You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by K Anand <ka...@sail-steel.com> on 2007/11/12 09:54:18 UTC

Skip SA checks for mails from SA list

Hi all,

I'm currently using SA 3.1.x....Due to certain custom rules regarding 
images and html messages, mails from SA list are getting tagged as SPAM. 
What I want to do is to skip SA checks for mails from SA list.

DO I have to use trusted_networks ? or is there some other way?

Thanx

Anand


Re: Skip SA checks for mails from SA list

Posted by Byung-Hee HWANG <bh...@izb.knu.ac.kr>.
On Wed, 2007-11-14 at 15:09 +0530, K Anand wrote:
> K Anand wrote:
> > Byung-Hee HWANG wrote:
> >> hi,
> >>
> >> On Wed, 2007-11-14 at 11:43 +0530, K Anand wrote:
> >>> Matus UHLAR - fantomas wrote:
> >>>> On 13.11.07 15:52, K Anand wrote:
> >>>>> Received: from unknown (HELO mail.apache.org) (140.211.11.2)
> >>>> configure your smtp server to add DNS data to Received: line.
> >>>> *list_from_rcvd doesn't work without list
> >>>>
> >>>> (although it could be worth adding IP or CIDR check in such cases)
> >>>>
> >>> I use qmail. Do I have to do anything extra to get it to put this info ?
> >>
> >> you just tell qmail to do rDNS. it is very easy. there is no problem.
> >>
> >> respect,
> >> bh
> >>
> > Finally managed to get it working...Thanx to all.
> > 
> > Anand
> > 
> 
> 
> A small problem..
> 
> X-Spam-Status: No, score=-2.4 required=5.0 tests=AWL,BAYES_00 
> autolearn=ham 	version=3.1.1
> Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)
> 
> Still this is not getting tagged into whitelist.
> 
> This is my whitelist rule.
> 
> whitelist_from_rcvd *@spamassassin.apache.org  hermes.apache.org

well, i have no good idea about this matter. here is my config.

http://izb.knu.ac.kr/~bh/stuff/izb-spamassassin-local.cf.example

my spamassassin is running with postfix under freebsd ;;
and the above rule works fine for me ;;

respect,
bh

-- 
"He's a responsible man in his own way."
		-- Michael Corleone, "Chapter 25", page 363


Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
K Anand wrote:
> Byung-Hee HWANG wrote:
>> hi,
>>
>> On Wed, 2007-11-14 at 11:43 +0530, K Anand wrote:
>>> Matus UHLAR - fantomas wrote:
>>>> On 13.11.07 15:52, K Anand wrote:
>>>>> Received: from unknown (HELO mail.apache.org) (140.211.11.2)
>>>> configure your smtp server to add DNS data to Received: line.
>>>> *list_from_rcvd doesn't work without list
>>>>
>>>> (although it could be worth adding IP or CIDR check in such cases)
>>>>
>>> I use qmail. Do I have to do anything extra to get it to put this info ?
>>
>> you just tell qmail to do rDNS. it is very easy. there is no problem.
>>
>> respect,
>> bh
>>
> Finally managed to get it working...Thanx to all.
> 
> Anand
> 


A small problem..

X-Spam-Status: No, score=-2.4 required=5.0 tests=AWL,BAYES_00 
autolearn=ham 	version=3.1.1
Received: from hermes.apache.org (HELO mail.apache.org) (140.211.11.2)

Still this is not getting tagged into whitelist.

This is my whitelist rule.

whitelist_from_rcvd *@spamassassin.apache.org  hermes.apache.org


Anand



Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
Byung-Hee HWANG wrote:
> hi,
> 
> On Wed, 2007-11-14 at 11:43 +0530, K Anand wrote:
>> Matus UHLAR - fantomas wrote:
>>> On 13.11.07 15:52, K Anand wrote:
>>>> Received: from unknown (HELO mail.apache.org) (140.211.11.2)
>>> configure your smtp server to add DNS data to Received: line.
>>> *list_from_rcvd doesn't work without list
>>>
>>> (although it could be worth adding IP or CIDR check in such cases)
>>>
>> I use qmail. Do I have to do anything extra to get it to put this info ?
> 
> you just tell qmail to do rDNS. it is very easy. there is no problem.
> 
> respect,
> bh
> 
Finally managed to get it working...Thanx to all.

