Own mails marked as spam

[Nivko]

Hi all,

When I send e-mails to my own e-mail address ([email protected] to [email protected] outgoing mail is my own mailserver). The e-mails are marked as spam. I don't understand this, does anyone have a solution?

Jun  5 18:23:12 server1 spamd[15244]: spamd: identified spam (6.8/5.0) for admin:501 in 4.0 seconds, 10723 bytes.
Jun  5 18:23:12 server1 spamd[15244]: spamd: result: Y 6 - AWL,BAYES_20,DYN_RDNS_AND_INLINE_IMAGE,DYN_RDNS_SHORT_HELO_HTML,DYN_RDNS_SHORT_HELO_IMAGE,HTML_MESSAGE,MISSING_SUBJECT,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RDNS_DYNAMIC,SHORT_HELO_AND_INLINE_IMAGE scantime=4.0,size=10723,user=admin,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=38873,mid=<002a01c9e5f9$e5a7da10$b0f78e30$@nl>,bayes=0.141853,autolearn=no
Jun  5 18:23:12 server1 spamd[15243]: prefork: child states: II
Jun  5 18:24:48 server1 spamd[15244]: spamd: connection from localhost.localdomain [127.0.0.1] at port 60055
Jun  5 18:24:48 server1 spamd[15244]: spamd: setuid to admin succeeded
Jun  5 18:24:48 server1 spamd[15244]: spamd: processing message <003001c9e5fa$20f3e7d0$62dbb770$@nl> for admin:501
Jun  5 18:24:52 server1 spamd[15244]: spamd: identified spam (6.3/5.0) for admin:501 in 4.0 seconds, 10724 bytes.
Jun  5 18:24:52 server1 spamd[15244]: spamd: result: Y 6 - AWL,BAYES_20,DYN_RDNS_AND_INLINE_IMAGE,DYN_RDNS_SHORT_HELO_HTML,DYN_RDNS_SHORT_HELO_IMAGE,HTML_MESSAGE,MISSING_SUBJECT,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RDNS_DYNAMIC,SHORT_HELO_AND_INLINE_IMAGE scantime=4.0,size=10724,user=admin,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=60055,mid=<003001c9e5fa$20f3e7d0$62dbb770$@nl>,bayes=0.141853,autolearn=no

Thanks, Niels.

PS: The /etc/hosts file is correct also:

# Do not remove the following line, or various programs
# that require network functionality will fail.
127.0.0.1               localhost.localdomain localhost 
::1             localhost6.localdomain6 localhost6
91.xxx.xxx.xxx

 

[nobaloney]

At least two places to start:

First, remove that record from /etc/hosts for your hostname. If you need it, then your DNS is broken; fix it.

Second, get proper rDNS for your server. You can't do it yourself; you need to get it from your upstream.

If you want more information then tell us the real hostname, domain name, etc., and perhaps some of us can help you further.

And try again, and let us see the results after you've fixed the above.

Jeff

 

[Nivko]

The hostname about 127.0.0.1 inserted I today. The reserve records are okay.

91.xxx

Check it yourself.

When i edit the named.local file:

from:

$TTL    86400
@       IN      SOA     localhost. root.localhost.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
              IN      NS      localhost.

1       IN      PTR     localhost.

to:

$TTL    86400
@       IN      SOA     localhost. root.localhost.  (
                                      1997022700 ; Serial
                                      28800      ; Refresh
                                      14400      ; Retry
                                      3600000    ; Expire
                                      86400 )    ; Minimum
              IN      NS      localhost.

1       IN      PTR     localhost.localdomain.

Does not matter either? (127.0.0.1 localhost.localdomain localhost, says localhost too, so it is ok?)

[root@server1 named]# dig -x 127.0.0.1

; <<>> DiG 9.3.4-P1 <<>> -x 127.0.0.1
;; global options:  printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 30942
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1

;; QUESTION SECTION:
;1.0.0.127.in-addr.arpa.                IN      PTR

;; ANSWER SECTION:
1.0.0.127.in-addr.arpa. 86400   IN      PTR     localhost.

;; AUTHORITY SECTION:
0.0.127.in-addr.arpa.   86400   IN      NS      localhost.

;; ADDITIONAL SECTION:
localhost.              86400   IN      A       127.0.0.1

;; Query time: 0 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Fri Jun  5 19:33:35 2009
;; MSG SIZE  rcvd: 93

[root@server1 named]#
[root@server1 named]# ping localhost
PING localhost.localdomain (127.0.0.1) 56(84) bytes of data.

 

[nobaloney]

localhost settings shouldn't have anything to do with your ability to get mail, but for the mail being identified as spam: are you sending it from webmail or from your own desktop?

Please send yourself an email that triggers the problem and then post the entire email to this forum, as an attachment (including all the headers). Set up a new email address to receive it, and send it from that address too. That way you'll be able to delete that address later so even if it gets harvested here it won't matter.

Then maybe we can try to help further.

Jeff

 

[Nivko]

The new mail address accept's it. Because spamd. is not active here. (on my own domain, the max score is 5.0) I don't understand this rule:

Jun  5 19:53:52 server1 spamd[26407]: spamd: result: Y 5 - AWL,BAYES_50,DYN_RDNS_AND_INLINE_IMAGE,DYN_RDNS_SHORT_HELO_HTML,DYN_RDNS_SHORT_HELO_IMAGE,HTML_MESSAGE,MISSING_SUBJECT,RCVD_IN_PBL,RCVD_IN_SORBS_DUL,RDNS_DYNAMIC,SHORT_HELO_AND_INLINE_IMAGE scantime=4.1,size=10723,user=admin,uid=501,required_score=5.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=37581,mid=<008301c9e606$90770040$b16500c0$@nl>,bayes=0.401544,autolearn=no

The RDNS is perfectly fine? (The whole line is full of RDNS errors)

EDIT: Hmm, i understand it now. The errors main a dynamic rdns who has the sender of the mail.

 

[nobaloney]

Which is why I asked you to post your entire email including errors, so I could track all the IP#s that were showing up.

Certainly there's nothing wrong with your rDNS but there might be some other IP#s in the email headers that are triggering SpamAssassin. There shouldn't be, but that's all that I can think of.

Jeff

 

[Nivko]

My mails were marked as spam because of my HTML mail, images etc.

Just a mail with a high score. But thanks anyway!

 

[ju5t]

Perhaps I'm missing something, but wasn't the spamcheck director designed to skip locally sent messages?

{!eq {$received_protocol}{local}} \

 

[Nivko]

I don't know?

 

[DirectAdmin Support]

Hello,

Edit your spamassassin settings.
Change the delivery option (bottom) to be:

use attachements

What this will do is add the original message to an attachment, but what we want is that it will also give you a scoring breakdown of what each item is scored as, so you can then determine exactly what is scoring you to be spam.

John