Page 1 of 2 12 LastLast
Results 1 to 10 of 14

Thread: Limit to a blacklist?

  1. #1
    Jbrabander's Avatar
    Jbrabander is offline Elite Member
    Join Date
    May 2008
    Location
    Park City, KS
    Posts
    342
    Rep Power
    6

    Default Limit to a blacklist?

    I'm currently editing my salocal.cf.in file (as per the wiki) to add a nice long blacklist of email addresses and domains. Is there a limit to how many addresses I can put in the list??

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    There's no limit as far as I know but what's the problem you're trying to solve (apart from the obvious answer of more spam )? You shouldn't really need to do this especially if you use RBLs on your server.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Jbrabander's Avatar
    Jbrabander is offline Elite Member
    Join Date
    May 2008
    Location
    Park City, KS
    Posts
    342
    Rep Power
    6

    Default

    Quote Originally Posted by phoenix View Post
    There's no limit as far as I know but what's the problem you're trying to solve (apart from the obvious answer of more spam )? You shouldn't really need to do this especially if you use RBLs on your server.
    Well, one of the bosses gets quite a bit of spam coming in. We do have zen.spamhaus.org in our Zimbra RBL list, by the way. In fact, we've got it on our Sonicwall too.

    From what I've seen, I'm not sure there's really anything in the messages that would trigger the spam filter. No keywords really stick out at me. (but I'm not sure what keywords would trip the flag other than the truly obvious ones) And if he adds them to his Junk folder, Zimbra doesn't pick them up for spam training since he's using Outlook 2003.

    We did have to turn off the flag for "reject_unknown_hostname" as it was blocking emails from a number of our customers and vendors that we do business with.

  4. #4
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Without any headers it's difficult to say why you're getting the spam, what are the tag/kill percentages on your system? As I've already mentioned, sending mail to the Junk folder must be done as an attachment in any fat client but that will be changed in the next major release.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  5. #5
    Jbrabander's Avatar
    Jbrabander is offline Elite Member
    Join Date
    May 2008
    Location
    Park City, KS
    Posts
    342
    Rep Power
    6

    Default

    I believe I've got them at 66/33 right now. I'm temporarily taking over one of the accounts that's getting more of the spam. That way I can push all it's spam into the junk folder via the webmail.

    If you change the percentages, is there anything you need to restart in order for them to take effect? Is there any way to see what "score" a particular email received?

  6. #6
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    I'd drop the tag percentage to 25 and keep an eye on the Junk folder for false positives. If you look at a 'show original' on a Junk email it would show something like the following:

    Code:
    X-DSPAM-Result: Innocent
    X-DSPAM-Confidence: 0.5086
    X-DSPAM-Probability: 0.0000
    X-DSPAM-Signature: 48a00ef1274951340566444
    X-DSPAM-Factors: 27,
    X-Virus-Scanned: amavisd-new at 
    X-Spam-Flag: YES
    X-Spam-Score: 7.267
    X-Spam-Level: *******
    X-Spam-Status: Yes, score=7.267 tagged_above=-10 required=5
    	tests=[BAYES_50=0.001, DSPAM_HAM=-0.5, HELO_DYNAMIC_DIALIN=3.384,
    	RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5,
    	RAZOR2_CHECK=0.5, RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877,
    	RDNS_DYNAMIC=0.1]
    That tells you which rules have been fired by any spam (or normal email) and what the settings were. DSPAM is disabled by default (I do have it enabled as you can see) because of performance issues, I'd leave it like off if you have a busy server. You haven't set any 'catchall' account in Zimbra, have you? Do you also have anything in place to stop backscatter (or NDR) spam? You might want to add that, check the following thread: [SOLVED] Spam Backscatter

    You can also keep your spamassassin rules up-to-date with the following thread: Rules_Du_Jour

    You may also want to reject unlisted recipients, you can do that by changing the entry in zmmta.cf for smtpd_reject_unlisted_recipient to 'yes', save the file and restart postfix.
    Last edited by phoenix; 08-12-2008 at 07:43 AM.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  7. #7
    Jbrabander's Avatar
    Jbrabander is offline Elite Member
    Join Date
    May 2008
    Location
    Park City, KS
    Posts
    342
    Rep Power
    6

    Default

    So if I'm reading the Rules_du_jour information right, the command I need to run a SpamAssassin update would be:

    sa-update --updatedir=/opt/zimbra/conf/spamassassin --nogpg


    Does this sound correct? I put in the "nogpg" part not knowing if we've got GPG set up or not.

  8. #8
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Yes, that sounds correct but I'd suggest you run from the command line first with the -checkonly & -D options to test that's it's OK and see what the debug output looks like. Keep a copy of the original rules just in case you have any problems during your testing.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  9. #9
    Jbrabander's Avatar
    Jbrabander is offline Elite Member
    Join Date
    May 2008
    Location
    Park City, KS
    Posts
    342
    Rep Power
    6

    Default

    I tried entering

    sa-update --updatedir=/opt/zimbra/conf/spamassassin --nogpg -checkonly -d

    and it comes back saying "sa-update: command not found".

    I'm in the /opt/zimbra/conf/spamassassin folder, logged in as the Zimbra user.

  10. #10
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    You need to install the RHEL spamassassin, we don't supply sa-update. It won't cause your Zimbra installation any problem if you install sa-update.
    Last edited by phoenix; 08-12-2008 at 12:09 PM.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Zimbra Email Size Limit
    By kurt2 in forum Administrators
    Replies: 7
    Last Post: 10-07-2009, 08:20 PM
  2. 5 X Upload Size Limit Exceeded
    By forbe in forum Error Reports
    Replies: 3
    Last Post: 06-10-2008, 12:30 PM
  3. Limit outgoing email
    By goppegard in forum Administrators
    Replies: 1
    Last Post: 06-04-2008, 11:10 PM
  4. increase the limit of inbox display
    By johnf in forum Administrators
    Replies: 1
    Last Post: 05-23-2008, 11:33 AM
  5. Size limit for syncronization Outlook connector
    By Fabio in forum Administrators
    Replies: 1
    Last Post: 09-07-2006, 06:59 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •