The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

The mail server detected your message as spam and has prevented delivery.

Discussion in 'E-mail Discussions' started by ovisopa, Dec 7, 2012.

  1. ovisopa

    ovisopa Member

    Joined:
    Apr 12, 2007
    Messages:
    18
    Likes Received:
    0
    Trophy Points:
    1
    As I understand my server tries to send a bounce to notify the sender (spamer) the message was not delivered as it was found as SPAM.

    Is there a way to setup the server not to send those bounces when the message was marked as spam ? I want to do this because every day I have more than 50 bounces in my server queue, because the email address that sent spam probably doesn't exists

    Code:
    Headers spool file
    1TgoVK-0004fO-A7-H
    mailnull 47 12
    <>
    1354850494 0
    -ident mailnull
    -received_protocol local
    -body_linecount 151
    -max_received_linelength 120
    -allow_unqualified_recipient
    -allow_unqualified_sender
    -frozen 1354850494
    -localerror
    XX
    1
    creatiaperfecta@gmail.com
    
    156P Received: from mailnull by secure3.x******d.com with local (Exim 4.80)
    	id 1TgoVK-0004fO-A7
    	for creatiaperfecta@gmail.com; Fri, 07 Dec 2012 05:21:34 +0200
    047  X-Failed-Recipients: fl******mir@s***l.ro
    029  Auto-Submitted: auto-replied
    064F From: Mail Delivery System <Mailer-Daemon@secure3.x******d.com>
    030T To: creatiaperfecta@gmail.com
    059  Subject: Mail delivery failed: returning message to sender
    053I Message-Id: <E1TgoVK-0004fO-A7@secure3.x******d.com>
    038  Date: Fri, 07 Dec 2012 05:21:34 +0200
    Data spool file
    1TgoVK-0004fO-A7-D
    This message was created automatically by mail delivery software.
    
    A message that you sent could not be delivered to one or more of its
    recipients. This is a permanent error. The following address(es) failed:
    
      fl******mir@s***l.ro
        The mail server detected your message as spam and has prevented delivery (10).
    
    ------ This is a copy of the message, including all the headers. ------
    
    Return-path: <creatiaperfecta@gmail.com>
    Received: from [66.171.178.187] (port=40360 helo=go.viasatpro.info)
    	by secure3.x******d.com with esmtp (Exim 4.80)
    	(envelope-from <creatiaperfecta@gmail.com>)
    	id 1TgoVI-0004f8-R5
    	for fl******mir@s***l.ro; Fri, 07 Dec 2012 05:21:34 +0200
    Received: by go.viasatpro.info (Postfix, from userid 0)
    	id 2A26328C50; Thu,  6 Dec 2012 19:20:13 -0800 (PST)
    To: fl******mir@s***l.ro
    Subject: Senzational - Locuri de munca online de la D.D.
    X-PHP-Originating-Script: 0:email.php
    Message-ID: <2edfadc829b388a79b414d0a84bdea37@marketing.libertatea.info>
    Date: Thu, 06 Dec 2012 15:32:11 -0800
    From: "L7" <creatiaperfecta@gmail.com>
    Reply-To: creatiaperfecta@gmail.com
    MIME-Version: 1.0
    X-Mailer-LID: 7
    List-Unsubscribe: <http://marketing.libertatea.info/unsubscribe.php?M=347586&C=b78e34590dc48bc3fd35bebbf94e82bb&L=7&N=5>
    X-Mailer-RecptId: 347586
    X-Mailer-SID: 5
    X-Mailer-Sent-By: 1
    Content-Type: multipart/alternative; charset="UTF-8"; boundary="b1_c8448925a2bf3cd44f6a68b743414e1b"
    Content-Transfer-Encoding: 8bit
    X-Spam-Subject: ***SPAM*** Senzational - Locuri de munca online de la D.D.
    X-Spam-Status: Yes, score=6.8
    X-Spam-Score: 68
    X-Spam-Bar: ++++++
    X-Spam-Report: Spam detection software, running on the system "secure3.x******d.com", has
     identified this incoming email as possible spam.  The original message
     has been attached to this so you can view it (if it isn't spam) or label
     similar future email.  If you have any questions, see
     the administrator of that system for details.
     
     Content preview:  Buna, Iti trimit mai jos detalii pentru oferta de locuri de
        munca online. Pentru detalii [...] 
     
     Content analysis details:   (6.8 points, 5.0 required)
     
      pts rule name              description
     ---- ---------------------- --------------------------------------------------
      0.0 FREEMAIL_FROM          Sender email is commonly abused enduser mail provider
                                 (creatiaperfecta[at]gmail.com)
      1.4 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT
                                 [66.171.178.187 listed in bb.barracudacentral.org]
      0.8 SPF_NEUTRAL            SPF: sender does not match SPF record (neutral)
      1.6 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
      1.7 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                                 [URIs: libertatea.info]
      2.1 URI_NO_WWW_INFO_CGI    URI: CGI in .info TLD other than third-level
                                 "www"
     -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                                 [score: 0.0000]
      2.1 HTML_IMAGE_ONLY_12     BODY: HTML: images with 800-1200 bytes of words
      0.0 HTML_MESSAGE           BODY: HTML included in message
      0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
     -1.8 AWL                    AWL: From: address is in the auto white-list
    X-Spam-Flag: YES
    
    I checked the log also, and the email exists but is bounced by gmail because it's receiving mails at a rate that prevents additional messages from being delivered. Error 550-5.2.1

    Code:
    Delivery Log (Where available - Can take some time depending on the size of the exim_mainlog)
    2012-12-07 05:21:34 cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1TgoVK-0004fO-A7
    
    2012-12-07 14:09:48 cwd=/usr/local/cpanel/whostmgr/docroot 3 args: exim -Mvh 1TgoVK-0004fO-A7
    
    2012-12-07 14:09:48 cwd=/usr/local/cpanel/whostmgr/docroot 3 args: exim -Mvb 1TgoVK-0004fO-A7
    
    +++ 1TgoVK-0004fO-A7 has not completed +++
    2012-12-07 05:21:34 1TgoVK-0004fO-A7 <= <> R=1TgoVI-0004f8-R5 U=mailnull P=local S=5490 T="Mail delivery failed: returning message to sender" for creatiaperfecta@gmail.com
    2012-12-07 05:21:34 1TgoVK-0004fO-A7 ** creatiaperfecta@gmail.com R=dkim_lookuphost T=dkim_remote_smtp: SMTP error from remote mail server after RCPT TO:: host gmail-smtp-in.l.google.com [173.194.70.27]: 550-5.2.1 The user you are trying to contact is receiving mail at a rate that\n550-5.2.1 prevents additional messages from being delivered. For more\n550-5.2.1 information, please visit\n550 5.2.1 http://support.google.com/mail/bin/answer.py?answer=6592 s8si21012253eeo.79
    2012-12-07 05:21:34 1TgoVK-0004fO-A7 Frozen (delivery error message)
    2012-12-07 06:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 07:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 08:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 09:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 10:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 11:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 12:02:56 1TgoVK-0004fO-A7 Message is frozen
    2012-12-07 13:02:56 1TgoVK-0004fO-A7 Message is frozen
     
  2. quanin

    quanin Well-Known Member

    Joined:
    Aug 18, 2011
    Messages:
    84
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Re: The mail server detected your message as spam and has prevented deliver

    Looks like your spam rejection settings are a little off. In WHM Exim Configuration Manager: make sure "No bouncing by spam score" is checked. then, set the SpamAssassin "reject score threshold". That will kill spam mail with the same message at SMtP time, meaning it's up to the sending mail server to generate and handle the bounce (most spam servers don't bother).
     
  3. ovisopa

    ovisopa Member

    Joined:
    Apr 12, 2007
    Messages:
    18
    Likes Received:
    0
    Trophy Points:
    1
    Re: The mail server detected your message as spam and has prevented deliver

    quanin, thank you. I checked "No bouncing by spam score" and also verify this setting: SpamAssassin™ reject spam score threshold: 20

    Isn't 20 just to high ? What do you guys use for this value ? should I use 6 ? as 5 is the score to mark a message as spam.
     
  4. quanin

    quanin Well-Known Member

    Joined:
    Aug 18, 2011
    Messages:
    84
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    Re: The mail server detected your message as spam and has prevented deliver

    20 is definitely way too high. Who set that up for you? If you can remember, set it to the same as you had your bounce score threshold. That way, all the spam that used to generate a bounce will be rejected at smtp time.
     
Loading...

Share This Page