HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials - In ISPconfig whitelist but still seen as spam

HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials (http://www.howtoforge.com/forums/index.php)

- Installation/Configuration (http://www.howtoforge.com/forums/forumdisplay.php?f=16)

- - In ISPconfig whitelist but still seen as spam (http://www.howtoforge.com/forums/showthread.php?t=9745)

In ISPconfig whitelist but still seen as spam

On of my friends is trying to email me, but his ISP is blacklisted on sorbs.net, spamhaus.org and spamcop.net (he is from Malaysia)

He is running a domain on my server, and with that he has got an email address.
I have added the domain (*.domain.tld) to my ISP User > Spamfilte & Antivirus "Spam Whitelist"

It's kind of working as the spam detection software is marking it with " 0.0 AWL: From: address is in the auto white-list", but the points it giving is 0, and the message is still marked as spam!

Anyone here who might have a solution on how to fix this problem?
Normaly I have the ISPconfig Spam Strategy on discard, causing mail like this to be deleted automatically!

Code:

Spam detection software, running on the system "host.mydomain.tld", has identified this incoming email as possible spam.  The original message has been attached to this so you can view it (if it isn't spam) or label similar future email.  If you have any questions, see edge for details.



Content preview:  Hello again. I'm back home!!!! [...] 



Content analysis details:   (5.7 points, 5.0 required)



 pts rule name              description

---- ---------------------- --------------------------------------------------

 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

               [Blocked - see <http://www.spamcop.net/bl.shtml?203.121.47.11>]

 3.1 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL

                            [203.121.47.11 listed in sbl-xbl.spamhaus.org]

 1.2 RCVD_IN_SORBS_WEB      RBL: SORBS: sender is a abuseable web server

                            [203.121.47.11 listed in dnsbl.sorbs.net]

 0.0 AWL                    AWL: From: address is in the auto white-list

You can try to set the score for the AWL to e.g. -100 in the spamassassin configuration in /home/admispconfig/ispconfig/tools/spamassassin/...

Quote:

Originally Posted by till

You can try to set the score for the AWL to e.g. -100 in the spamassassin configuration in /home/admispconfig/ispconfig/tools/spamassassin/...

That sounds like it should do the trick (-:

Thanks

Problem now.... what config file? (I do not really see any)

You're right, i thought there will be a config file too :D Please try to add the score to the file:

/root/ispconfig/isp/conf/user_prefs.master

Then edit the user in ISPConfig, change any value and save it, so ISPConfig recreates the configuration for this user.

Sorry about this, but what should I add where in /root/ispconfig/isp/conf/user_prefs.master

Code:

required_score                {HITS}



{REWRITE_SUBJECT_2}rewrite_header Subject {SUBJECT_TAG}



{WHITELIST_2}whitelist_from        {WHITELIST}



{BLACKLIST_2}blacklist_from        {BLACKLIST}



{URIBL_2}urirhssub       URIBL_BLACK  multi.uribl.com.        A   2

{URIBL_2}body            URIBL_BLACK  eval:check_uridnsbl('URIBL_BLACK')

{URIBL_2}describe        URIBL_BLACK  Contains an URL listed in the URIBL blacklist

{URIBL_2}tflags          URIBL_BLACK  net

{URIBL_2}score           URIBL_BLACK  3.0

Please try to add at the end of the file:

Code:

score AWL -100.0

Quote:

Originally Posted by till

Please try to add at the end of the file:

Code:

score AWL -100.0

That looks like it's working :-)

I'll get my friend from Malaysia to email me.

Will report back again if all okay

Yep.. it's working 100%

Quote:

X-Spam-Status: No, score=-94.3 required=5.0 tests=AWL,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_WEB ,RCVD_IN_XBL,USER_IN_WHITELIST autolearn=no

Are you going to add the score AWL -100.0 to the next ISPconfig updates, or do I need to set this evertime when I do an ISPconfig update?

I think we can do it. I hope it doesn't cause any problems.