Re: [bitfolk] spamd exclusion

Top Page

Reply to this message
Author: Tony Andersson
Date:  
To: users
Subject: Re: [bitfolk] spamd exclusion
Not sure if the list allows for attachments, if so one example is
attached, and its corresponding headers.

Looking at the spam classification in the headers:-
 * -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
 *      trust
 *      [65.55.34.153 listed in list.dnswl.org]
 * -0.0 SPF_PASS SPF: sender matches SPF record
 *  0.0 HTML_MESSAGE BODY: HTML included in message
 *  1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
 *  1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
 *  2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
 *      headers


It seems the biggest single error is that there's no MIME Content-Type
specified. Second one is that there's no reverse DNS.
No dnswl trust in sender does not help either.

The first two errors might be because the message is forwarded from
hotmail to my domain. Maybe the white list one is as well...

I can indeed change the spamchk.sh script, but first I wanted to be
sure there's no recommended standardised way of creating this type of
local white list. :-)

Cheers,
__
/ony
-------
Monday, October 14, 2013, 7:47:20 PM, Mathew wrote:

> Hi Tony,


> On Mon, October 14, 2013 6:49 pm, Tony Andersson wrote:


>> Spamassasin is called from /etc/postfix/master.cf via a script,
>> /usr/local/bin/spamchk.sh


> Check how the script is called in master.cf; it'll contain any arguments
> that indicate what is passed e.g.


> argv=<path to script>/spamchk.sh -f ${sender} ${recipient}


> In the script you can then check for ${sender} (by examining $1) and exit
> prematurely (and positively) if the address matches your DPD source.


>> Ideally I'd like to set some known
>> and supported parameter in the spamc.conf file. To make it global for
>> the server and make sure it is in a place where I am likely to find it


> I'd be surprised if there was such a configuration as spamc's job is to
> submit a message for spam checking. To then abandon that check reflects
> that it shouldn't have been called in the first place.


> I'd echo the suggestion of finding out why the e-mails are being
> incorrectly marked as making manually exceptions isn't ideal.


> Mathew





> _______________________________________________
> users mailing list
> users@???
> https://lists.bitfolk.com/mailman/listinfo/users













Email Notification





















Prefer this by text? Give your mobile number when you shop online. Find out more about Predict here































Your Amazon order will be delivered today between 10:19-11:19











Your Amazon order will be delivered today by Obi, your DPD driver. Can you please ensure someone is available to sign for your delivery at: Tony AnderssonThe old oak tree100 acre woodAA00 0AA If you're not going to be in, it's not a problem as you can change your delivery date or ask us to deliver to your neighbour by clicking below: Change my delivery
Why not click below to see exactly where obi is with your order:Follow my parcel now Thank you for your order.Amazon.















Tweet your delivery experience







Like us on Facebook


























Return-Path: <filter@???>
X-Original-To: spam@???
Delivered-To: spam@???
Received: by bitfolk.localdomain (Postfix, from userid 500)
        id 760E658523; Mon, 14 Oct 2013 09:25:50 +0100 (BST)
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
        spamd0.lon.bitfolk.com
X-Spam-Level: ****
X-Spam-ASN: AS8075 65.52.0.0/14
X-Spam-Status: No, score=4.4 required=5.0 tests=HTML_MESSAGE,
        MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,RDNS_NONE,SPF_PASS
        shortcircuit=no autolearn=disabled version=3.3.1
X-Spam-Report:
        * -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no
        *      trust
        *      [65.55.34.153 listed in list.dnswl.org]
        * -0.0 SPF_PASS SPF: sender matches SPF record
        *  0.0 HTML_MESSAGE BODY: HTML included in message
        *  1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
        *  1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
        *  2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
        *      headers
Received: from col0-omc3-s15.col0.hotmail.com (unknown [65.55.34.153])
        by bitfolk.localdomain (Postfix) with ESMTP id 5AFAF58521
        for <hotmail@???>; Mon, 14 Oct 2013 09:25:49 +0100 (BST)
Received: from COL0-MC1-F29.Col0.hotmail.com ([65.55.34.136]) by col0-omc3-s15.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
         Mon, 14 Oct 2013 01:25:48 -0700
Resent-Message-ID: <COL0-MC1-F2970A050370239789361C4911A0@???>
Resent-To: hotmail@???
Resent-Date: Mon, 14 Oct 2013 01:25:51 -0700
Resent-From: silly_registrations@???
X-HM-Routing-Path:UXkjFpWsKGRapaVIcCoBdsbHRgF74/pcVms5RYVzFGUYGhTs2KHkBk5vP85MKk1tWxJqfh3kF3sNbPCQJMr8iE2gTNQtGjWVF/fcbTQVcDvEfop5DIeDDLlHz1vJkXY12OIZKDH5THU2/V/XlbNLcCCtydolFuuqxbnMYrYApKo=
Received: from outbound03.geopostuk.com ([89.207.48.212]) by COL0-MC1-F29.Col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4900);
         Mon, 14 Oct 2013 01:25:47 -0700
Received: from geopostuk.com (unknown [172.24.82.109])
        by outbound03.geopostuk.com (Postfix) with ESMTPS id 3635E1BD73F
        for <SILLY_REGISTRATIONS@???>; Mon, 14 Oct 2013 09:26:27 +0100 (BST)
Received: (from geopost@localhost)
        by geopostuk.com (8.14.5+Sun/8.14.5/Submit) id r9E8Ph3f024449;
        Mon, 14 Oct 2013 09:25:43 +0100 (BST)
Date: Mon, 14 Oct 2013 09:25:43 +0100 (BST)
Message-Id: <201310140825.r9E8Ph3f024449@???>
X-Authentication-Warning: itc-sds.geopostuk.com: geopost set sender to DPD <yourdelivery@???> using -f
To: SILLY_REGISTRATIONS@???
Subject: Your Amazon order is due for delivery between 10:19-11:19
From: DPD <yourdelivery@???>
Content-Type: multipart/related;
 boundary="------------090303020209010600070908"
X-OriginalArrivalTime: 14 Oct 2013 08:25:49.0324 (UTC) FILETIME=[FCEBD4C0:01CEC8B6]