Results 1 to 5 of 5

Thread: Unable to release amavisd blocked SPAM

  1. #1
    Join Date
    Mar 2010
    Posts
    1
    Rep Power
    5

    Default Unable to release amavisd blocked SPAM

    Hi,

    I have enabled the AS/AV in Zimbra with a very low kill rate. From that point forwards, all emails did not go through. by checking the logs I can see that amavisd-new is responsible for this blockage.

    I have read the forums and found that amavisd-release can help to assist here, but it does not work for me.

    Is there any way to release those emails? I cannot find any way to locate them in the system and send them again...

    note they are not in /opt/zimbra/data/amavisd/quarantine

    Those are relevant lines that show what's happening.

    Any help would be GREATLY appreciated..

    /var/log/zimbra.log:

    amavis[21398]: (21398-01) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100331T124401-21398: <sample@external.com> -> <sample@mydomain.com> SIZE=33396 Received: from mydomain.com ([127.0.0.1]) by localhost (mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <sample@mydomain.com>; Wed, 31 Mar 2010 12:44:01 +1100 (EST)
    amavis[21398]: (21398-01) Checking: bVYLZLsxEQGR [150.101.137.143] <sample@external.com> -> <sample@mydomain.com>
    amavis[21398]: (21398-01) Blocked SPAM, [150.101.137.143] [203.122.220.11] <sample@external.com> -> <sample@mydomain.com>, Message-ID: <A2093A02C38FBB43A5442B7DFA0263F38FAB58@SERVER.eia .local>, mail_id: bVYLZLsxEQGR, Hits: 5.32, size: 33396, 4068 ms
    postfix/smtp[31660]: 3B193156A0C: to=<sample@mydomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.1, delays=0.03/0/0.02/4.1, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=21398-01 - SPAM)
    postfix/qmgr[14692]: 3B193156A0C: removed

  2. #2
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    What do you have your tag and kill values set to ?

  3. #3
    Join Date
    Nov 2009
    Posts
    1
    Rep Power
    5

    Default

    I had them at tag 30 and kill 30 when this happened. Now they are set to 100.

  4. #4
    Join Date
    Nov 2006
    Location
    UK
    Posts
    8,017
    Rep Power
    24

    Default

    Well if you had tag/kill at the same level then those emails have probably been killed off completely then.

    Why are you posting under a different name now ?

  5. #5
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Quote Originally Posted by llopart View Post
    I had them at tag 30 and kill 30 when this happened. Now they are set to 100.
    Why have you made those two changes? What are you trying to achieve by doing that? Please read the following passage from the Admin UI help file so you have an understanding of what they do:

    Anti-Spam Protection

    Mass unsolicited emails are referred to as spam or junk email. The Zimbra Collaboration Suite installs the SpamAssassin anti-spam software as the mail filter to identify spam mail. When you installed the Zimbra Collaboration Suite, the anti-spam software is automatically enabled.

    You can set rules for handling spam from the Global Settings>Anti-Spam tab. How these rules are configured determine how aggressively spam is filtered. The following options can be changed:

    * Kill percent at 75%. Mail that is scored at 75% is considered spam and is not delivered.

    * Tag percent at 33%. Mail that is scored at 33% is considered spam and is delivered to the Junk folder.

    * Subject prefix field is blank. The prefix entered in this field is added to the subject line for messages tagged as spam.

    When ZCS was installed, an automated spam training filter was enabled.

    Two mail accounts were created.

    * The Spam Training User address receives mail notification about mail that was not marked as junk, but should have been.

    * The Non-Spam (HAM) Training User address receives mail notification about mail that was marked as junk but should not have been.

    For these training accounts, the mailbox quota is disabled (i.e. set to 0). Disabling quotas prevents bouncing messages when the mailbox is full. Attachment indexing is also disabled.

    Junk email messages are indexed, but you can disable indexing of junk email messages from the COS Preferences tab.

    When a message is tagged as spam, the message is delivered to the recipientís Junk folder. Users can view the number of unread messages and can open the Junk folder to review the messages marked as spam.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Similar Threads

  1. Clients stopped receiving emails
    By egadinc in forum Administrators
    Replies: 16
    Last Post: 12-14-2009, 02:38 PM
  2. UNAUTHORIZED ACCESS Totally fouled up install
    By Lostin60s in forum Installation Help
    Replies: 0
    Last Post: 08-28-2009, 10:17 PM
  3. Registration blocked by Yahoo spam filter
    By mark_the_chain in forum /etc
    Replies: 0
    Last Post: 11-23-2008, 03:15 PM
  4. Replies: 3
    Last Post: 03-21-2008, 09:47 AM
  5. zmdailyreport blocked as SPAM
    By demanl in forum Administrators
    Replies: 1
    Last Post: 11-14-2006, 07:52 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •