[SOLVED] Anti-Spam/Anti-Virus Activity graph empty after upgrade (6->7)

[John Siu]

Anti-Spam/Anti-Virus Activity graph empty after upgrade.

Old data is showing but stay flat line 0 from day after upgrade.

The spam filter and anti-virus filter seems to be working as we are seeing spam going into junk folder. Another thing is x-spam tags are missing from those junk mail.

Anyone can point me to the right direction to fix those?

[John Siu]

Actually the spam filter stop working, spam is getting into everyone mail boxes now.

[phoenix]

Originally Posted by John Siu

Actually the spam filter stop working, spam is getting into everyone mail boxes now.

You need to provide some information about the problem other than 'it's not working', look in the log files and see what errors are there then look at some of the headers of the spam and see why it's not being added to the spam folder or rejected. You should also look at the services and see if they're all working and what your kill/tag percentages are set to.

[John Siu]

I was looking into log file but I don't even know which one or what to look into. I was looking in them for hours yesterday but don't seems to see error in them.

The daemons are running, but the function seems to be gone. I just went into my boss mailbox and moved like 60 spam into the junk folder manually.

Following is zmcontrol status:

Host mx10.cdoc.ca
	antispam                Running
	antivirus               Running
	ldap                    Running
	logger                  Running
	mailbox                 Running
	memcached               Running
	mta                     Running
	snmp                    Running
	spell                   Running
	stats                   Running
	zmconfigd               Running

Following is one of the spam header, there is no X-Spam-Flag nor X-Virus-Scanned tag in it:

Return-Path: JalisaChilen3464@ukrtel.net
Received: from mx10.cdoc.ca (LHLO mx10.cdoc.ca) (192.168.1.10) by
 mx10.cdoc.ca with LMTP; Wed, 2 Mar 2011 10:17:35 -0500 (EST)
Received: from ukrtel.net (246-255-134-95.pool.ukrtel.net [95.134.255.246])
	by mx10.cdoc.ca (Postfix) with ESMTP id 275AA57C009
	for <******@cdoc.ca>; Wed,  2 Mar 2011 10:17:34 -0500 (EST)
Received: from alex (localhost [127.0.0.1])
	by alex (8.13.4/8.13.4) with SMTP id 4d757C592E8B7c8
	for <*******@cdoc.ca>; Wed, 2 Mar 2011 17:17:57 +0200
	(envelope-from JalisaChilen3464@ukrtel.net)
Message-Id: <2011321717.62E13D3EE469017CD2EF2@alex>
From: JalisaChilen3464@ukrtel.net
To: ******@cdoc.ca
Reply-To: JalisaChilen3464@ukrtel.net
Subject: ****** XXXXXX ® -63% discount
Mime-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
Date: Wed,  2 Mar 2011 10:17:34 -0500 (EST)

PS: XXXXXX above is the blue pill start with a V.

[John Siu]

I found the cause of the problem.

After upgrading from 6.x to 7, I had the empty main.cf problem and followed some instruction in one of the other thread(didn't keep note on which) to recreat it manually. Everything work except one line is missing:

content_filter = smtp-amavis:[127.0.0.1]:10024

I did a clean install of zimbra7 on a local virtualbox machine and compared main.cf to find that out.

This fix the AS/AV filtering issue. However configuration from admin console, CL/GUI, doesn't seems to make into main.cf. Still no idea how to fix that part.

[John Siu]

Originally Posted by John Siu

...

This fix the AS/AV filtering issue. However configuration from admin console, CL/GUI, doesn't seems to make into main.cf. Still no idea how to fix that part.

OK, this part fixed too.

Again followed advice from another thread and remove, add back rbl from command line clear the issue of updating main.cf. With additional instruction: Zimbra MTA - Zimbra :: Wiki - Turning On or Off RBLs