Spam filtering is not working

[archy88]

Hello,

I've already searched many forums for my problem, but none had the solution. Since the installation of Zimbra Release 7.1.2_GA_3268.UBUNTU8 UBUNTU8 FOSS edition on a virtual VM Ware all spam messages are transmitted. There is no filtering. I've also already started DSPAM. As an e-mail has been filtered. In this was also something in the header. This did happen one time then the header was again without filtering.


Here is this Mail with DSPAM Filter:

Return-Path: zimbra@mydomain.com
Received: from mydomain.com (mydomain.com LHLO) (192.168.88.237) by
edv-kuhl.com with LMTP; Sun, September 4, 2011 23:02:45 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by mydomain.com (Postfix) with ESMTP id 408D019C64C;
Sun, September 4, 2011 23:02:45 +0200 (CEST)
X-DSPAM-Result: Spam
X-DSPAM-class: spam
X-DSPAM-Confidence: 0.99
X-DSPAM-Probability: 1.0000
X-DSPAM-Signature: N / A
X-Virus-Scanned: amavisd-new at mydomain.com
X-Spam-Flag: YES
X-Spam-Score: 7.09
X-Spam-Level: *******
X-Spam-Status: Yes, score = 7.09 =- 10 required = 5 tagged_above
tests = [ALL_TRUSTED =- 1, BAYES_00 =- 1.9, T_RP_MATCHES_RCVD =- 0.01,
DSPAM: Spam = 10,000] autolearn = ham
Received: from mydomain.com ([127.0.0.1])
by localhost (mydomain.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id xD3hiI2gVJ4C; Sun, September 4, 2011 23:01:32 +0200 (CEST)
Received: from localhost (mydomain.com [192.168.88.237])
by mydomain.com (Postfix) with ESMTP id 8466A19C639
for <admin@mydomain.com>; Sun, September 4, 2011 23:01:32 +0200 (CEST)
Subject: Database Integrity check report for mydomain.com
X-Mailer: Mail:: Net Mailer [v2.07]:: SMTP [v2.31]
To: admin@mydomain.com
From: admin@mydomain.com
Message-Id: <20110904210132.8466A19C639 @ mydomain.com>
Date: Sun, September 4, 2011 23:01:32 +0200 (CEST)

Database errors found.
/ Opt / zimbra / mysql / bin / mysqlcheck - defaults-file = / opt / zimbra / conf / my.cnf-S / opt / zimbra / db / mysql.sock-A-C-s-u root - password = 2wJvFEoCl1lJfpGJfgW9yUavR7P4P
mysql.general_log
Error: You can not use locks with log tables.
mysql.slow_log
Error: You can not use locks with log tables.


Another question did I have to install on Ubuntu system Spam Assassin or is in Zimbra all include?

What am I doing wrong? I hope it can help me one.

Thank you.

[soba@ukw.edu.pl]

1. Edit your amavisd.conf in /opt/zimbra/conf/ and check spamassassin secion.
Look at this site: http://www200.pair.com/mecham/spam/a...-settings.html


and this line in your amavisd.conf

$final_spam_destiny =
$spam_quarantine_to =

$sa_tag_level_deflt =
$sa_tag2_level_deflt =
$sa_kill_level_deflt =

If you want reject all SPAM messages change / put this line in your amavisd.conf $final_spam_destiny = D_REJECT # or D_BOUNCE



2.

Zimbra Has Amavisd-new + Spamassassin + Dspam and Clamav inside (all in /opt/zimbra/).
Spamassassin and amavisd is a powerful tool and it can best be set up 'manually' - config files and Zimbra cli. To me this is a fairly tedious job, but it brings results.

You can also use an external virus and spam filters.

[archy88]

Hello,

thanks for the reply. I've made ​​the change to the file amavisd.conf.in

$final_banned_destiny = D_BOUNCE;
$final_spam_destiny = D_DISCARD;
$spam_quarantine_to = "spams\@$mydomain";
$sa_tag_level_deflt = undef;
$sa_tag2_level_deflt = 5.0;
$sa_kill_level_deflt = 8.0;

# $final_bad_header_destiny = D_PASS;

Unfortunately it still does not work.

A part of the log file / var / log / zimbra.log it looks like this.

Sep  7 12:32:40 myserver sudo:   zimbra : TTY=unknown ; PWD=/opt/zimbra ; USER=root ; COMMAND=/opt/zimbra/libexec/zmmtastatus
Sep  7 12:32:40 myserver sudo: pam_unix(sudo:session): session opened for user root by (uid=0)
Sep  7 12:32:40 myserver sudo: pam_unix(sudo:session): session closed for user root
Sep  7 12:33:00 myserver zimbramon[7434]: 7434:info: zmstat proc.csv: timestamp, system, user, sys, idle, iowait, mailbox, mailbox-total-cpu, mailbox-utime, mailbox-stime, mailbox-totalMB, mailbox-rssMB, mailbox-sharedMB, mailbox-process-count, mysql, mysql-total-cpu, mysql-utime, mysql-stime, mysql-totalMB, mysql-rssMB, mysql-sharedMB, mysql-process-count, convertd, convertd-total-cpu, convertd-utime, convertd-stime, convertd-totalMB, convertd-rssMB, convertd-sharedMB, convertd-process-count, ldap, ldap-total-cpu, ldap-utime, ldap-stime, ldap-totalMB, ldap-rssMB, ldap-sharedMB, ldap-process-count, postfix, postfix-total-cpu, postfix-utime, postfix-stime, postfix-totalMB, postfix-rssMB, postfix-sharedMB, postfix-process-count, amavis, amavis-total-cpu, amavis-utime, amavis-stime, amavis-totalMB, amavis-rssMB, amavis-sharedMB, amavis-process-:::C2683566-D93C-11E0-9127-F35BA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7434]: :::C2683566-D93C-11E0-9127-F35BA0C5BDF8:::count, clam, clam-total-cpu, clam-utime, clam-stime, clam-totalMB, clam-rssMB, clam-sharedMB, clam-process-count, zmstat, zmstat-total-cpu, zmstat-utime, zmstat-stime, zmstat-totalMB, zmstat-rssMB, zmstat-sharedMB, zmstat-process-count:: 09/07/2011 12:33:00, system, 9.2, 15.9, 74.8, 0.1, mailbox, 0.6, 0.0, 0.6, 711.8, 325.1, 11.7, 1, mysql, 0.0, 0.0, 0.0, 558.6, 81.3, 4.2, 1, convertd, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0, ldap, 0.1, 0.0, 0.1, 174.3, 32.6, 4.2, 1, postfix, 0.0, 0.0, 0.0, 7.6, 1.7, 1.3, 3, amavis, 0.0, 0.0, 0.0, 65.7, 56.5, 0.9, 11, clam, 0.0, 0.0, 0.0, 120.1, 101.8, 6.6, 2, zmstat, 0.4, 0.2, 0.2, 1.8, 0.6, 0.5, 13 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: zmstat mysql.csv: timestamp, Aborted_clients, Aborted_connects, Binlog_cache_disk_use, Binlog_cache_use, Bytes_received, Bytes_sent, Com_admin_commands, Com_assign_to_keycache, Com_alter_db, Com_alter_db_upgrade, Com_alter_event, Com_alter_function, Com_alter_procedure, Com_alter_server, Com_alter_table, Com_alter_tablespace, Com_analyze, Com_backup_table, Com_begin, Com_binlog, Com_call_procedure, Com_change_db, Com_change_master, Com_check, Com_checksum, Com_commit, Com_create_db, Com_create_event, Com_create_function, Com_create_index, Com_create_procedure, Com_create_server, Com_create_table, Com_create_trigger, Com_create_udf, Com_create_user, Com_create_view, Com_dealloc_sql, Com_delete, Com_delete_multi, Com_do, Com_drop_db, Com_drop_event, Com_drop_function, Com_drop_index, Com_dro:::C285309E-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C285309E-D93C-11E0-B7B6-035CA0C5BDF8:::p_procedure, Com_drop_server, Com_drop_table, Com_drop_trigger, Com_drop_user, Com_drop_view, Com_empty_query, Com_execute_sql, Com_flush, Com_grant, Com_ha_close, Com_ha_open, Com_ha_read, Com_help, Com_insert, Com_insert_select, Com_install_plugin, Com_kill, Com_load, Com_load_master_data, Com_load_master_table, Com_lock_tables, Com_optimize, Com_preload_keys, Com_prepare_sql, Com_purge, Com_purge_before_date, Com_release_savepoint, Com_rename_table, Com_rename_user, Com_repair