The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Apache SpamAssassin™ not working properly

Discussion in 'E-mail Discussions' started by Host NIT, Sep 7, 2015.

  1. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    I'm trying to get the "blacklist" and "white list" feature to work and it just isn't working.
    I tried every single combination for the blacklist feature:

    friend@somewhere.com, *@isp.com, or *.domain.net

    I even tried this for another domain hosted on another server that I own and it still sends the email through.

    Please advise because I am stuck!
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    652
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Could you post an entry from /var/log/exim_mainlog after sending from an email address that's been blacklisted? EX:

    Code:
    exigrep user@domain /var/log/exim_mainlog
    Thank you.
     
  3. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    Here's the server log with the emails blocked out: {emails replaced with
    from blocked domain to receiving domain=user@receivingdomain.com, it was sent to there different domains that blocked the sending domain/ all was received. }

    Code:
    2015-09-07 17:41:41 1ZZ4AX-0005JJ-Oj <= from_domain@thatwasblacklisted.com H=localhost (162.246.60.2) [::1]:49263 P=esmtpa A=dovecot_login:domain@thatwasblacklisted.com S=580 id=6075710d0c223b819e6e5a34c6adeee7@webkdb.com T="Test settings" foruser@receivingdomain.com user@receivingdomain.com user@receivingdomain.com
    2015-09-07 17:41:42 1ZZ4AX-0005JJ-Oj => rishi <user@receivingdomain.com> R=virtual_user T=virtual_userdelivery
    2015-09-07 17:41:42 1ZZ4AX-0005JJ-Oj => rishi <user@receivingdomain.com> R=virtual_user T=virtual_userdelivery
    2015-09-07 17:41:42 1ZZ4AX-0005JJ-Oj => user@receivingdomain.com R=smart_route T=auth_relay H=smtp.us-east-1.mandrillapp.com [54.159.27.16] X=TLSv1.2:ECDHE-RSA-AES256-GCM-SHA384:256 A=auth_login C="250 2.0.0 Ok: queued as 85439280749"
    2015-09-07 17:41:42 1ZZ4AX-0005JJ-Oj Completed
    
    All emails were received in all three different domains it was sent to that the entire sending domain was blocked out.

    Please advise.
     
    #3 Host NIT, Sep 7, 2015
    Last edited by a moderator: Sep 8, 2015
  4. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    I can PM you the unedited version of whats above if you cant understand it due to my changes.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    652
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    Please ensure you send the test emails from a remote mail servers so it does not receive an exemption due to it's status as a local domain name.

    Thank you.
     
  6. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    Alright, I tried blocking gmail and it worked. Buty I have an entire list of emails in my blacklist and they are not being filtered out like the g mail email I sent.

    Any advice on that?
     
    #6 Host NIT, Sep 8, 2015
    Last edited by a moderator: Sep 9, 2015
  7. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    Would you like me to open a ticket so i can send you the entire logs (not edited) and the entire blacklist I've setup?

    Or do you have a proposed solution?
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    652
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Are these remote domain names or are they hosted locally on your server? Are you using wildcards or actual email addresses?

    Thank you.
     
  9. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    No they are not hosted locally. They are all remote domains like freeebooks, etc
    I am using wildcards for the entire domain and recently I also added the email address that's sending the spam.
     
  10. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,678
    Likes Received:
    652
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Feel free to open a support ticket using the link in my signature so we can take a closer look. You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
  11. Host NIT

    Host NIT Member

    Joined:
    Apr 25, 2014
    Messages:
    19
    Likes Received:
    0
    Trophy Points:
    1
    cPanel Access Level:
    DataCenter Provider
    I'm currently following some other guides online written about this and so far so good.

    I'll let you know if it doesnt work. Only thin is my customers should not have to go through all that so I might end up sending that ticket anyways.
     
Loading...

Share This Page