The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Spam filtering with cpanel-11.

Discussion in 'E-mail Discussions' started by anton_latvia, Oct 29, 2007.

  1. anton_latvia

    anton_latvia Well-Known Member
    PartnerNOC

    Joined:
    May 11, 2004
    Messages:
    354
    Likes Received:
    3
    Trophy Points:
    168
    Location:
    Latvia
    cPanel Access Level:
    Root Administrator
    Here is our story, story about spam and cpanel-11.

    We were using cpanel-10 and were quite happy with it. But suddenly on several servers SpamAssassin started to fail too often. Then licenses got expired and we were forced to upgrade. This helped a lot - global spamassassin is a great feature, a lot more spam emails are being trapped. Unfortunately we had some "moments" and that's why I have started this thread to ask and discuss them.

    1. SpamAssassin is using ACLs for spam scanning. We also are using DCC and SARE rules. Would that harm or disturb new way of operating? Since upgrade we do experience higher load and spamd/exim fails more frequently on _several_ (not all) servers.

    2. In exim's configuration there are 2 similar options - how do they interfere with each other? Should we have them both enabled or is it enough with just one? Could fact of having them both enabled be the reason for higher load? These 2 options are:

    - Reject mail at SMTP time if the spam score from spamassassin is greater than 10.0.
    - Reject mail with a failure message if the spam score from spamassassin is greater than 20.0.

    Yes, I think spam score of 10 or 12.5 is more than enough.

    3. If incoming mail is being trapped as spam with high score and server refuses to accept it - will sender receive some notification or does it depend on sender's mail server?

    4. If spamd and exim fails from time to time and there is nothing sensible in the logs - what could be done? Does it mean that server got too much job to do? Since upgrade our mail queue has improved dramatically - less than 100 emails - wow! :)

    Thanks for your answers and sorry, if this is repeated discussion (although search function did not show anything more or less close to this).

    Anton.
     
    #1 anton_latvia, Oct 29, 2007
  2. mtindor

    mtindor Well-Known Member

    Joined:
    Sep 14, 2004
    Messages:
    1,296
    Likes Received:
    41
    Trophy Points:
    178
    Location:
    inside a catfish
    cPanel Access Level:
    Root Administrator
    1. Using the DCC and SARE rules can and will increase the load that SpamAssassin incurs because it is processing more rules. I know they are effective rules - I use them sometimes, but if the load gets to high I might turn them off for a while.

    2. Reject Mail at SMTP Time vs Reject Mail With a Failure Message

    I would suggest that you do not use 'Reject Mail With A Failure Message'.

    If you use the Reject Mail With a Failure Message, your machine will accept each of those spam and then generate a bounce back to the sender (and the sender in most spam cases is forged and did not send you the spam). So you end up getting your server blacklisted for being a "spam generator"

    If you use Reject Mail With a Failure Message, your machine will reject the mail during the SMTP phase, causing the sending mail server (or spamming client) to receive an error immediately. So the burden of dealing with the spam message will be on the sending mail server instead.

    Mike

     
    #2 mtindor, Oct 29, 2007
  3. anton_latvia

    anton_latvia Well-Known Member
    PartnerNOC

    Joined:
    May 11, 2004
    Messages:
    354
    Likes Received:
    3
    Trophy Points:
    168
    Location:
    Latvia
    cPanel Access Level:
    Root Administrator
    Thanks for the explanation, Mike. I guess I have to pay more attention to what is written and difference is quite obvious. And in last paragraph you probably wanted to say:

    Reject Mail at SMTP Time

    instead of:

    Reject Mail With a Failure Message.

    Once again thank you!

    Regards,
    Anton.
     
    #3 anton_latvia, Oct 29, 2007
(You must log in or sign up to post here.)
Loading...
Similar Threads - Spam filtering cpanel
  1. Taha Haider

    cPanel Spam Filtering

    Taha Haider, Mar 14, 2017, in forum: E-mail Discussions
    Replies:
    3
    Views:
    289
    Taha Haider
    Mar 14, 2017
  2. maever

    Spamassassin stops filtering after implementing outbound spam filter

    maever, Feb 14, 2017, in forum: E-mail Discussions
    Replies:
    1
    Views:
    152
    cPanelMichael
    Feb 14, 2017
  3. Metalmurphy

    Improving SPAM filtering Questions

    Metalmurphy, Sep 15, 2016, in forum: E-mail Discussions
    Replies:
    1
    Views:
    475
    cPanelMichael
    Sep 22, 2016
  4. Sam Oakley

    Spam Assassin bouncing (not filtering) GTUBE tests

    Sam Oakley, Feb 3, 2016, in forum: E-mail Discussions
    Replies:
    1
    Views:
    406
    cPanelMichael
    Feb 3, 2016
  5. nosajix

    Trouble with locally delivered spam when using outside spam filtering services

    nosajix, Aug 7, 2015, in forum: E-mail Discussions
    Replies:
    6
    Views:
    383
    cPanelMichael
    Aug 12, 2015

Share This Page