Anand


Re: Skip SA checks for mails from SA list

Posted by Byung-Hee HWANG <bh...@izb.knu.ac.kr>.
hi,

On Wed, 2007-11-14 at 11:43 +0530, K Anand wrote:
> Matus UHLAR - fantomas wrote:
> > On 13.11.07 15:52, K Anand wrote:
> >>
> >> Received: from unknown (HELO mail.apache.org) (140.211.11.2)
> > 
> > configure your smtp server to add DNS data to Received: line.
> > *list_from_rcvd doesn't work without list
> > 
> > (although it could be worth adding IP or CIDR check in such cases)
> > 
> 
> I use qmail. Do I have to do anything extra to get it to put this info ?

you just tell qmail to do rDNS. it is very easy. there is no problem.

respect,
bh

-- 
"As the CONSIGLIERE, you agree that it's dangerous to the Don and our Family
to let Sollozzo live?
"Yes."
		-- Michael Corleone and Tom Hagen, "Chapter 11", page 145


Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
Matus UHLAR - fantomas wrote:
> On 13.11.07 15:52, K Anand wrote:
>>
>> Received: from unknown (HELO mail.apache.org) (140.211.11.2)
> 
> configure your smtp server to add DNS data to Received: line.
> *list_from_rcvd doesn't work without list
> 
> (although it could be worth adding IP or CIDR check in such cases)
> 

I use qmail. Do I have to do anything extra to get it to put this info ?

Anand

Re: Skip SA checks for mails from SA list

Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
On 13.11.07 15:52, K Anand wrote:
> This is what I get ::::
[...]
> I think the problem has something to do with this line :
> 
> Received: from unknown (HELO mail.apache.org) (140.211.11.2)

configure your smtp server to add DNS data to Received: line.
*list_from_rcvd doesn't work without list

(although it could be worth adding IP or CIDR check in such cases)

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux - It's now safe to turn on your computer.
Linux - Teraz mozete pocitac bez obav zapnut.

Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
Byung-Hee HWANG wrote:
> On Tue, 2007-11-13 at 14:58 +0530, K Anand wrote:
>> K Anand wrote:
>>>> Matt Kettler wrote:
>>>>
>>>>> As an alternative,  you can use whitelist_from_spf or
>>>>> whitelist_from_rcvd on the list's return-path. From there, you can
>>>>> configure shortcircuiting to bypass the rest of SA and bayes_ignore_from
>>>>> to prevent learning.
>>>> Would this be OK
>>>>
>>>> whitelist_from_rcvd *@spamassassin.apache.org   spamassassin.apache.org
>>>>
>>> read the doc. I think it should be
>>>
>>> whitelist_from_rcvd *@spamassassin.apache.org  hermes.apache.org
>>>
>>> This is what is the rdns for the mail relay that is sending me mails 
>>> from the list.
>>>
>> I tried this but rule is not triggered...So something is wrong. Can 
>> anyone help ?
> 
> in my case, the rule works fine.
> 
> whitelist_from_rcvd *@spamassassin.apache.org hermes.apache.org
> 
> here is the shot:
> 
> Received: by pinus.izb.knu.ac.kr (Postfix, from userid 59)
>         id E9FE13ECD; Tue, 13 Nov 2007 18:26:07 +0900 (KST)
> X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
> pinus.izb.knu.ac.kr
> X-Spam-Level: 
> X-Spam-Status: No, score=-37.7 required=15.1
> tests=DKIM_SIGNED,DKIM_VERIFIED,
>         RCVD_IN_DNSWL_MED,USER_IN_WHITELIST autolearn=disabled
> version=3.2.3
> X-Spam-Comment: DKIM? See http://www.google.com/search?btnI&q=RFC+4871
> Received: from mail.apache.org (hermes.apache.org [140.211.11.2])
>         by pinus.izb.knu.ac.kr (Postfix) with SMTP id A7E1F3ECB
>         for <bh...@izb.knu.ac.kr>; Tue, 13 Nov 2007 18:25:58 +0900 (KST)


This is what I get ::::

Return-Path: 
<us...@spamassassin.apache.org>
Delivered-To: kanand@sail-steel.com
Received: (qmail 32150 invoked by uid 89); 13 Nov 2007 09:48:01 -0000
Received: by simscan 1.2.0 ppid: 32094, pid: 32122, t: 4.4853s
          scanners: attach: 1.2.0 clamav: 0.90/m:42 spam: 3.1.1
X-Spam-Checker-Version: SpamAssassin 3.1.1 (2006-03-10) on sail-steel.com
X-Spam-Level:
X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00
	autolearn=unavailable version=3.1.1
Received: from unknown (HELO mail.apache.org) (140.211.11.2)
   by sail-steel.com with SMTP; 13 Nov 2007 09:47:57 -0000
Received-SPF: pass (sail-steel.com: SPF record at 
spamassassin.apache.org designates 140.211.11.2 as permitted sender)



I think the problem has something to do with this line :

Received: from unknown (HELO mail.apache.org) (140.211.11.2)

Anand

Re: Skip SA checks for mails from SA list

Posted by Byung-Hee HWANG <bh...@izb.knu.ac.kr>.
On Tue, 2007-11-13 at 14:58 +0530, K Anand wrote:
> K Anand wrote:
> > 
> >> Matt Kettler wrote:
> >>
> > 
> >>> As an alternative,  you can use whitelist_from_spf or
> >>> whitelist_from_rcvd on the list's return-path. From there, you can
> >>> configure shortcircuiting to bypass the rest of SA and bayes_ignore_from
> >>> to prevent learning.
> >>
> >> Would this be OK
> >>
> >> whitelist_from_rcvd *@spamassassin.apache.org   spamassassin.apache.org
> >>
> > 
> > read the doc. I think it should be
> > 
> > whitelist_from_rcvd *@spamassassin.apache.org  hermes.apache.org
> > 
> > This is what is the rdns for the mail relay that is sending me mails 
> > from the list.
> > 
> 
> I tried this but rule is not triggered...So something is wrong. Can 
> anyone help ?

