SPAM Issues

Discussion in 'Installation/Configuration' started by Tekati, Dec 19, 2011.

  1. Tekati

    Tekati HowtoForge Supporter

    Running the latest ispconfig3 on Debian with all its updates.

    What is the best way to check the SPAM system? We get a ton of spam through our servers so I am thinking we have serious spam configuration issues. I read in a thread on the ispconfig2 forum where you can check the header and see the spam score but I am not seeing that in my message headers. What can I look for to insure that our spam system is up and doing the best it can do?

    I have it set to normal policy and I have even changed it to...

    SPAM tag level 1
    SPAM tag2 level 1
    SPAM kill level 1
    SPAM dsn cutoff level 0
    SPAM quarantine cutoff level 0
    SPAM modifies subject YES
    SPAM subject tag
    SPAM subject tag2 ***SPAM***

    and still a ton of spam gets through.
     
  2. Tekati

    Tekati HowtoForge Supporter

    Here is a couple of example email headers from my host

    This one passed even though I have my policy set to kill at level 1

    Return-Path: <info@ymimedia.com>
    Delivered-To: someuser@somedomain.net
    Received: from localhost (localhost [127.0.0.1])
    by somehost.somedomain.net (Postfix) with ESMTP id 5B7D230BA4
    for <someuser@somedomain.net>; Mon, 19 Dec 2011 13:57:39 -0800 (PST)
    X-Virus-Scanned: Debian amavisd-new at somehost.somedomain.net
    X-Spam-Flag: NO
    X-Spam-Score: 1.895
    X-Spam-Level: *
    X-Spam-Status: No, score=1.895 tagged_above=1 required=4.5 tests=[AWL=-0.160,
    BAYES_50=0.001, HTML_MESSAGE=0.001, RDNS_NONE=0.1,
    SPF_HELO_PASS=-0.001, SPF_PASS=-0.001, URIBL_BLACK=1.955]
    Received: from somehost.somedomain.net ([127.0.0.1])
    by localhost (somehost.somedomain.net [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id tHx1bICMLfdb for <someuser@somedomain.net>;
    Mon, 19 Dec 2011 13:57:36 -0800 (PST)
    Received: from mx1.ymimedia.com (unknown [91.227.127.3])
    by somehost.somedomain.net (Postfix) with SMTP id 72231872556
    for <someuser@somedomain.net>; Mon, 19 Dec 2011 13:10:03 -0800 (PST)
    To: "whhj" <someuser@somedomain.net>
    From: "Worldwide Who's Who" <info@ymimedia.com>
    Reply-To: <info@ymimedia.com>
    Subject: FINAL REMINDER: You've Been Selected for the Worldwide Who's Who Among Executives and Professionals
    Date: Mon, 19 Dec 2011 15:33:21 -0600
    MIME-Version: 1.0
    List-Unsubscribe: <mailto:info@ymimedia.com>
    Precedence: bulk
    Content-type: multipart/alternative; boundary="----------------NPart_25.4F0_9F.0_89U7Q_D62.X356UI5";
    Message-Id: <20111219211003.72231872556@somehost.somedomain.net>


    Here is another one that came through without the X- headers at all???


    Return-Path: <bounce-201112191683196701@vz.eau.taxprofessionalsresource.net>
    Delivered-To: someuser@somedomain.net
    Received: from localhost (localhost [127.0.0.1])
    by somehost.somedomain.net (Postfix) with ESMTP id 01ED987264B
    for <someuser@somedomain.net>; Mon, 19 Dec 2011 12:54:26 -0800 (PST)
    X-Virus-Scanned: Debian amavisd-new at somehost.somedomain.net
    Received: from somehost.somedomain.net ([127.0.0.1])
    by localhost (somehost.somedomain.net [127.0.0.1]) (amavisd-new, port 10024)
    with ESMTP id bUZsw4AoPKc5 for <someuser@somedomain.net>;
    Mon, 19 Dec 2011 12:54:23 -0800 (PST)
    Received: from vz.eau.taxprofessionalsresource.net (vz.eau.taxprofessionalsresource.net [63.84.2.24])
    by somehost.somedomain.net (Postfix) with SMTP id 9A89F3133A
    for <someuser@somedomain.net>; Mon, 19 Dec 2011 12:12:40 -0800 (PST)
    Received: (qmail 26066 invoked by uid 0); 19 Dec 2011 20:12:39 -0000
    Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
    DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
    s=default; d=taxprofessionalsresource.net;
    b=XyidC8hLjPSaOSqC6OvudnBJ4ythvR3vF16uibvBxRYtpES7Zv1SRqzj+xuTZDkdsYDxsIfUmfHVF0LTeZmBRcFMqFKt26e86i0Qn9Jkmh42mwTo2uzDuV80LdhrEghJFz1RSFkcOwTxFEoA92suegVgxN6LJEljpVTVuGmvhoQ= ;
    Date: 19 Dec 2011 20:12:39 -0000
    From: Tax Professionals' Resource <info@taxprofessionalsresource.net>
    To: someuser@somedomain.net
    Subject: Economic Nexus Standards in State Taxation
    Message-ID: <201112191683196701@vz.eau.taxprofessionalsresource.net>
    X-DestAddr: someuser@somedomain.net
    MIME-Version: 1.0
    Content-type: multipart/alternative; boundary="mime-separator"
     

Share This Page