Irritating amount of SPAM...

websafe said:
after applying suggested changes (moving `if error_message then finish endif` in custom/filter_base) my incoming messages were not delivered and the queue grew, and in /var/log/exim/mainlog I saw entries like this:
Click to expand...
I've just added this change, and messages are delivering okay.
 
Peter Laws said:
I've just added this change, and messages are delivering okay.
Click to expand...

I've updated my previous post now. Peter, what happens to SPAM messages with Return-path: <> now on Your machine? Still Inbox or as expected INBOX.spam?

Update: This seems to work for me:

Code: 
# Exim Filter

# created by |NAME|, version |VERSION|
# Do not modify this file as any changes will be
# overwritten when the user makes a change.
# (data is only written to this file, not read)

if not first_delivery and error_message then finish endif

|*if BLOCKLEVEL|
if
        $h_X-Spam-Level: contains "|BLOCKLEVEL|"
then
        seen finish
endif
|*endif|


|WORDFILTERS|

|ADULTFILTERS|

|SPAMFILTERS|

#end filter
 
Last edited:
Hi John,

why not change only

Code: 
if  error_message then finish endif

by

Code: 
if not first_delivery and error_message then finish endif

Isn't it easier ?
 
John,

Unfortunately your fix doesn't work. All high-scoring spam with empty return-path<> is stored in my regular mailbox again :(
"regular" spam still can be found in the spambox.

A few headers (might be usefull?):
Return-path: <>
X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on <myserver>
X-Spam-Flag: YES
X-Spam-Level: ************
X-Spam-Status: Yes, score=12.8 required=4.6 tests=BAYES_99,FSL_HELO_BARE_IP_1,
FSL_HELO_BARE_IP_2,MISSING_DATE,MISSING_MID,RCVD_IN_BRBL_LASTEXT,
RCVD_NUMERIC_HELO,RDNS_NONE autolearn=no version=3.3.2
X-Spam-Report:
* 1.4 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
* [37.212.79.65 listed in bb.barracudacentral.org]
* 3.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 1.0000]
* 1.7 FSL_HELO_BARE_IP_2 FSL_HELO_BARE_IP_2
* 2.3 FSL_HELO_BARE_IP_1 FSL_HELO_BARE_IP_1
* 1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
* 0.5 MISSING_MID Missing Message-Id: header
* 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
* 1.4 MISSING_DATE Missing Date: header

Any new thoughts on this?

Danny
 
I've tested the filter shown here http://forum.directadmin.com/showthread.php?t=46371&p=238179#post238179 for a few hours, and it worked OK, but some messages were still left in inboxes (some empty return-path messages were moved to spambox, some not). Now I've modified this a bit, by moving `if not first_delivery and error_message then finish endif`, so I'm using this filter:

Code: 
# Exim Filter

# created by |NAME|, version |VERSION|
# Do not modify this file as any changes will be
# overwritten when the user makes a change.
# (data is only written to this file, not read)

|*if BLOCKLEVEL|
if
        $h_X-Spam-Level: contains "|BLOCKLEVEL|"
then
        seen finish
endif
|*endif|

if not first_delivery and error_message then finish endif

|WORDFILTERS|

|ADULTFILTERS|

|SPAMFILTERS|

#end filter


I'll let you know.


UPDATE: OK! this is the solution that works for me, over 24 hours and no spam left in inboxes.

In a few days I'll maybe check the new filter provided by DirectAdim Support.
 
Last edited:
Allright, I adjusted the settings according to John's code. I'll wait and see what happens and let you know.
 
I will try this when I'm in the office. We get spam every second so it's quite easy for us to test the filters.
 
Sorry for the late reply. Looks as if it's working. No spam delivered to the Inbox and straight to whatever the setting actually is.
 
Where to move |SPAMFILTERS|

DirectAdmin Support said:
Hello,

I've moved the |SPAMFILTERS| to before the finish line.
Regardless of what's sent, if it's spam, it has to be dealt with.. so this seems to be the solution.
Back to the post with the code

John
Click to expand...

Hi John,

Spamassassin is new to me. Can you tell me mean with the finish line?

# Exim Filter

# created by |NAME|, version |VERSION|
# Do not modify this file as any changes will be
# overwritten when the user makes a change.
# (data is only written to this file, not read)

|*if BLOCKLEVEL|
if
$h_X-Spam-Level: contains "|BLOCKLEVEL|"
then
seen finish

|SPAMFILTERS| on this place or

endif

|SPAMFILTERS| on this place

|*endif|

if not first_delivery and error_message then finish endif

|WORDFILTERS|

|ADULTFILTERS|


#end filter
 
This is the solution for the problem of Spamassassin where not deleting msg with highscore??
 
Now what is the clue to fix the new spam issue? Lots of posts / lots of information :-/
 
I updated two DA custom build servers with build versions and build update versions and am still experiencing this problem on 50 domains.

Code was not yet added unfortunately. I changed the code manually and did the echo actie rewrite etc script for the existing domains but received no confirmation? Hope this works!
 
Last edited:
echo actie rewrite etc script for the existing domains but received no confirmation?
Click to expand...
That's correct, those lines will give no confirmation notices. They just send the command to the task manager which will do the work.
 
You must log in or register to reply here.
Back
Top