Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > Installation/Configuration

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 18th March 2010, 08:07
findafriend findafriend is offline
Member
 
Join Date: Apr 2007
Posts: 49
Thanks: 10
Thanked 3 Times in 3 Posts
Default How do i setup amavis to remove spam tagged email ?

Hi

Thanks so far for the nice help i got here...

I have this header and can see it is spam, I just want to have it deleted and not getting into the users email inbox.

The header is as follows :

Yes, score=3.608 tagged_above=2 required=3.501 tests=[BAYES_50=0.001, HTML_FONT_LOW_CONTRAST=0.124, HTML_IMAGE_RATIO_02=0.383, HTML_MESSAGE=0.001, RDNS_NONE=0.1, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_JP_SURBL=1.501, URIBL_OB_SURBL=1.5]

As you can see it gets tagged by URIBL_JP_SURBL=1.501 and URIBL_OB_SURBL=1.5.

How can i setup amavis to delete this... I have searched howtoforge and have not yet been able to find a solution to this...

Another thing, I found something which as i read it is put into spamassassin (amavis) :

http://www.akadia.com/services/postf...massassin.html

Something is turned off and put into spamassassin :

# --------------------------------
# Deactivated, done in SpamAssasin
# --------------------------------
# reject_rhsbl_client blackhole.securitysage.com,
# reject_rhsbl_sender blackhole.securitysage.com,
# reject_rbl_client relays.ordb.org,
# reject_rbl_client blackholes.easynet.nl,
# reject_rbl_client cbl.abuseat.org,
# reject_rbl_client proxies.blackholes.wirehub.net,
# reject_rbl_client bl.spamcop.net,
# reject_rbl_client sbl.spamhaus.org,
# reject_rbl_client opm.blitzed.org,
# reject_rbl_client dnsbl.njabl.org,
# reject_rbl_client list.dsbl.org,
# reject_rbl_client multihop.dsbl.org,

Do i have to put this back into postfix to use it or is there another solution to this ?

Postfix has been edited with the following line which work as expected :

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destination, reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_unauth_destination, reject_rbl_client bl.spamcop.net permit

How can i incorporate the list mentioned above which have been removed from postfix in the mentioned example ?

And how do i implement URIBL_JP_SURBL and URIBL_OB_SURBL so spam not only get tagged but also removed before even reach the inbox on users ?

If i succeed in my "job" I would love to make a little "guide" on how I did, as this might help others inside here.

Br

Mogens
Reply With Quote
Sponsored Links
  #2  
Old 18th March 2010, 08:33
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 35,470
Thanks: 813
Thanked 5,254 Times in 4,120 Posts
Default

There is no need to change any file for this, just set the spam kill level in the policy in ispconfig to the value were amavisd shall delete the spam.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #3  
Old 18th March 2010, 09:15
findafriend findafriend is offline
Member
 
Join Date: Apr 2007
Posts: 49
Thanks: 10
Thanked 3 Times in 3 Posts
Default

Thanks Till

As i see it there are two ways to combat spam :

1) The one i mentioned
2) lowering the kill level

You suggest the second as the easiest one, but this have a potential of deleting things not being spam

And secondly URIBL_JP_SURBL and URIBL_OB_SURBL is spam, so is there a way to set amavis to reach on this instead of just lovering the spam kill level, as this could cause emails not being spam getting deleted and we dont want that.
And i don't want the users to get botheret with things which can be deleted by the email system

How can i use URIBL_JP_SURBL and URIBL_OB_SURBL and not lowering the spam kill level ?

BR

Mogens

Last edited by findafriend; 18th March 2010 at 16:50.
Reply With Quote
  #4  
Old 19th March 2010, 09:53
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 35,470
Thanks: 813
Thanked 5,254 Times in 4,120 Posts
Default

You asked "How do i setup amavis to remove spam tagged email ?" which means to delete emails and you can loose legit emails with that of course, if you set the kill level too low. Personally, I wont delete emails directly in amavis, I tag my emails and then move them to a spam folder by a filter rule.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #5  
Old 19th March 2010, 10:01
findafriend findafriend is offline
Member
 
Join Date: Apr 2007
Posts: 49
Thanks: 10
Thanked 3 Times in 3 Posts
Default

ok let me ask the other way around as already done above...

how can this be done inside amavis, so the user dont have to bother with spam.
There is no need to let the user get email we now already is spam.
Reply With Quote
  #6  
Old 19th March 2010, 10:01
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 35,470
Thanks: 813
Thanked 5,254 Times in 4,120 Posts
Default

Then see #2.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #7  
Old 19th March 2010, 11:16
findafriend findafriend is offline
Member
 
Join Date: Apr 2007
Posts: 49
Thanks: 10
Thanked 3 Times in 3 Posts
Default

Maybe I'm not asking correctly

When URIBL_OB_SURBL get a score, what i would like is to have amavis to delete the email....

It is obvious that the above mentioned is spam, and it should not reach the users email box, but get deleted before even reaching there.

I have a new example here, where the email has gone through filtrering :

X-Spam-Status:
Yes, score=4.653 tagged_above=2 required=3.501 tests=[BAYES_60=1, HTML_MESSAGE=0.001, RCVD_IN_SORBS_WEB=0.619, RCVD_IN_XBL=3.033]

There are some indications that it is spam :

RCVD_IN_XBL=3.033

This one is triggered by :

the CBL (Composite Block List) from cbl.abuseat.org
the NJABL Open Proxy IPs list from www.njabl.org

This email is before editing main.cf

But if it worked as expected.. it would be deleted by amavis, as it is in one of the above mentioned databases.

I have cbl.abuseat.org and bl.spamcop.net covered in the following line in postfix main.cf :

smtpd_recipient_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access mysql:/etc/postfix/mysql-virtual_recipient.cf, reject_unauth_destination, reject_invalid_hostname, reject_non_fqdn_sender, reject_non_fqdn_recipient, reject_unknown_sender_domain, reject_unknown_recipient_domain, reject_unauth_pipelining, reject_unauth_destination, reject_rbl_client bl.spamcop.net, reject_rbl_client cbl.abuseat.org permit

hope this make sense ?
Reply With Quote
  #8  
Old 21st March 2010, 21:27
findafriend findafriend is offline
Member
 
Join Date: Apr 2007
Posts: 49
Thanks: 10
Thanked 3 Times in 3 Posts
Default

what should i write in postfix to use :

URIBL_SBL ?
Reply With Quote
  #9  
Old 22nd March 2010, 08:27
till till is online now
Super Moderator
 
Join Date: Apr 2005
Location: Lneburg, Germany
Posts: 35,470
Thanks: 813
Thanked 5,254 Times in 4,120 Posts
 
Default

You can set your own scores for every rule in spamassassin. Don't forget to restart amavisd after you changed the spamassassin configuration.

http://wiki.apache.org/spamassassin/WritingRules
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Delivery of Spam into a Spamfolder with postfix and amavis / SA tkorves HOWTO-Related Questions 0 15th August 2009 10:33
Email Routing (alias postfix transport) .. is it possible to enable spam filters? bajodel General 4 30th May 2009 09:57
email spam filter options the_spy Feature Requests 1 7th September 2008 17:04
If I remove a user how do i remove the email dhonnoll78 Installation/Configuration 2 17th January 2007 04:15
Postfix or email server setup matrich Server Operation 3 24th November 2005 22:26


All times are GMT +2. The time now is 13:51.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.