1 Topic by Ascar

  • Ascar
  • Member
  • Offline
  • Registered: 2017-08-30
  • Posts: 39

Topic: Blocking a single email address AMAVISD

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 0.98
- Deployed with iRedMail Easy or the downloadable installer? Downloadable
- Linux/BSD distribution name and version: Ubuntu 16.4
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): PGSQL
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? No
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

Hello,

When I block senders on domain level like @baddomain.com the messages are blocked.  If I block only one address sender@domain.com the messages get placed in Junk folder.  Is this expected behavior?

Thanks

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blocking a single email address AMAVISD

How did you "block" them?

3 Reply by Ascar

  • Ascar
  • Member
  • Offline
  • Registered: 2017-08-30
  • Posts: 39

Re: Blocking a single email address AMAVISD

ZhangHuangbin wrote:

How did you "block" them?

I blocked them by running the wblist_admin.py script.

python2 wblist_admin.py --add --blacklist sender@baddomain.com

Querying the AMAVIS database with grep shows that this email address is blocked.

4 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blocking a single email address AMAVISD

This is enough.
But do you have iRedAPD plugin "amavisd_wblist" enabled in /opt/iredapd/settings.py too?

5 Reply by Ascar

  • Ascar
  • Member
  • Offline
  • Registered: 2017-08-30
  • Posts: 39

Re: Blocking a single email address AMAVISD

Yeah, it should be enough.  However my question is about this:  When I block whole domain

python2 wblist_admin.py --add --blacklist @badsender.com

it works and I zap them dead.

If I, however, block a single address in this domain

python2 wblist_admin.py --add --blacklist bad@badsender.com

then the messages from this sender fall into the Junk folder, however they should be rejected outright.

6 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blocking a single email address AMAVISD

Ascar wrote:

then the messages from this sender fall into the Junk folder, however they should be rejected outright.

I guess the sender address used in smtp session is not same as "bad@badsender.com". Please check iRedAPD log to figure it out.

7 Reply by Ascar

  • Ascar
  • Member
  • Offline
  • Registered: 2017-08-30
  • Posts: 39

Re: Blocking a single email address AMAVISD

This is a good point, once the new messages arrive I will do header analysis one more time.

8 Reply by Ascar

  • Ascar
  • Member
  • Offline
  • Registered: 2017-08-30
  • Posts: 39

Re: Blocking a single email address AMAVISD

Zhang,

I am wondering what I may try to block?  Do you think I can block what I see in the 'Return Path'?
They are using a dummy email address in the From field, that's why I was not able to block.
I can't find anything else in the message header other than the return path data.

9 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,088

Re: Blocking a single email address AMAVISD

Sure you can block based on return-path. Try the Postfix header_checks.