The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Regular messages marked as spam

Discussion in 'E-mail Discussions' started by kshivachev, Nov 10, 2015.

  1. kshivachev

    kshivachev Registered

    Joined:
    Jun 26, 2015
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Bulgaria
    cPanel Access Level:
    Root Administrator
    Hello,

    We are experiencing the following problem : regular messages sent through our shared server are marked as spam ( you can review the screenshot for more information ). We have checked the blacklists and we are not listed anywhere. Here is the output from the exim log :

    Code:
    # grep domainname /var/log/exim_mainlog 
    +++ 1ZtI8b-00066r-OH has not completed +++
    2015-11-02 18:39:19 1ZtI8b-00066r-OH H=([192.168.1.100]) [148.0.10.196]:2355 F=<info@domainname> A=dovecot_plain:info@domainname rejected after DATA: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as spam (9.0)"
    
    +++ 1ZtJfg-0003dV-AU has not completed +++
    2015-11-02 20:17:35 1ZtJfg-0003dV-AU H=([127.0.0.1]) [92.222.124.29]:8343 F=<info@domainname> A=dovecot_plain:info@domainname rejected after DATA: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as spam (9.0)"
    
    +++ 1ZtJEe-00021z-O8 has not completed +++
    2015-11-02 19:49:39 1ZtJEe-00021z-O8 H=([127.0.0.1]) [92.222.124.29]:50353 F=<info@domainname> A=dovecot_plain:info@domainname rejected after DATA: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as spam (9.0)"
    
    +++ 1ZtJfv-0003dV-3l has not completed +++
    2015-11-02 20:17:49 1ZtJfv-0003dV-3l H=([127.0.0.1]) [92.222.124.29]:8343 F=<info@domainname> A=dovecot_plain:info@domainname rejected after DATA: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as spam (9.0)"
    
    +++ 1ZtMIf-0004pB-63 has not completed +++
    2015-11-02 23:05:58 1ZtMIf-0004pB-63 H=(ourservername) [::1]:55676 F=<info@domainname> A=dovecot_login:info@domainname rejected after DATA: "SpamAssassin as cpaneleximscanner detected OUTGOING smtp message as spam (9.0)"
    
    
    Do you have any idea why the spamassasin is marking a regular messages as spam ?

    Regards!
     

    Attached Files:

    #1 kshivachev, Nov 10, 2015
    Last edited by a moderator: Nov 10, 2015
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,723
    Likes Received:
    660
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  3. kshivachev

    kshivachev Registered

    Joined:
    Jun 26, 2015
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Bulgaria
    cPanel Access Level:
    Root Administrator
    Hello,

    It happens to any message.

    Regards!
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,723
    Likes Received:
    660
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Please ensure you are following the guidelines at:

    How to Keep your Email out of the Spam Folder - cPanel Knowledge Base - cPanel Documentation

    Note that you can disable SpamAssassin for outgoing email by disabling the following option under the "Apache SpamAssassin Options" tab in "WHM >> Exim Configuration Manager":

    "Scan outgoing messages for spam and reject based on the Apache SpamAssassin™ internal spam_score setting"

    Or, you may want to use "Scan outgoing messages for spam and reject based on defined Apache SpamAssassin™ score" and change the threshold.

    Thank you.
     
  5. kshivachev

    kshivachev Registered

    Joined:
    Jun 26, 2015
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Bulgaria
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you please explain on what base you define the spamassasin score ? I want to know on what base my client has received such score and what he needs to fix.

    Regards!
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,723
    Likes Received:
    660
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  7. oscar222

    oscar222 Registered

    Joined:
    Nov 19, 2015
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Argentina
    cPanel Access Level:
    Root Administrator
    Im getting the same message.
    I change the threshold to 9.0, and a couple of months later, same message.

    Only happens for a particular user
    How can I view wich tests are scoring this message to more than 9 ?
     
  8. bloatedstoat

    bloatedstoat Well-Known Member

    Joined:
    Jun 14, 2012
    Messages:
    78
    Likes Received:
    6
    Trophy Points:
    8
    Location:
    Victoria, Australia
    cPanel Access Level:
    Root Administrator
    Whilst I have not done this myself I believe one could copy the entire original source of a client email that fails, save it to a file on the server and thereafter pipe it into spamassassin on the command line to reveal scores on tests in the output.

    For example:
    /usr/local/cpanel/3rdparty/bin/spamassassin -D -t < client-email.txt 2> output.txt
     
  9. oscar222

    oscar222 Registered

    Joined:
    Nov 19, 2015
    Messages:
    2
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Argentina
    cPanel Access Level:
    Root Administrator
    There is no summary in the logs or headers about WHAT tests are contributing to the score (I can see the report in incoming messages, but not in outgoing msg)
     
  10. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,723
    Likes Received:
    660
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    You may also want to experiment with disabling the following options under the "Apache SpamAssassin Options" tab in "WHM >> Service Configuration >> Exim Configuration Manager":

    Enable BAYES_POISON_DEFENSE Apache SpamAssassin™ ruleset

    Enable KAM Apache SpamAssassin™ ruleset

    Enable the Apache SpamAssassin™ ruleset that cPanel uses on cpanel.net


    It's possible one of these rulesets is the reason for the recent detection of SPAM.

    Thank you.
     
Loading...

Share This Page