, Com_replace, Com_replace_select, Com_reset, Com_restore_table, Com_revoke, Com_revoke_all, Com_rollback, Com_rollback_to_savepoint, Com_savepoint, Com_select, Com_set_option, Com_show_authors, Com_show_binlog_events, Com_show_binlogs, Com_show_charsets, Com_show_collations, Com_show_column_types, Com_show_contrib:::C2858EC2-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C2858EC2-D93C-11E0-B7B6-035CA0C5BDF8:::utors, Com_show_create_db, Com_show_create_event, Com_show_create_func, Com_show_create_proc, Com_show_create_table, Com_show_create_trigger, Com_show_databases, Com_show_engine_logs, Com_show_engine_mutex, Com_show_engine_status, Com_show_events, Com_show_errors, Com_show_fields, Com_show_function_status, Com_show_grants, Com_show_keys, Com_show_master_status, Com_show_new_master, Com_show_open_tables, Com_show_plugins, Com_show_privileges, Com_show_procedure_status, Com_show_processlist, Com_show_profile, Com_show_profiles, Com_show_slave_hosts, Com_show_slave_status, Com_show_status, Com_show_storage_engines, Com_show_table_status, Com_show_tables, Com_show_triggers, Com_show_variables, Com_show_warnings, Com_slave_start, Com_slave_stop, Com_stmt_close, Com_stmt_execute, Com_stmt_fetch,:::C285A7A4-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C285A7A4-D93C-11E0-B7B6-035CA0C5BDF8::: Com_stmt_prepare, Com_stmt_reprepare, Com_stmt_reset, Com_stmt_send_long_data, Com_truncate, Com_uninstall_plugin, Com_unlock_tables, Com_update, Com_update_multi, Com_xa_commit, Com_xa_end, Com_xa_prepare, Com_xa_recover, Com_xa_rollback, Com_xa_start, Compression, Connections, Created_tmp_disk_tables, Created_tmp_files, Created_tmp_tables, Delayed_errors, Delayed_insert_threads, Delayed_writes, Flush_commands, Handler_commit, Handler_delete, Handler_discover, Handler_prepare, Handler_read_first, Handler_read_key, Handler_read_next, Handler_read_prev, Handler_read_rnd, Handler_read_rnd_next, Handler_rollback, Handler_savepoint, Handler_savepoint_rollback, Handler_update, Handler_write, Innodb_buffer_pool_pages_data, Innodb_buffer_pool_pages_dirty, Innodb_buffer_pool_pages_flushed, Innodb:::C285BF00-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C285BF00-D93C-11E0-B7B6-035CA0C5BDF8:::_buffer_pool_pages_free, Innodb_buffer_pool_pages_misc, Innodb_buffer_pool_pages_total, Innodb_buffer_pool_read_ahead, Innodb_buffer_pool_read_ahead_evicted, Innodb_buffer_pool_read_requests, Innodb_buffer_pool_reads, Innodb_buffer_pool_wait_free, Innodb_buffer_pool_write_requests, Innodb_data_fsyncs, Innodb_data_pending_fsyncs, Innodb_data_pending_reads, Innodb_data_pending_writes, Innodb_data_read, Innodb_data_reads, Innodb_data_writes, Innodb_data_written, Innodb_dblwr_pages_written, Innodb_dblwr_writes, Innodb_have_atomic_builtins, Innodb_log_waits, Innodb_log_write_requests, Innodb_log_writes, Innodb_os_log_fsyncs, Innodb_os_log_pending_fsyncs, Innodb_os_log_pending_writes, Innodb_os_log_written, Innodb_page_size, Innodb_pages_created, Innodb_pages_read, Innodb_pages_written, Innodb_r:::C285D792-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C285D792-D93C-11E0-B7B6-035CA0C5BDF8:::ow_lock_current_waits, Innodb_row_lock_time, Innodb_row_lock_time_avg, Innodb_row_lock_time_max, Innodb_row_lock_waits, Innodb_rows_deleted, Innodb_rows_inserted, Innodb_rows_read, Innodb_rows_updated, Key_blocks_not_flushed, Key_blocks_unused, Key_blocks_used