1
SPAM filtering is not doing its job....
Problem reported by Brian Bjerring-Jensen - 7/18/2023 at 11:31 PM
Submitted
[2023.07.19] 03:18:30.579 [94360021] Finished running spam checks. Time (non-rbls): 198508ms, Time (URIBL/RBLS): 6795ms
[2023.07.19] 03:18:30.595 [94360021] Spam Check results: [_DMARC: 0,none], [REVERSE DNS LOOKUP: 10,ForwardFailed], [NULL SENDER: 0,passed], [_INTERNALSPAMASSASSIN: 0:0], [_SPF: 15,PermError], [_DK: 0,None], [_DKIM: 20,None], [MCAFEE: 0], [SPAMCOP: 0], [UCEPROTECT LEVEL 3: 0], [UCEPROTECT LEVEL 2: 0], [MAILSPIKE L5: 0], [SPAMRATS DYNA: 0], [MAILSPIKE L4, MAILSPIKE L3: 0], [MAILSPIKE RBL: 0], [SORBS - ABUSE, SORBS - SOCKS, SORBS - PROXY, SORBS - DYNAMIC IP: 0], [BARRACUDA: 0], [SPAMRATS SPAM: 0], [SPAMHAUS - PBL, SPAMHAUS - SBL, SPAMHAUS - CSS: 0], [BACKSCATTER: 0], [SPAMHAUS.ORG - XBL: 0], [SPAMRATS AUTH: 0], [UCEPROTECT LEVEL 1: 0], [SPAMHAUS HBL: 0], [SPAMHAUS DBL: 0], [URIBL BLACK, URIBL GREY, URIBL RED: 0], [DNSBL: 0], [SURBL: 0], [SEM-URI: 0]
[2023.07.19] 03:18:30.595 [94360021] Spam Checks completed.
[2023.07.19] 03:18:30.814 [94360021] Removed from SpamCheckQueue (1 queued or processing)
[2023.07.19] 03:18:32.283 [94360021] Added to LocalDeliveryQueue (1 queued; 0/50 processing)
[2023.07.19] 03:18:32.283 [94360021] [LocalDeliveryQueue] Begin Processing.
[2023.07.19] 03:18:32.361 [94360021] Starting local delivery to xxxxxxxxxx
[2023.07.19] 03:18:32.455 [94360021] Process delivery status notification step from local recipient success. Recipient: [klo@xxxxxxxxx.com], Notify: [], Delivered: [True], Forwarded: [False], Deleted: False
[2023.07.19] 03:18:32.455 [94360021] Delivery for cs1@xxxxxxx.com to klo@xxxxxxx.com has completed (Delivered to Junk Email) Filter: Spam (Weight: 45), Action (Global Level): MoveToFolder


Same email address sending 4 minutes later

[2023.07.19] 03:22:02.740 [94360025] Delivery started for cs1@xxxxxxx.com at 03:22:02
[2023.07.19] 03:22:08.771 [94360025] Added to SpamCheckQueue (1 queued; 0/30 processing)
[2023.07.19] 03:22:08.771 [94360025] [SpamCheckQueue] Begin Processing.
[2023.07.19] 03:22:08.771 [94360025] Blocked Sender Checks started.
[2023.07.19] 03:22:08.786 [94360025] Blocked Sender Checks completed.
[2023.07.19] 03:22:10.146 [94360025] Spam Checks started.
[2023.07.19] 03:24:03.021 [94360026] Delivery started for cs1@xxxxxxxx.com at 03:24:03
[2023.07.19] 03:24:09.036 [94360026] Added to SpamCheckQueue (1 queued; 1/30 processing)
[2023.07.19] 03:24:09.036 [94360026] [SpamCheckQueue] Begin Processing.
[2023.07.19] 03:24:09.052 [94360026] Blocked Sender Checks started.
[2023.07.19] 03:24:09.052 [94360026] Blocked Sender Checks completed.
[2023.07.19] 03:24:21.036 [94360026] Spam Checks started.
[2023.07.19] 03:24:50.521 [94360025] Finished running spam checks. Time (non-rbls): 25988ms, Time (URIBL/RBLS): 134383ms
[2023.07.19] 03:24:50.521 [94360025] Spam Check results: [_DMARC: 0,none], [REVERSE DNS LOOKUP: 0,Passed], [NULL SENDER: 0,passed], [_INTERNALSPAMASSASSIN: 2,5:4], [_SPF: 0,Pass], [_DK: 0,None], [_DKIM: 20,None], [UCEPROTECT LEVEL 1: 0], [SPAMRATS SPAM: 0], [UCEPROTECT LEVEL 3: 0], [SPAMHAUS - PBL, SPAMHAUS - SBL, SPAMHAUS - CSS: 0], [SPAMRATS AUTH: 0], [SORBS - ABUSE, SORBS - SOCKS, SORBS - PROXY, SORBS - DYNAMIC IP: 0], [MAILSPIKE L5: 0], [SPAMCOP: 0], [BACKSCATTER: 0], [SPAMHAUS.ORG - XBL: 0], [BARRACUDA: 0], [MCAFEE: 0], [UCEPROTECT LEVEL 2: 0], [MAILSPIKE RBL: 0], [SPAMRATS DYNA: 0], [MAILSPIKE L4, MAILSPIKE L3: 0], [SPAMHAUS HBL: 0], [SPAMHAUS DBL: 0], [URIBL BLACK, URIBL GREY, URIBL RED: 0], [DNSBL: 0], [SURBL: 0], [SEM-URI: 0]
[2023.07.19] 03:24:50.521 [94360025] Spam Checks completed.
[2023.07.19] 03:24:50.724 [94360025] Removed from SpamCheckQueue (1 queued or processing)
[2023.07.19] 03:24:51.146 [94360025] Added to LocalDeliveryQueue (1 queued; 0/50 processing)
[2023.07.19] 03:24:51.146 [94360025] [LocalDeliveryQueue] Begin Processing.
[2023.07.19] 03:24:51.161 [94360025] Starting local delivery to sao@xxxxxxxx.com
[2023.07.19] 03:24:51.177 [94360025] Skipping spam filtering: Trusted Sender (system level)
[2023.07.19] 03:24:51.208 [94360025] Process delivery status notification step from local recipient success. Recipient: [sao@xxxxxxxxx.com], Notify: [], Delivered: [True], Forwarded: [False], Deleted: False
[2023.07.19] 03:24:51.208 [94360025] Delivery for cs1@xxxxxxxx.com to sao@xxxxxxx.com has completed (Delivered) Filter: None

And I have a custom ruleset in place thats not even used for spamfiltering despite it running....

It only has effect if the server is rebooted everytime I add a domain to it....

6 Replies

Reply to Thread
0
Brian Bjerring-Jensen Replied
Then I check in the custom rules


I get a score of 60 on a email.

Same rule only has a score of 30 in the settings.


Something is NOT working as intended here.

DKIM settings are also ignored by the way.

Until server is rebooted. You cant change anything in SPAM settings unless you reboot the server.
0
Brian Bjerring-Jensen Replied




Where to set the score on DMARC none??


0
Reto Replied
Do you have "Match Multiple" enabled? This would give you 60 on 2 matches.
0
Brian Bjerring-Jensen Replied
Hi Reto. I only have one custom rule and that is applied "match multiple"
0
Reto Replied
Ok, this is why you get 60 for DOMAIN SPAM in the spam checks. You will get the score (in your case 30) for each match. If you want only 30 then you have to uncheck the "match multiple".
0
Brian Bjerring-Jensen Replied
Ahh thanks :) Get it now.

Reply to Thread