PDA

View Full Version : Mark emails witouth SPF and DKIM as spam



Mitch
11-11-2016, 02:06 AM
Hi,

I just need some help with setup of ESF.

My Goals: Mark emails without SPF or DKIM as spam.

What I did is, I changed the configuration of ESP:

/etc/exim.easy_spam_fighter/variables.conf

EASY_LIMIT = 55
EASY_IS_SPAM = 20
EASY_HIGH_SCORE_DROP = 100
EASY_SPF_PASS = -30
EASY_SPF_SOFT_FAIL = 30
EASY_SPF_FAIL = 500
EASY_DKIM_PASS = -20
EASY_DKIM_FAIL = 500
EASY_NO_REVERSE_IP = 100
EASY_FORWARD_CONFIRMED_RDNS = -10
EASY_DNS_BLACKLIST = 50
EASY_SPAMASSASSIN_MAX_SIZE = 200K

EASY_SKIP_SENDERS = /etc/virtual/esf_skip_senders
EASY_SKIP_RECIPIENTS = /etc/virtual/esf_skip_recipients
EASY_SKIP_HOSTS = /etc/virtual/esf_skip_hosts
EASY_SKIP_IPS = /etc/virtual/esf_skip_ip

.include_if_exists /etc/exim.easy_spam_fighter/variables.conf.custom

addresslist esf_skip_senders = ${if exists{EASY_SKIP_SENDERS}{wildlsearch;EASY_SKIP_SENDERS}}
addresslist esf_skip_recipients = ${if exists{EASY_SKIP_RECIPIENTS}{wildlsearch;EASY_SKIP_RECIPIENTS}}
hostlist esf_skip_hosts = ${if exists{EASY_SKIP_HOSTS}{wildlsearch;EASY_SKIP_HOSTS}}
hostlist esf_skip_ips = ${if exists{EASY_SKIP_IPS}{EASY_SKIP_IPS}}
~

I changed: (i'm not sure if those are wise changes)
EASY_SPF_FAIL = 100 to 500
EASY_DKIM_FAIL = 100 to 500

Now I get some spam in my inbox:



Spamtally: Final spam score: 77
X-Spam-Report: Spam detection software, running on the system "server", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: ...
Forward-Confirmed-ReverseDNS: Reverse and forward lookup success on 5.230.131.207, -10 Spam score
X-Spam-Score: 3.7 (+++)
Blacklistcheck: Blacklisted address, +50 Spam score

So how to prevent that those mails go to my inbox?