Aug 5, 2024: iRedMail-1.7.1 has been released.

**gzhn** · 2010-11-25 15:37:22

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Topic: not filters spam any more.

Hi all,

i had installed iredmail 2 weeks ago and i used it for testing with one domain. my spam control was working perfectly. i edited sieve to move spam mails to junk folder. it worked for me too. everything was fine.

last week i finished testing and started to use this mail server. i'd added 4-5 domains, 40-40 mailboxes. and i'm sure i did not change any configuration parameters. 3 days ago i realized that spam mails are not caught. take a look at spamd status and it was stopped. and then i had started it manually but nothing changed. still my server does not catch spam mails.

what can i do?

thx in advance.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

**ZhangHuangbin** · 2010-11-25 16:30:31

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,136

Re: not filters spam any more.

The latest iRedMail (-0.6.1) uses Dovecot-1.1.x by default, when user has a custom mail filter rule, global rule will be ignored. So you have to upgrade dovecot to 1.2.x, set your global sieve rule in "sieve_before" or "sieve_after", then it should work as expected.

Reference:
- wiki: Upgrade dovecot from 1.1.x to 1.2.x: http://iredmail.org/wiki/index.php?titl … 1.1.to.1.2
- Dovecot wiki: http://wiki.dovecot.org/LDA/Sieve/Dovecot

**gzhn** · 2010-11-25 16:42:03

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

ZhangHuangbin wrote:

The latest iRedMail (-0.6.1) uses Dovecot-1.1.x by default, when user has a custom mail filter rule, global rule will be ignored. So you have to upgrade dovecot to 1.2.x, set your global sieve rule in "sieve_before" or "sieve_after", then it should work as expected.
Reference:
- wiki: Upgrade dovecot from 1.1.x to 1.2.x: http://iredmail.org/wiki/index.php?titl … 1.1.to.1.2
- Dovecot wiki: http://wiki.dovecot.org/LDA/Sieve/Dovecot

but it was filtering after i changed sieve rule.

btw all i did was commenting out a line that was written in sieve before.

**ZhangHuangbin** · 2010-11-25 17:17:51

ZhangHuangbin
iRedMail Developers
Offline

Registered: 2009-05-06
Posts: 31,136

Re: not filters spam any more.

Amavisd will invoke SpamAssassin for anti-spam, so service "spamd" should be always stopped.

Also, sorry, what doesn "not catch spam mails" mean?

**gzhn** · 2010-11-25 17:19:21

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

now i'm stopping it, but this won't solve my issue right?

**maxie_ro** · 2010-11-25 17:42:35

maxie_ro
Member
Offline

From: Constanţa, România
Registered: 2009-10-09
Posts: 214

Re: not filters spam any more.

gzhn, what do you mean by "does not catch spam"? Can you give examples? (Copy-paste some spam source).

**gzhn** · 2010-11-25 17:45:09

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

maxie_ro wrote:

gzhn, what do you mean by "does not catch spam"? Can you give examples? (Copy-paste some spam source).

what i mean is that there is not a mail marked as spam,but i'm getting approximately 20 spam mails a day. as i said at first week server was catching 17-18 out of this 20 spam mail.

**maxie_ro** · 2010-11-25 17:47:41

maxie_ro
Member
Offline

From: Constanţa, România
Registered: 2009-10-09
Posts: 214

Re: not filters spam any more.

@gzhn: paste here the source of some messages which should be marked as spam, as I said above.

**gzhn** · 2010-11-25 17:51:19

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

maxie_ro wrote:

@gzhn: paste here the source of some messages which should be marked as spam, as I said above.

sorry i'm a newbie on this issues, can you tell me what do you mean by "sources"?

**maxie_ro** · 2010-11-25 19:01:32

maxie_ro
Member
Offline

From: Constanţa, România
Registered: 2009-10-09
Posts: 214

Re: not filters spam any more.

Choose "View source" in Thunderbird or corresponding menu in whatever you're using.

**gzhn** · 2010-11-25 19:35:42

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

maxie_ro wrote:

Choose "View source" in Thunderbird or corresponding menu in whatever you're using.

Return-Path: <kampanya@trendymarketing.info>
Delivered-To: gazi@tilda.com.tr
Received: from localhost (localhost [127.0.0.1])
by armuz.tildapop.tilda.com.tr (iRedMail) with ESMTP id 9B3821E0D52;
Thu, 25 Nov 2010 13:22:42 +0200 (EET)
X-Virus-Scanned: Debian amavisd-new at tildapop.tilda.com.tr
Received: from armuz.tildapop.tilda.com.tr ([127.0.0.1])
by localhost (armuz.tildapop.tilda.com.tr [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id c2if1F118PTx; Thu, 25 Nov 2010 13:22:38 +0200 (EET)
X-Original-Helo: tayfunesgin.lnx (iRedMail: http://www.iredmail.org/)
Received: from tayfunesgin.lnx (unknown [93.186.114.6])
by armuz.tildapop.tilda.com.tr (iRedMail) with ESMTPS id A9E121E0CBA
for <info@ekonbilisim.net>; Thu, 25 Nov 2010 13:22:38 +0200 (EET)
Received: from [95.13.79.246] (helo=dsl95-13-20470.ttnet.net.tr)
by tayfunesgin.lnx with esmtpa (Exim 4.67)
(envelope-from <kampanya@trendymarketing.info>)
id 1PLZuX-0002f3-3P
for info@ekonbilisim.net; Thu, 25 Nov 2010 13:22:45 +0200
MIME-Version: 1.0
From: "Mailing Consept" <kampanya@trendymarketing.info>
Reply-To: kampanya@trendymarketing.info
To: info@ekonbilisim.net
Subject: =?iso-8859-9?Q?=DDndirim_Kodunuz..!!_Toplu_Mail_=DDndiriminiz..?=
Content-Type: text/html; charset="iso-8859-9"
Content-Transfer-Encoding: quoted-printable
X-Mailer: SmartSend.2.0.109
Date: Thu, 25 Nov 2010 13:22:31 +0200
Message-ID: <3908191219728110465291@2USERPC>
X-Antivirus: avast! (VPS 101125-0, 25.11.2010), Outbound message
X-Antivirus-Status: Clean

<HEAD>
<META content=3D"text/html; charset=3Diso-8859-9" http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.6001.18928"></HEAD>
<BODY>=
Merhaba, info@ekonbilisim.net<=
/U> ; =DDndirim Kodunuz #0546#<FON=
T color=3D#000000> Bu Kodu Bize Bildirin %25 =DDndirim Kazan=FDn</ST=
RONG>=20

E-B=FClte=
n ve Toplu Mail G=F6nderimleriniz =DD=E7in L=FCtfen =DDleti=FEim Kurunuz..<=
/FONT>
YATIRIMINIZIN KATLARINI KAZANDIRAN TEK S=
=DDSTEM..!!! D=DCNYADAK=DD EN G=DCNCEL MA=DDL L=DDSTELER=DD..!!! =
=DEAHSIN ADINA G=D6NDER=DD..!!! D=DCNYANIN EN =DDY=DD RAPORLAMA S=DDSTEM=
=DD..!!!
Toplu Mail=
G=F6nderimi'nin Faydalar=FD

*Yeni M=FC=FEteril=
er Bulursunuz *Sat=FD=FElar=FDn=FDz Y=FCkselir *Web Sitenizin =DDzlen=
imi Artar *Reklam Maliyetleriniz D=FC=FEer *Milyonlarca Adrese Ula=FE=
=FDrs=FDn=FDz *Prestijiniz Artar
K=FDsacas=FD Herza=
man Kazan=FDrs=FDn=FDz..
 T=
oplu Mail Fiyatlar=FDm=FDz=

1Milyon Adet Mail G=F6nderimi --------------------------- &nbsp=
;275,00 TL 2Milyon Adet Mail G=F6nderimi --------------------------- &nb=
sp;385,00 TL 3Milyon Adet Mail G=F6nderimi ---------------------------&=
nbsp; 450,00 TL 5Milyon Adet Mail G=F6nderimi ---------------------=
------  575,00 TL 10Milyon Adet Mail G=F6nderimi -------------=
------------  975,00 TL

=
 =20

KDV Hari=E7 Net Fiyatlard=FDr..
Mail G=F6nderim S=FCreci
*=DDlk Olarak Yap=FDlacak Mailingin Yasal Olup Olmad=FD=F0=FD Ko=
ntrol Edilir T.C Yasalar=FDna Ayk=FDr=FD =DD=E7eriklere G=F6nderi Yap=FDlma=
z. *Fatura Bilgileriniz Talep Edilir Faturan=FDz Haz=FDrlan=FDr Taraf=FD=
n=FDza (mail,fax ile ) G=F6nderilir. *=D6deme Talep Edilir =D6demeye M=
=FCtaakip Kurulum ve Lisanslama =DD=FElemleriniz Ba=FElat=FDl=FDr. (8-10 sa=
at s=FCrer) *Raporlama Linkiniz ve Kullan=FDc=FD Bilgileriniz G=F6nderil=
ir. *Mailing =C7al=FD=FEman=FDz Ba=FElat=FDl=FDr.

<A title=3Dblocked::http://mailingconsept.com/hakkimizda.html hr=
ef=3D"http://www.trackemailmarketing.com/app/app.php=3Fp=3D/default/tracker=
/index/m/MGRYWPTS/r/aW5mb0Bla29uYmlsaXNpbS5uZXQ%3D/l/aHR0cDovL21haWxpbmdjb2=
5zZXB0LmNvbS9oYWtraW1pemRhLmh0bWw%3D">Raporlama Sistemimiz =DD=E7in T=
=FDklay=FDn=FDz..</A>
T=FCrkiyede Tek, =DDsme Mail G=F6nderimi Bizde =F6rnek: Merhaba =
info@ekonbilisim.net
<A title=3Dblocked::http://www.e-haberajansi.com/haberdetay.php=
=3Fhaber=3D16061 href=3D"http://www.trackemailmarketing.com/app/app.php=3Fp=
=3D/default/tracker/index/m/MGRYWPTS/r/aW5mb0Bla29uYmlsaXNpbS5uZXQ%3D/l/aHR=
0cDovL3d3dy5lLWhhYmVyYWphbnNpLmNvbS9oYWJlcmRldGF5LnBocD9oYWJlcj0xNjA2MQ%3D%=
3D"> Bas=FDnda MailingConsept  </A></STRO=
NG>

L=FCtfen Sadece Telefon =DDle =DDleti=FEim Kurunuz..  Bu Maile Vere=
ce=F0iniz Yan=FDt Okunmayabilir..!!!
 
 TRENDY =DDLET=DD=DE=DDM =
B=DDL=DD=DE=DDM ELK.MALZ.PAZ.T=DDC. Merkez Mah. =DEair Nigar Sok.No:23 D-5 KA=D0ITHANE <=
/SPAN>0212 321 63 35 </=
SPAN><A title=3Dblocked:=
:http://www.mailingconsept.com/ href=3D"http://www.trackemailmarketing.com/=
app/app.php=3Fp=3D/default/tracker/index/m/MGRYWPTS/r/aW5mb0Bla29uYmlsaXNpb=
S5uZXQ%3D/l/aHR0cDovL3d3dy5tYWlsaW5nY29uc2VwdC5jb20%3D">www.mailingconsept.=
com</A>

B=DDZ=DD=
TERC=DDH EDEN BAZI M=DC=DETER=DDLER=DDM=DDZ
Taksim Dan=FD=FEmanl=FDk Patika Tur Esteticare Begovil Turizm<B=
R>Prestij Otel E-Mey Ayy=FDld=FDz Tekstil Hospident Focus Yurt =
D=FDs=FD Egitim Esermak Prestij Konutlar=FD Dijital =DDmaj Pro =
Yap=FD Lineer =DDn=FEaat Mavi Egitim Marmara G=FCvenlik =DDnka =
LTD. Daha Fazlas=FD =DD=E7in =DDleti=FEim Kurunuz <BR=
>

<A href=3D"htt=
p://www.trackemailmarketing.com/app/app.php=3Fp=3D/default/tracker/index/m/=
MGRYWPTS/r/aW5mb0Bla29uYmlsaXNpbS5uZXQ%3D/l/aHR0cDovL3RyZW5keW1hcmtldGluZy5=
pbmZvL2xpc3RlZGVuY2lrYXJ0aWxkaW5pei5odG1s"> Mail Almak =
=DDstemiyorsan=FDz L=FCtfen T=FDklay=FDn=FDz..Unsubscribe </A>Y=
=F6nlendirme Ard=FDndan Otomatik Listeden =C7=FDkart=FDlacaks=FDn=FDz..!!</=
P><IMG border=3D0 src=3D"http://www.trackemailmarketing.com/app/app.php=3Fp=
=3D/default/tracker/index/m/MGRYWPTS/r/aW5mb0Bla29uYmlsaXNpbS5uZXQ%3D"></BO=
DY>

**maxie_ro** · 2010-11-25 19:47:42

maxie_ro
Member
Offline

From: Constanţa, România
Registered: 2009-10-09
Posts: 214

Re: not filters spam any more.

Apparently Amavisd is either not working or not marking score for your domain(s).

1. Check that your amavisd service is actually started and that it is set to start on reboot.

2. Check /etc/amavisd.conf (or where your amavisd.conf is located):

$sa_tag_level_deflt  = undef;

3. Check that your local domains are listed in /etc/amavisd.conf:

@local_domains_map = ( ["mydomain.tld", "myotherdomain.tld", ..., "my100domain.tld"]);

4. Restart amavisd service.

Wait to receive another mail/spam and check for X-Spam headers in the message source. They should be there now, even for non-spam.

**gzhn** · 2010-11-25 20:00:08

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

maxie_ro wrote:

Apparently Amavisd is either not working or not marking score for your domain(s).
Check /etc/amavisd.conf (or where your amavisd.conf is located):
1. Check that your amavisd service is actually started and that it is set to start on reboot.
2.
$sa_tag_level_deflt  = undef;
3. Check that your local domains are listed:
@local_domains_map = ( ["mydomain.tld", "myotherdomain.tld", ..., "my100domain.tld"]);
4. Restart amavisd service.
Wait to receive another mail/spam and check for X-Spam headers in the message source. They should be there now, even for non-spam.

thanks a lot. most probably it's because of @local_domains_map. i didn't my newly added domains here.

now i'm waiting for a spam to come for testing

by the way, i'm going to add approximately 350 domains to this mail server. should i write them all to @local_domains_map? or is there another way?

**maxie_ro** · 2010-11-25 20:02:48

maxie_ro
Member
Offline

From: Constanţa, România
Registered: 2009-10-09
Posts: 214

Re: not filters spam any more.

There was a post sometime ago about getting the local domain map from SQL directly, if I remember correctly... Just search around.

**gzhn** · 2010-11-25 21:28:38

gzhn
Member
Offline

Registered: 2010-11-25
Posts: 8

Re: not filters spam any more.

thanks a lot it works now

**hansolo** · 2010-12-02 04:13:41

hansolo
Member
Offline

Registered: 2010-05-21
Posts: 26

Re: not filters spam any more.

Hi,
sorry for late RE, but:

here under post #18

and here

explains how to make Amavis do SQL search for local domains and filter them without manually adding.

It's a VERY valuable solution but hard to find.

Aug 5, 2024: iRedMail-1.7.1 has been released.

not filters spam any more.

Posts: 16

1 Topic by gzhn 2010-11-25 15:37:22

Topic: not filters spam any more.

2 Reply by ZhangHuangbin 2010-11-25 16:30:31

Re: not filters spam any more.

3 Reply by gzhn 2010-11-25 16:42:03 (edited by gzhn 2010-11-25 16:43:08)

Re: not filters spam any more.

4 Reply by ZhangHuangbin 2010-11-25 17:17:51

Re: not filters spam any more.

5 Reply by gzhn 2010-11-25 17:19:21

Re: not filters spam any more.

6 Reply by maxie_ro 2010-11-25 17:42:35

Re: not filters spam any more.

7 Reply by gzhn 2010-11-25 17:45:09

Re: not filters spam any more.

8 Reply by maxie_ro 2010-11-25 17:47:41

Re: not filters spam any more.

9 Reply by gzhn 2010-11-25 17:51:19

Re: not filters spam any more.

10 Reply by maxie_ro 2010-11-25 19:01:32

Re: not filters spam any more.

11 Reply by gzhn 2010-11-25 19:35:42

Re: not filters spam any more.

12 Reply by maxie_ro 2010-11-25 19:47:42 (edited by maxie_ro 2010-11-25 19:53:56)

Re: not filters spam any more.

13 Reply by gzhn 2010-11-25 20:00:08

Re: not filters spam any more.

14 Reply by maxie_ro 2010-11-25 20:02:48

Re: not filters spam any more.

15 Reply by gzhn 2010-11-25 21:28:38

Re: not filters spam any more.

16 Reply by hansolo 2010-12-02 04:13:41

Re: not filters spam any more.

Posts: 16