Following up on this. Can this be enabled by
Drop Message option
(http://qmailwiki.inter7.com/Simscan/Guide#Drop_Message_option)
Some sites have security policies in place which require them to
accept every email. For these sites there is an option to do all the
normal simscan processing, but if a virus or spam is detected the
message is not handed to qmail-queue for local delivery. Instead it is
silently dropped.
Use this option when configuring simscan
--enable-dropmsg
I was looking at the spec file for simscan and it is not enabled.
There is also a settings:
drop message = OFF
Would this be what I need to drop messages with spam hits over 12???
On 11/7/06, slamp slamp <[EMAIL PROTECTED]> wrote:
hmm actually if spam hits is over 12 points it generates a bounce.
bounce message:
rejected by: bounced (host domain.com[69.115.xx.xxx] said: 554 Your
email is considered spam (17.50 spam-hits) (in reply to end of DATA
command))
smtp log:
2006-10-24 16:56:47.566033500 tcpserver: status: 0/100
2006-10-24 17:12:53.798053500 tcpserver: status: 1/100
2006-10-24 17:12:53.798058500 tcpserver: pid 1871 from 208.11.75.2
2006-10-24 17:12:53.798061500 tcpserver: ok 1871
mail.domain.com:192.168.2.50:25 :208.11.75.2::35258
2006-10-24 17:12:56.898361500 CHKUSER accepted sender: from
<[EMAIL PROTECTED]::> remote <mail.r
ollernet.us:unknown:208.11.75.2> rcpt <> : sender accepted
2006-10-24 17:12:57.194445500 CHKUSER accepted rcpt: from
<[EMAIL PROTECTED]::> remote <mail.rol
lernet.us:unknown:208.11.75.2> rcpt <[EMAIL PROTECTED]> : found existing
recipient
2006-10-24 17:12:57.696231500 simscan:[1871]:SPAM REJECT
(17.50/12.00):0.4995s:***SPAM*** Faith Matt
ers - Meet Catholic singles:208.11.75.2:[EMAIL PROTECTED]:[EMAIL PROTECTED]
2006-10-24 17:12:57.702238500 tcpserver: end 1871 status 0
spamd log:
2006-10-24 16:56:47.535371500 [25696] info: prefork: child states: II
2006-10-24 17:12:57.351048500 [1378] info: spamd: connection from
localhost.localdomain [127.0.0.1]
at port 35386
2006-10-24 17:12:57.356215500 [1378] info: spamd: processing message
<[EMAIL PROTECTED]
.rollernet.us> for clamav:89
2006-10-24 17:12:57.692273500 [1378] info: spamd: identified spam
(17.5/5.0) for clamav:89 in 0.3 se
conds, 1860 bytes.
2006-10-24 17:12:57.692647500 [1378] info: spamd: result: Y 17 -
HTML_IMAGE_ONLY_08,HTML_MESSAGE,HTM
L_SHORT_LINK_IMG_1,MEET_SINGLES,MIME_HTML_ONLY,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC
_SURBL,URIBL_WS_SURBL
scantime=0.3,size=1860,user=clamav,uid=89,required_score=5.0,rhost=localhost.l
ocaldomain,raddr=127.0.0.1,rport=35386,mid=<[EMAIL PROTECTED]>,autolearn=no
i actually want to prevent this also but i don't know where to go.
On 11/7/06, Alex <[EMAIL PROTECTED]> wrote:
> Thank you. You cleared it up for me.
>
> -----Original Message-----
> From: David Sánchez Martín [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, November 07, 2006 10:25 AM
> To: [email protected]
> Subject: RE: [qmailtoaster] How to discard spamassasin bounces
>
>
> Returned by spamassassin???
>
>
> Ok, let's figure it out the problem:
>
> The problem is one spammer sends you a forged From mail.
>
> 1.- If the mail From is not valid, is rejected by chkuser, no bounces
>
> 2.- If the mail Recipient is not a valid user on your mailserver is
> rejected
> by chkuser, so no bounces
>
> 3.- If spamassassin says has 12 (by default) hit points your smtp
> rejects
> it, so it doesn't generate bounces.
>
> 4.- If spamassassin says is below 12 is delivered to the mailbox. If
> it's
> correctly delivered no bounces are generated.
>
>
> AFAIK Only if is the case 4 could generate bounces just for 4 causes:
>
> 1.- Incorrect configured account (for example, alias to non existent
> accounts)
> 2.- Mailbox full or something like this
> 3.- Redirects to another server that bounces the mail.
> 4.- You have a relay user that is a spammer
>
>
> In which category your problem falls?
>
>
>
>
>
> *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
> |
> David Sanchez Martin | [EMAIL PROTECTED]
> Administrador de Sistemas | http://www.e2000.es
> E2000 Nuevas Tecnologias |
> |
> E2000 Organizacion de Empresarios | Tel : +34 902 19 61 77
> Mediadores de Seguros |
> |
> Agustin Bravo Esquina Calle C |
> 33120 Pravia Asturias Spain |
> |
> *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
>
> -----Mensaje original-----
> De: Alex [mailto:[EMAIL PROTECTED]
> Enviado el: martes, 07 de noviembre de 2006 18:47
> Para: [email protected]
> Asunto: RE: [qmailtoaster] How to discard spamassasin bounces
>
> Thank you. I already have that set and that only deletes the incoming
> wrong
> user mail, not the email sent out as bounces.
>
> -----Original Message-----
> From: abdul khan [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, November 07, 2006 9:35 AM
> To: [email protected]
> Subject: Re: [qmailtoaster] How to discard spamassasin bounces
>
> set up account to "catchall deleted"
> It is under "qmailadmin".....
>
>
> Alex wrote:
> > Can someone help me figure out how to not send the bounce messages
> back
> > to the sender which are being returned by spamassasin?
> >
> > I am having issues with my server bombarding unsuspecting people whose
>
> > email was hijacked with spam bounces.
> >
> > Thanks
> >
> >
> > ---------------------------------------------------------------------
> > QmailToaster hosted by: VR Hosted <http://www.vr.org>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail:
> [EMAIL PROTECTED]
> >
> >
>
> ---------------------------------------------------------------------
> QmailToaster hosted by: VR Hosted <http://www.vr.org>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
> ---------------------------------------------------------------------
> QmailToaster hosted by: VR Hosted <http://www.vr.org>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
> ---------------------------------------------------------------------
> QmailToaster hosted by: VR Hosted <http://www.vr.org>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
