Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 25th August 2009, 07:39
atjensen11 atjensen11 is offline
Senior Member
 
Join Date: Dec 2007
Posts: 199
Thanks: 9
Thanked 6 Times in 6 Posts
Default Clarification of Spam Filter Policies in ISPConfig3

I am hoping to get some clarification on the spam filter policies settings within ISPConfig3. I have the default policies which are:

Non-paying
Uncensored
Wants all spam
Wants viruses
Normal
Trigger happy
Permissive

Upon initial glance, there are a lot of red X icons showing. I am not sure if this is a good thing or a bad thing.

I have some users that are complaining that they are receiving a higher number of spam emails on the new ISPConfig3 system than the previous system. The previous system was a Virtual user system on Ubuntu 8.04 LTS using a How To on this site.

Is there a policy on the ISPConfig3 system that is similar to the system established in the virtual user How To that could be used as a default? Can someone explain they checks done by each setting? Would anyone be willing to share their other spam filter settings?
Reply With Quote
The Following User Says Thank You to atjensen11 For This Useful Post:
primal23 (4th September 2009)
Sponsored Links
  #2  
Old 25th August 2009, 10:44
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,983
Thanks: 825
Thanked 5,372 Times in 4,219 Posts
Default

The policys are the default ones from amavisd-new. So they are just examples that you can change to suit your needs. For detailed information on ecah option, please take a look at the amavisd-new documentation.

If you receive more spam, just set the spam level to a lower value.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 27th August 2009, 19:10
atjensen11 atjensen11 is offline
Senior Member
 
Join Date: Dec 2007
Posts: 199
Thanks: 9
Thanked 6 Times in 6 Posts
Default

OK, I will check the documentation and try to get up to speed.

One last question regarding the policies...When I create the email domain, I leave the spam filter policy setting there as "-Not Enabled-". Then when I create the email account, I enable the spam filter policy "Normal".

Users have stated that changing from "-Not Enabled-" to "Normal" at the email account level results in no discernable reduction of spam in their Inbox.

Do I have to enable the spam filter policies at both the domain and account levels? What heirarchy applies? What are the rules that apply when spam filter policies are enabled at both levels? Does the more restrictive policy win out? Does the email account policy level always override the domain policy if configured?

Thanks.
Reply With Quote
  #4  
Old 28th August 2009, 11:28
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,983
Thanks: 825
Thanked 5,372 Times in 4,219 Posts
Default

The setting of the mailbox has priority over the domain. Please see amavisd-new documentation for details as this is all handled by amavisd-new and not ispconfig.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 4th September 2009, 23:04
atjensen11 atjensen11 is offline
Senior Member
 
Join Date: Dec 2007
Posts: 199
Thanks: 9
Thanked 6 Times in 6 Posts
Default

OK. I have been doing a lot of reading on amavisd-new lately and studying the different settings within the ISPConfig3 spam filter.

I have one email account in ISPConfig that is being targeted heavily for SPAM. Furthermore, this user forwards me every message that comes in with a note like "I got another one".

Here is a header excerpt from one of these forwarded messages:
Code:
X-Envelope-From: <[sanitized]@[sanitized].org>
X-Envelope-To: <[sanitized]@[sanitized].org>
X-Envelope-To-Blocked: 
X-Quarantine-ID: <pJdldNwoaAgB>
X-Amavis-Alert: BAD HEADER SECTION Non-encoded 8-bit data (char A9 hex): From:
	\251 VIAGRA \256 Offic[...]
X-Spam-Flag: NO
X-Spam-Score: 5.628
X-Spam-Level: *****
X-Spam-Status: No, score=5.628 tag=3 tag2=6.9 kill=6.9
	tests=[DYN_RDNS_SHORT_HELO_HTML=0.287, HTML_IMAGE_ONLY_20=1.808,
	HTML_IMAGE_RATIO_02=0.55, HTML_MESSAGE=0.001,
	HTML_SHORT_LINK_IMG_3=0.556, MIME_HTML_ONLY=1.672, RDNS_DYNAMIC=0.1,
	SPF_SOFTFAIL=0.654]
Prior to receiving this email from the user, I had changed the spam filter policy to "Trigger Happy". The tag level settings for Trigger Happy are:

Code:
SPAM Tag Level=3
SPAM Tag2 Level=5
SPAM Kill Level=5
SPAM DNS Cutoff Level=0
SPAM Quarantine Level=0
SPAM Modifies Subject=Yes
SPAM Subject Tag= [POSSIBLE SPAM Score=_SCORE_] -
SPAM Subject Tag2= [SPAM SCORE=_SCORE_]-
But these settings are reflected in the X Headers of the excerpt I posted. I haven't modified any of the amavisd-new configuration files manually. I assume these settings are stored in the DB. Where can I check to verify ISPConfig3 is storing the values correctly?
Reply With Quote
  #6  
Old 4th September 2009, 23:54
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,983
Thanks: 825
Thanked 5,372 Times in 4,219 Posts
Default

The settings are all written correctly, as you wont see them otherwise in ispconfig as amavisd and ispconfig read the same database table. Make sure that you have set:

$final_spam_destiny = D_DISCARD;

in amavaisd 50-user file in debian or amavisd.conf in other linux distributions if you want spam to be deleted when it reaches the kill level. Then restart amavisd.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
The Following User Says Thank You to till For This Useful Post:
voidzero (25th June 2010)
  #7  
Old 28th December 2009, 02:04
bluebirdnet bluebirdnet is offline
Member
 
Join Date: Dec 2009
Location: Montreal, Canada
Posts: 50
Thanks: 0
Thanked 5 Times in 5 Posts
Default

hi would be interesting to see this thread continue as I am also having issues with spam filtering and trying to grasp the whole amavisd-new and spamassissin and the configuration options in Ispconfig3.

can anyone elaborate on the spam filter policy ? How can I improve them ?

thanks
Reply With Quote
  #8  
Old 17th July 2010, 19:10
frogman frogman is offline
HowtoForge Supporter
 
Join Date: May 2009
Posts: 14
Thanks: 0
Thanked 0 Times in 0 Posts
Question Amavisd-Spamassassin-etc.. Overview

I agree... I have searched the forums (always awesomely helpful, BTW) for some clarity on the interworkings of of the filter settings and have not found a good complete picture as I usually do.

I'd be happy to put one together, but I don't understand it yet!

If there is already something out there and I am missing it, please let me know.. What I think I, and others, are looking for is something that spells out how the settings work together, such as:

1 - domain filter setting

2 - user filter setting

3 - What is Priority 1-10 and the slider really do in relation to the tag levels?

4 - What happens to the emails at the various tag levels?- I for one am concerned about being too strict on SPAM scores and then a customer wanting an email from Quarantine and then finding it was actually deleted....

5 - Map this info to the conf files that house the settings?

Again - sorry if this is already out there, but I could not find it. If I can start to get the answers from the awesome members here, I would be more than happy to build the document for everyone. If its already started - somebody please point me to it..

Thanks ALL, as always great help...
Reply With Quote
  #9  
Old 18th July 2010, 19:14
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
 
Default

Quote:
Originally Posted by frogman View Post
4 - What happens to the emails at the various tag levels?
The settings for each of these levels are defined under Email > Spamfilter > Policy.
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ISP Config hesitation when opening web pages frankb Installation/Configuration 7 15th December 2008 13:06
Ubuntu 8.04 Spamsnake - all SA scores 0.00 Thomas_Powers HOWTO-Related Questions 23 24th June 2008 17:37
network issues now it says "401 The web site is blocked by administrator" Check General 3 26th February 2008 14:22
Apache2 Freezes celtic Server Operation 31 28th May 2007 17:18
php script injections Grizzly General 21 18th July 2006 08:55


All times are GMT +2. The time now is 07:58.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.