Some emails are not being checked for spam by Spamassasin

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
ashtec014
Normal user
Normal user
Posts: 166
Joined: 2019-09-05 11:56

Some emails are not being checked for spam by Spamassasin

Post by ashtec014 » 2021-06-23 16:41

Hello,

I've notice this issue many times that some emails are not being forwarded to spamassasin for checking which is similar to this thread:viewtopic.php?t=27062 It looks like a very legit email but when I checked the raw file it isn't. Take a look at this example:

Code: Select all

"SMTPD"	13608	2302	"2021-06-23 16:22:34.212"	"209.85.222.179"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250-STARTTLS[nl]250 HELP"
"DEBUG"	12460	"2021-06-23 16:22:34.321"	"Event completed"
"SMTPD"	12460	2300	"2021-06-23 16:22:34.321"	"209.85.222.170"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250-STARTTLS[nl]250 HELP"
"DEBUG"	1760	"2021-06-23 16:22:34.321"	"Event completed"
"SMTPD"	1760	2286	"2021-06-23 16:22:34.321"	"209.85.222.170"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250-STARTTLS[nl]250 HELP"
"DEBUG"	12732	"2021-06-23 16:22:34.337"	"Event completed"
"SMTPD"	12732	2299	"2021-06-23 16:22:34.337"	"209.85.222.171"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250-STARTTLS[nl]250 HELP"
"DEBUG"	12756	"2021-06-23 16:22:34.337"	"Event completed"
"SMTPD"	12756	2301	"2021-06-23 16:22:34.337"	"209.85.222.178"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250-STARTTLS[nl]250 HELP"
"SMTPD"	1324	2302	"2021-06-23 16:22:34.400"	"209.85.222.179"	"RECEIVED: STARTTLS"
"SMTPD"	1324	2302	"2021-06-23 16:22:34.400"	"209.85.222.179"	"SENT: 220 Ready to start TLS"
"DEBUG"	12756	"2021-06-23 16:22:34.400"	"Performing SSL/TLS handshake for session 2302. Verify certificate: False"
"SMTPD"	12756	2286	"2021-06-23 16:22:34.509"	"209.85.222.170"	"RECEIVED: STARTTLS"
"SMTPD"	12756	2286	"2021-06-23 16:22:34.509"	"209.85.222.170"	"SENT: 220 Ready to start TLS"
"DEBUG"	1324	"2021-06-23 16:22:34.509"	"Performing SSL/TLS handshake for session 2286. Verify certificate: False"
"SMTPD"	1324	2299	"2021-06-23 16:22:34.509"	"209.85.222.171"	"RECEIVED: STARTTLS"
"SMTPD"	1324	2299	"2021-06-23 16:22:34.509"	"209.85.222.171"	"SENT: 220 Ready to start TLS"
"DEBUG"	12756	"2021-06-23 16:22:34.509"	"Performing SSL/TLS handshake for session 2299. Verify certificate: False"
"SMTPD"	1324	2301	"2021-06-23 16:22:34.525"	"209.85.222.178"	"RECEIVED: STARTTLS"
"SMTPD"	1324	2301	"2021-06-23 16:22:34.525"	"209.85.222.178"	"SENT: 220 Ready to start TLS"
"DEBUG"	12756	"2021-06-23 16:22:34.525"	"Performing SSL/TLS handshake for session 2301. Verify certificate: False"
"SMTPD"	12756	2300	"2021-06-23 16:22:34.540"	"209.85.222.170"	"RECEIVED: STARTTLS"
"SMTPD"	12756	2300	"2021-06-23 16:22:34.540"	"209.85.222.170"	"SENT: 220 Ready to start TLS"
"DEBUG"	1324	"2021-06-23 16:22:34.540"	"Performing SSL/TLS handshake for session 2300. Verify certificate: False"
"TCPIP"	1324	"2021-06-23 16:22:35.174"	"TCPConnection - TLS/SSL handshake completed. Session Id: 2302, Remote IP: 209.85.222.179, Version: TLSv1.3, Cipher: TLS_AES_128_GCM_SHA256, Bits: 128"
"SMTPD"	1324	2302	"2021-06-23 16:22:35.174"	"209.85.222.179"	"RECEIVED: EHLO mail-qk1-f179.google.com"
"DEBUG"	1324	"2021-06-23 16:22:35.174"	"Executing event OnHELO"
"TCPIP"	12756	"2021-06-23 16:22:35.266"	"TCPConnection - TLS/SSL handshake completed. Session Id: 2286, Remote IP: 209.85.222.170, Version: TLSv1.3, Cipher: TLS_AES_128_GCM_SHA256, Bits: 128"
"SMTPD"	12756	2286	"2021-06-23 16:22:35.266"	"209.85.222.170"	"RECEIVED: EHLO mail-qk1-f170.google.com"
"DEBUG"	12756	"2021-06-23 16:22:35.266"	"Executing event OnHELO"
"TCPIP"	12460	"2021-06-23 16:22:35.266"	"TCPConnection - TLS/SSL handshake completed. Session Id: 2299, Remote IP: 209.85.222.171, Version: TLSv1.3, Cipher: TLS_AES_128_GCM_SHA256, Bits: 128"
"SMTPD"	12460	2299	"2021-06-23 16:22:35.266"	"209.85.222.171"	"RECEIVED: EHLO mail-qk1-f171.google.com"
"DEBUG"	12460	"2021-06-23 16:22:35.266"	"Executing event OnHELO"
"TCPIP"	1760	"2021-06-23 16:22:35.297"	"TCPConnection - TLS/SSL handshake completed. Session Id: 2301, Remote IP: 209.85.222.178, Version: TLSv1.3, Cipher: TLS_AES_128_GCM_SHA256, Bits: 128"
"SMTPD"	1760	2301	"2021-06-23 16:22:35.297"	"209.85.222.178"	"RECEIVED: EHLO mail-qk1-f178.google.com"
"DEBUG"	1760	"2021-06-23 16:22:35.297"	"Executing event OnHELO"
"TCPIP"	13608	"2021-06-23 16:22:35.313"	"TCPConnection - TLS/SSL handshake completed. Session Id: 2300, Remote IP: 209.85.222.170, Version: TLSv1.3, Cipher: TLS_AES_128_GCM_SHA256, Bits: 128"
"SMTPD"	12732	2300	"2021-06-23 16:22:35.313"	"209.85.222.170"	"RECEIVED: EHLO mail-qk1-f170.google.com"
"DEBUG"	12732	"2021-06-23 16:22:35.313"	"Executing event OnHELO"
"DEBUG"	12732	"2021-06-23 16:22:55.207"	"Event completed"
"SMTPD"	12732	2300	"2021-06-23 16:22:55.207"	"209.85.222.170"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250 HELP"
"DEBUG"	12460	"2021-06-23 16:22:55.270"	"Event completed"
"SMTPD"	12460	2299	"2021-06-23 16:22:55.270"	"209.85.222.171"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250 HELP"
"DEBUG"	1324	"2021-06-23 16:22:55.270"	"Event completed"
"SMTPD"	1324	2302	"2021-06-23 16:22:55.270"	"209.85.222.179"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250 HELP"
"DEBUG"	12756	"2021-06-23 16:22:55.379"	"Event completed"
"SMTPD"	12756	2286	"2021-06-23 16:22:55.379"	"209.85.222.170"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250 HELP"
"DEBUG"	1760	"2021-06-23 16:22:55.395"	"Event completed"
"SMTPD"	1760	2301	"2021-06-23 16:22:55.395"	"209.85.222.178"	"SENT: 250-mail.mydomain.com[nl]250-SIZE 26843136[nl]250 HELP"
"SMTPD"	1324	2300	"2021-06-23 16:22:55.411"	"209.85.222.170"	"RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116827"
"SMTPD"	1760	2299	"2021-06-23 16:22:55.457"	"209.85.222.171"	"RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116832"
"SMTPD"	12756	2302	"2021-06-23 16:22:55.457"	"209.85.222.179"	"RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116832"
"TCPIP"	1324	"2021-06-23 16:22:55.551"	"DNS lookup: 170.222.85.209.zen.spamhaus.org, 0 addresses found: (none), Match: False"
"SMTPD"	12284	2286	"2021-06-23 16:22:55.567"	"209.85.222.170"	"RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116818"
"TCPIP"	12284	"2021-06-23 16:22:55.567"	"DNS lookup: 170.222.85.209.zen.spamhaus.org, 0 addresses found: (none), Match: False"
"SMTPD"	12460	2301	"2021-06-23 16:22:55.582"	"209.85.222.178"	"RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116815"
"TCPIP"	1760	"2021-06-23 16:22:55.582"	"DNS lookup: 171.222.85.209.zen.spamhaus.org, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:55.598"	"DNS lookup: 179.222.85.209.zen.spamhaus.org, 0 addresses found: (none), Match: False"
"TCPIP"	1324	"2021-06-23 16:22:55.692"	"DNS lookup: 170.222.85.209.bl.spamcop.net, 0 addresses found: (none), Match: False"
"TCPIP"	12284	"2021-06-23 16:22:55.692"	"DNS lookup: 170.222.85.209.bl.spamcop.net, 0 addresses found: (none), Match: False"
"TCPIP"	1324	"2021-06-23 16:22:55.723"	"DNS lookup: 170.222.85.209.b.barracudacentral.org, 0 addresses found: (none), Match: False"
"TCPIP"	12284	"2021-06-23 16:22:55.723"	"DNS lookup: 170.222.85.209.b.barracudacentral.org, 0 addresses found: (none), Match: False"
"TCPIP"	12460	"2021-06-23 16:22:55.723"	"DNS lookup: 178.222.85.209.zen.spamhaus.org, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:55.739"	"DNS lookup: 179.222.85.209.bl.spamcop.net, 0 addresses found: (none), Match: False"
"TCPIP"	1760	"2021-06-23 16:22:55.739"	"DNS lookup: 171.222.85.209.bl.spamcop.net, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:55.864"	"DNS lookup: 179.222.85.209.b.barracudacentral.org, 0 addresses found: (none), Match: False"
"TCPIP"	12460	"2021-06-23 16:22:55.879"	"DNS lookup: 178.222.85.209.bl.spamcop.net, 0 addresses found: (none), Match: False"
"TCPIP"	1760	"2021-06-23 16:22:55.973"	"DNS lookup: 171.222.85.209.b.barracudacentral.org, 0 addresses found: (none), Match: False"
"TCPIP"	12460	"2021-06-23 16:22:56.004"	"DNS lookup: 178.222.85.209.b.barracudacentral.org, 0 addresses found: (none), Match: False"
"TCPIP"	1324	"2021-06-23 16:22:56.294"	"DNS lookup: 170.222.85.209.hostkarma.junkemailfilter.com, 2 addresses found: 127.0.0.3, 127.0.1.1, Match: False"
"TCPIP"	12284	"2021-06-23 16:22:56.294"	"DNS lookup: 170.222.85.209.hostkarma.junkemailfilter.com, 2 addresses found: 127.0.0.3, 127.0.1.1, Match: False"
"TCPIP"	1324	"2021-06-23 16:22:56.322"	"DNS lookup: 170.222.85.209.bl.spameatingmonkey.net, 0 addresses found: (none), Match: False"
"TCPIP"	12284	"2021-06-23 16:22:56.322"	"DNS lookup: 170.222.85.209.bl.spameatingmonkey.net, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:56.438"	"DNS lookup: 179.222.85.209.hostkarma.junkemailfilter.com, 2 addresses found: 127.0.0.3, 127.0.1.1, Match: False"
"TCPIP"	1324	"2021-06-23 16:22:56.459"	"DNS lookup: 170.222.85.209.cbl.abuseat.org, 0 addresses found: (none), Match: False"
"TCPIP"	12284	"2021-06-23 16:22:56.459"	"DNS lookup: 170.222.85.209.cbl.abuseat.org, 0 addresses found: (none), Match: False"
"TCPIP"	1324	"2021-06-23 16:22:56.484"	"DNS lookup: 170.222.85.209.dnsbl.sorbs.net, 0 addresses found: (none), Match: False"
"TCPIP"	12284	"2021-06-23 16:22:56.484"	"DNS lookup: 170.222.85.209.dnsbl.sorbs.net, 0 addresses found: (none), Match: False"
"TCPIP"	1760	"2021-06-23 16:22:56.543"	"DNS lookup: 171.222.85.209.hostkarma.junkemailfilter.com, 2 addresses found: 127.0.0.3, 127.0.1.1, Match: False"
"TCPIP"	12460	"2021-06-23 16:22:56.572"	"DNS lookup: 178.222.85.209.hostkarma.junkemailfilter.com, 2 addresses found: 127.0.0.3, 127.0.1.1, Match: False"
"TCPIP"	12284	"2021-06-23 16:22:56.619"	"DNS lookup: 170.222.85.209.sbl.spamhaus.org, 0 addresses found: (none), Match: False"
"TCPIP"	1324	"2021-06-23 16:22:56.619"	"DNS lookup: 170.222.85.209.sbl.spamhaus.org, 0 addresses found: (none), Match: False"
"DEBUG"	12284	"2021-06-23 16:22:56.620"	"Spam test: SpamTestDNSBlackLists, Score: 0"
"DEBUG"	1324	"2021-06-23 16:22:56.620"	"Spam test: SpamTestDNSBlackLists, Score: 0"
"DEBUG"	12284	"2021-06-23 16:22:56.620"	"Spam test: SpamTestMXRecords, Score: 0"
"DEBUG"	1324	"2021-06-23 16:22:56.620"	"Spam test: SpamTestMXRecords, Score: 0"
"TCPIP"	12756	"2021-06-23 16:22:56.665"	"DNS lookup: 179.222.85.209.bl.spameatingmonkey.net, 0 addresses found: (none), Match: False"
"TCPIP"	1760	"2021-06-23 16:22:56.775"	"DNS lookup: 171.222.85.209.bl.spameatingmonkey.net, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:56.806"	"DNS lookup: 179.222.85.209.cbl.abuseat.org, 0 addresses found: (none), Match: False"
"TCPIP"	12460	"2021-06-23 16:22:56.813"	"DNS lookup: 178.222.85.209.bl.spameatingmonkey.net, 0 addresses found: (none), Match: False"
"TCPIP"	1760	"2021-06-23 16:22:56.929"	"DNS lookup: 171.222.85.209.cbl.abuseat.org, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:56.952"	"DNS lookup: 179.222.85.209.dnsbl.sorbs.net, 0 addresses found: (none), Match: False"
"TCPIP"	12460	"2021-06-23 16:22:57.006"	"DNS lookup: 178.222.85.209.cbl.abuseat.org, 0 addresses found: (none), Match: False"
"DEBUG"	12284	"2021-06-23 16:22:57.067"	"Spam test: SpamTestSPF, Score: 0"
"DEBUG"	1324	"2021-06-23 16:22:57.067"	"Spam test: SpamTestSPF, Score: 0"
"DEBUG"	12284	"2021-06-23 16:22:57.067"	"Total spam score: 0"
"DEBUG"	1324	"2021-06-23 16:22:57.067"	"Total spam score: 0"
"SMTPD"	12284	2286	"2021-06-23 16:22:57.068"	"209.85.222.170"	"SENT: 250 OK"
"SMTPD"	1324	2300	"2021-06-23 16:22:57.068"	"209.85.222.170"	"SENT: 250 OK"
"TCPIP"	1760	"2021-06-23 16:22:57.086"	"DNS lookup: 171.222.85.209.dnsbl.sorbs.net, 0 addresses found: (none), Match: False"
"TCPIP"	12756	"2021-06-23 16:22:57.099"	"DNS lookup: 179.222.85.209.sbl.spamhaus.org, 0 addresses found: (none), Match: False"
"DEBUG"	12756	"2021-06-23 16:22:57.100"	"Spam test: SpamTestDNSBlackLists, Score: 0"
"DEBUG"	12756	"2021-06-23 16:22:57.100"	"Spam test: SpamTestMXRecords, Score: 0"
"DEBUG"	12756	"2021-06-23 16:22:57.100"	"Spam test: SpamTestSPF, Score: 0"
"DEBUG"	12756	"2021-06-23 16:22:57.100"	"Total spam score: 0"
"SMTPD"	12756	2302	"2021-06-23 16:22:57.101"	"209.85.222.179"	"SENT: 250 OK"
"TCPIP"	12460	"2021-06-23 16:22:57.167"	"DNS lookup: 178.222.85.209.dnsbl.sorbs.net, 0 addresses found: (none), Match: False"
"TCPIP"	1760	"2021-06-23 16:22:57.229"	"DNS lookup: 171.222.85.209.sbl.spamhaus.org, 0 addresses found: (none), Match: False"
"DEBUG"	1760	"2021-06-23 16:22:57.229"	"Spam test: SpamTestDNSBlackLists, Score: 0"
"DEBUG"	1760	"2021-06-23 16:22:57.229"	"Spam test: SpamTestMXRecords, Score: 0"
"DEBUG"	1760	"2021-06-23 16:22:57.230"	"Spam test: SpamTestSPF, Score: 0"
"DEBUG"	1760	"2021-06-23 16:22:57.230"	"Total spam score: 0"
"SMTPD"	1760	2299	"2021-06-23 16:22:57.230"	"209.85.222.171"	"SENT: 250 OK"
"SMTPD"	12732	2286	"2021-06-23 16:22:57.253"	"209.85.222.170"	"RECEIVED: RCPT TO:<user1@mydomain.com>"
"DEBUG"	12732	"2021-06-23 16:22:57.254"	"AWStats::LogDeliveryFailure"
"SMTPD"	12732	2286	"2021-06-23 16:22:57.254"	"209.85.222.170"	"SENT: 550 Unknown user"
"SMTPD"	1760	2300	"2021-06-23 16:22:57.301"	"209.85.222.170"	"RECEIVED: RCPT TO:<user2@mydomain.com>"
"SMTPD"	12732	2302	"2021-06-23 16:22:57.301"	"209.85.222.179"	"RECEIVED: RCPT TO:<user3@mydomain.com>"
"DEBUG"	1760	"2021-06-23 16:22:57.301"	"AWStats::LogDeliveryFailure"
"SMTPD"	12732	2302	"2021-06-23 16:22:57.301"	"209.85.222.179"	"SENT: 250 OK"
"SMTPD"	1760	2300	"2021-06-23 16:22:57.301"	"209.85.222.170"	"SENT: 550 Account is not active."
"TCPIP"	12460	"2021-06-23 16:22:57.321"	"DNS lookup: 178.222.85.209.sbl.spamhaus.org, 0 addresses found: (none), Match: False"
"DEBUG"	12460	"2021-06-23 16:22:57.321"	"Spam test: SpamTestDNSBlackLists, Score: 0"
"DEBUG"	12460	"2021-06-23 16:22:57.321"	"Spam test: SpamTestMXRecords, Score: 0"
"DEBUG"	12460	"2021-06-23 16:22:57.322"	"Spam test: SpamTestSPF, Score: 0"
"DEBUG"	12460	"2021-06-23 16:22:57.322"	"Total spam score: 0"
"SMTPD"	12460	2301	"2021-06-23 16:22:57.322"	"209.85.222.178"	"SENT: 250 OK"
"SMTPD"	1324	2299	"2021-06-23 16:22:57.418"	"209.85.222.171"	"RECEIVED: RCPT TO:<user4@mydomain.com>"
"DEBUG"	1324	"2021-06-23 16:22:57.418"	"AWStats::LogDeliveryFailure"
"SMTPD"	1324	2299	"2021-06-23 16:22:57.419"	"209.85.222.171"	"SENT: 550 Account is not active."
"SMTPD"	12460	2286	"2021-06-23 16:22:57.437"	"209.85.222.170"	"RECEIVED: QUIT"
"DEBUG"	12460	"2021-06-23 16:22:57.438"	"Deleting message file."
"SMTPD"	12460	2286	"2021-06-23 16:22:57.438"	"209.85.222.170"	"SENT: 221 goodbye"
"DEBUG"	1324	"2021-06-23 16:22:57.438"	"Ending session 2286"
"SMTPD"	1324	2302	"2021-06-23 16:22:57.487"	"209.85.222.179"	"RECEIVED: DATA"
"DEBUG"	1324	"2021-06-23 16:22:57.487"	"Executing event OnSMTPData"
"SMTPD"	1760	2300	"2021-06-23 16:22:57.489"	"209.85.222.170"	"RECEIVED: QUIT"
"DEBUG"	1760	"2021-06-23 16:22:57.489"	"Deleting message file."
"SMTPD"	1760	2300	"2021-06-23 16:22:57.489"	"209.85.222.170"	"SENT: 221 goodbye"
"DEBUG"	12460	"2021-06-23 16:22:57.489"	"Ending session 2300"
"SMTPD"	12460	2301	"2021-06-23 16:22:57.510"	"209.85.222.178"	"RECEIVED: RCPT TO:<user5@mydomain.com>"
"DEBUG"	12460	"2021-06-23 16:22:57.511"	"AWStats::LogDeliveryFailure"
"SMTPD"	12460	2301	"2021-06-23 16:22:57.511"	"209.85.222.178"	"SENT: 550 Unknown user"
"SMTPD"	12732	2299	"2021-06-23 16:22:57.605"	"209.85.222.171"	"RECEIVED: QUIT"
"DEBUG"	12732	"2021-06-23 16:22:57.605"	"Deleting message file."
"SMTPD"	12732	2299	"2021-06-23 16:22:57.605"	"209.85.222.171"	"SENT: 221 goodbye"
"DEBUG"	12460	"2021-06-23 16:22:57.606"	"Ending session 2299"
"SMTPD"	12732	2301	"2021-06-23 16:22:57.699"	"209.85.222.178"	"RECEIVED: QUIT"
"DEBUG"	12732	"2021-06-23 16:22:57.699"	"Deleting message file."
"SMTPD"	12732	2301	"2021-06-23 16:22:57.699"	"209.85.222.178"	"SENT: 221 goodbye"
"DEBUG"	12460	"2021-06-23 16:22:57.700"	"Ending session 2301"
"DEBUG"	1324	"2021-06-23 16:23:17.171"	"Event completed"
"SMTPD"	1324	2302	"2021-06-23 16:23:17.171"	"209.85.222.179"	"SENT: 354 OK, send."
"DEBUG"	8616	"2021-06-23 16:23:18.798"	"Pre-creating session 2307"
"TCPIP"	8616	"2021-06-23 16:23:18.799"	"TCP - 51.39.40.174 connected to 200.0.0.8:993."
"DEBUG"	8616	"2021-06-23 16:23:18.799"	"Executing event OnClientConnect"
"DEBUG"	8616	"2021-06-23 16:23:19.094"	"Event completed"
"DEBUG"	8616	"2021-06-23 16:23:19.094"	"TCP connection started for session 2306"
"DEBUG"	8616	"2021-06-23 16:23:19.094"	"Performing SSL/TLS handshake for session 2306. Verify certificate: False"
"TCPIP"	1324	"2021-06-23 16:23:19.173"	"TCPConnection - TLS/SSL handshake failed. Session Id: 2306, Remote IP: 51.39.40.174, Error code: 336151574, Message: sslv3 alert certificate unknown"
"DEBUG"	1324	"2021-06-23 16:23:19.173"	"Ending session 2306"
"DEBUG"	8616	"2021-06-23 16:23:19.269"	"Pre-creating session 2308"
"TCPIP"	8616	"2021-06-23 16:23:19.269"	"TCP - 51.39.40.174 connected to 200.0.0.8:993."
"DEBUG"	8616	"2021-06-23 16:23:19.270"	"Executing event OnClientConnect"
"DEBUG"	8616	"2021-06-23 16:23:19.560"	"Event completed"
"DEBUG"	8616	"2021-06-23 16:23:19.560"	"TCP connection started for session 2307"
"DEBUG"	8616	"2021-06-23 16:23:19.561"	"Performing SSL/TLS handshake for session 2307. Verify certificate: False"
"TCPIP"	1760	"2021-06-23 16:23:19.634"	"TCPConnection - TLS/SSL handshake failed. Session Id: 2307, Remote IP: 51.39.40.174, Error code: 336151574, Message: sslv3 alert certificate unknown"
"DEBUG"	1760	"2021-06-23 16:23:19.634"	"Ending session 2307"
"DEBUG"	1760	"2021-06-23 16:23:19.668"	"Pre-creating session 2309"
"TCPIP"	1760	"2021-06-23 16:23:19.668"	"TCP - 51.39.40.174 connected to 200.0.0.8:993."
"DEBUG"	1760	"2021-06-23 16:23:19.669"	"Executing event OnClientConnect"
"DEBUG"	12460	"2021-06-23 16:23:19.735"	"Adding task AsynchronousTask to work queue Asynchronous task queue"
"DEBUG"	12096	"2021-06-23 16:23:19.735"	"Executing task AsynchronousTask in work queue Asynchronous task queue"
"DEBUG"	12096	"2021-06-23 16:23:19.741"	"Executing event OnAcceptMessage"
"DEBUG"	12096	"2021-06-23 16:23:19.744"	"Event completed"
"DEBUG"	12096	"2021-06-23 16:23:19.744"	"Saving message: {9F931B1E-7313-4AFA-A490-0055A6B265F4}.eml"
"DEBUG"	12096	"2021-06-23 16:23:19.744"	"Requesting SMTPDeliveryManager to start message delivery"
"SMTPD"	12096	2302	"2021-06-23 16:23:19.744"	"209.85.222.179"	"SENT: 250 Queued (2.592 seconds)"
"DEBUG"	13624	"2021-06-23 16:23:19.744"	"Adding task DeliveryTask to work queue SMTP delivery queue"
"DEBUG"	10888	"2021-06-23 16:23:19.744"	"Executing task DeliveryTask in work queue SMTP delivery queue"
"DEBUG"	10888	"2021-06-23 16:23:19.744"	"Delivering message..."
"APPLICATION"	10888	"2021-06-23 16:23:19.744"	"SMTPDeliverer - Message 223364: Delivering message from engr4civil@gmail.com to user2@mydomain.com. File: C:\Program Files\hMailServer\Data\{9F931B1E-7313-4AFA-A490-0055A6B265F4}.eml"
"DEBUG"	10888	"2021-06-23 16:23:19.744"	"Connecting to ClamAV virus scanner..."
"SMTPD"	12460	2302	"2021-06-23 16:23:19.932"	"209.85.222.179"	"RECEIVED: QUIT"
"SMTPD"	12460	2302	"2021-06-23 16:23:19.932"	"209.85.222.179"	"SENT: 221 goodbye"
Here's the raw header of that email.

Code: Select all

Return-Path: engr4civil@gmail.com
Received: from mail-qk1-f179.google.com (mail-qk1-f179.google.com [209.85.222.179]) by
 mail.mydomain.com with ESMTPS (version=TLSv1.3 cipher=TLS_AES_128_GCM_SHA256
 bits=128) ; Wed, 23 Jun 2021 16:23:17 +0300
Received: by mail-qk1-f179.google.com with SMTP id bj15so4997939qkb.11 for <user@mydomain.com>;
 Wed, 23 Jun 2021 06:22:39 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to;
 bh=nZxXYixs+xxTLcj9UBzbgSrySEQZCwx6KaCjIp7KmtM=; b=fAoaGtMBqoyq7thmXMbiLDsp4716a3yS7F/HlJQHC0BAKs9vTFc85D9tX6P0xAZtP2
 YC9h7fhEhNMJAsJQO82Tn24Z/DhxyeCfI2uXLJSZDB1JPZ18wzmR7UUuk451urpaXJkB
 FntOt4w1qN924BJ0UumdkVtYRZJp9G1fF39mq+0gvzJxjoeUqN7DTwKE4VnMwU+b+asO
 hSMI3kQk1WWVpbEf2BIStv4lOjmToGodJGCktXCq7Su1gSZJ1rxP+V5S6Cc5Yap8Ssyw
 24np7lD+Le0zZKc1azQNeMd4wJEPi11TjzmmPz7j35b+eK0gFA0EqC/S2RyrdUcQs/kS cerg==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
 bh=nZxXYixs+xxTLcj9UBzbgSrySEQZCwx6KaCjIp7KmtM=; b=gyvqlKg1sz4pTi4G9TaHReJ4mT7jvUa8Xr6AQ5DgLv771JX2vENtFBQQAZ3pFjr2NC
 JKCdi9J5bnVKFC3ziV+rWkAHvGao4K9n1xm2j8wXrwaSl7yrN/k2+yOvvTvXtFyaAXHs
 8PGxpQbOxRkpVu7Z9I93H81fmKGVhjc2jk9UBfQP8ARRpZban1vlBk3nDW8TYMFgk1kP
 q08SnnyP9qRSsluhU5+2iQj89Wov8W4MGOXn7ZjRtQrJqmXRi9cEkgv+Kuf5r9WzmKde
 w6aA+pSYv7na0bLcH/qqoBQe19POx1rYA7fOgr8Si8UzHi/f8gd3fHJ7D/sMlAfZd3YU 8JxA==
X-Gm-Message-State: AOAM531YpHdvigpaUwtjXXsWg58VsxWcWU2DSMDfeGt8fLmq4sv8VneL
 BYV0VXa1xiEX/rLixvBnarnn8G9i8ddrQ2Z1sNniB/KFB9I=
X-Google-Smtp-Source: ABdhPJwbI8su/fZOpvcb9snSFO5VjWeAyrlsWjAWv4iLZDv96ya7buIA17Rp0zPq+e1fGH0iCCR+CkNQVrSfPg/v7hY=
X-Received: by 2002:a25:5049:: with SMTP id e70mr9715928ybb.76.1624454497704; Wed, 23
 Jun 2021 06:21:37 -0700 (PDT)
MIME-Version: 1.0
From: Mohammed Fareed Ahmed <engr4civil@gmail.com>
Date: Wed, 23 Jun 2021 16:21:26 +0300
Message-ID: <CANvg4PN70tZ3baJhJYRU0dogS1mmMqGn0ju89m6PmFrUJ9RpKQ@mail.gmail.com>
Subject: Applied for the post of Civil Site Engineer/ Technical Support Engineer /
 Civil Quantity Surveyor / QA & QC Engineer 
To: undisclosed-recipients:;
Content-Type: multipart/mixed; boundary="0000000000004a53d905c56ec9e7"
Bcc: user@mydomain.com
X-hMailServer-Reason-Score: 0

palinka
Senior user
Senior user
Posts: 2792
Joined: 2017-09-12 17:57

Re: Some emails are not being checked for spam by Spamassasin

Post by palinka » 2021-06-23 16:57

Is this gmail account on a whitelist?

ashtec014
Normal user
Normal user
Posts: 166
Joined: 2019-09-05 11:56

Re: Some emails are not being checked for spam by Spamassasin

Post by ashtec014 » 2021-06-23 16:58

palinka wrote:
2021-06-23 16:57
Is this gmail account on a whitelist?
No, this is not on a whitelist email. Actually, this is a spam email.

User avatar
RvdH
Senior user
Senior user
Posts: 1506
Joined: 2008-06-27 14:42
Location: Netherlands

Re: Some emails are not being checked for spam by Spamassasin

Post by RvdH » 2021-06-23 17:00

palinka wrote:
2021-06-23 16:57
Is this gmail account on a whitelist?
Wouldn't the SURBL en DNSBL test be skipped as well then?
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

palinka
Senior user
Senior user
Posts: 2792
Joined: 2017-09-12 17:57

Re: Some emails are not being checked for spam by Spamassasin

Post by palinka » 2021-06-23 17:06

RvdH wrote:
2021-06-23 17:00
palinka wrote:
2021-06-23 16:57
Is this gmail account on a whitelist?
Wouldn't the SURBL en DNSBL test be skipped as well then?
Shooting from the hip doesn't always hit the target. :D

palinka
Senior user
Senior user
Posts: 2792
Joined: 2017-09-12 17:57

Re: Some emails are not being checked for spam by Spamassasin

Post by palinka » 2021-06-23 17:06

ashtec014 wrote:
2021-06-23 16:58
palinka wrote:
2021-06-23 16:57
Is this gmail account on a whitelist?
No, this is not on a whitelist email. Actually, this is a spam email.
Any errors?

User avatar
jimimaseye
Moderator
Moderator
Posts: 9184
Joined: 2011-09-08 17:48

Re: Some emails are not being checked for spam by Spamassasin

Post by jimimaseye » 2021-06-23 17:07

What is the maximum message size setting in anti-spam settings? If the email is bigger than this then it will not be sent.

Also this result (No spamassassin scan) can also me result of the socket error 2 crash and maybe it was the email being dealt with at the time.

[Entered by mobile. Excuse my spelling.]
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
RvdH
Senior user
Senior user
Posts: 1506
Joined: 2008-06-27 14:42
Location: Netherlands

Re: Some emails are not being checked for spam by Spamassasin

Post by RvdH » 2021-06-23 17:08

palinka wrote:
2021-06-23 17:06
RvdH wrote:
2021-06-23 17:00
palinka wrote:
2021-06-23 16:57
Is this gmail account on a whitelist?
Wouldn't the SURBL en DNSBL test be skipped as well then?
Shooting from the hip doesn't always hit the target. :D
:mrgreen:

@ashtec014
viewtopic.php?f=20&t=30914
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

ashtec014
Normal user
Normal user
Posts: 166
Joined: 2019-09-05 11:56

Re: Some emails are not being checked for spam by Spamassasin

Post by ashtec014 » 2021-06-23 17:10

It doesn't skip the test for SURBL en DNSBL as seen on the logs above. Its just that it was not forwarded to spamassasin after checking by SURBL en DNSBL.

User avatar
RvdH
Senior user
Senior user
Posts: 1506
Joined: 2008-06-27 14:42
Location: Netherlands

Re: Some emails are not being checked for spam by Spamassasin

Post by RvdH » 2021-06-23 17:11

jimimaseye wrote:
2021-06-23 17:07
What is the maximum message size setting in anti-spam settings? If the email is bigger than this then it will not be sent.

Also this result (No spamassassin scan) can also me result of the socket error 2 crash and maybe it was the email being dealt with at the time.

[Entered by mobile. Excuse my spelling.]
Mmmm, interesting, i obviously did know about the size thingy, but do the SURBL and DNSBL test execute despite the size? (i am not using SURBL and DNSBL checks in hmailserver myself, spamassassin handles this)
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
RvdH
Senior user
Senior user
Posts: 1506
Joined: 2008-06-27 14:42
Location: Netherlands

Re: Some emails are not being checked for spam by Spamassasin

Post by RvdH » 2021-06-23 17:14

ashtec014 wrote:
2021-06-23 17:10
It doesn't skip the test for SURBL en DNSBL as seen on the logs above. Its just that it was not forwarded to spamassasin after checking by SURBL en DNSBL.
Thats why i quoted palinka....this was not directed at you
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

ashtec014
Normal user
Normal user
Posts: 166
Joined: 2019-09-05 11:56

Re: Some emails are not being checked for spam by Spamassasin

Post by ashtec014 » 2021-06-23 17:14

Code: Select all

[code]2021-06-23   Hmailserver: 5.7.0-B2572

DOMAINS

   "Domain1.com" - arxxxxxx.com                Enabled: True

SIGNATURE         LIMITS                       DKIM               ADVANCED
  Enabled: True    Max size:                0   Enabled: True    
  APPEND           Max message size:        0   Header:   Relaxed  Plus addressing: False
  Replies:  True   Max size of accounts: 10000   Body:     Relaxed
  Local:    True                                Algorithm: SHA256  Greylisting:     False
                                                Private key: c:\program files\hmailserver\data\Domain1.com\dkim.Domain1.com.pem
                                                Selector:    dkim

   "Domain2.com" - rfxx.com                       Enabled: True

SIGNATURE         LIMITS                       DKIM               ADVANCED
  Enabled: True    Max size:                0   Enabled: True    
  APPEND           Max message size:        0   Header:   Relaxed  Plus addressing: False
  Replies:  True   Max size of accounts: 30000   Body:     Relaxed
  Local:    True                                Algorithm: SHA256  Greylisting:     False
                                                Private key: c:\program files\hmailserver\data\Domain2.com\dkim.Domain2.com.pem
                                                Selector:    dkim

   "Domain3.com" - saxxxxxxxxxxxxx.com            Enabled: True

SIGNATURE         LIMITS                       DKIM               ADVANCED
  Enabled: True    Max size:                0   Enabled: True    
  APPEND           Max message size:        0   Header:   Relaxed  Plus addressing: False
  Replies:  True   Max size of accounts: 15000   Body:     Relaxed
  Local:    True                                Algorithm: SHA256  Greylisting:     False
                                                Private key: c:\program files\hmailserver\data\Domain3.com\dkim.Domain3.com.pem
                                                Selector:    dkim

   "Domain4.com" - texxxxxxxxxxxxxxxxxx.com       Enabled: True

SIGNATURE         LIMITS                       DKIM               ADVANCED
  Enabled: True    Max size:                0   Enabled: True    
  APPEND           Max message size:        0   Header:   Relaxed  Plus addressing: False
  Replies:  True   Max size of accounts: 10000   Body:     Relaxed
  Local:    True                                Algorithm: SHA256  Greylisting:     False
                                                Private key: c:\program files\hmailserver\data\Domain4.com\dkim.Domain4.com.pem
                                                Selector:    dkim

   "Domain5.com" - tpxxxxxxxx.com                 Enabled: True

SIGNATURE         LIMITS                       DKIM               ADVANCED
  Enabled: True    Max size:                0   Enabled: True    
  APPEND           Max message size:        0   Header:   Relaxed  Plus addressing: False
  Replies:  True   Max size of accounts: 10000   Body:     Relaxed
  Local:    True                                Algorithm: SHA256  Greylisting:     False
                                                Private key: c:\program files\hmailserver\data\Domain5.com\dkim.Domain5.com.pem
                                                Selector:    dkim
-----------------------------------------------------------------------------------------------

GLOBAL RULES
  1, ExternalScore7               Criteria:  Use AND
     Custom: X-Spam-Level              Contains        *******
                                  -----Actions-----
             Move To Folder                            Junk Email
 ---------------------------------------------------------------------
  2, RemoveVirusEmail             Criteria:  Use OR
             Subject                   Regular Expr    (?i:^Virus found:.*$)
                                  -----Actions-----
             Delete
-----------------------------------------------------------------------------------------------

IP RANGES

IP: 127.0.0.1 - 127.0.0.1     Priority: 120     Name: My computer

  Allow connections                         Other
     SMTP:   True                              Antispam :   True
     POP3:   True                              Antivirus:   True
     IMAP:   True                              SSL/TLS:     True

  Allow Deliveries from                     Require Authentication from
     Local To Local       -  True              Local To Local       -  True
     Local To External    -  True              Local To External    -  True
     External To Local    -  True              External To Local    - False
     External To External - False           


IP: 200.0.0.103 - 200.0.0.103     Priority: 115     Name: Internal Gateway

  Allow connections                         Other
     SMTP:   True                              Antispam :   True
     POP3:   True                              Antivirus:   True
     IMAP:   True                              SSL/TLS:     True

