Results 1 to 4 of 4

Thread: Need help for spam filter

  1. #1
    Join Date
    Dec 2007
    Posts
    445
    Rep Power
    7

    Default Need help for spam filter

    Hi,

    I need urgent help regarding spm filtering.
    Our new client supposed to get their payslip from their payroll company but that all paylip attchment ( zip files) and getting blocked by spam filter...its very imp mail communication for them..i have goned through below link :

    Improving Anti-spam system - Zimbra :: Wiki

    and put the white list in /opt/zimbra/conf/salocal.cf.in


    whitelist_from *@example.com

    at the end of the file ...and restarted zmamavisdctl and ask user to check but still its getting blocked..

    #################################################
    i have below setting :
    tag Percentage : 33
    kill percentage : 66

    ######################################

    in admin inbox i m getting below report :

    A virus was found: Encrypted.Zip

    Scanner detecting a virus: ClamAV-clamd

    Content type: Virus
    Internal reference code for the message is 02622-06/ITe5W1RqeS4k

    First upstream SMTP client IP address: [64.12.10.30] unknown
    According to a 'Received:' trace, the message originated at: [61.15.23.248],
    [61.15.23.248] helo=myndlab61

    Return-Path: <payslip@example.com>
    X-Mailer: Microsoft Outlook Express 6.00.2900.2180
    Message-ID: <00c401c9b831$e8d262a0$aa01a8c0@myndlab61>
    Subject: Fw: SALARY SLIP
    The message has been quarantined as: virus-ITe5W1RqeS4k

    Notification to sender will not be mailed.

    The message WAS NOT relayed to:
    <pradeepan@ozonegp.com>:
    250 2.7.0 Ok, discarded, id=02622-06 - VIRUS: Encrypted.Zip, Encrypted.Zip

    Virus scanner output:
    p005: Encrypted.Zip FOUND
    p002: Encrypted.Zip FOUND

    ################################################## ###################

    getting below logs :


    Apr 8 15:38:15 mail amavis[2622]: (02622-06) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20090408T151902-02622: <payslip@example.com> -> <abc@domain.com> SIZE=79075 Received: from mail ([127.0.0.1]) by localhost (mail [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <abc@domain.com>; Wed, 8 Apr 2009 15:38:15 +0530 (IST)
    Apr 8 15:38:15 mail amavis[2622]: (02622-06) Checking: ITe5W1RqeS4k [64.22.105.30] <payslip@example.com> -> <abc@mydomain.com>
    Apr 8 15:38:17 mail amavis[2622]: (02622-06) Blocked INFECTED (Encrypted.Zip), [64.12.10.30] [61.15.23.248] <abc@example.com> -> <abc@mydomain.com>, quarantine: virus-ITe5W1RqeS4k, Message-ID: <00c401c9b831$e8d262a0$aa01a8c0@myndlab61>, mail_id: ITe5W1RqeS4k, Hits: -, size: 79075, 2323 ms


    ######################################

    pls suggest...client is very upset..how can i fix this issue..

    Thanks

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Do not post duplicate messages on the same topic in the forums.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  3. #3
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Have you read the documentation specifically the section Anti-virus settings ?

  4. #4
    Join Date
    Dec 2007
    Posts
    445
    Rep Power
    7

    Default

    thanks for reply uxbod...yeap i have already checked this setting...actually i found that they were sending payslip in zip file and in error it was showing blocked encrypted zip files...and i found tht i have enabled "blocked encrypted archives" option...so just uncheck that..and restart the service...so lets see...i havent recevie any update yet from their end...

    thanks

Similar Threads

  1. LDAP Filter issue and GAL
    By G-Money in forum Administrators
    Replies: 2
    Last Post: 06-24-2010, 12:13 PM
  2. FILTER SPAM BY Keywords How to it ?
    By DEALER in forum Administrators
    Replies: 2
    Last Post: 03-19-2008, 05:31 AM
  3. Feature request for mail filter
    By MooktaKiNG in forum Users
    Replies: 9
    Last Post: 04-08-2007, 05:40 AM
  4. Bad Filter Stops Incoming Email
    By soxfan in forum Administrators
    Replies: 0
    Last Post: 03-08-2007, 08:02 AM
  5. M3 problem with shares
    By titangears in forum Users
    Replies: 4
    Last Post: 01-12-2006, 12:01 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •