LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Home Forums Tutorials Articles Register
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices


Reply
  Search this Thread
Old 06-24-2012, 01:16 PM   #1
guna_pmk
Member
 
Registered: Sep 2008
Posts: 220

Rep: Reputation: 5
qmail spam simscan


Hi Guys,

I have an email server configured with qmail/vpopmail/simscan. Since recently one of the users started getting spams.

I have the spam_hits in /var/qmail/simcontrol to five:

:clam=yes,spam=yes,spam_hits=5,attach=.mp3:.src:.bat:.pif

But the user is still getting a lot of spam.

Is there a way to check the spam hit level of a received message? How can I check whether all the emails are passed through the simscan?

I have tried the following from the command line:

QMAILQUEUE=/var/qmail/bin/simscan SIMSCAN_DEBUG=2 /var/qmail/bin/qmail-inject myself@mydomain.com < testmsg.txt

and the testmessage.txt contains just "This is just a test". This actually fails with

qmail-inject: fatal: Your email is considered spam (6.20 spam-hits)

which I think is correct (as my spam_hits is 5). But, as I said already, I want to ensure that this is working in the live implementation.

Please let me know if you need more information in this regard.

Thanks
 
Old 06-25-2012, 09:42 AM   #2
guna_pmk
Member
 
Registered: Sep 2008
Posts: 220

Original Poster
Rep: Reputation: 5
Well guys,

I learnt it myself.

For some strange reasons my /etc/tcprules.d/tcp.smtp was having

Code:
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",DKSIGN="/var/qmail/control/domainkeys/%/private"
as default ie it was not using the simscan for filtering emails. I now have changed it to

Code:
:allow,BADMIMETYPE="",BADLOADERTYPE="M",CHKUSER_RCPTLIMIT="50",CHKUSER_WRONGRCPTLIMIT="10",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/qmail/control/domainkeys/%/private",NOP0FCHECK="1"
and for testing this, I sent an email from one of my online email accounts with

Code:
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
in the email body as specified in http://spamassassin.apache.org/gtube/.

Now in my /var/log/qmail/smtp/curr I could see a score for every incoming email and the email header contains the spam (check) information.

Those emails with a hit level on or above 5 (as specified in simcontrol) are now automatically rejected.

Hope this helps somebody.

I will mark it as solved tomorrow. In the mean time, if anybody finds any faults in the above or has any suggestions to improve this further, please drop a comment for this thread.

Sites/Pages that helped figuring this out:
http://wiki.qmailtoaster.com/index.php/Tcp.smtp
http://wiki.qmailtoaster.com/index.php/Simscan

Thanks

Last edited by guna_pmk; 06-25-2012 at 09:46 AM.
 
  


Reply



Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
qmail-scanner or simscan tuananh87vn Linux - Server 0 04-24-2009 11:07 PM
my Qmail is sending spam linderox Linux - Server 4 05-24-2007 04:23 PM
Spam Filtering in Qmail Joey.Dale Linux - Software 5 12-05-2004 01:29 PM
Tracking Spam with Qmail kemplej Linux - Software 2 09-28-2004 04:31 PM
filtering spam in Qmail? IceNineJon Linux - Software 2 07-05-2003 02:35 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Server

All times are GMT -5. The time now is 08:17 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration