You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Forrest <th...@gmail.com> on 2015/03/07 20:32:22 UTC

SA 3.4 and user_prefs or local.cf still bouncing a whitelist host

Since upgrading to 3.4, I've been having an annoying problem with 
SpamCop mails being (seemingly) randomly bounced and/or miscategorized; 
that is, despite being specifically configured in user_prefs and local.cf.

Here's what I've placed in the configs

# spamcop
whitelist_from_rcvd *@spamcop.net vmx.spamcop.net

and I've tried

# spamcop
whitelist_from_rcvd *@spamcop.net spamcop.net


boing boing boing.

Today's incident:

Mar  7 12:35:17 mail sendmail[14644]: t27HZBk8014644: 
from=<sp...@bounces.spamcop.net>, size=2392, class=0, 
nrcpts=1, msgid=<sp...@msgid.spamcop.net>, proto=ESMTP, 
daemon=MTA, relay=vmx.spamcop.net [184.94.240.112]
Mar  7 12:35:17 mail spamd[8198]: spamd: processing message 
<sp...@msgid.spamcop.net> for username:503
Mar  7 12:35:19 mail spamd[8198]: spamd: identified spam (5.6/5.0) for 
username:503 in 2.0 seconds, 2748 bytes.
Mar  7 12:35:19 mail spamd[8198]: spamd: result: Y 5 - 
DKIM_SIGNED,DKIM_VALID,RCVD_IN_DNSWL_MED,SPF_PASS,T_RP_MATCHES_RCVD,URIBL_BLACK,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_SBL_A,URIBL_WS_SURBL 
scantime=2.0,size=2748,user=username,uid=503,required_score=5.0,rhost=mail,raddr=127.0.0.1,rport=54425,mid=<sp...@msgid.spamcop.net>,autolearn=no 
autolearn_force=no
Mar  7 12:35:19 mail sendmail[14644]: t27HZBk8014644: Milter: data, 
reject=550 5.7.1 Blocked by SpamAssassin
Mar  7 12:35:19 mail sendmail[14644]: t27HZBk8014644: 
to=<us...@username.com>, delay=00:00:02, pri=32392, stat=Blocked by 
SpamAssassin
Mar  7 12:35:19 mail spamd[8191]: prefork: child states: II



I realize I can tweak my spam level, etc.  But the point is the 
configuration I had that was working seems have ceased working, part of 
the time.   I looked at some docs and I don't see what I've done wrong.

Anyone else seeing this?



Thanks.



Re: SA 3.4 and user_prefs or local.cf still bouncing a whitelist host

Posted by Axb <ax...@gmail.com>.
On 03/07/2015 08:32 PM, Forrest wrote:
> Since upgrading to 3.4, I've been having an annoying problem with
> SpamCop mails being (seemingly) randomly bounced and/or miscategorized;
> that is, despite being specifically configured in user_prefs and local.cf.
>
> Here's what I've placed in the configs
>
> # spamcop
> whitelist_from_rcvd *@spamcop.net vmx.spamcop.net
>
> and I've tried
>
> # spamcop
> whitelist_from_rcvd *@spamcop.net spamcop.net
>
>
> boing boing boing.
>
> Today's incident:
>
> Mar  7 12:35:17 mail sendmail[14644]: t27HZBk8014644:
> from=<sp...@bounces.spamcop.net>, size=2392, class=0,
> nrcpts=1, msgid=<sp...@msgid.spamcop.net>, proto=ESMTP,
> daemon=MTA, relay=vmx.spamcop.net [184.94.240.112]
> Mar  7 12:35:17 mail spamd[8198]: spamd: processing message
> <sp...@msgid.spamcop.net> for username:503
> Mar  7 12:35:19 mail spamd[8198]: spamd: identified spam (5.6/5.0) for
> username:503 in 2.0 seconds, 2748 bytes.
> Mar  7 12:35:19 mail spamd[8198]: spamd: result: Y 5 -
> DKIM_SIGNED,DKIM_VALID,RCVD_IN_DNSWL_MED,SPF_PASS,T_RP_MATCHES_RCVD,URIBL_BLACK,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_SBL_A,URIBL_WS_SURBL
> scantime=2.0,size=2748,user=username,uid=503,required_score=5.0,rhost=mail,raddr=127.0.0.1,rport=54425,mid=<sp...@msgid.spamcop.net>,autolearn=no
> autolearn_force=no
> Mar  7 12:35:19 mail sendmail[14644]: t27HZBk8014644: Milter: data,
> reject=550 5.7.1 Blocked by SpamAssassin
> Mar  7 12:35:19 mail sendmail[14644]: t27HZBk8014644:
> to=<us...@username.com>, delay=00:00:02, pri=32392, stat=Blocked by
> SpamAssassin
> Mar  7 12:35:19 mail spamd[8191]: prefork: child states: II
>
>
>
> I realize I can tweak my spam level, etc.  But the point is the
> configuration I had that was working seems have ceased working, part of
> the time.   I looked at some docs and I don't see what I've done wrong.
>
> Anyone else seeing this?

sender is NOT *@spamcop.net

from=<sp...@bounces.spamcop.net>,


whitelist_from_rcvd *@bounces.spamcop.net spamcop.net
or
whitelist_from_rcvd *@*.spamcop.net spamcop.net








Re: SA 3.4 and user_prefs or local.cf still bouncing a whitelist host

Posted by John Hardin <jh...@impsec.org>.
On Sat, 7 Mar 2015, Forrest wrote:

> whitelist_from_rcvd *@spamcop.net vmx.spamcop.net
>
> whitelist_from_rcvd *@spamcop.net spamcop.net
>
> DKIM_SIGNED,DKIM_VALID,RCVD_IN_DNSWL_MED,SPF_PASS,T_RP_MATCHES_RCVD,URIBL_BLACK,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_SBL_A,URIBL_WS_SURBL

DKIM_VALID and SPF_PASS both hit, why not use whitelist_auth?

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Failure to plan ahead on someone else's part does not constitute
   an emergency on my part.                 -- David W. Barts in a.s.r
-----------------------------------------------------------------------
  Today: Daylight Saving Time begins in U.S. - Spring Forward