The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Apache SpamAssassin configure from start

Discussion in 'E-mail Discussions' started by 20GT, Jul 19, 2014.

  1. 20GT

    20GT Member

    Joined:
    Jul 15, 2014
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    I've already been here and thought I configured correctly but it is not marking any spam at all.

    I'm looking to stop a particular spammer email. Its always similar but because of the way it is written, I can not stop it with account level filtering. I have posted the headers as a screen shot maybe someone can help me config it correctly
     

    Attached Files:

  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Could you provide the headers of the SPAM message that makes it through, and it's entry in /var/log/exim_mainlog? For instance, what's the SPAM score?

    Thank you.
     
  3. 20GT

    20GT Member

    Joined:
    Jul 15, 2014
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    (Sorry i did not get an alert you had answered)
    Hmm i do not see a spam score. the earlier pics shows my config.
    does that mean I'm not installed correctly?

    i edited my email address in the headers

    i include a new pic with a bug/error (ript>) showing just above to the left of words SpamAssassin Configuration
    could this be why?
     

    Attached Files:

  4. 20GT

    20GT Member

    Joined:
    Jul 15, 2014
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    my host says there is nothing wrong with SpamAssassin it is working perfectly.
    i asked him why does it not add its scan info to the header such as status, score, version...
    he said he would ask help from cpanel forum lol maybe he posted here.
    Anyway the spamassassin is the latest version and acts like it is working,
    as in the configure pages look ok. says enabled, no auto delete

    what is going on when it is is not writing its scan in the headers?
     
  5. 20GT

    20GT Member

    Joined:
    Jul 15, 2014
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Yes, finally here is the full header. I replaced my domain with <MyDomain> to protect my email.

    Code:
    Return-path: <WhosWho-temp1=<MyDomain>.us@greatnames.eu>
    Envelope-to: [email]temp1@<MyDomain>.us[/email]
    Delivery-date: Wed, 23 Jul 2014 12:05:36 -0500
    Received: from shop.greatnames.eu ([216.231.136.13]:52524)
    	by host113.kvchosting.com with esmtp (Exim 4.80.1)
    	(envelope-from <WhosWho-temp1=<MyDomain>.us@greatnames.eu>)
    	id 1X9zym-002E7d-23
    	for [email]temp1@<MyDomain>.us[/email]; Wed, 23 Jul 2014 12:05:35 -0500
    DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=greatnames.eu;
     h=Mime-Version:Content-Type:Message-Id:Date:From:To:Subject; i=WhosWho@greatnames.eu;
     bh=ixCpLkDwjBWHeFm0OPDHYw74yZY=;
     b=UcOugcwTgXHfI+LGOL+IGN9HfScwmJYGlLT180dKUTLtHSGNSyObJrt9NUqs6Kx4rYAhTIBRvkBY
       NSDUwgiZH1ETvQT3gRclEvGphn3u5eDqN+hJCONxSgzD1ccBKfYqbMRvB3VNJD6RVTzzpHRow8IB
       63DKoQjJzRzQSBjKLlE=
    Received: by shop.greatnames.eu id hpvlku0001gp for <temp1@<MyDomain>.us>; Wed, 23 Jul 2014 17:02:42 +0000 (envelope-from <WhosWho-temp1=<MyDomain>.us@greatnames.eu>)
    Mime-Version: 1.0
    Content-Type: multipart/alternative; boundary="b18c-72bd-7de2-4ae9-6fa8-3ae9-3c8a-a0db"
    Message-Id: <bd0aa8c39ea38af69ea42ed7db27c81b.4321892226db7648@greatnames.eu>
    Date: Wed, 23 Jul 2014 17:02:42 +0000
    From: Whos Who<WhosWho@greatnames.eu>
    To: [email]temp1@<MyDomain>.us[/email]
    Subject: =?utf-8?B?RldEOiBZb3UncmUgYSAyMDE0IENhbmRpZGF0ZSBmb3IgV2hvJ3MgV2hv?=
    X-Spam-Status: No, score=-2.0
    X-Spam-Score: -19
    X-Spam-Bar: --
    X-Ham-Report: Spam detection software, running on the system "host113.kvchosting.com", has
     identified this incoming email as possible spam.  The original message
     has been attached to this so you can view it (if it isn't spam) or label
     similar future email.  If you have any questions, see
     root\@localhost for details.
     
     
     Content analysis details:   (-2.0 points, 5.0 required)
     
      pts rule name              description
     ---- ---------------------- --------------------------------------------------
     -0.0 RP_MATCHES_RCVD        Envelope sender domain matches handover relay domain
     -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                                 [score: 0.0000]
      0.0 HTML_MESSAGE           BODY: HTML included in message
     -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                                 domain
     -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
      0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
    X-Spam-Flag: NO
     
    #5 20GT, Jul 23, 2014
    Last edited by a moderator: Jul 24, 2014
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  7. 20GT

    20GT Member

    Joined:
    Jul 15, 2014
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    Website Owner
    Nothin I do with the spam score catches this email
    see pic

    Code:
    
    
    
    Match expanded arguments:
      Subject = -19
      Pattern = ^\d+$
    Match expanded arguments:
      Subject = No, score=-2.0
      Pattern = ^\d+$
    Return-path taken from "Return-path:" header line
    Return-path = nuforia-temp1=me123.us@infodos.net
    Sender      = [email]blackshe@host113.kvchosting.com[/email]
    Recipient   = [email]blackshe@host113.kvchosting.com[/email]
    Testing Exim filter file "/etc/vfilters/me123.us"
    
    Filtering did not set up a significant delivery.
    Normal delivery wil
    
     

    Attached Files:

    #7 20GT, Jul 27, 2014
    Last edited: Jul 28, 2014
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,854
    Likes Received:
    676
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    You may need to contact your web hosting provider for assistance if you feel that SpamAssassin is not behaving as it should. It's not something that you can investigate without root access to the system.

    Thank you.
     
Loading...

Share This Page