PDA

View Full Version : Spamassassin blocking mail from other domain, but same server.



RoRoo
03-07-2008, 07:00 AM
One of our clients receives mail from another client which is on the same server.
But every e-mail this person sends gets blocked by spamassassin running on our server.

When I do this from our server from several test domains everything works fine.
But this client keeps getting troubled.


Content analysis details: (6.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
4.5 HELO_LOCALHOST HELO_LOCALHOST
0.7 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail)
0.0 HTML_MESSAGE BODY: HTML included in message
1.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
-0.5 AWL AWL: From: address is in the auto white-list


NE1 got an idea?

RoRoo
03-13-2008, 04:21 AM
ehm...
nobody?

nobaloney
03-14-2008, 03:37 PM
Is the mail that's being blocked originating on your server?

The largest number of points is coming from HELO_LOCALHOST. That means the server sending the mail is identifying itself as localhost. Why? I don't know.

Jeff

RoRoo
03-25-2008, 03:34 AM
Is the mail that's being blocked originating on your server?

The largest number of points is coming from HELO_LOCALHOST. That means the server sending the mail is identifying itself as localhost. Why? I don't know.

Jeff
And I can find this in exim config probably?
Strange thing though... Users have spamassassin completely disabled. Admin gui doesn't show the spamassassin link (coz I've disabled it for them) and it still blocks the email.


Spam detection software, running on the system "ns4.ourhost.nl", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: test [...]

Content analysis details: (5.5 points, 5.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
1.2 SPF_NEUTRAL SPF: sender does not match SPF record (neutral)
2.9 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
1.3 MISSING_SUBJECT Missing Subject: header
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS


From: Oscar<info@domainb.nl>
Date: Tue 25 Mar 2008 11:29:09 GMT+01:00
To: info@domaina.nl


test

nobaloney
03-27-2008, 06:33 PM
If SpamAssassin was ever turned on for the domain, then if it still runs on the server, removing it from the control panel doesn't change any of the settings.

Jeff

RoRoo
04-01-2008, 01:12 AM
If SpamAssassin was ever turned on for the domain, then if it still runs on the server, removing it from the control panel doesn't change any of the settings.

Jeff
That sucks balls.. (so to speak)
How can I disable it then?

RoRoo
04-21-2008, 07:40 AM
Just to kick this topic to the top of the list..

I want to uninstall spamassassin, because it keeps blocking valid email. raising the counter to 20 doesn't stop it..
How do I remove spamassassin in a neat way?

Please assist since this is driving us crazy.

mattb
04-21-2008, 09:12 AM
Take a look here (http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html)

Specifically the whitelisting of a sender.

You might also wish to look at the setting in your local.cf similar to this below


# trusted_networks 212.17.35.

nobaloney
04-21-2008, 09:58 PM
When we're asked to shut off SpamAssassin we don't remove it from the server, but simply comment out the section in exim.conf that we uncommented when we installed it, and restart Exim.

SpamAssassin doesn't use any resources to speak of when nothing is being sent through it :).

Jeff