LinkBack URL
About LinkBacks
Spam comming from 127.0.0.1 getting to deffered messages.
Hi,
Recently installed ZCS 6.07 in our internal LAN behind firewall using split DNS. Everything seems to be working well, except for thousands of spam originating from Zimbra localhost 127.0.0.1.
Though our users doesn't get too much of it, our problem lies with the deferred messages increasing up to 1000+ messages per day. Last time we've checked we have 15,000 messages. How can we make Zimbra delete spam messages in the deferred que.
Since the spam originates from 127.0.0.1 does it pass through spam assassin? And if so why it is not deleted? Here is our current SA config:
-------------------------------------------------------------------------------------
rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
header DSPAM_SPAM X-DSPAM-Result =~ /^Spam$/
describe DSPAM_SPAM DSPAM claims it is spam
score DSPAM_SPAM 5.0
header DSPAM_HAM X-DSPAM-Result =~ /^Innocent$/
describe DSPAM_HAM DSPAM claims it is ham
score DSPAM_HAM -0.5
%%uncomment VAR:zimbraMtaMyNetworks%%trusted_networks %%zimbraMtaMyNetworks%%
%%uncomment VAR:zimbraMtaAntiSpamLockMethod%%lock_method %%zimbraMtaAntiSpamLockMethod%%
rewrite_header Subject *SPAM* _STARS(*)_
bayes_auto_learn 1
bayes_min_spam_num 60
bayes_min_ham_num 30
clear_headers
add_header spam Flag _YESNOCAPS_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_
add_header all Level _STARS(*)_
add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on _HOSTNAME_
# Enabled BAYES filter
use_bayes 1
skip_rbl_checks 0
# Added SPF checking
score SPF_FAIL 10.000
score SPF_HELO_FAIL 10.000
# Added score increase
score BAYES_99 4.300
score BAYES_90 3.500
score BAYES_80 3.000
# Blacklist (* is a wildcard)
blacklist_from *@yahoo.com.tw
blacklist_from *@*.hinet.net
blacklist_from *@pchome.com.tw
blacklist_from *@xuite.net
blacklist_from *@*.ca
blacklist_from *@*.ro
blacklist_from *@*.gr
blacklist_from *@*.ru
blacklist_from *@*.cz
blacklist_from *@*.ee
blacklist_from *@*.fr
blacklist_from *@*.in
blacklist_from *@juno.com
blacklist_from *@guevos.com
blacklist_from *@aol.com
blacklist_from *@*-host-219-90-92-18.tri.ph
blacklist_ftom *@host-219-90-92-18.tri.ph
blacklist_from *@yahoo.com.*
blacklist_from *@qq.com
blacklist_from *@vdc.vn
blacklist_from *@sina.com
blacklist_from *@163.*
blacklist_from *@126.*
blacklist_from *163.*
blacklist_from *163.*
# Blacklist all domain that starts with number
blacklist_from *@0*.*
blacklist_from *@1*.*
blacklist_from *@2*.*
blacklist_from *@3*.*
blacklist_from *@4*.*
blacklist_from *@5*.*
blacklist_from *@6*.*
blacklist_from *@7*.*
blacklist_from *@8*.*
blacklist_from *@9*.*
# Keywords for spam
body LOCAL_****** /******/i
score LOCAL_****** 3.000
body LOCAL_*** /***/i
score LOCAL_*** 2.000
body LOCAL_ERECTION /erection/i
score LOCAL_ERECTION 1.500
------------------------------------------------------------------------------
Originally Posted by aldennis 
