Results 1 to 6 of 6

Thread: Zimbra marks local domain emails as SPAM

  1. #1
    leog21 is offline Special Member
    Join Date
    Sep 2007
    Posts
    123
    Rep Power
    7

    Default Zimbra marks local domain emails as SPAM

    I am seeing a lot of false positives in emails we send to each other on our zimbra server. Especially if they contain urls inside the email content.

    Is anyone else having this problem?

    Using: Zimbra 5.0.16_GA_2921.RHEL5_64

    Thanks,
    Leo
    Last edited by leog21; 03-02-2010 at 10:14 AM.

  2. #2
    uxbod's Avatar
    uxbod is offline Moderator
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Please post the headers from one of the emails and we should be able to decipher what is happening.

  3. #3
    leog21 is offline Special Member
    Join Date
    Sep 2007
    Posts
    123
    Rep Power
    7

    Default

    X-Virus-Scanned: amavisd-new at localhost.localdomain
    X-Spam-Flag: YES
    X-Spam-Score: 5.072
    X-Spam-Level: *****
    X-Spam-Status: Yes, score=5.072 tagged_above=-10 required=5
    tests=[BAYES_50=0.001, FH_DATE_PAST_20XX=3.188, HTML_MESSAGE=0.001,
    RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877, RDNS_NONE=0.1]

  4. #4
    jrefl5 is offline Advanced Member
    Join Date
    Nov 2007
    Location
    AZ, USA
    Posts
    205
    Rep Power
    7

    Default

    Have you looked at

    [SOLVED] FH_DATE_PAST_20XX - Spamassassin bug - incorrect tagging from Jan 1, 2010 on

    correcting that will drop "FH_DATE_PAST_20XX=3.188"

  5. #5
    leog21 is offline Special Member
    Join Date
    Sep 2007
    Posts
    123
    Rep Power
    7

    Default

    I added our domain to the white list and fixed the FH_DATE, thank you

  6. #6
    dwmtractor's Avatar
    dwmtractor is offline Moderator
    Join Date
    Jul 2007
    Location
    San Jose, CA
    Posts
    1,027
    Rep Power
    10

    Default

    Actually there's something else you ought to look at. Notice this part of your SA headers:
    RCVD_IN_PBL=0.905, RCVD_IN_SORBS_DUL=0.877
    Two realtime blacklists list your IP. Though you've whitelisted yourself, others who use those blacklists may score them higher, which means your IP may be classified as a spammer to some of the people in the Real World who you'd like to email. You would be wise to examine what's causing your IP to be blacklisted. . .first candidate--are you using DSL, cable, or other dynamic IP?

    Second issue:
    RDNS_NONE=0.1
    Only 0.1 point for you, but some filters also make a big deal about not having a reverse DNS lookup for the IP of the mail server. Modifying your DNS to include a reverse lookup zone will eliminate this issue.

    Again, small score for you, but fixing these two things will improve the likelihood of your messages making it to their intended recipients, in and out of your domain.
    Cheers,

    Dan

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. postfix relay=none status=bounced for local mails
    By vdd in forum Administrators
    Replies: 1
    Last Post: 08-06-2009, 08:05 AM
  2. [SOLVED] parts_decode_ext error
    By jsabater in forum Administrators
    Replies: 7
    Last Post: 10-13-2008, 07:24 AM
  3. zmperditionctl start asking for password
    By k7sle in forum Administrators
    Replies: 32
    Last Post: 02-20-2008, 11:13 AM
  4. zmtlsctl give LDAP error
    By sourcehound in forum Administrators
    Replies: 5
    Last Post: 03-11-2007, 03:48 PM
  5. Replies: 8
    Last Post: 02-27-2007, 04:10 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •