CougarD
Total Posts: 23
Joined: 2008-02-25
Ok. I found a solution that works for me as a kinda bodge fix…
My problem is that my server scans outgoing messages with amavis and spamassasin. It was giving the Password Reminder email a spam rating of 8 and then automatically deleting it. All other email pass through fine.
Here is the log..
Apr 13 13 : 04 : 52 server1587 postfix / pickup[2809] : 59BF611D4269 : uid = 33 from =< www - data > Apr 13 13 : 04 : 52 server1587 postfix / cleanup[3805] : 59BF611D4269 : message - id =< 20080413120452.59BF611D4269 @ www . mydomain . com > Apr 13 13 : 04 : 52 server1587 postfix / qmgr[2150] : 59BF611D4269 : from =< www - data @ www . mydomain . com >, size = 2191 , nrcpt = 1 ( queue active ) Apr 13 13 : 04 : 56 server1587 postfix / smtpd[3813] : connect from localhost . localdomain[127.0.0.1] Apr 13 13 : 04 : 56 server1587 postfix / smtpd[3813] : B145D11D4225 : client = localhost . localdomain[127.0.0.1] Apr 13 13 : 04 : 56 server1587 postfix / cleanup[3805] : B145D11D4225 : message - id =< SSZWVFDQQSCatt @ www . mydomain . com > Apr 13 13 : 04 : 56 server1587 postfix / qmgr[2150] : B145D11D4225 : from =<>, size = 3279 , nrcpt = 1 ( queue active ) Apr 13 13 : 04 : 56 server1587 postfix / smtpd[3813] : disconnect from localhost . localdomain[127.0.0.1] Apr 13 13 : 04 : 56 server1587 amavis[3678] : ( 03678 - 01 ) Blocked SPAM , < www - data @ www . mydomain . com > -> < customer @ customerdomain . co . uk >, quarantine : spam - ZWVFDQQSCatt . gz , Message - ID : < 20080413120452.59BF611D4269 @ www . mydomain . com >, mail_id : ZWVFDQQSCatt , Hits : 8.456 , 4394 ms Apr 13 13 : 04 : 56 server1587 postfix / smtp[3808] : 59BF611D4269 : to =< customer @ customerdomain . co . uk >, relay = 127.0.0.1[127.0.0.1] : 10024 , delay = 4.4 , delays = 0.03 / 0 / 0 / 4.4 , dsn = 2.5.0 , status = sent ( 250 2.5.0 Ok , id = 03678 - 01 , BOUNCE ) Apr 13 13 : 04 : 56 server1587 postfix / qmgr[2150] : 59BF611D4269 : removed Apr 13 13 : 04 : 56 server1587 postfix / local[3814] : B145D11D4225 : to =< www - data @ www . mydomain . com >, relay = local , delay = 0.06 , delays = 0.05 / 0.01 / 0 / 0 , dsn = 2.0.0 , status = sent ( delivered to mailbox ) Apr 13 13 : 04 : 56 server1587 postfix / qmgr[2150] : B145D11D4225 : removed
As a work around, I just added the sending domain to the amavis config file (/etc/amavis/conf.d/20-debian_defaults on ubuntu) and gave it an initial rating of -8.
nano / etc / amavis / conf . d / 20 - debian_defaults
# read_hash("/var/amavis/sender_scores_sitewide"), { # a hash-type lookup table (associative array) 'www.mydomain.com' => - 8.0 , #set low initial spam score to get past stupid amavis mkay? 'nobody@cert.org' => - 3.0 , 'cert-advisory@us-cert.gov' => - 3.0 , 'owner-alert@iss.net' => - 3.0 , 'slashdot@slashdot.org' => - 3.0 , 'securityfocus.com' => - 3.0 ,
I then resterted my services..
/ etc / init . d / amavis restart / etc / init . d / clamav - daemon restart / etc / init . d / clamav - freshclam restart / etc / init . d / postfix restart
And all is good…
Apr 13 13 : 21 : 25 server1587 postfix / pickup[6204] : 9C1F711D4278 : uid = 33 from =< www - data > Apr 13 13 : 21 : 25 server1587 postfix / cleanup[6255] : 9C1F711D4278 : message - id =< 20080413122125.9C1F711D4278 @ www . mydomain . com > Apr 13 13 : 21 : 25 server1587 postfix / qmgr[6205] : 9C1F711D4278 : from =< www - data @ www . mydomain . com >, size = 2191 , nrcpt = 1 ( queue active ) Apr 13 13 : 21 : 28 server1587 postfix / smtpd[6263] : connect from localhost . localdomain[127.0.0.1] Apr 13 13 : 21 : 28 server1587 postfix / smtpd[6263] : 37DD811D4282 : client = localhost . localdomain[127.0.0.1] Apr 13 13 : 21 : 28 server1587 postfix / cleanup[6255] : 37DD811D4282 : message - id =< 20080413122125.9C1F711D4278 @ www . mydomain . com > Apr 13 13 : 21 : 28 server1587 postfix / qmgr[6205] : 37DD811D4282 : from =< www - data @ www . mydomain . com >, size = 2693 , nrcpt = 1 ( queue active ) Apr 13 13 : 21 : 28 server1587 postfix / smtpd[6263] : disconnect from localhost . localdomain[127.0.0.1] Apr 13 13 : 21 : 28 server1587 amavis[5852] : ( 05852 - 01 ) Passed CLEAN , < www - data @ www . mydomain . com > -> < customer @ customerdomain . co . uk >, Message - ID : < 20080413122125.9C1F711D4278 @ www . mydomain . com >, mail_id : q0TJkNI4l8Oi , Hits : 8.456 - 8 , queued_as : 37DD811D4282 , 2622 ms Apr 13 13 : 21 : 28 server1587 postfix / smtp[6258] : 9C1F711D4278 : to =< customer @ customerdomain . co . uk >, relay = 127.0.0.1[127.0.0.1] : 10024 , delay = 2.7 , delays = 0.02 / 0 / 0 / 2.6 , dsn = 2.6.0 , status = sent ( 250 2.6.0 Ok , id = 05852 - 01 , from MTA ( [127.0.0.1] : 10025 ): 250 2.0.0 Ok : queued as 37DD811D4282 ) Apr 13 13 : 21 : 28 server1587 postfix / qmgr[6205] : 9C1F711D4278 : removed Apr 13 13 : 21 : 28 server1587 postfix / smtp[6264] : 37DD811D4282 : to =< customer @ customerdomain . co . uk >, relay = mail . customerdomain . co . uk[100.100.100.100] : 25 , delay = 0.62 , delays = 0.05 / 0.01 / 0.19 / 0.38 , dsn = 2.0.0 , status = sent ( 250 OK id = 1Jl1D2 - 00017Y - Ve ) Apr 13 13 : 21 : 28 server1587 postfix / qmgr[6205] : 37DD811D4282 : removed
Notice the spam score?
Hits : 8.456 - 8
I know this does not fix the problem in the long term, and this will only help out those who run dedicated boxes.
Maybe a simple edit of the email template is all that is needed.
Matt
Signature
http://www.karmatradingco.com
http://www.kentbusinessforum.co.uk
http://www.greenshops.org.uk