  Allow Deliveries from                     Require Authentication from
     Local To Local       -  True              Local To Local       -  True
     Local To External    -  True              Local To External    -  True
     External To Local    -  True              External To Local    - False
     External To External - False           


IP: 0.0.0.0 - 255.255.255.255     Priority: 10     Name: Internet

  Allow connections                         Other
     SMTP:   True                              Antispam :   True
     POP3:   True                              Antivirus:   True
     IMAP:   True                              SSL/TLS:     True

  Allow Deliveries from                     Require Authentication from
     Local To Local       -  True              Local To Local       -  True
     Local To External    -  True              Local To External    -  True
     External To Local    -  True              External To Local    - False
     External To External - False           


------------------------------------------------------
AUTOBANNED Local Addresses:
    No entries

-----------------------------------------------------------------------------------------------

AUTOBAN
  Autoban Enabled: True       Max invalid logon attempts:      2
                              Minutes Before Reset:         1500  (25.00 hours, 1.04 days)
                              Minutes to Autoban:          10140  (169.00 hours, 7.04 days)

There is a total of 34 auto-ban IP ranges.
-----------------------------------------------------------------------------------------------

INCOMING RELAYS
                    200.0.0.103      -   200.0.0.103
                    200.0.0.10       -   200.0.0.10
-----------------------------------------------------------------------------------------------

MIRRORING         Disabled
-----------------------------------------------------------------------------------------------

PROTOCOLS

SMTP
GENERAL             DELIVERY                  RFC COMPLIANCE            ADVANCED
No. Connections:  0  No Retries:  4 Mins: 60   Plain Text:         True  Bind: 
                     Host: EXTERNAL.TLD        Empty sender:       True  Batch recipients:   100
Max Msg Size: 26214  Relay:-                   Incorrect endings:  True  Use STARTTLS:      True
                     (none entered)            Disc. on invalid:   True  Delivered-To hdr: False
                                               Max number commands: 100  Loop limit:           5
                                                                         Recipient hosts:     15
  Routes:
     No routes defined.

POP3
  No. Connections: 0

IMAP
 GENERAL                   PUBLIC FOLDERS                    ADVANCED
  No. Connections:   0      Public folder name: #Public       IMAP sort:  True
                                                              IMAP Quota: True
                                                              IMAP Idle:  True
                                                              IMAP ACL:   True
                                                              Delim: "."
-----------------------------------------------------------------------------------------------

ANTISPAM

GENERAL                              SPAM TESTS              Score   SPAMASSASSIN
  Spam Mark:                  5       Use SPF:            True - 3    Use Spamassassin:    True
  Add X-HmailServer-Spam:     True    Check HELO host:   False        Hostname:       127.0.0.1
  Add X-HmailServer-Reason:   True    Check MX records:   True - 2    Port:                 783
  Add X-HmailServer-Subject:  True    Verify DKIM:       False        Use SA score: False -   5
              Subject Text: "[SPAM]"
  Spam delete threshold: 8         Maximum message size: 1024

DNSBL ENTRIES:
                  zen.spamhaus.org      Score: 5     Result: 127.0.0.2-8|127.0.0.10-11
                    bl.spamcop.net      Score: 5     Result: 127.0.0.2
            b.barracudacentral.org      Score: 3     Result: 127.0.0.2
     hostkarma.junkemailfilter.com      Score: 3     Result: 127.0.0.2|127.0.0.4
           bl.spameatingmonkey.net      Score: 2     Result: 127.0.0.2-3
                   cbl.abuseat.org      Score: 3     Result: 127.0.0.2
                   dnsbl.sorbs.net      Score: 3     Result: 127.0.0.2-12|127.0.0.14
                  sbl.spamhaus.org      Score: 100   Result: 127.0.0.3

SURBL ENTRIES:
                   multi.surbl.org      Score: 2
                  dbl.spamhaus.org      Score: 3

GREYLISTING:
  Greylisting:  False

WHITELISTING
              0.0.0.0            to    255.255.255.255              *[@t]domain[dot]com
-----------------------------------------------------------------------------------------------

ANTIVIRUS

GENERAL:
  When found - Delete Attachments.

  Max Message Size: 26214
     CLAM AV:   True       Hostname: localhost    Port: 3310
     CLAMWIN:   False
     CUSTOMAV:  False

  Block Attachments: True
               *.bat             Batch processing file
               *.cmd             Command file for Windows NT
               *.com             Command
               *.cpl             Windows Control Panel extension
               *.csh             CSH script
               *.dmg             Common disk image file extensions
               *.docm            Macro enabled Office
               *.dotm            Macro enabled Office
               *.exe             Executable file
               *.gif             Graphics Interchange Format
               *.inf             Setup file
               *.iso             Common disk image file extensions
               *.js              JavaScript
               *.lnk             Windows link file
               *.msi             Windows Installer file
               *.msp             Windows Installer patch
               *.pif             Program Information file
               *.reg             Registration key
               *.scf             Windows Explorer command
               *.scr             Windows Screen saver
               *.toast           Common disk image file extensions
               *.vbs             Microsoft Visual Basic Scripting
               *.xlsm            Macro enabled Office
               *.xltm            Macro enabled Office
-----------------------------------------------------------------------------------------------

SSL CERTIFICATES
   STL SSL
       Certificate: C:\Program Files\hMailServer\SSLCertificate\mail.Domain3.com-chain.pem
       Private key: C:\Program Files\hMailServer\SSLCertificate\mail.Domain3.com-key.pem
-----------------------------------------------------------------------------------------------

SSL/TLS
             TLS 1.0 :  False
             TLS 1.1 :   True
             TLS 1.2 :   True                Verify Remote SSL/TLS Certs:   True
SslCipherList  :

ECDHE-RSA-AES128-GCM-SHA256     - ECDHE-ECDSA-AES128-GCM-SHA256   - ECDHE-RSA-AES256-GCM-SHA384     
ECDHE-ECDSA-AES256-GCM-SHA384   - DHE-RSA-AES128-GCM-SHA256       - DHE-DSS-AES128-GCM-SHA256       
kEDH+AESGCM                     - ECDHE-RSA-AES128-SHA256         - ECDHE-ECDSA-AES128-SHA256       
ECDHE-RSA-AES128-SHA            - ECDHE-ECDSA-AES128-SHA          - ECDHE-RSA-AES256-SHA384         
ECDHE-ECDSA-AES256-SHA384       - ECDHE-RSA-AES256-SHA            - ECDHE-ECDSA-AES256-SHA          
DHE-RSA-AES128-SHA256           - DHE-RSA-AES128-SHA              - DHE-DSS-AES128-SHA256           
DHE-RSA-AES256-SHA256           - DHE-DSS-AES256-SHA              - DHE-RSA-AES256-SHA              
AES128-GCM-SHA256               - AES256-GCM-SHA384               - ECDHE-RSA-RC4-SHA               
ECDHE-ECDSA-RC4-SHA             - AES128                          - AES256                          
RC4-SHA                         - HIGH                            - !aNULL                          
!eNULL                          - !EXPORT                         - !DES                            
!3DES                           - !MD5                            - !PSK;                           
-----------------------------------------------------------------------------------------------