in my case, the rule works fine.

whitelist_from_rcvd *@spamassassin.apache.org hermes.apache.org

here is the shot:

Received: by pinus.izb.knu.ac.kr (Postfix, from userid 59)
        id E9FE13ECD; Tue, 13 Nov 2007 18:26:07 +0900 (KST)
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
pinus.izb.knu.ac.kr
X-Spam-Level: 
X-Spam-Status: No, score=-37.7 required=15.1
tests=DKIM_SIGNED,DKIM_VERIFIED,
        RCVD_IN_DNSWL_MED,USER_IN_WHITELIST autolearn=disabled
version=3.2.3
X-Spam-Comment: DKIM? See http://www.google.com/search?btnI&q=RFC+4871
Received: from mail.apache.org (hermes.apache.org [140.211.11.2])
        by pinus.izb.knu.ac.kr (Postfix) with SMTP id A7E1F3ECB
        for <bh...@izb.knu.ac.kr>; Tue, 13 Nov 2007 18:25:58 +0900 (KST)

respect,
bh

-- 
"Did you do the job on Sollozzo?"
"Both of them."
"Sure?"
"I saw their brains."
		-- Tessio and Michael Corleone, "Chapter 11", page 151


Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
K Anand wrote:
> 
>> Matt Kettler wrote:
>>
> 
>>> As an alternative,  you can use whitelist_from_spf or
>>> whitelist_from_rcvd on the list's return-path. From there, you can
>>> configure shortcircuiting to bypass the rest of SA and bayes_ignore_from
>>> to prevent learning.
>>
>> Would this be OK
>>
>> whitelist_from_rcvd *@spamassassin.apache.org   spamassassin.apache.org
>>
> 
> read the doc. I think it should be
> 
> whitelist_from_rcvd *@spamassassin.apache.org  hermes.apache.org
> 
> This is what is the rdns for the mail relay that is sending me mails 
> from the list.
> 

I tried this but rule is not triggered...So something is wrong. Can 
anyone help ?

Anand

Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
> Matt Kettler wrote:
> 

>> As an alternative,  you can use whitelist_from_spf or
>> whitelist_from_rcvd on the list's return-path. From there, you can
>> configure shortcircuiting to bypass the rest of SA and bayes_ignore_from
>> to prevent learning.
> 
> Would this be OK
> 
> whitelist_from_rcvd *@spamassassin.apache.org   spamassassin.apache.org
> 

read the doc. I think it should be

whitelist_from_rcvd *@spamassassin.apache.org  hermes.apache.org

This is what is the rdns for the mail relay that is sending me mails 
from the list.

Anand


Re: Skip SA checks for mails from SA list

Posted by K Anand <ka...@sail-steel.com>.
Matt Kettler wrote:

> K Anand wrote:
>> Hi all,
>>
>> I'm currently using SA 3.1.x....Due to certain custom rules regarding
>> images and html messages, mails from SA list are getting tagged as
>> SPAM. What I want to do is to skip SA checks for mails from SA list.
>>
>> DO I have to use trusted_networks ?
> No, that won't cause messages to be skipped, and will significantly
> screw up your RBL checks.
>> or is there some other way?
> 
> Ideally, you'd not call SA in the first place. (ie: if you use procmail,
> use a procmail rule to bypass the list).

I use simscan. So I can't do this.


> 
> As an alternative,  you can use whitelist_from_spf or
> whitelist_from_rcvd on the list's return-path. From there, you can
> configure shortcircuiting to bypass the rest of SA and bayes_ignore_from
> to prevent learning.

Would this be OK

whitelist_from_rcvd *@spamassassin.apache.org   spamassassin.apache.org




Anand



Re: Skip SA checks for mails from SA list

Posted by Matt Kettler <mk...@verizon.net>.
K Anand wrote:
> Hi all,
>
> I'm currently using SA 3.1.x....Due to certain custom rules regarding
> images and html messages, mails from SA list are getting tagged as
> SPAM. What I want to do is to skip SA checks for mails from SA list.
>
> DO I have to use trusted_networks ?
No, that won't cause messages to be skipped, and will significantly
screw up your RBL checks.
> or is there some other way?

Ideally, you'd not call SA in the first place. (ie: if you use procmail,
use a procmail rule to bypass the list).

As an alternative,  you can use whitelist_from_spf or
whitelist_from_rcvd on the list's return-path. From there, you can
configure shortcircuiting to bypass the rest of SA and bayes_ignore_from
to prevent learning.

>
> Thanx
>
> Anand
>
>