Whitelisted emails getting quarentined as spam

Discuss here all what concerns the MailCleaner anti-spam efficiency, share your rulesets and tips for SpamAssassin !

Moderators: FlorianB, Pascal, bourgeois, mentor

seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 05, 2015 5:34 pm

I've seen a few post with others having this same issue I have have not seen any good answer.

Users have emails in their personal white list. Sometimes they get caught, sometimes not. I know we don't like whitelists but my organization requires them.

Need to get to the bottom of this.
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 3:43 pm

Anyone?
del
Posts: 497
Joined: Mon Mar 11, 2013 7:42 am
How did you hear about Mailcleaner: google
Location: Germany

Re: Whitelisted emails getting quarentined as spam

Postby del » Thu Feb 12, 2015 4:46 pm

Post the trace, when available the header and the whitelist entry please
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 5:15 pm

Here is everything you requested. Note that this whitelist entry is on his personal whitelist AND the whitelist in Anti-Spam : global settings
Attachments
2015-02-12_100259.jpg
personal whitelist
2015-02-12_100259.jpg (6.63 KiB) Viewed 3976 times
2015-02-12_100029.jpg
Trace
2015-02-12_100029.jpg (184.57 KiB) Viewed 3976 times
2015-02-12_100230.jpg
Header
2015-02-12_100230.jpg (254.83 KiB) Viewed 3976 times
del
Posts: 497
Joined: Mon Mar 11, 2013 7:42 am
How did you hear about Mailcleaner: google
Location: Germany

Re: Whitelisted emails getting quarentined as spam

Postby del » Thu Feb 12, 2015 6:46 pm

You have modifyed your required spam score.
Does this happen when you reach more than 5 points too or is it getting whitelisted then?
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 8:47 pm

del wrote:You have modifyed your required spam score.
Does this happen when you reach more than 5 points too or is it getting whitelisted then?


I'll look into that but why should the spam score matter if it is whitelisted?
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 8:55 pm

yes. Just found one that was 5.1

Code: Select all

Score    Description
1.0    Received via a relay in BARRACUDACENTRAL Rbl blocklist
0.7    SPF: HELO does not match SPF record (softfail)
0.1    Bayes spam probability is 0 to 1%
0.0    HTML included in message
3.3    Received via a relay in Spamhaus PBL
-1.5    KHOP_THREADED
1.4    RCVD_IN_BRBL_LASTEXT
5.1    
del
Posts: 497
Joined: Mon Mar 11, 2013 7:42 am
How did you hear about Mailcleaner: google
Location: Germany

Re: Whitelisted emails getting quarentined as spam

Postby del » Thu Feb 12, 2015 9:52 pm

Post the trace of this mail too please.
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 10:07 pm

trace with 5.1 score
Attachments
2015-02-12_150410.jpg
trace with 5.1 score
2015-02-12_150410.jpg (209.24 KiB) Viewed 3973 times
del
Posts: 497
Joined: Mon Mar 11, 2013 7:42 am
How did you hear about Mailcleaner: google
Location: Germany

Re: Whitelisted emails getting quarentined as spam

Postby del » Thu Feb 12, 2015 10:30 pm

Sorry, but I have to ask, derrick.com is whitelisted too, yes?

Run this command please:
cd /usr/mailcleaner
cvs -qn update -dP

the -n wont change any files but we can get a list of modified files.
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 10:43 pm

del wrote:Sorry, but I have to ask, derrick.com is whitelisted too, yes?

