Problems with "Is SPAM without classification" settings from SpamHalter

Mario Mondelli

posted Sep 5 '07 at 3:52 pm

You're right, I put a wrong CIDR notation for my own local network in SpamHalter config!

Now everything is working as expected. Thank you for your help !!

<P>You're right, I put a wrong CIDR notation for my own local network in SpamHalter config!</P> <P>Now everything is working as expected. Thank you for your help !!</P> <P mce_keep="true">&nbsp;</P>

Mario Mondelli

posted Sep 4 '07 at 7:19 pm

Hi all !

I'm evaluating SpamHalter 4.3.1.383 with Mercury/32 4.52.

I'm experiencing some problems with the "Is SPAM without classification" settings.

1) Block messages with headers

MercuryS in configured for quering an RBL server and tag matched messages, and this works (it adds "X-Blocked: ..." to matched messages).

SpamHalter is configured for tagging and prefixing spam messages' subject, and this works.

SpamHalter's option "Block messages with headers" is "X-Blocked".

But sometimes I'm receiving messages tagged by MercuryS/RBL but not processed by SpamHalter (no tags, no prefixes, no log entry): how could this be possible ?

2) Honeypot

I set up one honeypot user in Mercury: its address has been specified in the honeypot option from SpamHalter.

The honeypot address is receiving mails but SpamHalter do not automatically process them: messages remains in the honeypot user's folder and I need to periodically move the folder content to the spam's one, so SpamHalter adds it to its database.

I'm missing something about this ? I was expecting that any messages to the honeypot address will be killed by the SpamHalter daemon and added to the database.

Thank you in advance!

<DIV><FONT face=Arial size=2>Hi all !</FONT></DIV> <DIV><FONT face=Arial size=2>I'm evaluating SpamHalter 4.3.1.383 with Mercury/32 4.52.</FONT></DIV> <DIV><FONT face=Arial size=2>I'm experiencing some problems with the "Is SPAM without classification" settings.</FONT></DIV> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV> <DIV><FONT face=Arial size=2>1) Block messages with headers</FONT></DIV> <DIV><FONT face=Arial size=2>MercuryS in configured for quering an RBL server and tag matched messages, and this works (it adds "X-Blocked: ..." to matched messages).</FONT></DIV> <DIV><FONT face=Arial size=2>SpamHalter is configured for tagging and prefixing spam messages' subject, and this works.</FONT></DIV> <DIV><FONT face=Arial size=2>SpamHalter's option "Block messages with headers" is "X-Blocked".</FONT></DIV> <DIV><FONT face=Arial size=2>But sometimes I'm receiving messages tagged by MercuryS/RBL but not processed by SpamHalter (no tags, no prefixes, no log entry): how could this be possible ?</FONT></DIV> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV> <DIV><FONT face=Arial size=2>2) Honeypot</FONT></DIV> <DIV><FONT face=Arial size=2>I set up one honeypot user in Mercury: its address has been specified in the honeypot option from SpamHalter.</FONT></DIV> <DIV><FONT face=Arial size=2>The honeypot address is receiving mails but SpamHalter do not automatically process them: messages remains in the honeypot user's folder and I need to periodically move the folder content to the spam's one, so SpamHalter adds it to its database.</FONT></DIV> <DIV><FONT face=Arial size=2>I'm missing something about this ? I was expecting that any messages to the honeypot address will be killed by the SpamHalter daemon and added to the database.</FONT></DIV> <DIV><FONT face=Arial size=2></FONT>&nbsp;</DIV> <DIV><FONT face=Arial size=2>Thank you in advance!</FONT></DIV>

geby

posted Sep 5 '07 at 12:22 am

Ad. 1) No log entries in Spamhalter's log? Please, try to turn on debug logging in Spamhalter and try to located next missed message in this debug log...

Ad. 2) Honeypotted message is always learned as spam during queue processing, even this message is still delivered to mailbox. Just because you maybe need this message for some next policy processing outside Spamhalter. You not need to ad it to spam manually, it was processed yet.

If you not need honeypotted messages in mailbox, then just delete them.

<p>Ad. 1) No log entries in Spamhalter's log? Please, try to turn on debug logging in Spamhalter and try to located next missed message in this debug log... </p><p>Ad. 2) Honeypotted message is always learned as spam during queue processing, even this message is still delivered to mailbox. Just because you maybe need this message for some next policy processing outside Spamhalter. You not need to ad it to spam manually, it was processed yet.</p><p>If you not need honeypotted messages in mailbox, then just delete them. </p><p>&nbsp;</p>

Mario Mondelli

posted Sep 5 '07 at 12:23 pm

Dear geby,

1) Yes! no log entry for that kind of messages! Now I've turned on debug logging and wait for next message of that kind (X-Blocked but not processed by SpamHalter).

2) Ok!

Thank you for your reply. I'll write a post about question 1 when debug info will be available.

<P>Dear geby,</P> <P>1) Yes! no log entry for that kind of messages! Now I've turned on debug logging and wait for next message of that kind (X-Blocked but not processed by SpamHalter).</P> <P>2) Ok!</P> <P>Thank you for your reply. I'll write a post about question 1 when debug info will be available.</P>

Mario Mondelli

posted Sep 5 '07 at 1:52 pm

Here again with debug info about question 1.
I've received a message tagged by MercuryS/RBL but not recognized as spam by SpamHalter.

MercuryS:
Connection from 220.111.242.9, Wed Sep 05 12:31:40 2007
helo chfasni
mail from: <allstargroups.comATthepostmansyndrome.com>
Host blocked by zen.spamhaus.org - tagging message.
rcpt to: <unreal_addressATdek.it>
DATA - 272 lines, 17970 bytes.
QUIT

Mercury Core:
12:31:46: Job MG0004E6: from allstargroups.comATthepostmansyndrome.com (non-local)
To: unreal_address (local) -OK

SpamHalter:
D 20070905 123146.948 MG0004E6 Mercury version >= 4.1
D 20070905 123146.948 MG0004E6 jobfile: C:\MERCURY\QUEUE\MG0004E6.QDF
D 20070905 123146.964 MG0004E6 spamdir: C:\MERCURY\MAIL\spam
D 20070905 123146.964 MG0004E6 nospamdir: C:\MERCURY\MAIL\nospam
D 20070905 123146.964 MG0004E6 IP: 220.111.242.9
D 20070905 123146.964 MG0004E6 > Match ACL

Message headers:
Received: from spooler by dek.it (Mercury/32 v4.52); 5 Sep 2007 12:31:46 +0200
X-Envelope-To: <unreal_addressATdek.it>
Return-path: <allstargroups.comATthepostmansyndrome.com>
Received: from chfasni (220.111.242.9) by dek.it (Mercury/32 v4.52) ID MG0004E6;
5 Sep 2007 12:31:41 +0200
Message-ID: <000401c7efa7$f1e14e00$0100007fATqjaotbf>
From: "Johnny Young" <allstargroups.comATthepostmansyndrome.com>
To: <unreal_addressATdek.it>
Subject:
Date: Wed, 05 Sep 2007 19:31:38 +0900
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_NextPart_000_0018_01C7EFA7.F1E14E00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Blocked: Blocked by 'zen.spamhaus.org'

It seems that the problem is in the '> Match ACL' log entry from SpamHalter but I don't know what to do for !
Thank you for any suggestion about this!

<P>Here again with debug info about question 1. I've received a message tagged by MercuryS/RBL but not recognized as spam by SpamHalter.</P> <P>MercuryS: Connection from 220.111.242.9, Wed Sep 05 12:31:40 2007 helo chfasni mail from: &lt;allstargroups.comATthepostmansyndrome.com&gt; Host blocked by zen.spamhaus.org - tagging message. rcpt to: &lt;unreal_addressATdek.it&gt; DATA - 272 lines, 17970 bytes. QUIT</P> <P>Mercury Core: 12:31:46: Job MG0004E6:&nbsp; from allstargroups.comATthepostmansyndrome.com (non-local) To: unreal_address (local) -OK</P> <P>SpamHalter: D 20070905 123146.948 MG0004E6 Mercury version &gt;= 4.1 D 20070905 123146.948 MG0004E6 jobfile: C:\MERCURY\QUEUE\MG0004E6.QDF D 20070905 123146.964 MG0004E6 spamdir: C:\MERCURY\MAIL\spam D 20070905 123146.964 MG0004E6 nospamdir: C:\MERCURY\MAIL\nospam D 20070905 123146.964 MG0004E6 IP: 220.111.242.9 D 20070905 123146.964 MG0004E6 &gt; Match ACL</P> <P>Message headers: Received: from spooler by dek.it (Mercury/32 v4.52); 5 Sep 2007 12:31:46 +0200 X-Envelope-To: &lt;unreal_addressATdek.it&gt; Return-path: &lt;allstargroups.comATthepostmansyndrome.com&gt; Received: from chfasni (220.111.242.9) by dek.it (Mercury/32 v4.52) ID MG0004E6; &nbsp;&nbsp; 5 Sep 2007 12:31:41 +0200 Message-ID: &lt;000401c7efa7$f1e14e00$0100007fATqjaotbf&gt; From: "Johnny Young" &lt;allstargroups.comATthepostmansyndrome.com&gt; To: &lt;unreal_addressATdek.it&gt; Subject: Date: Wed, 05 Sep 2007 19:31:38 +0900 MIME-Version: 1.0 Content-Type: multipart/related; &nbsp;boundary="----=_NextPart_000_0018_01C7EFA7.F1E14E00" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 X-Blocked: Blocked by 'zen.spamhaus.org'</P> <P>It seems that the problem is in the '&gt; Match ACL' log entry from SpamHalter but I don't know what to do for ! Thank you for any suggestion about this!</P>

geby

posted Sep 5 '07 at 2:52 pm

This your connection comming from IP what you have configured as your own local IP addres in Spamhalter config. Messages what going from your Local IP are not checked by Spamhalter.

<p>This your connection comming from IP what you have configured as your own local IP addres in Spamhalter config. Messages what going from your Local IP are not checked by Spamhalter.</p><p>&nbsp;</p>

Related Topics

Pending draft

Confirm move posts

Insufficient permissions

Select a different topic

Edit history