The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Filter not filtering

Discussion in 'General Discussion' started by pubwvj, Jan 28, 2005.

Thread Status:
Not open for further replies.
  1. pubwvj

    pubwvj Active Member

    Joined:
    Mar 15, 2004
    Messages:
    39
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    In the Mountains of Vermont
    In one of my domains I have a mail filter setup in CPanel:

    $h_X-Spam-Status: begins "Yes"+++++++/dev/null
    $header_from: contains "postmaster"+++++++/dev/null

    but I get emails pretty much every day with headers like the one at the bottom of this message. The question is why aren't they being stopped by the mail filter. They have "postmaster" in the "From" header. They also begin with "Yes" in the "X-Spam-Status" header. If I run a trace using the below headers in the mail filter in CPanel it says that this should have been stopped (because of the "Yes"). Ideas?


    ----TRACE FROM CPANEL EMAIL FILTER PAGE:

    Filter Trace
    Filter Trace Results:
    The Filter has matched the following condition:
    $h_X-Spam-Status: begins Yes

    Return-path taken from "Return-path:" header line
    Return-path = <>
    Sender = bling@host32.root-name-server.net
    Recipient = bling@host32.root-name-server.net
    Testing Exim filter file "/etc/vfilters/blacklighting.com"

    Save message to: /dev/null 0660
    Filtering set up at least one significant delivery or other action.
    No other deliveries will occur.



    ----HEADERS FROM OFFENDING MAIL:

    From: postmaster@ontla.ola.org
    Subject: [n110.9] Undeliverable: Greetings
    Date: January 28, 2005 8:41:53 PM EST
    To: julchik@flashmag.com
    Return-Path: <>
    Envelope-To: zcatchall@blacklighting.com
    Delivery-Date: Fri, 28 Jan 2005 19:46:44 -0600
    Received: from bling by host32.root-name-server.net with local-bsmtp (Exim 4.43) id 1CuhhC-0006Kt-AQ for zcatchall@blacklighting.com; Fri, 28 Jan 2005 19:46:44 -0600
    Received: from [192.75.172.1] (helo=gateway-b.ontla.on.ca) by host32.root-name-server.net with esmtp (Exim 4.43) id 1CuhhB-0006Ki-SR for julchik@flashmag.com; Fri, 28 Jan 2005 19:46:42 -0600
    Received: from EXROUTER.olabb.ola.org ([192.75.175.125]) by gateway-b.ontla.on.ca with ESMTP id j0T1kbl5012969 for <julchik@flashmag.com>; Fri, 28 Jan 2005 20:46:37 -0500 (EST)
    Received: by exrouter.olabb.ola.org with Internet Mail Service (5.5.2656.59) id <CYFWL8XW>; Fri, 28 Jan 2005 20:41:53 -0500
    Message-Id: <537B9C890A0BD7118B1A0001024083EF02A7E918@exndp.ndp.on.ca>
    Mime-Version: 1.0
    X-Mailer: Internet Mail Service (5.5.2656.59)
    X-Ms-Embedded-Report:
    Content-Type: multipart/mixed; boundary="----_=_NextPart_000_01C505A3.B5613242"
    X-Spam-Prev-Subject: Undeliverable: Greetings
    X-Spam-Flag: YES
    X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on host32.root-name-server.net
    X-Spam-Level: **************************************************
    X-Spam-Status: Yes, score=110.9 required=2.1 tests=URIBL_OB_SURBL,URIBL_SBL, URIBL_SC_SURBL,URIBL_WS_SURBL,USER_IN_BLACKLIST autolearn=no version=3.0.2
    X-Spam-Report: * 100 USER_IN_BLACKLIST From: address is in the user's black-list * 3.0 URIBL_SBL Contains an URL listed in the SBL blocklist * [URIs: foryoufromme.org] * 2.0 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist * [URIs: foryoufromme.org] * 2.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist * [URIs: foryoufromme.org] * 3.9 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist * [URIs: foryoufromme.org]
    Sender: <bling@host32.root-name-server.net>
     
  2. Sash

    Sash Well-Known Member

    Joined:
    Feb 18, 2003
    Messages:
    252
    Likes Received:
    0
    Trophy Points:
    16
    Same Problem

    Same problem......

    Mike
     
  3. cev

    cev Member

    Joined:
    Apr 10, 2002
    Messages:
    17
    Likes Received:
    0
    Trophy Points:
    1
    hi

    i have the same problem, but only on the main account, so i think filters don't work on the main account. make a new account and forward all emails to this one, then it should work.

    regards
    rony



    http://www.joomeara.info
     
  4. pubwvj

    pubwvj Active Member

    Joined:
    Mar 15, 2004
    Messages:
    39
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    In the Mountains of Vermont
    Interesting. Yes, most of the mail that doesn't filter is coming in on the main account. I will try doing the forward and see if that works.

    There is still a significant amount that is going through added email accounts that doesn't get touched by the filters and occasionally not even by SpamAssassin.
     
  5. pubwvj

    pubwvj Active Member

    Joined:
    Mar 15, 2004
    Messages:
    39
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    In the Mountains of Vermont
    Well, it still isn't working. The filters are letting things pass that the filter test says they should have gotten. Bug? Solution?
     
  6. Alexandre Duran

    Alexandre Duran Well-Known Member

    Joined:
    May 6, 2003
    Messages:
    61
    Likes Received:
    0
    Trophy Points:
    6
    Location:
    Rio de Janeiro - BRAZIL
    Same problem here. The filter is correct configured, see in /etc/vfilters:

    # Exim filter

    if error_message then finish endif

    if
    $header_from: is "dwlistas@gmail.com"
    or $header_from: is "fabioschult@bol.com.br"
    or $header_from: is "paivaneto@lbv.com.br"
    or $header_from: is "players@taikodom.com"
    or $header_from: is "psillus@yahoo.com.br"
    or $header_from: is "victor@clickcaldas.com.br"
    or $header_subject: contains "Caiu novamente"
    then
    save "/dev/null" 660
    endif

    But nothing works.
     
  7. kwdavids

    kwdavids Member

    Joined:
    Jan 12, 2006
    Messages:
    5
    Likes Received:
    0
    Trophy Points:
    1
    When it happens...

    I have the same problem with emails coming to all my accounts. All the emails that slip through (and this is true of the one starting THIS thread) have an empty Return-Path header.

    Normally Return-Path is empty only on bounce messages and certain administrative messages.

    It looks to me like the filtering system is not filtering messages that it thinks are bounce messages, as determined by the return path information.


    Kevin
     
  8. chirpy

    chirpy Well-Known Member

    Joined:
    Jun 15, 2002
    Messages:
    13,475
    Likes Received:
    20
    Trophy Points:
    38
    Location:
    Go on, have a guess
    Please don't cross-post.
     
Loading...
Thread Status:
Not open for further replies.

Share This Page