YES - *@derrick.com on personal whitelist

Code: Select all

root@mailcleaner:/usr/mailcleaner# cvs -qn update -dP
cvs update: CVS password file /root/.cvspass does not exist - creating a new file
? user_prefs
? etc/exim/.exim_stage1.conf_template.orig.swo
? etc/exim/.exim_stage1.conf_template.orig.swp
? etc/exim/.exim_stage1.conf_template.swm
? etc/exim/.exim_stage1.conf_template.swn
? etc/exim/.exim_stage1.conf_template.swo
? etc/exim/.exim_stage1.conf_template.swp
? etc/exim/.exim_stage4.conf_template.svr
? etc/exim/.exim_stage4.conf_template.svs
? etc/exim/.exim_stage4.conf_template.svt
? etc/exim/.exim_stage4.conf_template.svu
? etc/exim/.exim_stage4.conf_template.svv
? etc/exim/.exim_stage4.conf_template.svw
? etc/exim/.exim_stage4.conf_template.svx
? etc/exim/.exim_stage4.conf_template.svy
? etc/exim/.exim_stage4.conf_template.svz
? etc/exim/.exim_stage4.conf_template.swa
? etc/exim/.exim_stage4.conf_template.swb
? etc/exim/.exim_stage4.conf_template.swc
? etc/exim/.exim_stage4.conf_template.swd
? etc/exim/.exim_stage4.conf_template.swe
? etc/exim/.exim_stage4.conf_template.swf
? etc/exim/.exim_stage4.conf_template.swg
? etc/exim/.exim_stage4.conf_template.swh
? etc/exim/.exim_stage4.conf_template.swi
? etc/exim/.exim_stage4.conf_template.swj
? etc/exim/.exim_stage4.conf_template.swk
? etc/exim/.exim_stage4.conf_template.swl
? etc/exim/.exim_stage4.conf_template.swm
? etc/exim/.exim_stage4.conf_template.swn
? etc/exim/.exim_stage4.conf_template.swo
? etc/exim/.exim_stage4.conf_template.swp
? etc/exim/exim4.conf.localmacros
? etc/exim/exim_stage4.conf_template.test
? etc/mailscanner/ZZ_customRules.cf
? share/spamassassin/90_2tld_cf_sare_sa-update_dostech_net
? share/spamassassin/90_2tld_cf_sare_sa-update_dostech_net.cf
? share/spamassassin/99_barracuda_rbl.cf
? share/spamassassin/99_l1_apews_rbl.cf
? share/spamassassin/99_l2_apews_rbl.cf
? share/spamassassin/99_local_docoz.cf
? share/spamassassin/99_lower_user_score.cf
? share/spamassassin/99_spam_domains.cf
? share/spamassassin/debuglog-clamav_sanesecurity_5h.log
? share/spamassassin/debuglog-saupdate.log
? share/spamassassin/khop-bl_sa_khopesh_com
? share/spamassassin/khop-bl_sa_khopesh_com.cf
? share/spamassassin/khop-blessed_sa_khopesh_com
? share/spamassassin/khop-blessed_sa_khopesh_com.cf
? share/spamassassin/khop-dynamic_sa_khopesh_com
? share/spamassassin/khop-dynamic_sa_khopesh_com.cf
? share/spamassassin/khop-general_sa_khopesh_com
? share/spamassassin/khop-general_sa_khopesh_com.cf
? share/spamassassin/khop-sc-neighbors_sa_khopesh_com
? share/spamassassin/khop-sc-neighbors_sa_khopesh_com.cf
? share/spamassassin/sa_sosdg_org
? share/spamassassin/sa_sosdg_org.cf
? share/spamassassin/sought_rules_yerp_org
? share/spamassassin/sought_rules_yerp_org.cf
? share/spamassassin/updates_spamassassin_org
? share/spamassassin/updates_spamassassin_org.cf
? share/spamassassin/zz_custom_sakam.cf
? share/spamassassin/zz_local.cf
? share/spamassassin/zz_local_blacklist.cf
? share/spamassassin/zz_local_pettingers_org_rules.cf-disabled
U bin/search_log.pl
U bin/send_summary.pl
M etc/apache/certs/certificate.pem
U etc/apache/httpd.conf_template
U etc/exim/exim_stage4.conf_template
M etc/mailscanner/MailScanner.conf_template
cvs update: conflict: etc/mysql/my_master.cnf is modified but no longer in the repository
C etc/mysql/my_master.cnf
U etc/mailcleaner/patchlevel.def
U install/install.sh
U install/dbs/t_cf_PreRBLs.sql
U install/dbs/t_cf_dnslist.sql
U lib/RRDArchive.pm
U lib/SMTPAuthenticator/LDAP.pm
U scripts/cron/update_antivirus.sh
U www/api/application/api/models/AddressAPI.php
U www/classes/controllers/user/ConfigUserWWList.php
U www/classes/user/Spam.php
U www/framework/Zend/Service/ReCaptcha/Response.php
U www/framework/Zend/Service/ReCaptcha/MailHide/Exception.php
U www/guis/admin/application/models/NetworkInterfaceMapper.php
del
Posts: 497
Joined: Mon Mar 11, 2013 7:42 am
How did you hear about Mailcleaner: google
Location: Germany

Re: Whitelisted emails getting quarentined as spam

Postby del » Thu Feb 12, 2015 10:49 pm

You should update your mailcleaner but at least update your stage4 config
See http://osmailcleaner.cvs.sourceforge.ne ... 10&r2=1.11

You can download it here if you dont want to do it with cvs:
http://osmailcleaner.cvs.sourceforge.ne ... ision=1.11
seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 10:55 pm

ok, updating it. Do you have a reason to think it will fix the issue or are you just hoping? :D
del
Posts: 497
Joined: Mon Mar 11, 2013 7:42 am
How did you hear about Mailcleaner: google
Location: Germany

Re: Whitelisted emails getting quarentined as spam

Postby del » Thu Feb 12, 2015 10:57 pm

seansco
Posts: 41
Joined: Fri May 30, 2014 7:21 pm
How did you hear about Mailcleaner: hmailserver forum

Re: Whitelisted emails getting quarentined as spam

Postby seansco » Thu Feb 12, 2015 11:10 pm

I looked at that. Sorry that doesn't help me. I'm not that familiar with mailcleaner code.

Return to “Filter efficiency”

Who is online

Users browsing this forum: No registered users and 1 guest