Irritating amount of SPAM...

Does anyone know how to fix this? I'm getting flack from my users that they're getting spammed up.

I've tested rickh's solution but it did not work.
 
The template has to be done for sure. Next step is up to you: you can either edit every single /etc/virtual/DOMAIN/filter manually or you can login into DA (as admin), then login to every account and for every domain go to spamassassin settings and save the setup (without making changes). This way the /etc/virtual/DOMAIN/filter is rewritten using the adjusted templare.

I think the second way is more easy and quick than editing all filters manually, also it reduces the chances of making errors. Just as long as your template is ok.
 
I still don't understand what happened on our servers. Everyone here has the same probleme which started at the same time.
I didn't do any upgrade.

Wait and see
 
I have the same problem i have it since the update of dovecot.
Maby thats the problem ?
Somebody know it ?
 
zEitEr said:
Do you have Pigeonhole (Sieve) installed with Dovecot?
Click to expand...
I'm going a bit off-topic, sorry.... but ever since I've seen Pigeonhole being associated with Dovecot recently, I've held-off from updating Dovecot.. Is Pigeonhole just in CB2 (I use 1.2)?
 
Kevin Jaspers said:
I have the same problem i have it since the update of dovecot.
Click to expand...

I don't know if it is related or not, but I received this notification this morning (I recently updated dovecot also):
/etc/cron.daily/logrotate:
doveadm(root): Error: Module is for different ABI version 2.1.16 (we have 2.2.ABIv0(2.2.1)): /usr/lib/dovecot/doveadm/lib10_doveadm_zlib_plugin.so

Can't seem to find any information on this...
 
I have the same problem.

Code: 
# vi /usr/local/directadmin/data/templates/filter_base

Code: 
change 
  if error_message then finish endif
to
  if not first_delivery and error_message then finish endif

To change all current filters,
then run this command:

Code: 
# perl -pi -e "s/if\ error_message\ then\ finish\ endif/if\ not\ first_delivery\ and\ error_message\ then\ finish\ endif/g" /etc/virtual/*/filter
 
Yep same problem here.. suddenly these few days.
Do we need to fix this ourself or is this a DA issue and better wait for a fix from them?
 
It's not quite a new problem actually. Once or twice a year this happens, but most times just for 1 or 2 days. By the looks of it, the cause was always "simply" the empty return-path <> (but I can't check it to be sure).

I did no updates recently, however my installations are quite fresh. The first server was setup halfway March and the second by the end of April. Before this I had an older server which wasn't updated for a long time (years!), but I had the same problem there.

I'm happy there's a fix for it now!

@Driesp: thanx for the Perl code :D
 
Hello,

This is likely related:
http://help.directadmin.com/item.php?id=215

I'd welcome discussion as whether or not it's "correct" to remove that line.
We'd be happy to do so if that's the consensus.

However, what I have done (until further notice) is moved the exit line (on error_message <>) to after the check for high scoring spam.
http://www.directadmin.com/features.php?id=1449

The other option is to move |SPAMFILTERS| up, just after the high scoring spam (blocklevel) section, and before the error_message exit line.

This is the new /usr/local/directadmin/data/templates/filter_base template for the next release (until other changes are decided on):
Code: 
# Exim Filter

# created by |NAME|, version |VERSION|
# Do not modify this file as any changes will be
# overwritten when the user makes a change.
# (data is only written to this file, not read)


[COLOR=#008000]|*if BLOCKLEVEL|
if
        $h_X-Spam-Level: contains "|BLOCKLEVEL|"
then
        seen finish
endif
|*endif|[/COLOR]

[COLOR=#ff0000]|SPAMFILTERS|[/COLOR]

[COLOR=#0000ff]if error_message then finish endif[/COLOR]

|WORDFILTERS|

|ADULTFILTERS|

#end filter
after changing the filter_base template, use this command to rewrite all filter files:
Code: 
[COLOR=#000000][FONT=courier new]echo "action=rewrite&value=filter" >> /usr/local/directadmin/data/task.queue[/FONT][/COLOR]
John
 
Last edited:
Hi John,

Thanx for the input. I think I agree valid errors should not be removed/moved to spambox. The main goal here is to avoid mailboxes getting filled up with spam, but preferrably "the right way".

I applied your suggestion to a few of my own domains and I'll post my experiences with it :)
 
Last edited:
Hello John,

after applying suggested changes (moving `if error_message then finish endif` in custom/filter_base)
my incoming messages were not delivered and the queue grew, and in /var/log/exim/mainlog I saw entries like this:

1Uc1VW-0000Mj-Fz == [email protected] R=domain_filter defer (-17): error in redirect file: missing or malformed local part (expected word or "<") in "if error_message then finish endif"

Any chance to fix this? Currently I switched back to the state before (without custom/filter_base), incoming messages are delivered but the main problem still persists (SPAM with empty Return-path is not moved to .INBOX.spam).


UPDATE: sorry for confusing, that was my fault, probably because I've added a comment with a link to http://forum.directadmin.com/showthread.php?t=46371&p=238173#post238173 at the beginning of custom/filter_base and I think this somehow caused "error in redirect file...". Now, without any additional comments in custom/filter_base - no more error entries. I'm waiting for SPAM, I've disabled Postgrey, and... messages with Return-path <> are still delivered to Inbox. Maybe I'm doing something wrong, so I'll wait a few hours, maybe other users will tell more how this solution works.
 
Last edited:
You must log in or register to reply here.
Back
Top