apache spamassassin - Block emails

julioclm

Registered
Mar 15, 2022
2
0
1
Mexico
cPanel Access Level
Root Administrator
Hello good morning, I have a problem with several emails as spam. I would like to know the correct way to block these emails with jp ending. I tried the blacklist (image1). second option in global mail filters (from - ends with) (from - contains) then delete. (image2). but I still receive emails from termination jp.
 

Attachments

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,498
1,971
363
cPanel Access Level
Root Administrator
Hey there! All of those filter entries look good to me, so I would expect that to block the messages you are intending.

Have you tried the "Test Filter" area to see if that shows anything interesting? Details on that can be found here:


but that lets you test a filter without the need to send and wait to receive an actual email.
 

julioclm

Registered
Mar 15, 2022
2
0
1
Mexico
cPanel Access Level
Root Administrator
but that lets you test a filter without the need to send and wait to receive an actual email.
the test shows the following:

Sub-condition is false: not first_delivery
Condition is false: not first_delivery and error_message
Sub-condition is true: $header_from: ends .jp
Sub-condition is true: $header_from: ends .jp or $h_X-Spam-Status: ends jp
Sub-condition is true: ($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp
Sub-condition is true: (($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp) or $header_from: contains ogawasangyo
Sub-condition is true: ((($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp) or $header_from: contains ogawasangyo) or $header_from: contains co.jp
Condition is true: (((($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp) or $header_from: contains ogawasangyo) or $header_from: contains co.jp) or $header_from: contains *.jp
Condition is false: $h_X-Spam-Bar: contains ++++
Return-path copied from sender


but the problem is that I still receive them.
thanks, i will read the page.
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,498
1,971
363
cPanel Access Level
Root Administrator
It's definitely odd that the test is marking them correctly, but you're still receiving the message. If you don't find anything useful on that page that helps with the situation, and if you have root access to the server, can you submit a ticket to our team so we could check this directly on the machine?