Dotaz: spamassassin, blacklist

[dobraczek]

Ahoj vsem, zkousel jsem dat email do blacklistu a stejne mi prisel. Poradite mi prosim nekdo kde delam chybu.

Nastaveni spamassassin

required_score          5.0
rewrite_header subject  *****SPAM*****
report_safe             1
use_bayes               1
bayes_auto_learn        1
skip_rbl_checks         0
use_razor2              1
use_dcc                 1
use_pyzor               1
ok_languages            cs en sk
ok_locales              en

blacklist test@email.cz

Postfix (posledni cast nastaveni)

smtpd_recipient_restrictions =
  permit_sasl_authenticated
  reject_non_fqdn_recipient
  reject_non_fqdn_sender
  reject_unknown_sender_domain
  reject_unknown_recipient_domain
# check_recipient_access hash:/etc/postfix/virtual
  permit_mynetworks
  reject_unauth_destination
  reject_multi_recipient_bounce
        reject_rbl_client blackholes.easynet.nl
        reject_rbl_client dnsbl.ahbl.org
        reject_rbl_client dnsbl.njabl.org
        reject_rbl_client rhsbl.sorbs.net
        reject_rbl_client multi.uribl.com
        reject_rbl_client dsn.rfc-ignorant.org
        reject_rbl_client dul.dnsbl.sorbs.net
        reject_rbl_client bl.spamcop.net
        reject_rbl_client dnsbl.sorbs.net
        reject_rbl_client cbl.abuseat.org
        reject_rbl_client ix.dnsbl.manitu.net
        reject_rbl_client combined.rbl.msrbl.net
        reject_rbl_client rabl.nuclearelephant.com
  reject_invalid_hostname
  check_sender_access hash:/etc/postfix/virtual
  reject_rhsbl_sender dsn.rfc-ignorant.org
  reject_unauth_pipelining
  reject_unverified_sender
  permit

smtpd_client_restrictions =
  permit_mynetworks
  permit_sasl_authenticated,
        reject_rbl_client zen.spamhaus.org
        reject_rbl_client list.dsbl.org
        reject_rbl_client blackholes.easynet.nl
        reject_rbl_client dnsbl.ahbl.org
        reject_rbl_client dnsbl.njabl.org
        reject_rbl_client rhsbl.sorbs.net
        reject_rbl_client multi.uribl.com
        reject_rbl_client dsn.rfc-ignorant.org
        reject_rbl_client dul.dnsbl.sorbs.net
        reject_rbl_client bl.spamcop.net
        reject_rbl_client dnsbl.sorbs.net
        reject_rbl_client cbl.abuseat.org
        reject_rbl_client ix.dnsbl.manitu.net
        reject_rbl_client combined.rbl.msrbl.net
        reject_rbl_client rabl.nuclearelephant.com

smtpd_sender_restrictions =
  reject_rhsbl_client dsn.rfc-ignorant.org
  reject_invalid_hostname
  reject_non_fqdn_sender
  reject_unknown_sender_domain
  permit_sasl_authenticated
  permit_mynetworks

content_filter = smtp-amavis:[127.0.0.1]:10024

+ zmeny v master.cf

smtp-amavis unix -      -       n       -       2       smtp
 -o smtp_data_done_timeout=1200
 -o disable_dns_lookups=yes
127.0.0.1:10025 inet n  -       n       -       -       smtpd
 -o content_filter=
 -o local_recipient_maps=
 -o relay_recipient_maps=
 -o smtpd_restriction_classes=
 -o smtpd_client_restrictions=
 -o smtpd_helo_restrictions=
 -o smtpd_sender_restrictions=
 -o smtpd_recipient_restrictions=permit_mynetworks,reject
 -o mynetworks=127.0.0.0/8
 -o strict_rfc821_envelopes=yes
 -o smtpd_error_sleep_time=0
 -o smtpd_soft_error_limit=1001
 -o smtpd_hard_error_limit=1000

Odpovědi

[lib]

a zpracovaval vubec spamassassin ten email? Pokud je velikost emailu vetsi nez nastavena hodnota tak spamassassin zpravu ignoruje, pokud je mi znamo.

[dobraczek]

Ne podle hlavicky emailu pravdepodobne neprosel pres spamassassin...

[pupu]

Mozna by to chtelo jeste nastaveni toho amavisu, kdyz uz to pres nej honis. Amavis totiz spoustu nastaveni SA uspesne prebiji.

[dobraczek]

Bude stacit toto?

$ENV{PATH} = $path = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin';
$file   = 'file';
$gzip   = 'gzip';
$bzip2  = 'bzip2';
$lzop   = 'lzop';
$rpm2cpio   = ['rpm2cpio.pl','rpm2cpio'];
$cabextract = 'cabextract';
$uncompress = ['uncompress', 'gzip -d', 'zcat'];
#$unfreeze   = ['unfreeze', 'freeze -d', 'melt', 'fcat']; #disabled (non-free, no security support)
$unfreeze = undef;
$arc        = ['nomarch', 'arc'];
$unarj      = ['arj', 'unarj'];
#$unrar      = ['rar', 'unrar']; #disabled (non-free, no security support)
$unrar  = undef;
$zoo    = 'zoo';
#$lha    = 'lha'; #disabled (non-free, no security support)
$lha    = undef;
$pax    = 'pax';
$cpio   = 'cpio';
$ar     = 'ar';
$ripole = 'ripole';
$dspam  = 'dspam';

Problem je, ze nechodi emaily z notifikace@mojedatovaschranka.cz, chtel jsem je umistit na WhiteList a chtel jsem otestovat funkci tim, ze svuj email umistim na BlackList.... Dik

[pupu]

Ne, to opravdu stacit nebude. Whitelisty a blacklisty jsou typicke veci, ktere si nastavuje amavis. Viz sekce @score_sender_maps. Dalsi zasadni veci jsou limity.

$sa_tag_level_deflt  = -999.0;  # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 6.2;  # add 'spam detected' headers at that level
$sa_kill_level_deflt = 15;  # triggers spam evasive actions (e.g. blocks mail)
$sa_dsn_cutoff_level = 15;   # spam level beyond which a DSN is not sent
$sa_crediblefrom_dsn_cutoff_level = 18; # likewise, but for a likely valid From
# $sa_quarantine_cutoff_level = 25; # spam level beyond which quarantine is off
$penpals_bonus_score = 8;    # (no effect without a @storage_sql_dsn database)
$penpals_threshold_high = $sa_kill_level_deflt;  # don't waste time on hi spam
$bounce_killer_score = 100;  # spam score points to add for joe-jobbed bounces

$sa_mail_body_size_limit = 400*1024; # don't waste time on SA if mail is larger
$sa_local_tests_only = 0;    # only tests which do not require internet access?