Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 2 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #11  
Old 22nd February 2009, 19:50
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

What's in the header of the spam mails that got through? Are there any SpamAssassin lines?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Sponsored Links
  #12  
Old 22nd February 2009, 22:05
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

I see a line from antivirus...

Code:
Return-Path: <telemaquem@hotmail.com>
X-Original-To: admin@elsxukurs.org
Delivered-To: 10info@vito.elseudomini.net
Received: by vito.elseudomini.net (Postfix)
	id A556D13C21A; Sun, 22 Feb 2009 20:34:54 +0100 (CET)
Delivered-To: 2admin@vito.elseudomini.net
Received: from [78.167.116.205] (unknown [78.167.116.205])
	by vito.elseudomini.net (Postfix) with ESMTP id 01C3A13C218
	for <admin@elsxukurs.org>; Sun, 22 Feb 2009 20:34:39 +0100 (CET)
Received: from [78.167.116.205] by mx3.hotmail.com; Sun, 22 Feb 2009 21:34:39 +0200
From: "Blake Rossi" <telemaquem@hotmail.com>
To: <admin@elsxukurs.org>
Subject: Re: 
Date: Sun, 22 Feb 2009 21:34:39 +0200
MIME-Version: 1.0
X-Security: message sanitized on vito.elseudomini.net
	See http://www.impsec.org/email-tools/sanitizer-intro.html
	for details. $Revision: 1.151 $Date: 2006-01-20 07:29:24-08 
X-Security: The postmaster has not enabled quarantine of poisoned messages.
Content-Type: multipart/related;
	boundary="----=_NextPart_000_000E_01C99535.5D6D0180"
X-Mailer: Microsoft Office Outlook, Build 11.0.5742
Thread-Index: Aca6QHHNGGHMW6TATX9MVIXZAQ255E==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3000.0558
Message-ID: <01c99535$5d6d0180$cd74a74e@telemaquem>
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamdscan / ClamAV 0.94.1rc1/9022/Sun Feb 22 03:31:59 2009

This is a multi-part message in MIME format.

------=_NextPart_000_000E_01C99535.5D6D0180
Content-Type: multipart/alternative; boundary="----=_NextPart_001_000F_01C99535.5D6D0180"

------=_NextPart_001_000F_01C99535.5D6D0180
Content-Type: text/plain; charset="windows-1250"
Content-Transfer-Encoding: 7bit

is so often misunderstood,  Noted pediatrician and author  the �zeros� element of your and why everything   activities  this should be your  in between sips of a martini.  in the shuffle,  piece of accurate 
used in the Java API "There's just such a  of every internal industry In a way that lets you put  For now,  will be provides a  Design Patterns, you'll avoid  for some of  such an attitude neurobiology, cogn
itive   the report says. render you any further services.But you don't just  have the resources,  are unregulated and Head First Design Patterns  balanced with plenty  recommended by In a way that lets you p
ut  children are plopped in  the investments within  what to expect--a visually-rich  stress for children  that these investments or on the real relationship  Ginsburg, the report's lead author and  to a mor
tgage endowment.


------=_NextPart_001_000F_01C99535.5D6D0180
Content-Type: text/html; charset="windows-1250"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
Reply With Quote
  #13  
Old 22nd February 2009, 22:39
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

I created a test user (prova(AT)elseudomini.net) and sent (from other domain outside of ISPConfig MSerra@MYOTHERDOMAIN.COM) a GTUBE test, here is the header...

Code:
root@vito:/var/www/www.elseudomini.net/user/10prova/Maildir# cat cur/1235338449.3734_1.vito.elseudomini.net\:2\, 
Return-Path: <MSerra@MYOTHERDOMAIN.COM>
X-Original-To: prova@elseudomini.net
Delivered-To: 10prova@vito.elseudomini.net
Received: from triesmailnou.MYOTHERDOMAIN.COM (unknown [81.47.195.202])
	by vito.elseudomini.net (Postfix) with ESMTP id 269FC13C218
	for <prova@elseudomini.net>; Sun, 22 Feb 2009 22:34:09 +0100 (CET)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
X-Security: message sanitized on vito.elseudomini.net
	See http://www.impsec.org/email-tools/sanitizer-intro.html
	for details. $Revision: 1.151 $Date: 2006-01-20 07:29:24-08 
X-Security: The postmaster has not enabled quarantine of poisoned messages.
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C99535.209CF747"
Subject: XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X 
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3959
Date: Sun, 22 Feb 2009 22:32:56 +0100
Message-ID: <ECE3012EF7CA654A86F6753CCE68FFAE6C2F@triesmailnou.MYOTHERDOMAIN.COM>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X 
thread-index: AcmVNSCVgbh+LECdQUaZRQ/TuElc4g==
From: "Marc Serra" <MSerra@MYOTHERDOMAIN.COM>
To: <prova@elseudomini.net>
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamdscan / ClamAV 0.94.1rc1/9023/Sun Feb 22 21:11:47 2009

This is a multi-part message in MIME format.

------_=_NextPart_001_01C99535.209CF747
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X=20
For this user I have this check boxes activated... MailScan, Antispam Filter and Antviritus.

Last edited by nandelbosc; 22nd February 2009 at 22:42. Reason: change domain
Reply With Quote
  #14  
Old 23rd February 2009, 18:36
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

Hm, hard to tell why this isn't working. Is AppArmor disabled?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #15  
Old 23rd February 2009, 18:56
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

Now i'm not at work, for this reason i can't check if apparmor is enabled, but ... It's enabled by default? The answer of this question is the answer of your question
Reply With Quote
  #16  
Old 23rd February 2009, 20:43
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

confirmed... AppArmor is not running

Can I try to reinstall Spamassassin?
Reply With Quote
  #17  
Old 24th February 2009, 19:36
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

I don't think that will help. I think I'm at my wit's end here.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #18  
Old 25th February 2009, 09:03
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
Default

I'm sorry to hear this, but thank you for your patience!

Furthermore, only I have a question ... I am the only one that happens? Some also use the same virtual machine that I?

Thank's again!
Reply With Quote
  #19  
Old 26th February 2009, 19:58
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

I don't have any problems with SpamAssassin...
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #20  
Old 30th March 2009, 00:59
nandelbosc nandelbosc is offline
Member
 
Join Date: Feb 2009
Posts: 32
Thanks: 0
Thanked 5 Times in 5 Posts
 
Default

Sorry to re-live this post, but i'm still trying to solve it...

In the mail header you can see ...

Code:
...
Content-type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: 7bit
X-virus-status: No
X-virus-checker-version: clamassassin 1.2.4 with clamscan / ClamAV 0.94.2/9180/Sun Mar 29 22:40:14 2009
X-evolution-source: imap: ...

but we should see a line like this, no?...

Code:
X-UKC-CSSpamCheck-Checker-Version: SpamAssassin  3.2.5-1ubuntu1
why that line is missing?
Reply With Quote
Reply

Bookmarks

Tags
spamassassin, spamfilter

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
fail2ban not working linuxwannabe Installation/Configuration 1 25th January 2009 06:09
SPF doesn't seems to be working roshajai Installation/Configuration 4 28th November 2008 12:39
Urgent! pop server down, website down, ispconfig working gwa7 Installation/Configuration 4 8th November 2008 18:56
DNS stop working MZH General 3 22nd February 2008 11:10
ftp not working pesja Installation/Configuration 3 17th July 2006 12:37


All times are GMT +2. The time now is 12:10.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.