TCPIP PORTS                                         Connection Sec
               0.0.0.0         / 25    / SMTP   -   StartTLS Optional   Cert: STL SSL
               0.0.0.0         / 110   / POP3   -   StartTLS Required   Cert: STL SSL
               0.0.0.0         / 143   / IMAP   -   StartTLS Required   Cert: STL SSL
               0.0.0.0         / 465   / SMTP   -   SSL/TLS             Cert: STL SSL
               0.0.0.0         / 587   / SMTP   -   StartTLS Required   Cert: STL SSL
               0.0.0.0         / 993   / IMAP   -   SSL/TLS             Cert: STL SSL
               0.0.0.0         / 995   / POP3   -   SSL/TLS             Cert: STL SSL
-----------------------------------------------------------------------------------------------

LOGGING      Logging Enabled: True

  Paths:-
    Current:  C:\Program Files\hMailServer\Logs\hmailserver_2021-06-23.log
    Error:    C:\Program Files\hMailServer\Logs\ERROR_hmailserver_2021-06-23.log
    Event:    C:\Program Files\hMailServer\Logs\hmailserver_events.log - Last Event: 2021/06/23
    Awstats:  C:\Program Files\hMailServer\Logs\hmailserver_awstats.log
                        APPLICATION -    True
                        SMTP        -    True
                        POP3        -      .
                        IMAP        -      .
                        TCPIP       -    True
                        DEBUG       -    True
                        AWSTATS     -    True
-----------------------------------------------------------------------------------------------

SYSTEM TESTS

Database type: MySQL

IPv6 support is available in operating system.

Backup directory E:\EmailServerBackUp is writable.

Relative message paths are stored in the database for all messages.

There are 17 error logs in the log directory.
-----------------------------------------------------------------------------------------------

HMAILSERVER.INI

[Directories]
Program folder:  C:\Program Files\hMailServer\
Database folder: 
Data folder:     C:\Program Files\hMailServer\Data
Log folder:      C:\Program Files\hMailServer\Logs
Temp folder:     C:\Program Files\hMailServer\Temp
Event folder:    C:\Program Files\hMailServer\Events

[Database]
Type=              MYSQL
Username=          root
PasswordEncryption=1
Port=              3306
Server=            localhost
Internal=          0

[settings]
LogLevel=9
DisableAUTHList=25
QuickRetries=5
QuickRetriesMinutes=7
QueueRandomnessMinutes=3
-----------------------------------------------------------------------------------------------

Error 438. Out-dated version. Some fields or objects missing.

Generated by HMSSettingsDiagnostics v1.96, Hmailserver Forum.
[/code]

ashtec014
Normal user
Normal user
Posts: 166
Joined: 2019-09-05 11:56

Re: Some emails are not being checked for spam by Spamassasin

Post by ashtec014 » 2021-06-23 17:17

jimimaseye wrote:
2021-06-23 17:07
What is the maximum message size setting in anti-spam settings? If the email is bigger than this then it will not be sent.

Also this result (No spamassassin scan) can also me result of the socket error 2 crash and maybe it was the email being dealt with at the time.

[Entered by mobile. Excuse my spelling.]
Hi Jimi,

I don't think its related to socket 2 crash. There's no error related to socket 2 crash today. There's another email right after that one and was forwarded succefully to spamassassin for checking. In addition, there's also pdf attachment on this spam email.

User avatar
RvdH
Senior user
Senior user
Posts: 1506
Joined: 2008-06-27 14:42
Location: Netherlands

Re: Some emails are not being checked for spam by Spamassasin

Post by RvdH » 2021-06-23 17:19

OK, so the diagnostic report says: "Maximum message size to scan (KB)": 1024 (= 1024KB = 1MB)
What is the size of the SPAM message?

I have "Maximum message size to scan (KB)": 4096 (= 4096KB = 4MB)
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

ashtec014
Normal user
Normal user
Posts: 166
Joined: 2019-09-05 11:56

Re: Some emails are not being checked for spam by Spamassasin

Post by ashtec014 » 2021-06-23 17:23

RvdH wrote:
2021-06-23 17:19
OK, so the diagnostic report says: "Maximum message size to scan (KB)": 1024 (= 1024KB = 1MB)
What is the size of the SPAM message?

I have "Maximum message size to scan (KB)": 4096 (= 4096KB = 4MB)
Hi RvdH,

Total size of the spam email is 1.06MB as per checking on the user file folder. Size of the attachment is only 789kb. So, it could be related to this? changing the max size of message to scan from 1024KB to 4096KB will help?

User avatar
RvdH
Senior user
Senior user
Posts: 1506
Joined: 2008-06-27 14:42
Location: Netherlands

Re: Some emails are not being checked for spam by Spamassasin

Post by RvdH » 2021-06-23 19:04

I think that is the cause....try it
CIDR to RegEx: d-fault.nl/CIDRtoRegEx
DNS Lookup: d-fault.nl/DNSTools
DNSBL Lookup: d-fault.nl/DNSBLLookup
GEOIP Lookup: d-fault.nl/GeoipLookup

User avatar
jimimaseye
Moderator
Moderator
Posts: 9184
Joined: 2011-09-08 17:48

Re: Some emails are not being checked for spam by Spamassasin

Post by jimimaseye » 2021-06-23 19:07

RvdH wrote:
2021-06-23 19:04
I think that is the cause....try it
+1
5.7 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

User avatar
mattg
Moderator
Moderator
Posts: 21533
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Some emails are not being checked for spam by Spamassasin

Post by mattg » 2021-06-24 00:58

Also, size used is the size identified by the sending server, not the actual file size
ashtec014 wrote:
2021-06-23 16:41

Code: Select all

"SMTPD" 1324 2300 "2021-06-23 16:22:55.411" "209.85.222.170" "RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116827"
"SMTPD" 1760 2299 "2021-06-23 16:22:55.457" "209.85.222.171" "RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116832"
"SMTPD" 12756 2302 "2021-06-23 16:22:55.457" "209.85.222.179" "RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116832"
"SMTPD" 12460 2301 "2021-06-23 16:22:55.582" "209.85.222.178" "RECEIVED: MAIL FROM:<engr4civil@gmail.com> SIZE=1116815"
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

Post Reply