Results 1 to 8 of 8

Thread: [SOLVED] Blocking domains

  1. #1
    chrisp8756's Avatar
    chrisp8756 is offline Senior Member
    Join Date
    Sep 2007
    Location
    Hoquiam,Wa,USA
    Posts
    59
    Rep Power
    7

    Question [SOLVED] Blocking domains

    Hello,
    I'm trying to figure out how to block domains that are sending a large amount of spam.

    I have followed the wiki on blocking domains, which gives an example of adding something like (blacklist_from *@emn-mysavingsnow.net) to the /opt/zimbra/conf/salocal.cf.in and restarting the spam filter.

    I have tested this with a few random domains and they still get through even though I've blocked them. Could someone please tell me what the problem is?



    I've been using this from the wiki
    -
    Blacklists and Whitelists

    The simplest filtering methods for spamassasin are the blacklist and whitelist. Blacklist entries block all email from an address or domain, and whitelist entries bypass all filtering for an address or domain. To add blackist or whitelist entries to your salocal.cf.in file, simply add lines in the following format:

    blacklist_from sales@traveloforange.com
    whitelist_from bill@yahoo.net
    blacklist_from *@emn-mysavingsnow.net

    Note that * is a wildcard. In this example *@emn-mysavingsnow.net indicates all email from any user at emn-mysavingsnow.net.

    When you are finished editing the salocal.cf.in file, restart Zimbra spamassassin by issuing the following command at the server prompt (as the zimbra user):

    zmamavisdctl restart
    Chris Priamos
    Olympic Global Technologies
    http://www.olympicglobal.com

  2. #2
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Would you be able to post a extract from /var/log/zimbra.log for one of the SPAMs so we can see what is happening ?

  3. #3
    chrisp8756's Avatar
    chrisp8756 is offline Senior Member
    Join Date
    Sep 2007
    Location
    Hoquiam,Wa,USA
    Posts
    59
    Rep Power
    7

    Default

    Ok the example I tried to block was my yahoo address. I tried doing it with just blocking my yahoo address and it didn't. Then I tried blocking the entire domain of yahoo and still didn't work.

    Jul 19 20:44:44 mail amavis[4535]: (04535-01) FWD via SMTP: <chris_p8756@yahoo.com> -> <chris@priamosdomainhosting.com>,BODY=7BIT 250 2.6.0 Ok, id=04535-01, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 762BD29C0323
    Jul 19 20:44:44 mail amavis[4535]: (04535-01) Passed CLEAN, [98.136.44.186] [75.146.50.25] <chris_p8756@yahoo.com> -> <chris@priamosdomainhosting.com>, Message-ID: <23791.75301.qm@web43143.mail.sp1.yahoo.com>, mail_id: 1HDzkaofSfuO, Hits: -2.321, size: 1992, queued_as: 762BD29C0323, 15464 ms
    Jul 19 20:44:44 mail postfix/smtp[5046]: DC97C29C0322: to=<chris@priamosdomainhosting.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=16, delays=0.32/0.01/0.02/15, dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 762BD29C0323)
    Jul 19 20:44:44 mail amavis[4535]: (04535-01) extra modules loaded: /opt/zimbra/zimbramon/lib/i386-linux-thread-multi/auto/Net/SSLeay/autosplit.ix, /opt/zimbra/zimbramon/lib/i386-linux-thread-multi/auto/Net/SSLeay/randomize.al, IO/Socket/SSL.pm, Net/LDAP/Extension.pm, Net/SSLeay.pm
    Jul 19 20:44:44 mail postfix/qmgr[12286]: DC97C29C0322: removed
    Jul 19 20:44:44 mail postfix/qmgr[12286]: 762BD29C0323: from=<chris_p8756@yahoo.com>, size=2668, nrcpt=1 (queue active)
    Jul 19 20:44:44 mail postfix/lmtp[5059]: 762BD29C0323: to=<chris@priamosdomainhosting.com>, relay=mail.priamosdomainhosting.info[75.146.50.24]:7025, delay=0.17, delays=0.04/0.01/0.04/0.08, dsn=2.1.5, status=sent (250 2.1.5 OK)
    Jul 19 20:44:44 mail postfix/qmgr[12286]: 762BD29C0323: removed
    Chris Priamos
    Olympic Global Technologies
    http://www.olympicglobal.com

