Results 1 to 6 of 6

Thread: Antispam doesn't seem to be doing anything

  1. #1
    Join Date
    Jan 2008
    Location
    Villa Park, IL
    Posts
    92
    Rep Power
    7

    Default Antispam doesn't seem to be doing anything

    Be gentle. Newbie here

    I've been running Zimbra FOSS since April and love it. Still learning it, but have gotten it working quite well. Even have it running in a VMWare server under Windows XP host. It's been very solid.

    So now I'm trying to find out why spam filtering is not working. Nothing gets tagged. I have Kill set to 99% and Tag set to 25%.

    Here's a typical header on some very obvious junk:

    Return-path:
    Envelope-to: info@mydomain.com
    Delivery-date: Fri, 22 Aug 2008 16:48:53 -0500
    Received: from host-91-103-31-98.customers.adc.am ([91.103.31.98])
    by vps.mywebhost.com with esmtp (Exim 4.69)
    (envelope-from )
    id 1KWeV2-0002f2-L2
    for info@mydomain.com ; Fri, 22 Aug 2008 16:48:53 -0500
    Message-ID: <000901c904a1$acbd1b50$621f675b@genik>
    From: "Camden WRONKA"
    To: info@mydomain.com
    Subject: Taliban say Nicky Hilton Hotter Than Paris Hilton
    Date: Sat, 23 Aug 2008 02:24:39 +04-30
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary="--------=_NextPart_000_0005_01C904C7.64B0EF50"
    X-Priority: 3
    X-MSMail-Priority: Normal
    X-Mailer: Microsoft Outlook Express 6.00.2900.3138
    X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

    ----------=_NextPart_000_0005_01C904C7.64B0EF50
    Content-Type: text/plain;
    charset="iso-8859-1"
    Content-Transfer-Encoding: quoted-printable

    Any clues for me?

  2. #2
    Join Date
    Jan 2008
    Location
    Villa Park, IL
    Posts
    92
    Rep Power
    7

    Default

    I really have been searching for days and not found anything helpful.

    Any ideas on where to look?

  3. #3
    Join Date
    Jan 2008
    Location
    Villa Park, IL
    Posts
    92
    Rep Power
    7

    Default

    Really? Nothing? I feel like I am missing something obvious, but cannot find anything helpful.

  4. #4
    Join Date
    Feb 2007
    Location
    Sioux Falls, SD
    Posts
    67
    Rep Power
    8

    Default

    Hi Samgreco,

    Well, you should be seeing something similar to the following in the headers:

    X-Virus-Scanned: amavisd-new at
    X-Spam-Flag: YES
    X-Spam-Score: 14.377
    X-Spam-Level: **************
    X-Spam-Status: Yes, score=14.377 tagged_above=-10 required=3.2
    tests=[BAYES_99=3.5, RCVD_IN_PBL=0.905, RDNS_NONE=0.1,
    URIBL_AB_SURBL=1.86, URIBL_BLACK=1.955, URIBL_JP_SURBL=1.501,
    URIBL_OB_SURBL=1.5, URIBL_RHS_DOB=1.083, URIBL_SBL=1.499,
    URIBL_SC_SURBL=0.474]

    Can you verify that the Anti-Spam / Anti-Virus service is enabled on your system (through the admin panel). Ensure the service is running by doing a 'zmcontrol status' as the zimbra user on your box. Lastly, run 'zmprov gs ' (where is your full DNS name of your server) and look for "zimbraServiceEnabled: antispam".

    Let us know your findings.

    Dusty
    CoSentry - www.cosentry.com - Co-Location & Business Resiliency Solutions

  5. #5
    Join Date
    Jan 2008
    Location
    Villa Park, IL
    Posts
    92
    Rep Power
    7

    Default

    Thanks for responding. I don't have much hair left to pull out, so I hope to solve this soon

    Yup both checks show antispam enabled. In Admin it is enabled and additional RBLs that I added are listed under Global Settings> MTA.

    zmprov gs shows zimbraServiceEnabled: antispam and zimbraServiceInstalled: antispam.

    That's what's so confusing. The headers are completely void of any spam entries. So it's like it's disabled. I have been training for a couple of months so was confused as to why I wasn't seeing anything.

  6. #6
    Join Date
    Jan 2008
    Location
    Villa Park, IL
    Posts
    92
    Rep Power
    7

    Default So, this is confusing...

    I was going through my daily logwatch message and came upon this:

    "NOQUEUE: reject: RCPT from e114.en25.com[209.167.231.114]: 554 5.7.1 Service unavailable; Client host [209.167.231.114] blocked using bl.spamcannibal.org; blocked, See: SpamCannibal from= to= proto=ESMTP helo="

    If my kill percent is 99 shouldn't that message have been delivered to the junk folder?

    In the meantime I had no less than 20 messages that were TRULY junk NOT filtered at all. Ugh.

Similar Threads

  1. AntiSpam
    By osiris in forum Administrators
    Replies: 6
    Last Post: 02-05-2008, 09:14 AM
  2. Replies: 2
    Last Post: 06-19-2007, 09:45 PM
  3. upgrade to 4.0.3 antispam does'nt work
    By lucanannipieri in forum Administrators
    Replies: 14
    Last Post: 11-07-2006, 03:56 AM
  4. antispam not working?
    By moebis in forum Installation
    Replies: 16
    Last Post: 12-03-2005, 08:11 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •