Sender Address triggers FILTER amavis ISSUE

Discussion in 'ISPConfig 3 Priority Support' started by Paul Hill, Oct 24, 2019.

  1. Paul Hill

    Paul Hill Member HowtoForge Supporter

    Hey there, we're getting a lot of clients complaining that they're not getting email from certain senders, looking through the logs we're seeing:

    Oct 24 20:51:27 mars2 postfix/smtpd[8752]: NOQUEUE: filter: RCPT from unknown[192.168.1.49]: <[email protected]>: Sender address triggers FILTER amavis:[127.0.0.1]:10024; from=<[email protected]> to=<[email protected]> proto=ESMTP helo=<Barracuda.xxxxxxxxx.com>​

    Looking at his email headers the senders server is misconfigured as having 127.0.0.1 address:

    Received: from localhost (mail.glacier-digital.net [127.0.0.1])​

    We have a mail filter [192.168.1.49] prior to our ISPConfig server so we really don't need it policing incoming mail. Is there a way to disable the amavis filters for a single client or the server as a whole?

    Also:
    Our mail filter barracuda.xxxxx.com is showing up as 192.168.1.49 in that log. Is this the problem? It can't resolve it's internal IP to a hostname because the server is using 8.8.8.8 for resolution. How would this normally be configured?
     
    Last edited: Oct 24, 2019
  2. till

    till Super Moderator Staff Member ISPConfig Developer

    Amavis is not only used for spam filtering, but it is also used for DKIM signing of emails and antivirus, so you should not disable it. Seeing 127.0.0.1 there is ok. The first thing is that you should check where the email get lost, do they get lost on your barracuda filter or do they got lost on the ispconfig system and if they got really lost on the server or barracuda filter or did the client which complained just use some local email filter rules which caused the email to be deleted on his local desktop. If amavis have removed it, then you will find that specific missing email as rejected in the log. Search the mail log for the sender address where no emails arrive from and post the matching log lines that you have for the sender address. If you don't find any log lines for that sender address, then start searching in your barracuda system as the email did not arrive at the ispconfig server in this case, so it must got lost earlier.
     
  3. Paul Hill

    Paul Hill Member HowtoForge Supporter

    Thanks Till.
    The log entry posted above was on the Ispconfig server itself. The emails successfully make it to the mail server but gets dropped there.

    The log says it triggers the filter, and I'm assuming NOQUEUE means that the mail wasn't delivered to the mailbox?

    I don't think this is a client side rule as the client has been testing with Roundcube webmail as well as Outlook. Same result.
     
  4. till

    till Super Moderator Staff Member ISPConfig Developer

    This means basically that the email was handed over to amavis, it is not a reject. You can e.g. try to increase the log level from amavis to find out more. and you should assign e.g. the uncensored policy to the domain of this client in ispconfig mail module.
     

Share This Page