US: 1-941-4621-069
  
Cyprus: 3-572-2052-781

Go Back   ISPsystem.com Forums > ISPmanager > Troubleshooting


Reply
 
Thread Tools
Old 10-23-2013, 01:33 PM   #1
Junior Member
 
Join Date: Oct 2013
Posts: 7
AD7six is on a distinguished road
Default spamassassin, whitelists and config

Hi,

I have some doubts about how using the whitelist function is supposed to work

Whilst sending emails from me@gmail.com to user@example.com they were detected as spam - which isn't that surprising as it was a spam report. To get around this I added me@gmail.com to the whitelist. I expected this to mean the user would skip spam filtering, but that doesn't seem to be the case:

/var/log/exim4/mainlog
Code:
2013-10-23 09:00:30 Accepted from me@gmail.com to user@example.com by whitelist.
2013-10-23 09:00:30 1VYuIo-0002a9-1z DKIM: d=gmail.com s=20120113 c=relaxed/relaxed a=rsa-sha256 [verification succeeded]
2013-10-23 09:00:35 1VYuIo-0002a9-1z H=mail-wg0-f47.google.com [74.125.82.47] F=<me@gmail.com> rejected after DATA: Content analisis tool detect spam (from me@gmail.com to user@example.com). Contact The System Administrator.
Changing the spam required-score also didn't do what's expected:

/usr/local/ispmgr/var/ispmgr.log

It looks like the file was written twice, back to the default required score of 5.0 (or am I misreading that =)).

After these changes mails from me@gmail.com are still processed for spam and still rejected

/var/log/exim4/rejectlog
Code:
2013-10-23 11:31:21 1VYumY-00035P-Ss H=mail-wg0-f47.google.com [74.125.82.47] F=<me@gmail.com> rejected after DATA: Content analisis tool detect spam (from me@gmail.com to user@example.com). Contact The System Administrator.
Envelope-from: <me@gmail.com>
Envelope-to: <user@example.com>
P Received: from mail-wg0-f47.google.com ([74.125.82.47])
    by example.com with esmtps (TLS1.0:RSA_ARCFOUR_SHA1:128)
    (Exim 4.80)
    (envelope-from <me@gmail.com>)
    id 1VYumY-00035P-Ss
    for user@example.com; Wed, 23 Oct 2013 11:31:15 +0200
P Received: by mail-wg0-f47.google.com with SMTP id c11so497678wgh.2
        for <user@example.com>; Wed, 23 Oct 2013 02:31:14 -0700 (PDT)
  DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :content-type;
        bh=5P6DiyOlJ6HSKFVgIxc9STHAK0NCMwP/z40JtJPVkSE=;
        b=nn5cAE3u6j5Tkd4jdQvjuWPXec8soHq4553+teozF/OYkDrf8TyLVFngYq1DbnExm+
         VthedX8W6KvfQ/PFm5yi7DIabLr7RbGqnWCFGSX1Vs1iiIk3bNrq+UP6lHDX+julgtt9
         LhWHnApNcLXSQAaCFkYnbfmmuvuMK6SF/7Ic0VFDBBx2fRjFfloRoUYO5sqfgjBOboYh
         3SO/noXcDdzTUChRMLDZHU5IgYqzWQAj+zLFCUjB6GuS0TlzGG7SaIx/DfPSbeuk4mxN
         Rg68ShYofb6P0RDlox5gGRdZBSV9EHniTV+4b2XzdrB9pQ67phppI49+X6oTg0mrCrMG
         iodQ==
  MIME-Version: 1.0
  X-Received: by 10.194.175.133 with SMTP id ca5mr655001wjc.19.1382520674000;
 Wed, 23 Oct 2013 02:31:14 -0700 (PDT)
P Received: by 10.194.7.131 with HTTP; Wed, 23 Oct 2013 02:31:13 -0700 (PDT)
  In-Reply-To: <CACzsBugXuHX1-h1NdvXq6ffQUjcuJt0jWRkZ_uFCOrTMWSYgLQ@mail.gmail.com>
  References: <CACzsBugXuHX1-h1NdvXq6ffQUjcuJt0jWRkZ_uFCOrTMWSYgLQ@mail.gmail.com>
  Date: Wed, 23 Oct 2013 11:31:13 +0200
I Message-ID: <CACzsBujQXhj2G8aaoAH_bva-gPYN2ppcZsdkx+9B6A1pH8LKKA@mail.gmail.com>
  Subject: Correos de spam
F From: Andy Dawson <me@gmail.com>
T To: user@example.com
  Content-Type: multipart/mixed; boundary=089e01493c5aab420d04e9652d5e
  X-Spam_score: 5.6
  X-Spam_score_int: 56
  X-Spam_bar: +++++
  X-Spam_report: Spam detection software, running on the system "example.com", has
 identified this incoming email as possible spam.  The original message
 has been attached to this so you can view it (if it isn't spam) or label
 similar future email.  If you have any questions, see
 the administrator of that system for details.

 Content preview:  email summary [...]

 Content analysis details:   (5.6 points, 8.0 required)
I got around the problem by adding me@gmail.com to spamassassin's whitelist manually - but of course that's a change that'll disappear whenever spamassassin is restarted =).

So in summary

How can I successfully whitelist an email so that it passes the spam filter?
How can I change the spam required-score such that it takes effect?

Thanks,

AD

Last edited by AD7six; 10-23-2013 at 03:53 PM.
AD7six is offline   Reply With Quote
Old 10-24-2013, 08:08 AM   #2
ISPsystem team
 
Join Date: Jul 2011
Posts: 3
Maquisard is on a distinguished road
Send a message via ICQ to Maquisard
Default

Do you have user spamassassin enabled for user@example.com?
In such case, whitelist has no effect.
Maquisard is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT +2. The time now is 04:22 PM.