Page 1 of 2 12 LastLast
Results 1 to 10 of 19

Thread: Amavis going crazy with flagging

  1. #1
    Join Date
    Jan 2009
    Posts
    60
    Rep Power
    6

    Default Amavis going crazy with flagging

    Hi,
    In the last weeks we have had an problem with Amavis that it suddently flags non-spam mails as spam for many of our users. The "spam"-mails is from trusted domains and Zimbra has received a lot of mails from these different trusted domains before without flagging them as spam.

    I have a supportcase waiting for this, but i'm interested to know if any others out there have had the same problem. This also happends to me now, and this mailheader is from a trusted domain which I have mailed alot with before from the same zimbra server:

    X-DSPAM-Result: Spam
    X-DSPAM-Class: Spam
    X-DSPAM-Confidence: 0.57
    X-DSPAM-Probability: 1.0000
    X-DSPAM-Signature: N/A
    X-Virus-Scanned: amavisd-new at our.zimbra.server
    X-Spam-Flag: YES
    X-Spam-Score: 7.487
    X-Spam-Level: *******
    X-Spam-Status: Yes, score=7.487 tagged_above=-10 required=6.6
    tests=[AWL=0.086, BAYES_00=-2.599, DSPAM:Spam=10.000] autolearn=ham

    And this is from a customer with the same problem. Trusted domains suddently get flagged:
    X-DSPAM-Result: Spam
    X-DSPAM-Class: Spam
    X-DSPAM-Confidence: 0.49
    X-DSPAM-Probability: 1.0000
    X-DSPAM-Signature: N/A
    X-Virus-Scanned: amavisd-new at our.zimbra.server
    X-Spam-Flag: YES
    X-Spam-Score: 8.379
    X-Spam-Level: ********
    X-Spam-Status: Yes, score=8.379 tagged_above=-10 required=6.6
    tests=[AWL=-0.419, BAYES_00=-2.599, HTML_MESSAGE=0.001,
    MIME_QP_LONG_LINE=1.396, DSPAM:Spam=10.000] autolearn=no

    I noticed that this has autolearn set to no. Why is that?

    We had some file owner problems with DPAM after upgrade 6.0.2 -> 6.0.3. Had to change owner on /opt/zimbra/dspam/bin/*back to zimbra instead of root. Related?
    http://www.zimbra.com/forums/migrati...r-upgrade.html
    Last edited by mrjohnsen; 12-09-2009 at 01:10 PM.

  2. #2
    Join Date
    Feb 2007
    Location
    Portland, OR
    Posts
    1,147
    Rep Power
    10

    Default

    Only thing I can say is it isn't amavis that is causing your problem but DSPAM, notice that for both those headers it is the 10.00 from DSPAM that causes the messages to be flagged. You should look into the DSPAM config for whatever is causing it to make these false positives.

  3. #3
    Join Date
    Jan 2009
    Posts
    60
    Rep Power
    6

    Default

    Thank you for your answer. Yes, I agree I with that, but do you know why autolearn is set to 'no' in the header? Shouldn't it be HAM?

  4. #4
    Join Date
    Feb 2007
    Location
    Portland, OR
    Posts
    1,147
    Rep Power
    10

    Default

    See AutolearningNotWorking - Spamassassin Wiki for more detail, but basically that just means that amavis didn't use that particular message for ham/spam training.

  5. #5
    Join Date
    Jan 2009
    Posts
    60
    Rep Power
    6

    Default

    Thank you.

    I'm having some problems disabling DSPAM. I have done this:
    #zmlocalconfig |grep dspam
    amavis_dspam_enabled = false

    And restarted the zimbra service but DSPAM is still in the mailheader of new incoming mails.

  6. #6
    Join Date
    Jun 2009
    Posts
    131
    Rep Power
    6

    Default

    Did you solve the whole DSpam score of 10 thing? Ive tried pretty much everything i can think of, clearing out its db by force and still i gets a bl**dy score of 10, even when set lower in a cf file.

