Spam...but why

Discussion in 'Server Operation' started by HackerJL, Nov 28, 2006.

  1. HackerJL

    HackerJL New Member

    Recently I started to get a good number of emails that have troubled me why they get through any of the postfix reject controls.

    An example. I get an email from "Mac Johnson" and the subject is "Mac Wrote:"

    I get about 15-20 a day....here is a post of the header:

    Code:
    Received: from so3 (p4241-ipad42hodogaya.kanagawa.ocn.ne.jp [221.189.152.241])
    	by MYSERVER (Postfix) with ESMTP id 5C6F7E8057
    	for <[email protected]>; Mon, 27 Nov 2006 20:03:51 -0600 (CST)
    Received: from 212.145.147.238 (HELO pegasus.hospedando.com)
         by hjl.ca with esmtp (9O205@U: (X4K)
         id 36+YUA-31V@F1-U(
         for [email][email protected][/email];
    
    My question may be out of line, but shouldnt the helo verify the IP address and match their server?

    This is what SA is doing:
    Code:
    X-Spam-Status: No, score=1.8 required=5.0 tests=BAYES_40,DATE_IN_FUTURE_03_06 
    	autolearn=no version=3.1.5
     
    Last edited: Nov 28, 2006
  2. edge

    edge Active Member Moderator

  3. Hans

    Hans Moderator Moderator

    Edge,

    I do not have the spam problems as you descibe but maybe you can find some useful info here, which might help you to configure Postfix and add some extra rules to prevent spam:

    http://www.postfix.org/big-picture.html
     
    Last edited: Nov 28, 2006
  4. HackerJL

    HackerJL New Member

    My questions is...isnt the helo supposed to match the IP address of the server it received it by? It would stop the above email wouldnt it?

    Falko?

    I was told by a friend to use sa-learn. I dont have a command of sa-learn anywhere in my machine (perfect setup suse 10.0) and in the yast manager, I search for 'sa-learn' and find nothing even in the summaries....is it in a folder somewhere?

    10min later....hmm...in the yast manager...spamassasin isnt even selected as being installed...normal? is this why sa-learn isnt anywhere?
     
    Last edited: Nov 30, 2006
  5. falko

    falko Super Moderator Howtoforge Staff

    Did you install ISPConfig? Because ISPConfig comes with its own SpamAssassin.
     
  6. HackerJL

    HackerJL New Member

    Ya I found it....
     
  7. HackerJL

    HackerJL New Member

    sa-learn seems to be working great, but it still isnt catching all the "Mark Wrote" and "Its me Reba" BS email. Googling finds others (a few) having the same problems, but no word of a fix for them or anything.
     
  8. falko

    falko Super Moderator Howtoforge Staff

    You must feed at least 200 spam and also 200 ham mails before it starts to work.
     
  9. edge

    edge Active Member Moderator

    HackerJL,

    Could you please explain / show to me how you are using the sa-learn thing?
     
    Last edited: Dec 6, 2006

Share This Page