nicole thomson wrote:
My present config is qmail-toaster+spamdyke
>Have you implemented a whitelist with all of your vendors?
yes i did this, whenever i see a mail is with DENIED_RBL_MATCH bounce,
but tracing them through the logs is bit a pain,
Have you tried something like:
# qmlog -g DENIED_RBL_MATCH -nl smtp | sort -k 6 | less
> What do you consider to be false positives?
@400000004b1df18e1c8961bc.s:@400000004b1d283c1d694a0c spamdyke[23866]:
DENIED_RBL_MATCH from: validemai...@pcisecurity_xxxxx.org
<mailto:[email protected]> to: [email protected]
origin_ip: 74.53.136.146 origin_rdns: ruby2.fastnix.com auth: (unknown)
this particular e-mail will be sent from them to our domain
periodically, even though it is not listed in spamhaus, still this email
has been denied to mydomain user.
As I said in the other email, this appears to be a bug. I'll be
interested to see what Sam has to say about this, as nobody else has
experienced a bug of this type that I'm aware of. Very peculiar. It's
almost as if the IP address is spoofed or somehow incorrect. (Please be
sure to include your spamdyke.conf when you post to the spamdyke list)
at present i wil be sending a mail to the above said emailid stating the
mail has got rejected and now the domain is allowed to send mail's ,
please resend the same to [email protected]
but this process is painful, if it is getting delivered to some id's
after whitelisting them, i can forward the email to
[email protected] and henceforth the mail will not be blocked
is there any other way to do the same?
Perhaps. Check the spamdyke documentation. I seem to recall a testing
sort of option that logs what actions would have been taken, but allows
email to pass through. I'm not sure off hand if that's been implemented
already, or might be an enhancement request.
spamd/current
@400000004b1615083b5a5bdc [728] info: spamd: result: . 0 -
AWL,BAYES_00,MSGID_MULTIPLE_AT,NO_RELAYS
scantime=9.7,size=3414,user=vpopmail,uid=508,required_score=12.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47811,mid=<011301ca731f$d59bfa30$80d3ee...@[email protected]>,bayes=0.000000,autolearn=no
@400000004b16150e2e2bec64 [320] info: spamd: result: . 0 -
AWL,BAYES_00,MSGID_MULTIPLE_AT,NO_RELAYS
scantime=7.9,size=3414,user=vpopmail,uid=508,required_score=12.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=47814,mid=<011301ca731f$d59bfa30$80d3ee...@[email protected]>,bayes=0.000000,autolearn=no
Those scan times are pretty high, which can contribute to your timeouts.
The "child states" lines would be nice to see, as they give an
indication of how many scans you have going at once.
See Jake's video about spamassassin performance tuning for making the
simscan working directory a tmpfs (providing you have enough ram).
> Also, look to see which rules are contributing to your false positives.
> Some rules may be inappropriate in your environment, causing some emails
> to score too high.
spamdyke rules or spamassassin rules?
Spamassassin rules (spamdyke doesn't have rules per se). You'll need to
look at the message headers to see which rules contribute to the total
spam score.
--
-Eric 'shubes'
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
