Spam which I can't seem to stop

Use this forum if you have installed hMailServer and want to ask a question related to a production release of hMailServer. Before posting, please read the troubleshooting guide. A large part of all reported issues are already described in detail here.
Post Reply
Mark Spruce
Normal user
Normal user
Posts: 36
Joined: 2006-11-30 16:53
Location: Falkland Islands
Contact:

Spam which I can't seem to stop

Post by Mark Spruce » 2007-10-03 16:52

Hello All,

I keep getting spam from "Sales" and the E-mail adress of course changes each time but it is always: sales @

I have set up a rule for to delete anything that has sales@ in the from field. But is does not seem to work.

Also each time it has Viagra in the message body. I have a rule already setup for Viagra. But it does not seem to work either for this particular spam.

Also it has TAX/VAT in each mail and I set up a rule for that in the body. But that rule does not work either.

Any Suggestions Martin ???? Can I forward you a couple of these mails And get you to have a look at them. I can give you access and you can then look at the rule I have set up for these spams

Mark

jcmca
New user
New user
Posts: 8
Joined: 2007-07-07 20:23

Post by jcmca » 2007-10-03 17:42

Hi Mark,

Sorry, I don't have a solution, just sympathy. At work we use Merak mail server, and I have the same problem. I can set up as many rules as I like for certain things, and there is just NO way they will be stopped.

If you ever solve the problem, PLEASE post the solution!!

Best!
John

User avatar
martin
Developer
Developer
Posts: 6834
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Post by martin » 2007-10-03 17:59

Are you using Contains in the rule?

It could be that the message is incorrectly formatted and hMailServer is unable to parse it. In the RFC compliance settings in the SMTP settings you can configure hMailServer to reject email with incorrect line endings. Doing that may solve the problem.

Mark Spruce
Normal user
Normal user
Posts: 36
Joined: 2006-11-30 16:53
Location: Falkland Islands
Contact:

Post by Mark Spruce » 2007-10-03 21:32

Hi Martin

I sent you a message on this as well. Yes I am using the "Contains".

If i add the RFC will that delete much proper E-mail if you know what I mean.

If i give you my login details to my server. So you can login to my setup maybe you could have a look if you do not mind. Let me know send me a PM or E-mail me

Mark

User avatar
martin
Developer
Developer
Posts: 6834
Joined: 2003-11-21 01:09
Location: Sweden
Contact:

Post by martin » 2007-10-03 21:53

Yeah, I saw that. (I just don't like responding to "support issues" in private messages unless there's some kind of confidential information. If I do, no-one else will benefit from the information and I will work completely for free for a single person.)

There is a risk that some non-spam email sent from buggy software will be rejected. E-mail messages sent from correctly working software will not be rejected.

I don't think looking at your server settings will help in this case. It would be better if you could locate one of the .eml files in the data directory, zip it and then send it to me at martin@hmailserver.com. Then I can confirm whether the issue is with line endings or not. But it is very likely that it is - so far this has been the issue in all cases where rules haven't "worked" even though they have been set up correctly.

If you send me the email, it's important that you pick it from the data directory and not from your email client. It's also important that you don't resave the message in a text editor before sending it. If you do, the line endings formatting will be "lost".

Mark Spruce
Normal user
Normal user
Posts: 36
Joined: 2006-11-30 16:53
Location: Falkland Islands
Contact:

Post by Mark Spruce » 2007-10-05 14:14

Hello Martin,

Well I hope today one of those messages will arrive. I am at work and I download mails there but keep a copy of the server.

If one does arrive I will send it to you.

Ok understand about the PM. I will not do that again.

I think I will for the moment not do te RFC thing

Mark

User avatar
DFitch
Senior user
Senior user
Posts: 258
Joined: 2006-09-16 20:40

Post by DFitch » 2007-10-05 14:20

I would setup spamassassin, it should stop those.

SAwin32:
http://prdownloads.sourceforge.net/sawi ... p?download

D[/url]
hMailServer 5.3.3: External MySql
Win2k3 Server | eWall 4.0 Anti-Spam Anti-Virus SMTP Proxy {http://sssolutions.net/}
SpamAssassin 3.31 - ClamAV on backend Ubuntu Server 10.04(VMware)

Mark Spruce
Normal user
Normal user
Posts: 36
Joined: 2006-11-30 16:53
Location: Falkland Islands
Contact:

Post by Mark Spruce » 2007-10-05 21:05

Hi Martin,

One has arrived I will get it off to you mark

minsik
Normal user
Normal user
Posts: 92
Joined: 2006-08-03 13:08
Location: South Australia

Post by minsik » 2007-10-06 14:13

i reccomend assp as a spam filter for a large email server.
setup and training is a beetch but once you get familiar with it and it works great! I am boss favrites since instaling to 70+ email users.

Post Reply