Go Back   HowtoForge Forums | HowtoForge - Linux Howtos and Tutorials > ISPConfig 3 > General

Do you like HowtoForge? Please consider supporting us by becoming a subscriber.
Reply
 
Thread Tools Display Modes
  #1  
Old 7th February 2011, 18:28
lino lino is offline
Junior Member
 
Join Date: Feb 2011
Posts: 3
Thanks: 0
Thanked 0 Times in 0 Posts
Default [SPAM] Banned rulenames

Hi,
I'm configuring the antispam policies for my mail server installed on Ubuntu 10 and ISPconfig3.
In the tab called "Other" of the "SpamFilter Policy" (I used the preconfigured Normal policy) I wanted to insert the name of a rule I don't want to be considered when amavis and spamassassin are trying to find out spammed mails.

I read what the manual says about that and I thought that inserting the HTML_MESSAGE rulename in the field "Banned rulenames" was sufficient but the score calculated by spamassassin still includes this rule evaluation.

Can someone help me? Didn't I understand something about?

Thanks...
Reply With Quote
Sponsored Links
  #2  
Old 2nd November 2011, 12:38
gdavid gdavid is offline
Junior Member
 
Join Date: Oct 2010
Posts: 19
Thanks: 0
Thanked 2 Times in 1 Post
Default

Same problem here. I'm getting a lot of untagged SPAM mail because the rule RCVD_IN_DNSWL_HI gives very low score (-8) to these messages.
I put the rule RCVD_IN_DNSWL_HI in "Banned rulenames" of my spamfilter policy, but amavis log says (scanning the emails):

Nov 2 11:43:22 myhost.ex.com /usr/sbin/amavisd-new[22550]: (22550-19) INFO: unknown banned table name RCVD_IN_DNSWL_HI, recip=mymail@ex.com

How to avoid RCVD_IN_DNSWL_HI checks?
Thanx!
giuliano

Quote:
Originally Posted by lino View Post
Hi,
I'm configuring the antispam policies for my mail server installed on Ubuntu 10 and ISPconfig3.
In the tab called "Other" of the "SpamFilter Policy" (I used the preconfigured Normal policy) I wanted to insert the name of a rule I don't want to be considered when amavis and spamassassin are trying to find out spammed mails.

I read what the manual says about that and I thought that inserting the HTML_MESSAGE rulename in the field "Banned rulenames" was sufficient but the score calculated by spamassassin still includes this rule evaluation.

Can someone help me? Didn't I understand something about?

Thanks...
Reply With Quote
  #3  
Old 2nd November 2011, 13:12
till till is offline
Super Moderator
 
Join Date: Apr 2005
Location: Lüneburg, Germany
Posts: 35,488
Thanks: 813
Thanked 5,258 Times in 4,122 Posts
Default

You can redefine the score of spamassassin rules in the file /etc/spamassassin/local.cf. To ignore that rule, set the score to 0. Then restart mavisd.
__________________
Till Brehm
--
Get ISPConfig support and the ISPConfig 3 manual from ispconfig.org.
Reply With Quote
  #4  
Old 2nd November 2011, 14:24
gdavid gdavid is offline
Junior Member
 
Join Date: Oct 2010
Posts: 19
Thanks: 0
Thanked 2 Times in 1 Post
 
Default

Thanks for your answer. Your method should work, I suppose. And I'll adopt if the solution I found will not be stable.
The solution for me was to change the DNS for my mailserver. The dsnwl.org is very very annoying and unleal. If it receives more than 100.000 request per day from the same DNS resolver, it responds with an "OK" as the IP spamassassin requested to check is really clean.
This is very uncorrect, in my opinion.
You can check the dnswl answer with
$host 84.91.139.98.list.dnswl.org
If the answer is
84.91.139.98.list.dnswl.org has address 127.0.5.0
you are ok.
If the answer is
84.91.139.98.list.dnswl.org has address 127.0.10.3
this means the DNS server you are using is over the 100.000 requests.
In the specific, I understud the final 3 means "HI trusted", 0 means "I don't know nothing abut this IP"
Obviously in the case I reported, I'ts impossible the IP 84.91.139.98 is Hi trusted, so dnswl is forcing (in an horrible way) my attention to the fact that 100.000 requests are gone.

Anyway, I stopped using 8.8.8.8 as DNS server, and now everything is ok.


Quote:
Originally Posted by till View Post
You can redefine the score of spamassassin rules in the file /etc/spamassassin/local.cf. To ignore that rule, set the score to 0. Then restart mavisd.
Reply With Quote
Reply

Bookmarks

Tags
spamassassin spam email

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Get rid of BANNED and VIRUS alert notifications datahellas Installation/Configuration 6 3rd August 2010 20:28
Fail2ban (without iptables) doesn't work, why? MET Installation/Configuration 10 27th May 2010 10:16
Spam Filter not functioning (revisited) Cracklefish Installation/Configuration 7 8th March 2010 12:16
amavisd-new banned files problem davy Installation/Configuration 5 10th December 2008 16:01
Postfix tagging everything as [SPAM] markerman HOWTO-Related Questions 11 28th March 2008 15:35


All times are GMT +2. The time now is 12:14.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.