    Im sure youve already sorted your last problem posted, you just need to set FALSE - note the caps, this was a bug.

    iMx

  7. #7
    Join Date
    Sep 2008
    Posts
    134
    Rep Power
    7

    Default

    Hi mrjohnson,

    we have a similar problem since one week. Many eMails get flagged as spam. But running 5.0.18 on Ubuntu8.04 X86_64. We upgraded to 5.0.22, but still no change. Many eMails go to spam incorrectly as false positives.

    I have also to investigate further if it happens cause dspam.

    best regards
    thomas
    zmcontrol -v
    1x Release 6.0.10_GA_2692.UBUNTU8_64 NETWORK edition.
    1x Release 6.0.14_GA_2928.UBUNTU8_64 NETWORK edition
    2x Release 7.1.3_GA_3346.UBUNTU10_64 NETWORK edition, Patch 7.1.3_P1
    1x Release 8.0.2.GA.5569.UBUNTU12.64 NETWORK edition

    2x Release 6.0.10_GA_2692.UBUNTU8_64 FOSS edition
    2x Release 7.2.2_GA_2852.UBUNTU10_64 FOSS edition
    1x Release 7.1.4_GA_2555.UBUNTU10_64 FOSS
    1x Release 8.0.3.GA.5664.UBUNTU12.64 FOSS edition

  8. #8
    Join Date
    Jan 2009
    Posts
    60
    Rep Power
    6

    Default

    Hi,
    Our solution was to disable DSPAM. And yes, false had to be in CAPS

  9. #9
    Join Date
    Sep 2008
    Posts
    134
    Rep Power
    7

    Default

    hi,

    currently the wiki seems to be down, i get mostly only white pages.

    what is the correct command to disable dspam?
    zmlocalconfig -e amavis_dspam_enabled=FALSE

    best regards
    thomas
    zmcontrol -v
    1x Release 6.0.10_GA_2692.UBUNTU8_64 NETWORK edition.
    1x Release 6.0.14_GA_2928.UBUNTU8_64 NETWORK edition
    2x Release 7.1.3_GA_3346.UBUNTU10_64 NETWORK edition, Patch 7.1.3_P1
    1x Release 8.0.2.GA.5569.UBUNTU12.64 NETWORK edition

    2x Release 6.0.10_GA_2692.UBUNTU8_64 FOSS edition
    2x Release 7.2.2_GA_2852.UBUNTU10_64 FOSS edition
    1x Release 7.1.4_GA_2555.UBUNTU10_64 FOSS
    1x Release 8.0.3.GA.5664.UBUNTU12.64 FOSS edition

  10. #10
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    25

    Default

    Quote Originally Posted by stegbth View Post
    Hi mrjohnson,

    we have a similar problem since one week. Many eMails get flagged as spam. But running 5.0.18 on Ubuntu8.04 X86_64. We upgraded to 5.0.22, but still no change. Many eMails go to spam incorrectly as false positives.

    I have also to investigate further if it happens cause dspam.

    best regards
    thomas
    Unless we see the headers from one of the emails then it would be very difficult to say. Have you fixed the known issue http://www.zimbra.com/forums/adminis...-1-2010-a.html ?

Similar Threads

  1. Amavis RAM Disk Setup - OK Now To Reimplement?
    By LMStone in forum Administrators
    Replies: 7
    Last Post: 10-12-2011, 09:26 PM
  2. Daily mail report always reports "No messages found"
    By McPringle in forum Installation
    Replies: 42
    Last Post: 06-13-2011, 09:57 AM
  3. Wrong amavis stats
    By claros in forum Administrators
    Replies: 4
    Last Post: 10-06-2006, 07:06 AM
  4. Server Stats Cont...
    By DMRDave in forum Administrators
    Replies: 15
    Last Post: 02-16-2006, 01:16 PM
  5. No data in server statistics
    By zap in forum Administrators
    Replies: 63
    Last Post: 02-13-2006, 11:39 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •