Ubuntu 8.04 Spamsnake - all SA scores 0.00

[Rocky]

Tom

I went through your settings and found the following needs to be set as they are below:

SpamScore Number Instead Of Stars yes 
Is Definitely Not Spam &SQLWhitelist 
Is Definitely Spam &SQLBlacklist 
Spam Actions deliver store 
High Scoring Spam Actions delete store 
Non Spam Actions deliver store

Make sure to reboot after making the changes.

Let me know how it turns out.

[Thomas_Powers]

OK...scores are showing up now just fine and it's blocking.

I still see in the logs these errors

Jun 5 10:14:02 spam postfix/smtp[5224]: warning: host mail.ksfuel.com[65.211.156.114]:25 greeted me with my own hostname spam.klinktech.net
Jun 5 10:14:02 spam postfix/smtp[5224]: warning: host mail.ksfuel.com[65.211.156.114]:25 replied to HELO/EHLO with my own hostname spam.klinktech.net


ksfuel.com is one of the domains we filter for at this ISP then forward to their mail server in their office. I have the domain defined in the transport file and postmapped, yet it still seems to be using DNS to try to get an MX record to forward this mail to. So.....how does one stop this and get it to actually use that transport file?

We're so close I can taste it!!

THanks

TP

[Rocky]

Tom,
Create /etc/postfix/helo_access so that it looks like the below:

#Helo Access
65.211.156.114  OK
spam.klinktech.net  OK
mail.ksfuel.com  OK

They run:

postmap /etc/postfix/helo_access

If you've created a /etc/postfix/sender_access, add the following to it like this:

#Sender Access
65.211.156.114  OK
spam.klinktech.net  OK
mail.ksfuel.com  OK

Then run:

postmap /etc/postfix/sender_access

Make sure to edit /etc/postfix/main.cf and verify that the following settings are correct:

 
smtpd_delay_reject = yes
smtpd_helo_required = yes
smtpd_helo_restrictions =
        permit_mynetworks,
        check_helo_access hash:/etc/postfix/helo_access,
        reject_invalid_hostname,
        permit
smtpd_sender_restrictions =
        check_sender_access hash:/etc/postfix/sender_access,
        reject_non_fqdn_sender,
        reject_unknown_sender_domain,
        permit

Finally, run:

 
postfix reload

Let me know how that turns out.

[Thomas_Powers]

Ok...I'll start typin.

I did find in the main.cf of postfix where I had type tansport_maps = hash:/etc/postfix/transport instead of transport_maps

so on one hand I'm an idiot for mistyping (too many years of clicking the mouse in microsoft) but on the other hand I'm glad I actually found that.

TP

[Thomas_Powers]

Seems to be gettin there.

3 questions though. (regret reading this post yet?)

1. How does one change the disclaimer at the bottom of the emails that Mailscanner lets through right now the default is

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

And we need to add to that.

2. When I go in and try to release an email in Mailwatch that has been blocked i get....

Result
Release: error (unable to add recipient [tomp@sound-solutions.biz]: Invalid response code received from server)
Close Window

and finally

3. Is it possible to create a script that reads recipient addresses from an Exchange server and loads them into the recipient list rather than having to do it manually? We right now have the @domainname.com wide open for the domains, so we're not filtering by valid recipient. I ask because on the inside, we have around 1500 addresses that I would rather not typpe in and the people here will never be able to update themselves. The point and click Exchange server is beyond them, this would kill em!!

TP

[Rocky]

Hey Tom,

Glad to hear things are getting better.

1. Inline signature reports can be found in /etc/MailScanner/en. Edit to customize to your liking.

2. Edit the below line in /var/www/mailscanner/conf.php and make sure you've entered the full email address, including the domain name:

define(QUARANTINE_FROM_ADDR, 'postmaster@domain.tld');

3. Chapter 12 explains how to pull out the email addresses automatically.

Let me know how it turns out.

[Thomas_Powers]

Cool...got #1 and found the inline signature html to change.

#2 has been put in and we're rebooting now

#3 Chapter 12? Chapter 12 of what doc?

TP

[Rocky]

Chapter 12 of The Perfect Spamsnake tutorial found here http://howtoforge.org/the-perfect-spamsnake-ubuntu-8.04.

[Thomas_Powers]

Ok..I'm an idiot. You mean section 12 of the online docs....when you mentioned chapter 12, I was thinking of a book somewhere.


The changing of the email address in line 2 did the job, but releasing a message now gives the error of

Fatal error: Allowed memory size of 16777216 bytes exhausted (tried to allocate 5239334 bytes) in /var/www/mailscanner/pear/Mail/mimePart.php on line 232


ideas?

TP

[Rocky]

Tom,

Try changing the memory_limit in /etc/php5/apache/php.ini to something higher than 16M.

Default Value:

 
memory_limit = 16M