, Key_read_requests, Key_reads, Key_write_requests, Key_writes, Last_query_cost, Max_used_connections, Not_flushed_delayed_rows, Open_files, Open_streams, Open_table_definitions, Open_tables, Opened_files, Opened_table_definitions, Opened_tables, Prepared_stmt_count, Qcache_free_blocks, Qcache_free_memory, Qcache_hits, Qcache_inserts, Qcache_lowmem_prunes, Qcache_not_cached, Qcache_queries_in_cache, Qcache_total_blocks, Queries, Questions, Rpl_status, Select_full_join, Select_full_range_join, Select_range, Select_range_check, Select_s:::C285F01A-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C285F01A-D93C-11E0-B7B6-035CA0C5BDF8:::can, Slave_open_temp_tables, Slave_retried_transactions, Slave_running, Slow_launch_threads, Slow_queries, Sort_merge_passes, Sort_range, Sort_rows, Sort_scan, Ssl_accept_renegotiates, Ssl_accepts, Ssl_callback_cache_hits, Ssl_cipher, Ssl_cipher_list, Ssl_client_connects, Ssl_connect_renegotiates, Ssl_ctx_verify_depth, Ssl_ctx_verify_mode, Ssl_default_timeout, Ssl_finished_accepts, Ssl_finished_connects, Ssl_session_cache_hits, Ssl_session_cache_misses, Ssl_session_cache_mode, Ssl_session_cache_overflows, Ssl_session_cache_size, Ssl_session_cache_timeouts, Ssl_sessions_reused, Ssl_used_session_cache_entries, Ssl_verify_depth, Ssl_verify_mode, Ssl_version, Table_locks_immediate, Table_locks_waited, Tc_log_max_pages_used, Tc_log_page_size, Tc_log_page_waits, Threads_cached, Threads_connected:::C286094C-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: 7450:info: :::C286094C-D93C-11E0-B7B6-035CA0C5BDF8:::, Threads_created, Threads_running, Uptime, Uptime_since_flush_status:: 09/07/2011 12:33:00,1,0,0,0,10580146,36239287,4,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,6800,0,0,0,0,0,0,0,0,0,0,0,0,698,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,154,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,113,30,0,0,0,0,8509,0,0,8898,25503,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,719,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2406,0,0,0,0,3,0,0,0,0,0,0,0,0,0,0,0,0,0,1103,0,0,0,0,0,0,0,OFF,2411,0,5,1445,0,0,0,1,16346,15,0,0,13,1209695,7228043,514,2077,421816,961,0,0,1157,420606,2080,0,4634,22535,24,24639,174,0,12314700,1872,0,9862,4576,0,0,0,36147200,1946,7091,153265664,4634,877,ON,0,1034,1002,1775,0,0,1022976,16384,8,2072,4634,0,0,0,0,0,15,237,7819969,1157,0,7245,0,0,0,0,0,0.000000,4,0,31,0,47,40,104,47,47,0,0,0,0,0,0,0,0,0,56378,56378,NULL,0,0,92,:::C2862058-D93C-11E0-B7B6-035CA0C5BDF8::: 
Sep  7 12:33:00 myserver zimbramon[7450]: :::C2862058-D93C-11E0-B7B6-035CA0C5BDF8:::0,1450,0,0,OFF,0,6,0,697,822,0,0,0,0,,,0,0,0,0,0,0,0,0,0,NONE,0,0,0,0,0,0,0,,10411,0,0,0,0,1,3,4,1,43306,43306 
Sep  7 12:33:01 myserver zimbramon[7444]: 7444:info: zmstat io.csv: timestamp, sda:tps, sda:kB_read/s, sda:kB_wrtn/s, sda:kB_read, sda:kB_wrtn:: 09/07/2011 12:33:01, 5.27, 0.00, 35.60, 0, 1068 
Sep  7 12:33:01 myserver zimbramon[7440]: 7440:info: zmstat io-x.csv: timestamp, sda:rrqm/s, sda:wrqm/s, sda:r/s, sda:w/s, sda:rkB/s, sda:wkB/s, sda:avgrq-sz, sda:avgqu-sz, sda:await, sda:svctm, sda:%util:: 09/07/2011 12:33:01, 0.00, 3.63, 0.00, 5.27, 0.00, 35.60, 13.52, 0.01, 2.28, 0.76, 0.40 
