status for such mails. X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** Below full headers for an example mail: Return-Path: <[EMAIL PROTECTED]> Received: from mail.mydomain.ac.il ([unix socket]) by mail.mydomain.ac.il (Cyrus v2.2.3) with LMTP; Tue, 14 Nov 2006 13:11:57 +0200 X-Sieve: CMU Sieve 2.2 Received: from localhost (localhost [127.0.0.1]) by mail.mydomain.ac.il (Postfix) with ESMTP id 3212A1B370 for <[EMAIL PROTECTED]>; Tue, 14 Nov 2006 13:11:57 +0200 (IST) X-Envelope-To: <[EMAIL PROTECTED]> X-Envelope-From: <[EMAIL PROTECTED]> X-Quarantine-id: Received: from mail.mydomain.ac.il (localhost [127.0.0.1]) by mail.mydomain.ac.il (Postfix) with ESMTP id D0AB71C5CD for <[EMAIL PROTECTED]>; Tue, 14 Nov 2006 13:11:52 +0200 (IST) Received: from 217.132.226.2 (SquirrelMail authenticated user ronits) by mail.mydomain.ac.il with HTTP; Tue, 14 Nov 2006 13:11:52 +0200 (IST) Message-ID: <[EMAIL PROTECTED]> Date: Tue, 14 Nov 2006 13:11:52 +0200 (IST) Subject: =?utf-8?B?15fXqNeT15nXldeqINeR16DXmSDXkdeo16c=?= From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] User-Agent: SquirrelMail/1.4.7 MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** 1) Could you please tell me what rules should I adjust (and what score give to those rules in local.cf) so these kinds of mails score below 5. 2) I've tried to add whitelist_from_rcvd to local.cf, but it didn't help: whitelist_from_rcvd [EMAIL PROTECTED] virtualdomain1.ac.il Should this line look like this? whitelist_from_rcvd [EMAIL PROTECTED] mydomain.ac.il Or this? whitelist_from_rcvd [EMAIL PROTECTED] mail.mydomain.ac.il Best Regards, Leon Kolchinsky
Re: adjust rules and whitelist_from_rcvd
This should be fixed if you install SA 3.1: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=3236 Leon Kolchinsky wrote: Hi, My server runs with static IP and have a legitimate MX record. Squirrelmail runs on the same mail server. So I don't think that this is the problem. Regards, Leon -Original Message- From: Benny Pedersen [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 15, 2006 10:01 AM To: users@spamassassin.apache.org Subject: Re: adjust rules and whitelist_from_rcvd On Tue, November 14, 2006 14:08, Leon Kolchinsky wrote: X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** you are running a mail server with dynamic ip ranges with means that mail from you will ALWAYS being seen as spam on other mailservers :/( to fix this search for a mail server that can smart-host for you, eg send all mail outgoing to your isp will do ask you isp about a static assigned ip will be perfect :-) the NO_REAL_NAME fix is here http://www.squirrelmail.org/plugin_view.php?id=142
RE: adjust rules and whitelist_from_rcvd
Hi, My server runs with static IP and have a legitimate MX record. Squirrelmail runs on the same mail server. So I don't think that this is the problem. Regards, Leon -Original Message- From: Benny Pedersen [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 15, 2006 10:01 AM To: users@spamassassin.apache.org Subject: Re: adjust rules and whitelist_from_rcvd On Tue, November 14, 2006 14:08, Leon Kolchinsky wrote: > X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, > NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, > RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL > X-Spam-Level: ** you are running a mail server with dynamic ip ranges with means that mail from you will ALWAYS being seen as spam on other mailservers :/( to fix this search for a mail server that can smart-host for you, eg send all mail outgoing to your isp will do ask you isp about a static assigned ip will be perfect :-) the NO_REAL_NAME fix is here http://www.squirrelmail.org/plugin_view.php?id=142 -- This message was sent using 100% recycled spam mails.
Re: adjust rules and whitelist_from_rcvd
On Tue, November 14, 2006 14:08, Leon Kolchinsky wrote: > X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, > NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, > RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL > X-Spam-Level: ** you are running a mail server with dynamic ip ranges with means that mail from you will ALWAYS being seen as spam on other mailservers :/( to fix this search for a mail server that can smart-host for you, eg send all mail outgoing to your isp will do ask you isp about a static assigned ip will be perfect :-) the NO_REAL_NAME fix is here http://www.squirrelmail.org/plugin_view.php?id=142 -- This message was sent using 100% recycled spam mails.
RE: adjust rules and whitelist_from_rcvd
Hello All, I run SA on SLES9, so these are the packages I have (updated ones): spamassassin-2.64-3.7 amavisd-new-20030616p9-3.6 perl-spamassassin-2.64-3.7 clamav-0.88.5-0.2 Please read the following mail (under questions 1 and 2) and help: 1) Could you please tell me what rules should I adjust (and what score give to those rules in local.cf) so these kinds of mails score below 5. 2) I've tried to add whitelist_from_rcvd to local.cf, but it didn't help: whitelist_from_rcvd [EMAIL PROTECTED] virtualdomain1.ac.il Should this line look like this? whitelist_from_rcvd [EMAIL PROTECTED] mydomain.ac.il Or this? whitelist_from_rcvd [EMAIL PROTECTED] mail.mydomain.ac.il -Original Message- From: Leon Kolchinsky [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 14, 2006 3:09 PM To: users@spamassassin.apache.org Subject: adjust rules and whitelist_from_rcvd Hello All, I'm running several virtual domains on Cyrus+Postfix+SquirrelMail+Amavisd-new+Spamassassin+ClamAV system. There are several users sending their legitimate mails via SquirrelMail on the same mail server but getting scored as spam. Here are 2 examples of X-Spam-Status for such mails. X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** Below full headers for an example mail: Return-Path: <[EMAIL PROTECTED]> Received: from mail.mydomain.ac.il ([unix socket]) by mail.mydomain.ac.il (Cyrus v2.2.3) with LMTP; Tue, 14 Nov 2006 13:11:57 +0200 X-Sieve: CMU Sieve 2.2 Received: from localhost (localhost [127.0.0.1]) by mail.mydomain.ac.il (Postfix) with ESMTP id 3212A1B370 for <[EMAIL PROTECTED]>; Tue, 14 Nov 2006 13:11:57 +0200 (IST) X-Envelope-To: <[EMAIL PROTECTED]> X-Envelope-From: <[EMAIL PROTECTED]> X-Quarantine-id: Received: from mail.mydomain.ac.il (localhost [127.0.0.1]) by mail.mydomain.ac.il (Postfix) with ESMTP id D0AB71C5CD for <[EMAIL PROTECTED]>; Tue, 14 Nov 2006 13:11:52 +0200 (IST) Received: from 217.132.226.2 (SquirrelMail authenticated user ronits) by mail.mydomain.ac.il with HTTP; Tue, 14 Nov 2006 13:11:52 +0200 (IST) Message-ID: <[EMAIL PROTECTED]> Date: Tue, 14 Nov 2006 13:11:52 +0200 (IST) Subject: =?utf-8?B?15fXqNeT15nXldeqINeR16DXmSDXkdeo16c=?= From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] User-Agent: SquirrelMail/1.4.7 MIME-Version: 1.0 Content-Type: text/plain;charset=utf-8 Content-Transfer-Encoding: 8bit X-Priority: 3 (Normal) Importance: Normal X-Spam-Status: Yes, hits=6.2 tag1=-999.0 tag2=5.0 kill=5.0 tests=BAYES_00, NO_REAL_NAME, PRIORITY_NO_NAME, RCVD_IN_DSBL, RCVD_IN_NJABL_DUL, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_DUL, RCVD_IN_XBL X-Spam-Level: ** Best Regards, Leon Kolchinsky
Re: adjust rules and whitelist_from_rcvd
What version of SA are you using? Daryl
