#1  
Old 22nd August 2008, 12:44
blocker blocker is offline
Senior Member
 
Join Date: Mar 2008
Posts: 177
Thanks: 9
Thanked 4 Times in 4 Posts
Default a logical bug?

Hi Forumers,

today i was watching my mail.log and noticed something strange:
Some mails send from my ISPconfig server are being rejected from other mail servers with the reason of being SPAM. I started investigating the issue and noticed that some users have their spam strategy "accept" or have switched off the mail scanning BUT have forwarders to external mail servers So i realized that my server is some kind of an open spam gateway.
Would not be a good idea to DENY forwarding IF the user has switched off the scanning OR has spam strategy to "accept" OR has a high spam hits level???

Thanks!
Reply With Quote
Sponsored Links
  #2  
Old 22nd August 2008, 15:34
Grey Grey is offline
Member
 
Join Date: May 2008
Location: Germany
Posts: 70
Thanks: 9
Thanked 18 Times in 15 Posts
Default

As I understand that would do nothing to the situation as forwarded mails aren't checked by the spamfilter. Only local deliveries are passed through the procmail script and therefore are scanned via clamassassin.
Reply With Quote
  #3  
Old 22nd August 2008, 15:44
blocker blocker is offline
Senior Member
 
Join Date: Mar 2008
Posts: 177
Thanks: 9
Thanked 4 Times in 4 Posts
Default

I do not if i am right, just shooting in the dark... but if a mail gets in the server and its SPAM, but the user has switched off spamassassin and have a forwarder to external mailserver, this SPAM will be delivered to the external mailserver. But if the user has a mandatory level of spam and mandatory state of spamassasin - ON to use forwarding that will not happen - the mail will be discarded by the spam filter and will not be delivered to the external mailserver....
Reply With Quote
  #4  
Old 23rd August 2008, 16:40
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,711
Thanks: 1,899
Thanked 2,702 Times in 2,545 Posts
Default

Quote:
Originally Posted by Grey View Post
As I understand that would do nothing to the situation as forwarded mails aren't checked by the spamfilter. Only local deliveries are passed through the procmail script and therefore are scanned via clamassassin.
Yes, that's right.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 23rd August 2008, 16:43
blocker blocker is offline
Senior Member
 
Join Date: Mar 2008
Posts: 177
Thanks: 9
Thanked 4 Times in 4 Posts
Default

Quote:
Originally Posted by falko View Post
Yes, that's right.
and whats the conclusion....
Reply With Quote
  #6  
Old 23rd August 2008, 16:48
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,711
Thanks: 1,899
Thanked 2,702 Times in 2,545 Posts
Default

The conclusion is that it doesn't matter if the user has switched on SpamAssassin or not because if he forwards his emails, they will not be scanned because the forwarding happens before SpamAssassin is called.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #7  
Old 23rd August 2008, 16:56
blocker blocker is offline
Senior Member
 
Join Date: Mar 2008
Posts: 177
Thanks: 9
Thanked 4 Times in 4 Posts
Default

Quote:
Originally Posted by falko View Post
The conclusion is that it doesn't matter if the user has switched on SpamAssassin or not because if he forwards his emails, they will not be scanned because the forwarding happens before SpamAssassin is called.
ok, and what do we do about that?! i think its a workaround for sending spam, in case we have 400 domains with +3000 users on that ISPconfig server....

Thanks
Reply With Quote
  #8  
Old 23rd August 2008, 17:41
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 34,586
Thanks: 792
Thanked 4,983 Times in 3,903 Posts
 
Default

If they want spam scanning, they will have to use the local account. Otherwise the mail is forwarded as it is. And you are not sending spam, you just forward all incoming emails for a special account without filtering. Thats a big diference as the spam does not originates from your server.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISPConfig 2.2.24 | mailuser app bug? Hans General 19 4th August 2008 15:18
Bug? External Mailserver still in local-host-names ctql General 1 8th March 2008 20:33
Possible bug. kurt2000 General 6 9th October 2007 21:13
LVM - Extending Logical Volume within Volume Group ghimanshu Technical 0 23rd July 2007 07:14
BUG: Forward email? edge General 3 1st June 2007 16:49


All times are GMT +2. The time now is 10:11.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.