Sep  7 12:33:02 myserver zimbramon[7438]: 7438:info: zmstat vm.csv: timestamp, r, b, swpd, free, buff, cache, si, so, bi, bo, in, cs, us, sy, id, wa, MemTotal, MemFree, Buffers, Cached, SwapCached, Active, Inactive, HighTotal, HighFree, LowTotal, LowFree, SwapTotal, SwapFree, Dirty, Writeback, AnonPages, Mapped, Slab, SReclaimable, SUnreclaim, PageTables, NFS_Unstable, Bounce, CommitLimit, Committed_AS, VmallocTotal, VmallocUsed, VmallocChunk, HugePages_Total, HugePages_Free, HugePages_Rsvd, HugePages_Surp, Hugepagesize, loadavg:: 09/07/2011 12:33:02, 0, 0, 0, 98076, 92068, 302828, 0, 0, 0, 29, 3, 392, 9, 16, 75, 0, 1315636, 98076, 92068, 302828, 0, 993376, 186128, 413632, 724, 902004, 97352, 2610520, 2610520, 332, 0, 784548, 47320, 22456, 13256, 9200, 4768, 0, 0, 3268336, 2399004, 118776, 4556, 113844, 0, 0, 0, 0, 2048, 0.50 
Sep  7 12:33:04 myserver zimbramon[7436]: 7436:info: zmstat cpu.csv: timestamp, cpu:user, cpu:nice, cpu:sys, cpu:idle, cpu:iowait, cpu:irq, cpu:softirq, cpu0:user, cpu0:nice, cpu0:sys, cpu0:idle, cpu0:iowait, cpu0:irq, cpu0:softirq:: 09/07/2011 12:33:04, 9.1, 0.0, 16.1, 74.8, 0.0, 0.0, 0.0, 9.1, 0.0, 16.1, 74.8, 0.0, 0.0, 0.0 
Sep  7 12:33:05 myserver zimbramon[7453]: 7453:info: zmstat mtaqueue.csv: timestamp, KBytes, requests:: 09/07/2011 12:33:05, 0, 0 
Sep  7 12:33:07 myserver zimbramon[7813]: 7813:info: zmstat fd.csv: timestamp, fd_count, mailboxd_fd_count:: 09/07/2011 12:33:07, 1888, 456 
Sep  7 12:33:30 myserver clamd[6965]: SelfCheck: Database status OK.
Sep  7 12:33:30 myserver clamd[6965]: SelfCheck: Database status OK.
Sep  7 12:33:30 myserver zimbramon[7434]: 7434:info: zmstat proc.csv: timestamp, system, user, sys, idle, iowait, mailbox, mailbox-total-cpu, mailbox-utime, mailbox-stime, mailbox-totalMB, mailbox-rssMB, mailbox-sharedMB, mailbox-process-count, mysql, mysql-total-cpu, mysql-utime, mysql-stime, mysql-totalMB, mysql-rssMB, mysql-sharedMB, mysql-process-count, convertd, convertd-total-cpu, convertd-utime, convertd-stime, convertd-totalMB, convertd-rssMB, convertd-sharedMB, convertd-process-count, ldap, ldap-total-cpu, ldap-utime, ldap-stime, ldap-totalMB, ldap-rssMB, ldap-sharedMB, ldap-process-count, postfix, postfix-total-cpu, postfix-utime, postfix-stime, postfix-totalMB, postfix-rssMB, postfix-sharedMB, postfix-process-count, amavis, amavis-total-cpu, amavis-utime, amavis-stime, amavis-totalMB, amavis-rssMB, amavis-sharedMB, amavis-process-:::D45DFFB2-D93C-11E0-9127-F35BA0C5BDF8::: 
Sep  7 12:33:30 myserver zimbramon[7434]: :::D45DFFB2-D93C-11E0-9127-F35BA0C5BDF8:::count, clam, clam-total-cpu, clam-utime, clam-stime, clam-totalMB, clam-rssMB, clam-sharedMB, clam-process-count, zmstat, zmstat-total-cpu, zmstat-utime, zmstat-stime, zmstat-totalMB, zmstat-rssMB, zmstat-sharedMB, zmstat-process-count:: 09/07/2011 12:33:30, system, 11.9, 5.3, 82.6, 0.2, mailbox, 0.4, 0.0, 0.4, 711.8, 325.1, 11.7, 1, mysql, 0.4, 0.3, 0.1, 558.6, 81.3, 4.2, 1, convertd, 0.0, 0.0, 0.0, 0.0, 0.0, 0.0, 0, ldap, 0.0, 0.0, 0.0, 174.3, 32.6, 4.2, 1, postfix, 0.1, 0.0, 0.1, 7.6, 1.7, 1.3, 3, amavis, 0.0, 0.0, 0.0, 65.7, 56.5, 0.9, 11, clam, 13.5, 10.5, 3.0, 120.1, 101.8, 6.6, 2, zmstat, 0.5, 0.2, 0.3, 1.8, 0.6, 0.5, 13

I hope we can solve the Problem.

[archy88]

I have solve my Problem. I did not know that Zimbra only look for its own recieved Mails for Spam. In my Zimbra Configuration i recieve the Mails over extern Accounts into Zimbra.
So i made a change and install Fetchmail. Fetchmail recieve the Mails from external Accounts and delivere it to Zimbra. Now Zimbra look for Spam :-)

Best Regards
Andreas