The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Exim + Spamassassin = incorrect handling of bounced messages.

Discussion in 'General Discussion' started by techs5, Nov 3, 2003.

  1. techs5

    techs5 Registered

    Joined:
    Oct 28, 2003
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Exim automatically filters email and bounces those with "unsafe" attachments. If I send an email from acctA@domain.com to acctB@domain.com with an executable attachment, the email is bounced and a failure message is sent to acctA@domain.com. This is all good. This is TESTA.

    Now, if I turn ON SpamAssassin, and repeat the same test as above, the message is bounced but it cannot send the failure message to acctA@domain.com, so it tries to send the failure message to root@domain.com, but that fails too and it ends up being dropped in my local admin mail folder. This is not good. This is TESTB.

    To test this further, I repeated the same test, but sent the email from an outside email account acctZ@outsidedomain.com. This message was bounced and handled correctly and the reject message was sent to acctZ@outsidedomain.com. This is TESTC.

    How can this be fixed? I have to use SpamAssassin but need failure messages handled correctly for emails that bounce between users.

    Attached is a copy of the email from TESTB
    --------------------
    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    root@domain.com
    This message has been rejected because it has
    a potentially executable attachment "notepad.exe"
    This form of attachment has been used by
    recent viruses or other malware.
    If you meant to send this file then please
    package it up as a zip file and resend it.

    ------ This is a copy of the message, including all the headers. ------

    Return-path: <root@domain.com>
    Received: from root by domain.com with local-bsmtp (Exim 4.24)
    id 1AGiIG-0008Kt-2o
    for root@domain.com; Mon, 03 Nov 2003 09:15:09 -0800
    Received: from mailnull by domain.com with local (Exim 4.24)
    id 1AGiIG-0008Kp-0d
    for root@domain.com; Mon, 03 Nov 2003 09:15:08 -0800
    X-Failed-Recipients: root@domain.com
    Auto-Submitted: auto-generated
    From: Mail Delivery System <Mailer-Daemon@domain.com>
    To: root@domain.com
    Subject: Mail delivery failed: returning message to sender
    Message-Id: <E1AGiIG-0008Kp-0d@domain.com>
    Date: Mon, 03 Nov 2003 09:15:08 -0800
    X-Spam-Exim: mgQ4tCLy8Rtx_hl6p8LHKeI7
    X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
    domain.com
    X-Spam-Status: No, hits=2.8 required=5.0 tests=LARGE_HEX,LINES_OF_YELLING,
    LINES_OF_YELLING_2,UPPERCASE_50_75 autolearn=no version=2.60
    X-Spam-Level: **

    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    root@domain.com
    This message has been rejected because it has
    a potentially executable attachment "notepad.exe"
    This form of attachment has been used by
    recent viruses or other malware.
    If you meant to send this file then please
    package it up as a zip file and resend it.

    ------ This is a copy of the message, including all the headers. ------

    Return-path: <root@domain.com>
    Received: from root by domain.com with local-bsmtp (Exim 4.24)
    id 1AGiIF-0008Kj-34
    for root@domain.com; Mon, 03 Nov 2003 09:15:07 -0800
    Received: from mailnull by domain.com with local (Exim 4.24)
    id 1AGiIF-0008Kf-0k
    for root@domain.com; Mon, 03 Nov 2003 09:15:07 -0800
    X-Failed-Recipients: root@domain.com
    Auto-Submitted: auto-generated
    From: Mail Delivery System <Mailer-Daemon@domain.com>
    To: root@domain.com
    Subject: Mail delivery failed: returning message to sender
    Message-Id: <E1AGiIF-0008Kf-0k@domain.com>
    Date: Mon, 03 Nov 2003 09:15:07 -0800
    X-Spam-Exim: mgQ4tCLy8Rtx_hl6p8LHKeI7
    X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
    domain.com
    X-Spam-Status: No, hits=2.8 required=5.0 tests=LARGE_HEX,LINES_OF_YELLING,
    LINES_OF_YELLING_2,UPPERCASE_50_75 autolearn=no version=2.60
    X-Spam-Level: **

    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    accta@domain.com
    This message has been rejected because it has
    a potentially executable attachment "notepad.exe"
    This form of attachment has been used by
    recent viruses or other malware.
    If you meant to send this file then please
    package it up as a zip file and resend it.

    ------ This is a copy of the message, including all the headers. ------

    Return-path: <root@domain.com>
    Received: from root by domain.com with local-bsmtp (Exim 4.24)
    id 1AGiIE-0008KU-3j
    for accta@domain.com; Mon, 03 Nov 2003 09:15:06 -0800
    Received: from mailnull by domain.com with local (Exim 4.24)
    id 1AGiIE-0008KQ-1J
    for accta@domain.com; Mon, 03 Nov 2003 09:15:06 -0800
    X-Failed-Recipients: acctb@domain.com
    Auto-Submitted: auto-generated
    From: Mail Delivery System <Mailer-Daemon@domain.com>
    To: accta@domain.com
    Subject: Mail delivery failed: returning message to sender
    Message-Id: <E1AGiIE-0008KQ-1J@domain.com>
    Date: Mon, 03 Nov 2003 09:15:06 -0800
    X-Spam-Exim: mgQ4tCLy8Rtx_hl6p8LHKeI7
    X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
    domain.com
    X-Spam-Status: No, hits=2.8 required=5.0 tests=LARGE_HEX,LINES_OF_YELLING,
    LINES_OF_YELLING_2,UPPERCASE_50_75 autolearn=no version=2.60
    X-Spam-Level: **

    This message was created automatically by mail delivery software.

    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:

    acctb@domain.com
    This message has been rejected because it has
    a potentially executable attachment "notepad.exe"
    This form of attachment has been used by
    recent viruses or other malware.
    If you meant to send this file then please
    package it up as a zip file and resend it.

    ------ This is a copy of the message, including all the headers. ------

    Return-path: <accta@domain.com>
    Received: from accta@domain.com by domain.com with local (Exim 4.24)
    id 1AGiID-0008KO-W4
    for acctb@domain.com; Mon, 03 Nov 2003 09:15:05 -0800
    From: "accta" <accta@domain.com>
    To: acctb@domain.com
    Subject: Test1
    X-Mailer: NeoMail 1.26
    X-IPAddress: 65.104.220.66
    MIME-Version: 1.0
    Content-Type: multipart/mixed;
    boundary="----=ATTACH.235193825866194"
    Message-Id: <E1AGiID-0008KO-W4@domain.com>
    Date: Mon, 03 Nov 2003 09:15:05 -0800

    This is a multi-part message in MIME format.

    ------=ATTACH.235193825866194
    Content-Type: text/plain; charset=iso-8859-1


    Test 1
    --


    ------=ATTACH.235193825866194
    Content-Type: application/octet-stream;
    name="notepad.exe"
    Content-Transfer-Encoding: base64

    TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
    AAAA2AAAAA4fug4AtAnNIbgBTM0hVGhpcyBw....

    ------=ATTACH.235193825866194--
    --------------------

    Please advise.

    Thank you.

    Nabil.
     
Loading...

Share This Page