Results 1 to 10 of 10

Thread: [SOLVED] Reject SPAM

  1. #1
    s0undt3ch is offline Loyal Member
    Join Date
    Apr 2007
    Location
    Portugal
    Posts
    77
    Rep Power
    8

    Question [SOLVED] Reject SPAM

    I'm a new user to zimbra and I'm just questioning some of its configurations and way to work. I'll explain.

    On my previous mail server install(Qmail/vPopmail) i was able to, while receiving a message, reject if it's know spam, scored way above the allowed score by spamassassin for example.

    Although I'm not seeing any spam way higher than allowed max score on mu Junk folder, I do see bounce on the logs.

    Wouldn't it be better, or is it even possible to reject to receive the message if it's know spam?

    Personaly I feel that bouncing spam is good for spam since most accounts are bogus or stolen, hence, my question to reject, and if possible let them know why it is rejected, "Know SPAM, Rejecting".

    Regards,
    Pedro Algarvio

  2. #2
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,566
    Rep Power
    57

    Default

    Bouncing (almost) any email doesn't solve the problem, it just causes extra and mostly unnecessary traffic. Don't forget if the mail address is bogus you'll just end up bouncing the message between servers until it's finally dropped. One form of spam attack is to 'bounce' messages so they end up in a particular mailbox. You can achieve a much better result by rejecting unknown recipients.

    Spamassassin determines if the message is spam and uses that to train it's filters, depending on the spam kill/tag percentages you should see very little spam in your inbox.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    s0undt3ch is offline Loyal Member
    Join Date
    Apr 2007
    Location
    Portugal
    Posts
    77
    Rep Power
    8

    Default

    Quote Originally Posted by phoenix View Post
    Bouncing (almost) any email doesn't solve the problem, it just causes extra and mostly unnecessary traffic. Don't forget if the mail address is bogus you'll just end up bouncing the message between servers until it's finally dropped. One form of spam attack is to 'bounce' messages so they end up in a particular mailbox. You can achieve a much better result by rejecting unknown recipients.

    Spamassassin determines if the message is spam and uses that to train it's filters, depending on the spam kill/tag percentages you should see very little spam in your inbox.
    My idea is not to bounce, it's to reject while receiving it, because if my smtp accepts the message it can't just drop it, it must deliver it.

  4. #4
    s0undt3ch is offline Loyal Member
    Join Date
    Apr 2007
    Location
    Portugal
    Posts
    77
    Rep Power
    8

    Default

    Quote Originally Posted by s0undt3ch View Post
    My idea is not to bounce, it's to reject while receiving it, because if my smtp accepts the message it can't just drop it, it must deliver it.
    Hmm, I guess this is what RBL's are for.

    And probably the only way?

  5. #5
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,566
    Rep Power
    57

    Default

    Your original post sounded like you wanted to bounce. My personal opinion is that RBLs are mostly a waste of time as well, too many non-spammers get on there. I don't use them and never have, I see zero spam in my inbox and a few in my Junk folder (there's about 10 in there on average).

    Just reject mail for unknown users, change the kill/tag percentages and you'll see a dramatic reduction in spam going through the system.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #6
    s0undt3ch is offline Loyal Member
    Join Date
    Apr 2007
    Location
    Portugal
    Posts
    77
    Rep Power
    8

    Default

    Quote Originally Posted by phoenix View Post
    Your original post sounded like you wanted to bounce.
    No, never bounce, I'd actually like to stop zimbra from bouncing it.

    Quote Originally Posted by phoenix View Post
    My personal opinion is that RBLs are mostly a waste of time as well, too many non-spammers get on there.
    I only ever ran a home server, never got any false positives from them.

    Quote Originally Posted by phoenix View Post
    I don't use them and never have, I see zero spam in my inbox and a few in my Junk folder (there's about 10 in there on average).

    Just reject mail for unknown users, change the kill/tag percentages and you'll see a dramatic reduction in spam going through the system.
    Doesn't zimbra reject for unkown users by default?

  7. #7
    fajarpri's Avatar
    fajarpri is offline Loyal Member
    Join Date
    Jul 2007
    Posts
    98
    Rep Power
    8

    Default

    I enable 'smtpd_reject_unlisted_recipient = yes' in main.cf, but when I test it by sending to a non-existence email from zimbra webmail, it got through, although a moment later I received bounce message.

    Is it the intended behaviour? Can we make the connection to be "rejected" in smtp level just like qmail does?

  8. #8
    Klug's Avatar
    Klug is offline Moderator
    Join Date
    Mar 2006
    Location
    Beaucaire, France
    Posts
    2,316
    Rep Power
    13

    Default

    You should modify /opt/zimbra/conf/zmmta.cf and not main.cf (that is updated each 30 minutes by Zimbra).

  9. #9
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,566
    Rep Power
    57

    Default

    Quote Originally Posted by fajarpri View Post
    I enable 'smtpd_reject_unlisted_recipient = yes' in main.cf, but when I test it by sending to a non-existence email from zimbra webmail, it got through, although a moment later I received bounce message.
    You've modified the wrong file, use the one that Klug mentioned. and is also in several thread in the forum.

    Quote Originally Posted by fajarpri View Post
    Is it the intended behaviour? Can we make the connection to be "rejected" in smtp level just like qmail does?
    That is what you're doing with this modification. You will also need to make this change after every upgrade as this modification doesn't persist.

    You should also have started a new thread for this rather than tag it on the end of a thread about RBLs.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  10. #10
    fajarpri's Avatar
    fajarpri is offline Loyal Member
    Join Date
    Jul 2007
    Posts
    98
    Rep Power
    8

    Default

    Thanks @klug, @phoenix.
    I'll try searching the forum again with POSTCONF smtpd_reject_unlisted_recipient no keyword.

    I'll start a new thread when issue arises.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 09:59 AM
  2. Spam being scored with BAYES_00
    By flyerguybham in forum Administrators
    Replies: 6
    Last Post: 04-24-2007, 12:07 PM
  3. How to check if spam training is working?
    By tbovingdon in forum Administrators
    Replies: 1
    Last Post: 03-13-2007, 05:57 AM
  4. Training spam and ham
    By Justin in forum Developers
    Replies: 2
    Last Post: 10-31-2006, 03:39 PM
  5. Spam questions 3.11
    By cdyer in forum Administrators
    Replies: 10
    Last Post: 05-22-2006, 10:14 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •