Page 3 of 4 FirstFirst 1234 LastLast
Results 21 to 30 of 31

Thread: Collecting spam in one mailbox

  1. #21
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    I re-ran the commands, but am still getting Tagged Spam in the Bulk Folder, and not being delivered to the Inbox...

  2. #22
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    -bump-

    any other ideas?

  3. #23
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    -bump-

    still nothing?

    If zimbra does not have this ability, please let me know!

  4. #24
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    -bump-

    if anyone knows if this can / can't happen - please let me know. I can't dwell on this, and take my chances, and would just like to know if this is possible.

    If we can get this server up-and-running, we can recommend the software to clients who may in turn wish to go with the network edition - again, pending that we can get this server up and running properly.

    Thanks!

  5. #25
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,587
    Rep Power
    58

    Default

    Can you confirm the settings you've made with the following:

    zmprov gcf zimbraSpamTagPercent
    zmprov gcf zimbraSpamKillPercent
    zmprov gcf zimbraSpamSubjectTag

    Can you also post the headers of some of the mail that ends up in your junk folder. Is the mail that's going to the junk folder tagged with [SPAM] in the subject?
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

  6. #26
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    Quote Originally Posted by phoenix
    Can you confirm the settings you've made with the following:

    zmprov gcf zimbraSpamTagPercent
    zmprov gcf zimbraSpamKillPercent
    zmprov gcf zimbraSpamSubjectTag

    Can you also post the headers of some of the mail that ends up in your junk folder. Is the mail that's going to the junk folder tagged with [SPAM] in the subject?
    I can confirm... but not to be nitpicky ned, but:
    Quote Originally Posted by marcmac
    zmprov mcf zimbraSpamSubjectTag '[SPAM]'
    zmprov mcf zimbraSpamTagPercent 25
    zmprov mcf zimbraSpamKillPercent 100
    zmcontrol stop
    zmcontrol start


    This will tag at a score of 4, never kill (kill at a score of 20, which you'll never see) and add "[SPAM]" to the subject
    Is it 'mcf' or 'gcf' (just so I am typing the correct command)...?

    I ran the commands with 'mcf' and the following levels: Kill percent at 300 and the Tag at 28

    Here is one of the headers which was tagged as spam:
    Code:
    Received: from localhost (localhost.localdomain [127.0.0.1])
    	by server.domain.com (Postfix) with ESMTP id 6A1EA4A053C
    	for <alerts@domain.com>; Thu,  7 Sep 2006 16:16:54 -0400 (EDT)
    X-DSPAM-Result: Spam
    X-DSPAM-Processed: Thu Sep  7 16:16:52 2006
    X-DSPAM-Confidence: 0.9171
    X-DSPAM-Probability: 1.0000
    X-DSPAM-Signature: 45007e34178742462731592
    X-DSPAM-Factors: 15,
    X-Virus-Scanned: amavisd-new at 
    X-Spam-Flag: YES
    X-Spam-Score: 6.444
    X-Spam-Level: ******
    X-Spam-Status: Yes, score=6.444 tagged_above=-10 required=5.6
    	tests=[AWL=0.203, BAYES_20=-0.74, DSPAM_SPAM=0.5,
    	FORGED_RCVD_HELO=0.135, MSGID_FROM_MTA_ID=1.393, NO_REAL_NAME=0.961,
    	RCVD_IN_NJABL_DUL=1.946, RCVD_IN_SORBS_DUL=2.046]
    Received: from server.domain.com ([127.0.0.1])
    	by localhost (server.somain.com [127.0.0.1]) (amavisd-new, port 10024)
    	with ESMTP id EUeNKXsqZUKK for <alerts@domain.com>;
    	Thu,  7 Sep 2006 16:16:52 -0400 (EDT)
    Received: from domain.com (*IPADDRESS REMOVED* [a.b.x.y])
    	by server.domain.com (Postfix) with SMTP id 0857E4A0536
    	for <alerts@domain.com>; Thu,  7 Sep 2006 16:16:51 -0400 (EDT)
    Date: 07 Sep 2006 16:16:36 -0400
    From: alerts@domain.com
    To: alerts@domain.com
    Subject: ***SPAM***yo-yo's wan port IP is changed to 1.1.1.1
    Content-Type: text/plain; charset=us-ascii
    Message-Id: <20060907201652.0857E4A0536@server.domain.com>
    Code:
    Received: from localhost (localhost.localdomain [127.0.0.1])
    	by server.domain.com (Postfix) with ESMTP id 8DF094A053C
    	for <alerts@domain.com>; Fri,  8 Sep 2006 04:00:18 -0400 (EDT)
    X-DSPAM-Result: Spam
    X-DSPAM-Processed: Fri Sep  8 04:00:16 2006
    X-DSPAM-Confidence: 0.6074
    X-DSPAM-Probability: 1.0000
    X-DSPAM-Signature: 45012310291948493036723
    X-DSPAM-Factors: 15,
    X-Virus-Scanned: amavisd-new at 
    X-Spam-Flag: YES
    X-Spam-Score: 7.956
    X-Spam-Level: *******
    X-Spam-Status: Yes, score=7.956 tagged_above=-10 required=5.6
    	tests=[AWL=0.509, BAYES_00=-2.599, DSPAM_SPAM=0.5,
    	MSGID_FROM_MTA_ID=1.393, NO_DNS_FOR_FROM=3.2, NO_REAL_NAME=0.961,
    	RCVD_IN_NJABL_DUL=1.946, RCVD_IN_SORBS_DUL=2.046]
    Received: from server.domain.com ([127.0.0.1])
    	by localhost (server.domain.com [127.0.0.1]) (amavisd-new, port 10024)
    	with ESMTP id kZuo+W7YKnyc for <alerts@domain.com>;
    	Fri,  8 Sep 2006 04:00:16 -0400 (EDT)
    Received: from server01 (**IPADDRESS REMOVED**)
    	by server.domain.com (Postfix) with SMTP id 1AA724A0536
    	for <alerts@domain.com>; Fri,  8 Sep 2006 04:00:14 -0400 (EDT)
    From: "Backup Exec Alert"<Server01-Backups@client.org>
    To:  < alerts@domain.com>
    Date: Fri, 08 Sep 2006 04:00:15 -0400
    Subject: ***SPAM***Backup Exec Alert: Database Maintenance Information
    	(Server: "SERVER01") (Job: "Database Maintenance") 
    X-Mailer: VERITAS SMTP Mail Component
    MIME-Version: 1.0
    Content-Type: text/plain; charset=us-ascii
    Message-Id: <20060908080015.1AA724A0536@server.domain.com>

    I altered non-relevant parts of the header to protect privacy.

    The only thing that goes into the Junk mailbox of this account are the items marked with ***SPAM*** in the headers (we do not have any rules/filters in place either).

  7. #27
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    -bump-

    any thoughts?

  8. #28
    Join Date
    Aug 2006
    Posts
    49
    Rep Power
    9

    Default

    -bump-

    I suppose I can not recommend Zimbra to our clients if no one can help on this issue.

  9. #29
    Join Date
    Aug 2007
    Posts
    12
    Rep Power
    0

    Default

    Probably no use for you anymore but maybe for others

    Add/enable the following in amavisd.conf.in
    Code:
    $sa_dsn_cutoff_level = 100;
    $sa_quarantine_cutoff_level = 100;
    $final_spam_destiny=D_DISCARD;
    $spam_quarantine_to = 'example@example.com';
    Restart anti spam: zmantispamctl stop; zmantispamctl start

    In the Admistration Console set tag and kill percent to the same value.

    This tags and kills the spam message. The killed spam message is delivered to example@example.com and not to the user's Junk folder (D_DISCARD). Make sure you set $sa_quarantine_cutoff_level to a high value bacause else the message will not be quarantined and sent to example@example.com

  10. #30
    Join Date
    Aug 2007
    Posts
    12
    Rep Power
    0

    Default

    Small mistake restart anti-spam after you change the tag and kill percent!

Similar Threads

  1. Replies: 210
    Last Post: 01-17-2012, 12:19 AM
  2. Trying to understand Zimbra's anti-spam system
    By TaskMaster in forum Users
    Replies: 11
    Last Post: 01-25-2008, 08:59 AM
  3. [SOLVED] Reject SPAM
    By s0undt3ch in forum Users
    Replies: 9
    Last Post: 08-22-2007, 03:07 AM
  4. Spam being scored with BAYES_00
    By flyerguybham in forum Administrators
    Replies: 6
    Last Post: 04-24-2007, 12:07 PM
  5. Training spam and ham
    By Justin in forum Developers
    Replies: 2
    Last Post: 10-31-2006, 02:39 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •