Forwarders and SpamAssassin

ditto

Verified User
Joined
Apr 27, 2009
Messages
1,980
We have SpamAssassin activated for all domains, and it is setup to delete spam with a score of 10 and higher. Spam with score of 5 and higher is setup to be moved to spam folder in Roundcube webmail.

But what about email forwarders? Are they deleted when they have a score of 10 or higher? It seems not. Today I found a frozen email in "Mail Queue Administration", it was rejected by Gmail. In the header it SpamAssassin say it has a score of 30.5:

Code:
This message was created automatically by mail delivery software.

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

  [email protected]
    (ultimately generated from [email protected])
    SMTP error from remote mail server after end of data:
    host gmail-smtp-in.l.google.com [74.125.136.26]:
    550-5.7.1 [217.170.203.195       7] Our system has detected that this message is
    550-5.7.1 likely unsolicited mail. To reduce the amount of spam sent to Gmail,
    550-5.7.1 this message has been blocked. Please visit
    550-5.7.1 http://support.google.com/mail/bin/answer.py?hl=en&answer=188131 for
    550 5.7.1 more information. z8si539931eee.59 - gsmtp

------ This is a copy of the message, including all the headers. ------

Return-path: <[email protected]>
Received: from mail by server.hostname.com with spam-scanned (Exim 4.80.1)
	(envelope-from <[email protected]>)
	id 1V4S5y-0000yL-2V
	for [email protected]; Wed, 31 Jul 2013 10:49:29 +0200
Received: from localhost by server.hostname.com
	with SpamAssassin (version 3.3.2);
	Wed, 31 Jul 2013 10:49:29 +0200
From: "Dr.OZ Media" <[email protected]>
To: [email protected]
Subject: Dr. OZ: How to Lose Weight - The Basics of Weight Loss
Date: Wed, 31 Jul 2013 10:49:18 +0200
Message-Id: <e9619863f65af.20130731.62a4edd2506.93be900c71@164.Red-88-3-192.dynamicIP.rima-tde.net>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on server.hostname.com
X-Spam-Flag: YES
X-Spam-Level: ******************************
X-Spam-Status: Yes, score=30.5 required=5.0 tests=CK_HELO_DYNAMIC_SPLIT_IP,
	CK_HELO_GENERIC,FH_HELO_ALMOST_IP,FH_HOST_EQ_DYNAMICIP,FS_WEIGHT_LOSS,
	HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_BL_SPAMCOP_NET,
	RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_PSBL,RCVD_IN_RP_RNBL,
	RCVD_IN_SORBS_DUL,RCVD_IN_XBL,RDNS_DYNAMIC,SPF_NEUTRAL,SUBJECT_DIET,
	T_HK_NAME_DR,URIBL_BLACK,URIBL_JP_SURBL autolearn=spam version=3.3.2
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_51F8CF99.6B7D8D1A"

In above code [email protected] is the default/system email account for that user in DirectAdmin, and [email protected] is the email address setup in DirectAdmin as a forwarded, so that email to [email protected] is forwarded to [email protected]

The frozen email returned from Gmail is sent to a Gmail account because we have setup a email forwarder in DirectAdmin, the email forwarder is a forwarder for a DirectAdmin default/system email account. Is the behaviour of SpamAssassin correct? Should it not be deleted and not forwarded, or is this a weakness in SpamAssassin, that it will forward all email spam, and only stop email spam that is not going to a email forwarder?
 
But what about email forwarders? Are they deleted when they have a score of 10 or higher? It seems not. Today I found a frozen email in "Mail Queue Administration", it was rejected by Gmail. In the header it SpamAssassin say it has a score of 30.5:
My recollection is that SpamAssassin is run as part of final delivery. I always thought that SpamAssassin didn't run against email fowarders at all.

But I don';t think Gmail uses SpamAssassin. Feel free to contact me by email with a complete header of one of those messages forwarded to Gmail, so I can try to see the path the mail took through your server and others.

If you do, be sure to include the URL of this thread in your email so I can refer back to it.

Thanks.

Jeff
 
My recollection is that SpamAssassin is run as part of final delivery. I always thought that SpamAssassin didn't run against email fowarders at all.

If SpamAssassin is not stopping spam emails on forwarders, then that is a big problem for us running shared hosting servers wich allow clients to setup forwarders, because we might get the server ip on black lists. However I have been thinking that maybe this only happen if the forwarder is on a existing system/email account (the email address acount that is automatically created when you create a new user in DirectAdmin). It also maybe a exception that this happen (I don't get many frozen emails in queue on my servers, only a seldom time).

But I don';t think Gmail uses SpamAssassin. Feel free to contact me by email with a complete header of one of those messages forwarded to Gmail, so I can try to see the path the mail took through your server and others.

Thanks. However I have deleted that email from queue now. I might take your offer and send you this when/if I get another one like it in queue.
 
Back
Top