hi there, I have an issue on Endian Firewall Appliance release 2.4-0 (Deployset #0) full patched. While accessing smtp service from outside clients gets classified as SPAM.
Most of the score is due to firewall is ignoring authenticated client. I also took a look into main.cf. There is no statment about exemptions for sasl authenticated clients. smtpd_sasl_auth_enable=yes smtpd_client_restrictions=permit_sasl_authenticated amavisd.conf is also missing bypass rules for sasl authenticated clients. A similar issue is closed on release of 2.2: http://bugs.endian.com/view.php?id=273 Example of an authenticated uses email, who is not a spammer: Pkte Regelname Beschreibung ---- ---------------------- -------------------------------------------------- 0.0 FSL_HELO_NON_FQDN_1 FSL_HELO_NON_FQDN_1 0.2 MULTIPART_ALTERNATIVE Multipart/Alternative 2.0 RCVD_NONFQDN_HELO Received: a non FQDN HELO 3.3 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL [95.118.55.238 listed in zen.spamhaus.org] 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT [95.118.55.238 listed in bb.barracudacentral.org] 1.3 RCVD_IN_RP_RNBL RBL: Relay in RNBL, https://senderscore.org/blacklistlookup/ [95.118.55.238 listed in bl.score.senderscore.com] 0.0 HTML_MESSAGE BODY: Nachricht enthält HTML 0.8 BAYES_50 BODY: Spamwahrscheinlichkeit nach Bayes-Test: 40-60% [score: 0.4025] 0.0 HELO_NO_DOMAIN Relay reports its domain incorrectly 1.5 RDNS_DYNAMIC3 Delivered to trusted network by host with dynamic-looking rDNS 2.8 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers -0.3 AWL AWL: From: address is in the auto white-list Regards JZdrzalek ------------------------------------------------------------------------------ Xperia(TM) PLAY It's a major breakthrough. An authentic gaming smartphone on the nation's most reliable network. And it wants your games. http://p.sf.net/sfu/verizon-sfdev _______________________________________________ Efw-user mailing list Efw-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/efw-user