--enable-dropmsg accepts the e-mail and silently drops the message. We
generate error 500's which sends a message to spammers to hit someone
else. It also makes legitimate senders generate bounces to their
sender.
This would be a bad thing, and is not necessary for the QmailToaster operation.
On 11/7/06, slamp slamp <[EMAIL PROTECTED]> wrote:
Following up on this. Can this be enabled by
Drop Message option
(http://qmailwiki.inter7.com/Simscan/Guide#Drop_Message_option)
Some sites have security policies in place which require them to
accept every email. For these sites there is an option to do all the
normal simscan processing, but if a virus or spam is detected the
message is not handed to qmail-queue for local delivery. Instead it is
silently dropped.
Use this option when configuring simscan
--enable-dropmsg
I was looking at the spec file for simscan and it is not enabled.
There is also a settings:
drop message = OFF
Would this be what I need to drop messages with spam hits over 12???
On 11/7/06, slamp slamp <[EMAIL PROTECTED]> wrote:
> hmm actually if spam hits is over 12 points it generates a bounce.
>
> bounce message:
>
> rejected by: bounced (host domain.com[69.115.xx.xxx] said: 554 Your
> email is considered spam (17.50 spam-hits) (in reply to end of DATA
> command))
>
> smtp log:
>
> 2006-10-24 16:56:47.566033500 tcpserver: status: 0/100
> 2006-10-24 17:12:53.798053500 tcpserver: status: 1/100
> 2006-10-24 17:12:53.798058500 tcpserver: pid 1871 from 208.11.75.2
> 2006-10-24 17:12:53.798061500 tcpserver: ok 1871
> mail.domain.com:192.168.2.50:25 :208.11.75.2::35258
> 2006-10-24 17:12:56.898361500 CHKUSER accepted sender: from
> <[EMAIL PROTECTED]::> remote <mail.r
> ollernet.us:unknown:208.11.75.2> rcpt <> : sender accepted
> 2006-10-24 17:12:57.194445500 CHKUSER accepted rcpt: from
> <[EMAIL PROTECTED]::> remote <mail.rol
> lernet.us:unknown:208.11.75.2> rcpt <[EMAIL PROTECTED]> : found existing
recipient
> 2006-10-24 17:12:57.696231500 simscan:[1871]:SPAM REJECT
> (17.50/12.00):0.4995s:***SPAM*** Faith Matt
> ers - Meet Catholic singles:208.11.75.2:[EMAIL PROTECTED]:[EMAIL PROTECTED]
> 2006-10-24 17:12:57.702238500 tcpserver: end 1871 status 0
>
> spamd log:
>
> 2006-10-24 16:56:47.535371500 [25696] info: prefork: child states: II
> 2006-10-24 17:12:57.351048500 [1378] info: spamd: connection from
> localhost.localdomain [127.0.0.1]
> at port 35386
> 2006-10-24 17:12:57.356215500 [1378] info: spamd: processing message
> <[EMAIL PROTECTED]
> .rollernet.us> for clamav:89
> 2006-10-24 17:12:57.692273500 [1378] info: spamd: identified spam
> (17.5/5.0) for clamav:89 in 0.3 se
> conds, 1860 bytes.
> 2006-10-24 17:12:57.692647500 [1378] info: spamd: result: Y 17 -
> HTML_IMAGE_ONLY_08,HTML_MESSAGE,HTM
>
L_SHORT_LINK_IMG_1,MEET_SINGLES,MIME_HTML_ONLY,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC
> _SURBL,URIBL_WS_SURBL
> scantime=0.3,size=1860,user=clamav,uid=89,required_score=5.0,rhost=localhost.l
> ocaldomain,raddr=127.0.0.1,rport=35386,mid=<[EMAIL PROTECTED]>,autolearn=no
>
> i actually want to prevent this also but i don't know where to go.
>
>
> On 11/7/06, Alex <[EMAIL PROTECTED]> wrote:
> > Thank you. You cleared it up for me.
> >
> > -----Original Message-----
> > From: David Sánchez Martín [mailto:[EMAIL PROTECTED]
> > Sent: Tuesday, November 07, 2006 10:25 AM
> > To: [email protected]
> > Subject: RE: [qmailtoaster] How to discard spamassasin bounces
> >
> >
> > Returned by spamassassin???
> >
> >
> > Ok, let's figure it out the problem:
> >
> > The problem is one spammer sends you a forged From mail.
> >
> > 1.- If the mail From is not valid, is rejected by chkuser, no bounces
> >
> > 2.- If the mail Recipient is not a valid user on your mailserver is
> > rejected
> > by chkuser, so no bounces
> >
> > 3.- If spamassassin says has 12 (by default) hit points your smtp
> > rejects
> > it, so it doesn't generate bounces.
> >
> > 4.- If spamassassin says is below 12 is delivered to the mailbox. If
> > it's
> > correctly delivered no bounces are generated.
> >
> >
> > AFAIK Only if is the case 4 could generate bounces just for 4 causes:
> >
> > 1.- Incorrect configured account (for example, alias to non existent
> > accounts)
> > 2.- Mailbox full or something like this
> > 3.- Redirects to another server that bounces the mail.
> > 4.- You have a relay user that is a spammer
> >
> >
> > In which category your problem falls?
> >
> >
> >
> >
> >
> > *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
> > |
> > David Sanchez Martin | [EMAIL PROTECTED]
> > Administrador de Sistemas | http://www.e2000.es
> > E2000 Nuevas Tecnologias |
> > |
> > E2000 Organizacion de Empresarios | Tel : +34 902 19 61 77
> > Mediadores de Seguros |
> > |
> > Agustin Bravo Esquina Calle C |
> > 33120 Pravia Asturias Spain |
> > |
> > *-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*-*
> >
> > -----Mensaje original-----
> > De: Alex [mailto:[EMAIL PROTECTED]
> > Enviado el: martes, 07 de noviembre de 2006 18:47
> > Para: [email protected]
> > Asunto: RE: [qmailtoaster] How to discard spamassasin bounces
> >
> > Thank you. I already have that set and that only deletes the incoming
> > wrong
> > user mail, not the email sent out as bounces.
> >
> > -----Original Message-----
> > From: abdul khan [mailto:[EMAIL PROTECTED]
> > Sent: Tuesday, November 07, 2006 9:35 AM
> > To: [email protected]
> > Subject: Re: [qmailtoaster] How to discard spamassasin bounces
> >
> > set up account to "catchall deleted"
> > It is under "qmailadmin".....
> >
> >
> > Alex wrote:
> > > Can someone help me figure out how to not send the bounce messages
> > back
> > > to the sender which are being returned by spamassasin?
> > >
> > > I am having issues with my server bombarding unsuspecting people whose
> >
> > > email was hijacked with spam bounces.
> > >
> > > Thanks
> > >
> > >
> > > ---------------------------------------------------------------------
> > > QmailToaster hosted by: VR Hosted <http://www.vr.org>
> > > ---------------------------------------------------------------------
> > > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > > For additional commands, e-mail:
> > [EMAIL PROTECTED]
> > >
> > >
> >
> > ---------------------------------------------------------------------
> > QmailToaster hosted by: VR Hosted <http://www.vr.org>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> > ---------------------------------------------------------------------
> > QmailToaster hosted by: VR Hosted <http://www.vr.org>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
> >
> > ---------------------------------------------------------------------
> > QmailToaster hosted by: VR Hosted <http://www.vr.org>
> > ---------------------------------------------------------------------
> > To unsubscribe, e-mail: [EMAIL PROTECTED]
> > For additional commands, e-mail: [EMAIL PROTECTED]
> >
> >
>
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
---------------------------------------------------------------------
QmailToaster hosted by: VR Hosted <http://www.vr.org>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