  4. #4
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    Try doing the exact same syntax, but doing it in /opt/zimbra/conf/spamassassin/local.cf. I have black- and whitelist entries in that file and they do work. I have not had any luck with editing the salocal.cf file, I'm thinking it's overwritten or overridden somewhere, but changes to local.cf override settings in all the other config files.
    Cheers,

    Dan

  5. #5
    chrisp8756's Avatar
    chrisp8756 is offline Senior Member
    Join Date
    Sep 2007
    Location
    Hoquiam,Wa,USA
    Posts
    59
    Rep Power
    7

    Default

    I did that and still having the same problem.... Any other ideas?
    Chris Priamos
    Olympic Global Technologies
    http://www.olympicglobal.com

  6. #6
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    I hate to say it, but the only thing I did differently from what you describe (all done in local.cf) is that I stopped & restarted the whole zimbra package rather than just restarting the one service. That shouldn't make a difference, in theory.

    There's one other file you could tweak just to see if it makes a difference, and that's /opt/zimbra/conf/spamassassin/60_whitelist.cf. There is not, to my knowledge, any equivalent blacklist file.

    THESE ARE NOT NORMALLY RECOMMENDED FOR EDITING, and they will be overridden by any upgrade (all the cf files will), but you could certainly add a line or two (note that the syntax is different) and see if that form of whitelisting is working.

    I'm wondering if there is a switch somewhere that turns white/blacklisting on or off, but I don't know of it, if there is. I also wonder if all your services are running as they ought. . .are other spamassassin headers getting plugged into your emails? By this I mean, post a header of one of your email messages--we know from your log that amavisd is running, but we don't know if you're actually getting spamassassin evaluation headers in your email. If all of spamassassin is misconfigured/not working (amavis also handles antivirus with clam), then of course all your changes would be going nowhere. . .

    I know this isn't much help; it's really a shot in the dark, but maybe it'll provide some useful tip. . .
    Cheers,

    Dan

  7. #7
    chrisp8756's Avatar
    chrisp8756 is offline Senior Member
    Join Date
    Sep 2007
    Location
    Hoquiam,Wa,USA
    Posts
    59
    Rep Power
    7

    Default Maybe I did something wrong

    Please look at my salocal and let know if I may have done it wrong?

    Download the file from this link below:
    http://priamosdomainhosting.com/salocal.zip
    Last edited by chrisp8756; 07-25-2008 at 12:16 PM.
    Chris Priamos
    Olympic Global Technologies
    http://www.olympicglobal.com

  8. #8
    chrisp8756's Avatar
    chrisp8756 is offline Senior Member
    Join Date
    Sep 2007
    Location
    Hoquiam,Wa,USA
    Posts
    59
    Rep Power
    7

    Thumbs up Typo

    Ok I figured it out finally... I had several typos in my salocal file. OOPS live and learn Thanks for your help
    Chris Priamos
    Olympic Global Technologies
    http://www.olympicglobal.com

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Advanced MTA Configuration - multiple domains
    By keyhman in forum Installation
    Replies: 6
    Last Post: 04-20-2012, 02:23 AM
  2. Sending mails to domains without use of DNS server
    By generic31 in forum Administrators
    Replies: 5
    Last Post: 08-08-2011, 03:17 AM
  3. Replies: 3
    Last Post: 06-07-2007, 07:19 AM
  4. Virtual Domains Breaking Themes
    By jhoelz in forum Administrators
    Replies: 0
    Last Post: 03-14-2007, 05:58 AM
  5. Blocking domains
    By datta in forum Administrators
    Replies: 0
    Last Post: 12-18-2006, 03:23 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •