Koozali.org: home of the SME Server

Mail forwarding but leave Spam behind?

Offline BartManInNZ

  • **
  • 31
  • +0/-0
    • http://www.bart.geek.nz/
Mail forwarding but leave Spam behind?
« on: August 11, 2006, 10:15:19 AM »
Greetings,

I have a number of customers running version 6 of SME Server, using it to check for Spam and viruses. The email component is configured to forward all mail to another gateway *cough* exchange server *cough* so there are no user accounts on these servers.

The problem is that Spam is being identified in the subject line but we still need a rule on the mail client to delete this - will version 7 prevent Spam mail being forwarded on in this manner or is there some way it can be configured to do this?

TIA,
Bart

Offline thyrsted

  • *
  • 17
  • +0/-0
Mail forwarding but leave Spam behind?
« Reply #1 on: August 11, 2006, 11:27:56 AM »
Don't know, but this could be an extremely useful feature...

/K
...

Offline JonB

  • *
  • 351
  • +0/-0
Mail forwarding but leave Spam behind?
« Reply #2 on: August 11, 2006, 11:47:52 AM »
In SME7 if you delegate a mail server the spam and virus filtering still apply.

In SME7 you can configure spamassassin to tag the subject at a certain score (default is 5) and you can configure it to delete emails over a certain score e.g 12

Also you have the option to enable the RBL lists, SBL lists and require_resolvable_from_hosts.

These will drop any emails if the result is true.

So yes you probably still get some tagged spam but not as much as without it.

My SME7 is blocking or deleting over 90% of spam.

Jon
...

Offline raem

  • *
  • 3,972
  • +4/-0
Re: Mail forwarding but leave Spam behind?
« Reply #3 on: August 11, 2006, 12:18:11 PM »
BartManInNZ

> will version 7 prevent Spam mail being forwarded on in this manner

In sme6 this is due to procmail being used to filter tagged spam to the junkmail folder after delivery to a user account. Forwarded mail never gets to a user account, thus it never gets filtered by procmail.

sme7 does the spam (& virus) filtering much earlier in the whole mail processing stage ie at qpsmtpd stage, therefore the spam (& virii) has already been filtered out by the time messages are delivered to end user accounts, or if mail is delegated to another mail server (exchange or whatever).

You will be best to upgrade all those sme6 servers to sme7
...

Offline thyrsted

  • *
  • 17
  • +0/-0
Mail forwarding but leave Spam behind?
« Reply #4 on: August 11, 2006, 01:07:32 PM »
Quote
me7 does the spam (& virus) filtering much earlier in the whole mail processing stage ie at qpsmtpd stage, therefore the spam (& virii) has already been filtered out by the time messages are delivered to end user accounts, or if mail is delegated


That must be why the header hasn't any sign of spamcheck, let alone antivirus check.

This would be nice, though..

/Kenn
...

Offline raem

  • *
  • 3,972
  • +4/-0
Mail forwarding but leave Spam behind?
« Reply #5 on: August 11, 2006, 01:52:36 PM »
thyrsted

> That must be why the header hasn't any sign of spamcheck, let alone antivirus check.

I'm not sure what you mean, if spam & virus filtering are enabled in server manager, then references are added to message headers.
...

Offline thyrsted

  • *
  • 17
  • +0/-0
Mail forwarding but leave Spam behind?
« Reply #6 on: August 11, 2006, 03:47:43 PM »
I know i modifies the subject line, but i mean headers like this:

Received:  (qmail 1707 invoked from network); 11 Aug 2006 12:18:09 -0000
X-Spam-Flag:  YES
X-Spam-Checker-Version:  SpamAssassin 3.1.3 (2006-06-01) on  nostromo.thyrsted.net
X-Spam-Report:   *  0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay *      lines *  1.6 PREST_NON_ACCREDITED BODY: 'Prestigious Non-Accredited *      Universities' *  0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% *      [score: 0.5002] *  3.7 PYZOR_CHECK Listed in Pyzor (http://pyzor.sf.net/) *  2.6 RCVD_IN_DSBL RBL: Received via a relay in list.dsbl.org *      [<http://dsbl.org/listing?221.202.12.202>]
X-Spam-Status:  Yes, score=7.9 required=7.0 tests=BAYES_50, PREST_NON_ACCREDITED,PYZOR_CHECK,RCVD_IN_DSBL,UNPARSEABLE_RELAY  autolearn=no version=3.1.3
X-Spam-Level:  *******
X-Virus-Scanned:  by amavis-ng-0.1.6.4-03dc on nostromo.thyrsted.net
Received:  from pc-00233.thyrsted.net (HELO r5.local) (192.168.5.233) by nostromo.thyrsted.net (192.168.5.13) with SMTP; 11 Aug 2006 12:18:09 -0000
Received:  (qmail 4110 invoked by uid 453); 11 Aug 2006 12:18:08 -0000
Received:  from Unknown (HELO 43497CD8) (221.202.12.202) by r5.local (qpsmtpd/0.31.1) with SMTP; Fri, 11 Aug 2006 14:18:06 +0200


As You can see,  r5.local(=SME7, forwarding mail to nostromo.thyrsted.net)  isn't inserting any info, whereas nostromo.thyrsted.net(=SME6 with spamassassin etc) is.

- How come ?

/Kenn
...

Offline raem

  • *
  • 3,972
  • +4/-0
Mail forwarding but leave Spam behind?
« Reply #7 on: August 11, 2006, 06:02:00 PM »
thyrsted

Have you enabled spam & virus filtering ?

On my sme7 server I see

X-Spam-Status: No, hits=0.0 required=4.0
   tests=
X-Spam-Check-By: mydomain.org
...

Offline BartManInNZ

  • **
  • 31
  • +0/-0
    • http://www.bart.geek.nz/
Re: Mail forwarding but leave Spam behind?
« Reply #8 on: August 12, 2006, 01:49:32 AM »
Quote from: "RayMitchell"


In sme6 this is due to procmail being used to filter tagged spam to the junkmail folder after delivery to a user account. Forwarded mail never gets to a user account, thus it never gets filtered by procmail.

This is the sole reason why I only had 3 or 4 SME server Spam gateways.

Quote from: "RayMitchell"

sme7 does the spam (& virus) filtering much earlier in the whole mail processing stage ie at qpsmtpd stage, therefore the spam (& virii) has already been filtered out by the time messages are delivered to end user accounts, or if mail is delegated to another mail server (exchange or whatever).

You will be best to upgrade all those sme6 servers to sme7


Many thanks Ray, this is the answer I was hoping for. I will now proceed to upgrade existing servers and deploy many more in the next couple of months!

/Bart