Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > Linux Forums > Server Operation

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 15th July 2010, 16:35
geek876 geek876 is offline
Junior Member
 
Join Date: Jul 2010
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Default Amavisd-new rejecting emails as spam

Dear All,

We have postfix-amavisdnew-spamassassin setup on Centos. Since last 2-3 days we are facing this strange issue where by genuine emails sent to users on our mail system are being tagged as UNSOLICIT SPAM and returned to sender. From what I can see, the problem occurs because amavisd-new is looking in the header of the email and due to the difference in the client IP address where the email was generated and the server which actually passed that email to our mail server, it is thinking it is spam. So example, I send an email from my yahoo account to an account on our Mail server. The email header would have something like

Recieved: from [my-machine-ip-address] by webxxx.mail.mud.yahoo.com via HTTP

Then further up when mail server at yahoo tries to deliver this email to the user on my mail server, our mail server rejects it with the error

First upstream SMTP client IP address: [IP_of_yahoo_email_server]
webxxx.mail.mud.yahoo.com
According to a 'Received:' trace, the message apparently originated at:
[my-machine-ip-address], [my-machine-ip-address]

If I disable header checks within amavisd-new by changing /etc/amavisd.conf
@bypass_header_checks_maps = (1); it works but then it also brings along lots of spam.

Can anybody help?

Thanks.
Reply With Quote
Sponsored Links
  #2  
Old 16th July 2010, 16:43
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

Did your IP address or DNS records change recently?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #3  
Old 16th July 2010, 16:46
geek876 geek876 is offline
Junior Member
 
Join Date: Jul 2010
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Default

No the IP is static and hasn't changed recently.
Reply With Quote
  #4  
Old 17th July 2010, 14:18
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
Default

Please check if the IP got blacklisted: http://mxtoolbox.com/blacklists.aspx
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
  #5  
Old 19th July 2010, 12:59
geek876 geek876 is offline
Junior Member
 
Join Date: Jul 2010
Posts: 5
Thanks: 0
Thanked 0 Times in 0 Posts
Default

No, My Ip is not blacklisted. I am not too sure if amavisd is working at all. It is letting spams in. I can see the email is being checked by amavisd on arrival but it is letting it through, even quiet obvios spam emails are being allowed. I have not changed anything within amavisd apart from the domain name.
Reply With Quote
  #6  
Old 20th July 2010, 13:57
falko falko is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 41,701
Thanks: 1,900
Thanked 2,741 Times in 2,575 Posts
 
Default

Any errors in your mail log?
__________________
Falko
--
Download the ISPConfig 3 Manual! | Check out the ISPConfig 3 Billing Module!

FB: http://www.facebook.com/howtoforge

nginx-Webhosting: Timme Hosting | Follow me on:
Reply With Quote
Reply

Bookmarks

Tags
amavisd-new, postfix, spamassassin

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
blocking spam emails in ispconfig3 Mitz General 4 3rd February 2010 12:26
Spamfilter policy - question about spam actions prisfeo Installation/Configuration 4 2nd February 2010 16:17
seperating spam emails and real emails. Ryanmt General 1 25th March 2009 22:42
Ubuntu 8.04 Spamsnake - all SA scores 0.00 Thomas_Powers HOWTO-Related Questions 23 24th June 2008 17:37
Amavisd question outbound scan emails (falko howto debian) tuflipes HOWTO-Related Questions 4 23rd September 2006 23:02


All times are GMT +2. The time now is 10:52.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.