8.7.x spam DMARC_FAIL_REJECT=9 for aol.com and zimbra.com

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
User avatar
JDunphy
Outstanding Member
Outstanding Member
Posts: 279
Joined: Fri Sep 12, 2014 11:18 pm
Location: Victoria, BC
ZCS/ZD Version: Release 8.7.11_GA_1854.RHEL6_64.P6
Contact:

Re: 8.7.x spam DMARC_FAIL_REJECT=9 for aol.com and zimbra.com

Postby JDunphy » Fri Mar 16, 2018 8:55 pm

DavidMerrill wrote:One makes edits here:

• /opt/zimbra/conf/salocal.cf.in

and then after a Zimbra services restart THIS file gets regenerated:

• /opt/zimbra/data/spamassassin/localrules/salocal.cf

is that correct (the regeneration of salocal.cf)?

There is one more file... They say a picture is worth a thousand words. :-)

Code: Select all

% ls -l /opt/zimbra/conf/salocal.cf.in
-rw-r--r-- 1 zimbra zimbra 4512 May 31  2017 /opt/zimbra/conf/salocal.cf.in
%  ls -l /opt/zimbra/data/spamassassin/localrules/salocal.cf
-r--r----- 1 zimbra zimbra 4152 Mar 16 03:48 /opt/zimbra/data/spamassassin/localrules/salocal.cf
% ls -l /opt/zimbra/data/spamassassin/localrules/sauser.cf
-rw-r--r-- 1 zimbra zimbra 32456 Mar 13 23:19 /opt/zimbra/data/spamassassin/localrules/sauser.cf

Where that last one is the local changes that can override the system defaults including that DMARC_FAIL_REJECT. BTW, We never saw any problems adjusting the score DMARC_FAIL_REJECT with more spam. It was a non issue in the end. Go figure.

To recap. Make your changes at: /opt/zimbra/data/spamassassin/localrules/sauser.cf for 8.6 and above. Extra credit if you lint it for errors... then restart to re-read your changes.

Code: Select all

su - zimbra
/opt/zimbra/common/bin/spamassassin --lint
zmantispamctl restart


User avatar
L. Mark Stone
Elite member
Elite member
Posts: 1829
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine
ZCS/ZD Version: 8.8.8 Patch 6 Network Edition
Contact:

Re: 8.7.x spam DMARC_FAIL_REJECT=9 for aol.com and zimbra.com

Postby L. Mark Stone » Fri Mar 16, 2018 9:46 pm

DavidMerrill wrote:I'm running into this too (with one of our clients, they're running 8.7.11.GA.1854.UBUNTU16.64 NE).

I've been trolling the forum & wiki (for details on the two files I mention below) and trying to parse what I'm seeing (while filtering out documentation for older versions of Zimbra). From what I can see here:

https://wiki.zimbra.com/wiki/Improving_Anti-spam_system

One makes edits here:

• /opt/zimbra/conf/salocal.cf.in

and then after a Zimbra services restart THIS file gets regenerated:

• /opt/zimbra/data/spamassassin/localrules/salocal.cf

is that correct (the regeneration of salocal.cf)?



Not for a long while; that wiki is very outdated unfortuanately.

if you less the salocal.conf.in file in your Zimbra 8.7.11 installation, you'll see a reference to http://wiki.zimbra.com/wiki/SpamAssassin_Customizations . In that wiki, you'll see the reference to creating an sauser.cf file in /opt/zimbra/data/spamassassin/localrules with all of your preferred customizations as the now-supported way of tweaking SpamAssassin.

The wiki also describes how to have Zimbra update the SpamAssassin rule sets on its own periodically.

I'll send you a bill David... :-)

All the best,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/
User avatar
DavidMerrill
Posts: 45
Joined: Thu Jul 30, 2015 2:44 pm
Location: Portland, ME
Contact:

Re: 8.7.x spam DMARC_FAIL_REJECT=9 for aol.com and zimbra.com

Postby DavidMerrill » Fri Mar 16, 2018 10:37 pm

L. Mark Stone wrote:I'll send you a bill David... :-)


I'm good for it, I swear! :D
___________________________________
David Merrill - Zimbra Practice Lead
Reliable Networks - Zimbra Hosting, Licensing and Professional Services
Zeta Alliance
User avatar
L. Mark Stone
Elite member
Elite member
Posts: 1829
Joined: Wed Oct 09, 2013 11:35 am
Location: Portland, Maine
ZCS/ZD Version: 8.8.8 Patch 6 Network Edition
Contact:

Re: 8.7.x spam DMARC_FAIL_REJECT=9 for aol.com and zimbra.com

Postby L. Mark Stone » Fri Mar 16, 2018 10:38 pm

DavidMerrill wrote:
L. Mark Stone wrote:I'll send you a bill David... :-)


I'm good for it, I swear! :D


Bring me a shrubbery!!

LOL!
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
Zeta Alliance http://www.zetalliance.org/

Return to “Administrators”

Who is online

Users browsing this forum: Google [Bot] and 33 guests