Spamassassin

Use this forum for discussions about SpamAssassin and anti-spam in general.
Post Reply
paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Spamassassin

Post by paultilley100 » 2017-11-13 17:45

Is there some trick I dont know about?
My spamassassin doesnt seem to be working, although the 'TEST' button does report correctly, but sending a GTUBE email in doesnt get captured.

Any Help??


[code]2017-11-13 Hmailserver: 5.6.6-B2383

DOMAINS

"Domain1.com" - acxxxx.uk.com Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain2.com" - amxxxxxx.co.uk Enabled: True
|- "Alias1.com" - amxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: info@Domain2.com
Max message size: 0 Plus addressing: True
Max size of accounts: 0 Character: +
Greylisting: False

"Domain3.com" - bdxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain4.com" - ccxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain5.com" - chxxxxxxxxxxxxx.co.uk Enabled: True
|- "Alias2.com" - thxxxxxxxxxxxxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain6.com" - clxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain7.com" - coxxxxxxx.orx.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain8.com" - coxxxxxxxxxxxxx.com Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain9.com" - crxxxxxxxxxxxx.eu Enabled: True
|- "Alias3.com" - crxxxxxxxxxxxx.orx.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain10.com" - daxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain11.com" - daxxxxxxxxxxxx.co.uk Enabled: True
|- "Alias4.com" - daxxxxxxxxxxxx.com

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain12.com" - gcxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain13.com" - haxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain14.com" - hcxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain15.com" - hoxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain16.com" - jixxxxxxxx.com Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain17.com" - lixxxxxxxxxxx.com Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain18.com" - mixxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 1000
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain19.com" - moxxxxxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain20.com" - paxxxxxxxxx.orx.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain21.com" - raxxxxxxxxxxx.com Enabled: True
|- "Alias5.com" - raxxxxxxxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain22.com" - rexxxxxxxxxxxxxxx.co.uk Enabled: True
|- "Alias6.com" - rsx.me
|- "Alias7.com" - rsxxxxxx.co.uk
|- "Alias8.com" - rsxxxxxxx.co.uk
|- "Alias9.com" - rsxxxxx.co.uk
|- "Alias10.com" - rsxxxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: info@Domain22.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain23.com" - rexxxxxxxxxxxxxx.co.uk Enabled: False

"Domain24.com" - rixxxxxxxxxx.co.uk Enabled: True
|- "Alias11.com" - lexxxxxxx.co.uk
|- "Alias12.com" - lexxxxxxx.com

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain25.com" - roxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain26.com" - roxxxxxxx.com Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain27.com" - rsxxxxxxx.com Enabled: True
|- "Alias13.com" - rsxxxxxxx.co.uk
|- "Alias14.com" - idxxxxxxxxxx.com

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: info@Domain27.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain28.com" - rsxxxxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain29.com" - rsxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: info@Domain29.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain30.com" - rsxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: info@Domain30.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain31.com" - rsxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: ben@Domain31.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain32.com" - smxxxxxxxx.bix Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain33.com" - spxxxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: catchall@Domain33.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain34.com" - spxxxxxxxxxxxx.com Enabled: True
|- "Alias15.com" - spxxxxxxxxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain35.com" - thxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain36.com" - thxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: info@Domain36.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain37.com" - thxxxxxxxxxx.co.uk Enabled: True
|- "Alias16.com" - thxxxxxxxxxx.com

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain38.com" - trxxxxxxxxxxxxxxxx.com Enabled: True
|- "Alias17.com" - trxxxxxxxxxxxxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain39.com" - uvxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain40.com" - vexxxxxxxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 300
Greylisting: False

"Domain41.com" - vixxxxxx.co.uk Enabled: True
|- "Alias18.com" - rsxxxxxxxxxxxxxxx.co.uk
|- "Alias19.com" - rsxxxx.co.uk
|- "Alias20.com" - rsxxxxxxxxxxx.co.uk
|- "Alias21.com" - rsxxxxx.co.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False Catchall: admin@Domain41.com
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain42.com" - wixxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain43.com" - yexxxxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain44.com" - ymxxxx.co.uk Enabled: True
|- "Alias22.com" - ymxxxx.com
|- "Alias23.com" - ymxxxx.net
|- "Alias24.com" - ymxxxx.uk

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain45.com" - ymxxxxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: !! ENABLED BUT NOT ACTIVATED!!

"Domain46.com" - ymxxxxxxxx.co.uk Enabled: True

SIGNATURE LIMITS DKIM ADVANCED
Enabled: False Max size: 0 Enabled: False
Max message size: 0 Plus addressing: False
Max size of accounts: 0
Greylisting: False
-----------------------------------------------------------------------------------------------

IP RANGES

IP: 192.168.1.10 - 192.168.1.10 Priority: 30 Name: Roundcube

Allow connections Other
SMTP: True Antispam : False
POP3: True Antivirus: False
IMAP: True SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - True
Local To External - True Local To External - True
External To Local - True External To Local - True
External To External - True External To External - True


IP: 192.168.1.1 - 192.168.1.1 Priority: 25 Name: HAProxy

Allow connections Other
SMTP: True Antispam : False
POP3: False Antivirus: False
IMAP: False SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - False
Local To External - False
External To Local - True External To Local - False
External To External - False


IP: 192.168.2.1 - 192.168.2.1 Priority: 25 Name: HAProxy2

Allow connections Other
SMTP: True Antispam : False
POP3: False Antivirus: False
IMAP: False SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - False
Local To External - False
External To Local - True External To Local - False
External To External - False


IP: 5.2.21.246 - 5.2.21.246 Priority: 25 Name: Xeams

Allow connections Other
SMTP: True Antispam : False
POP3: False Antivirus: False
IMAP: False SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - False
Local To External - False
External To Local - True External To Local - False
External To External - False


IP: 192.168.1.20 - 192.168.1.20 Priority: 25 Name: Xeams Internal

Allow connections Other
SMTP: True Antispam : False
POP3: False Antivirus: False
IMAP: False SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - False
Local To External - False
External To Local - True External To Local - False
External To External - False


IP: 127.0.0.1 - 127.0.0.1 Priority: 12 Name: My computer

Allow connections Other
SMTP: True Antispam : True
POP3: True Antivirus: True
IMAP: True SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - False
Local To External - True Local To External - False
External To Local - True External To Local - False
External To External - True External To External - True


IP: 0.0.0.0 - 255.255.255.255 Priority: 10 Name: Internet

Allow connections Other
SMTP: True Antispam : True
POP3: True Antivirus: True
IMAP: True SSL/TLS: False

Allow Deliveries from Require Authentication from
Local To Local - True Local To Local - True
Local To External - True Local To External - True
External To Local - True External To Local - False
External To External - True External To External - True


------------------------------------------------------
AUTOBANNED Local Addresses:
No entries

-----------------------------------------------------------------------------------------------

AUTOBAN
Autoban Enabled: True Max invalid logon attempts: 6
Minutes Before Reset: 20 (0.33 hours, 0.01 days)
Minutes to Autoban: 60 (1.00 hours, 0.04 days)

There is a total of 1 auto-ban IP ranges.
-----------------------------------------------------------------------------------------------

INCOMING RELAYS
No entries
-----------------------------------------------------------------------------------------------

MIRRORING Disabled
-----------------------------------------------------------------------------------------------

PROTOCOLS

SMTP
GENERAL DELIVERY RFC COMPLIANCE ADVANCED
No. Connections: 50 No Retries: 4 Mins: 30 Plain Text: False Bind:
Host: EXTERNAL.TLD Empty sender: True Batch recipients: 20
Max Msg Size: 20480 Relay:- Incorrect endings: True Use STARTTLS: True
EXTERNAL.TLD (ok) Disc. on invalid: True Delivered-To hdr: True
Port: 25 Max number commands: 100 Loop limit: 5
Req Auth: False Recipient hosts: 10
Con. Sec.: None
Routes:
Poxxxxxxxxxxxxxxxx - Addresses: All (ok)
Sexxxxxxxx - Addresses: All (ok)
SMxxxxx - Addresses: All (ok)
spxxxxxxxxxxxxxxxx.co.uk - Addresses: All (ok)
Xexxx - Addresses: All (ok)

POP3
No. Connections: 50

IMAP
GENERAL PUBLIC FOLDERS ADVANCED
No. Connections: 0 Public folder name: #Public IMAP sort: True
IMAP Quota: True
IMAP Idle: True
IMAP ACL: True
Delim: "."
-----------------------------------------------------------------------------------------------

ANTISPAM

GENERAL SPAM TESTS Score SPAMASSASSIN
Spam Mark: 5 Use SPF: True - 3 Use Spamassassin: True
Add X-HmailServer-Spam: True Check HELO host: False Hostname: localhost
Add X-HmailServer-Reason: True Check MX records: True - 2 Port: 783
Add X-HmailServer-Subject: True Verify DKIM: True - 1 Use SA score: False - 5
Subject Text: "[SPAM]"
Spam delete threshold: 15 Maximum message size: 2048

DNSBL ENTRIES:
zen.spamhaus.org Score: 6 Result: 127.0.0.*
bl.spamcop.net Score: 2 Result: 127.0.0.*
psbl.surriel.com Score: 2 Result: 127.0.0.*
b.barracudacentral.org Score: 2 Result: 127.0.0.*

SURBL ENTRIES:
multi.surbl.org Score: 1

GREYLISTING:
Greylisting: False

WHITELISTING
0.0.0.0 to 255.255.255.255 as******@fr****x.y****t.local (MY ALTERATION)
-----------------------------------------------------------------------------------------------

ANTIVIRUS

GENERAL:
When found - Delete email. Notify Sender: True, Notify Receiver: True

Max Message Size: 0
CLAM AV: False
CLAMWIN: False
CUSTOMAV: True Executable: "C:\Program Files\ESET\ESET File Security\ecls.exe" /log-file=R:\hMail\EsetLogs\esetlog.txt /aind
ReturnValue: 50


Block Attachments: True
*.bat Batch processing file
*.cmd Command file for Windows NT
*.com Command
*.cpl Windows Control Panel extension
*.csh CSH script
*.exe Executable file
*.inf Setup file
*.lnk Windows link file
*.msi Windows Installer file
*.msp Windows Installer patch
*.reg Registration key
*.scf Windows Explorer command
*.scr Windows Screen saver
*.vbs VBScript
-----------------------------------------------------------------------------------------------

SSL/TLS
SSL 3.0 : True
TLS 1.0 : True
TLS 1.1 : True
TLS 1.2 : True Verify Remote SSL/TLS Certs: True
SslCipherList :

ECDHE-RSA-AES128-GCM-SHA256 - ECDHE-ECDSA-AES128-GCM-SHA256 - ECDHE-RSA-AES256-GCM-SHA384
ECDHE-ECDSA-AES256-GCM-SHA384 - DHE-RSA-AES128-GCM-SHA256 - DHE-DSS-AES128-GCM-SHA256
kEDH+AESGCM - ECDHE-RSA-AES128-SHA256 - ECDHE-ECDSA-AES128-SHA256
ECDHE-RSA-AES128-SHA - ECDHE-ECDSA-AES128-SHA - ECDHE-RSA-AES256-SHA384
ECDHE-ECDSA-AES256-SHA384 - ECDHE-RSA-AES256-SHA - ECDHE-ECDSA-AES256-SHA
DHE-RSA-AES128-SHA256 - DHE-RSA-AES128-SHA - DHE-DSS-AES128-SHA256
DHE-RSA-AES256-SHA256 - DHE-DSS-AES256-SHA - DHE-RSA-AES256-SHA
AES128-GCM-SHA256 - AES256-GCM-SHA384 - ECDHE-RSA-RC4-SHA
ECDHE-ECDSA-RC4-SHA - AES128 - AES256
RC4-SHA - HIGH - !aNULL
!eNULL - !EXPORT - !DES
!3DES - !MD5 - !PSK;
-----------------------------------------------------------------------------------------------

TCPIP PORTS Connection Sec
0.0.0.0 / 25 / SMTP - StartTLS Optional
0.0.0.0 / 110 / POP3 - StartTLS Optional
0.0.0.0 / 143 / IMAP - StartTLS Optional
0.0.0.0 / 587 / SMTP - StartTLS Optional
0.0.0.0 / 993 / IMAP - SSL/TLS
0.0.0.0 / 995 / POP3 - SSL/TLS
0.0.0.0 / 2525 / SMTP - None
-----------------------------------------------------------------------------------------------

LOGGING Logging Enabled: True

Paths:-
Current: C:\Program Files (x86)\hMailServer\Logs\hmailserver_2017-11-13.log
Error: C:\Program Files (x86)\hMailServer\Logs\ERROR_hmailserver_2017-11-13.log - !! ERRORS PRESENT !!
Event: C:\Program Files (x86)\hMailServer\Logs\hmailserver_events.log - Last Event: 2017/09/21
Awstats: C:\Program Files (x86)\hMailServer\Logs\hmailserver_awstats.log
APPLICATION - .
SMTP - True
POP3 - .
IMAP - .
TCPIP - .
DEBUG - .
AWSTATS - .
-----------------------------------------------------------------------------------------------

SYSTEM TESTS

Database type: MySQL

IPv6 support is available in operating system.

Backup directory C:\ is writable.

Relative message paths are stored in the database for all messages.

-----------------------------------------------------------------------------------------------

HMAILSERVER.INI

[Directories]
Program folder: C:\Program Files (x86)\hMailServer\
Database folder:
Data folder: R:\hMail\Data
Log folder: C:\Program Files (x86)\hMailServer\Logs
Temp folder: C:\Program Files (x86)\hMailServer\Temp
Event folder: C:\Program Files (x86)\hMailServer\Events

[Database]
Type= MYSQL
Username= ymonda
PasswordEncryption=1
Port= 3306
Server= 192.168.1.16
Internal= 0
-----------------------------------------------------------------------------------------------

[/code]
Generated by HMSSettingsDiagnostics v1.80, Hmailserver Forum.

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-13 18:07

I dont see anything obviously wrong with the setup, however, there are a number of things we cannot see in the report:

1, do you have whitelisting enabled in spamassassin (in the LOCAL.CF)?

2, what are your spamassassin scores/rules?

3, What rules do you have in play that are reacting on the scoring system?

4, What does your SPAMD.log file say when you receive an email? Does it show it being received and processed?

5, Presumably you are only referring to when receiving email from the INTERNET, confirm? (All other ip ranges have spam checking disabled).
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-13 18:30

Ive not checked the rest of your points yet, but this one immediately stood out....
jimimaseye wrote: Presumably you are only referring to when receiving email from the INTERNET, confirm? (All other ip ranges have spam checking disabled).
The email is coming from an external source (my yahoo test account).... however it passes through a proxy first before it hits hMail, so hMail would see 192.168.1.20.
Presumably you are saying that hMail will ignore this?

Paul

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-13 19:04

Yep

Code: Select all

IP: 192.168.1.20 - 192.168.1.20     Priority: 25     Name: Xeams Internal

  Allow connections                         Other
                                               Antispam :  False
IP: 192.168.1.20 - 192.168.1.20 ------ Antispam : False
(If HMS is seeing 192.168.1.20 as the connecting address)

Set it to TRUE. (Remeber it will only check if the connecting address is NOT an authenticated connection)
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-13 22:26

Bingo - once again a fantastic resonse - I do love hMail and somewhat more importantly, the hMail community!!

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-13 22:46

Sorry - 1 more question....I apologise in advance, its spamassassin related, but a different issue altogether.
Such a small thing though, I didnt see that i needed a whole new thread.

Im using Spamassassin within Windows (JAM).... previously been using SA on Ubuntu.

Where on earth are any spam logs in this Windows version?

Thanks

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-13 23:58

Where ever you have told them to be when installing the service (IF you have). Hints here: viewtopic.php?f=21&t=28133
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 00:44

Ha! It was this guide (your guide) that I used to install!! Cant bloody remember where I put them though....
Oh well...... now the search begins....

Thanks very much though

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-14 00:51

Hmailserver log directory? (Thats where I put mine).

If you use something like PROCESS EXPLORER (from sysinternals), find the NSSM process and its sub-process 'spamd.exe' and it will tell you what the parameters are that it is running as including the log file (spamd.log) location.

eg
"C:\Program Files\JAM Software\SpamAssassin for Windows\spamd.exe" -l -s "C:\Program Files (x86)\hMailServer\Logs\spamd.log" --round-robin --timeout-child=85
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 00:58

Ive now found the log location I created, but I have no logs!
I was expecting some logs to show that it is now trapping spam - but I have no files at all.
Presumably I should?

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-14 01:01

If the service has started, yes. And every time HMS passes a message to it for scanning (3 lines each time).
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 01:21

Hmmmm - Event Viewer confirms the log location - hmail shows 5 spam caught. Log location completely empty.
Are there any config files I should check?

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-14 01:23

Sorry I know nothing more than already written. Is the log location writable?
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 01:24

Local disk - fully writable as far as I can tell.

No problem - thanks for your help.

User avatar
mattg
Moderator
Moderator
Posts: 20231
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Spamassassin

Post by mattg » 2017-11-14 01:28

try creating a dummy (empty) file of the same name first, ensuring that the user running JamSA service has all appropriate permissions

I've seen some things before where the service can only change existing files, not create new ones
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 01:31

Hi Matt

Just tried that - created a spamd.log in the location and did a click of the 'Test' button - should the Test button create a log entry.... because its still not made any difference.

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-14 01:35

Tried recreating the process and place the log file in the hmailserver logs directory?

Example Spamd.log file:
[code]
Thu Oct 12 08:05:17 2017 [960] info: spamd: server started on IO::Socket::INET [127.0.0.1]:783 (running version 3.4.0)
Thu Oct 12 08:05:17 2017 [960] info: spamd: server pid: 960
Thu Oct 12 08:05:17 2017 [960] info: spamd: server successfully spawned child process, pid -2212
Thu Oct 12 08:16:13 2017 [-2212] info: spamd: connection from mailserver [127.0.0.1]:49227 to port 783, fd 6
Thu Oct 12 08:16:13 2017 [-2212] info: spamd: processing message <100139.6787728399.201710120710562487593.0031747085@mail.evans.net> for (unknown):0
Thu Oct 12 08:16:13 2017 [960] info: spamd: server successfully spawned child process, pid -3584
Thu Oct 12 08:16:15 2017 [-2212] info: spamd: clean message (-3.7/3.0) for (unknown):0 in 1.9 seconds, 22091 bytes.
Thu Oct 12 08:16:15 2017 [-2212] info: spamd: result: . -3 - BAYES_00,DKIM_SIGNED,HTML_IMAGE_RATIO_02,HTML_MESSAGE,KHOP_RCVD_TRUST,RCVD_IN_DNSWL_NONE,RCVD_IN_HOSTKARMA_W,RCVD_IN_HOSTKARMA_WL,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,RP_MATCHES_RCVD,SPF_PASS,SUBJ_ALL_CAPS,T_DKIM_INVALID scantime=1.9,size=22091,user=(unknown),uid=0,required_score=3.0,rhost=mailserver,raddr=127.0.0.1,rport=49227,mid=<100139.6787728399.201710120710562487593.0031747085@mail.evans.net>,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no
Thu Oct 12 09:30:19 2017 [-3584] info: spamd: connection from mailserver [127.0.0.1]:49509 to port 783, fd 6
Thu Oct 12 09:30:19 2017 [-3584] info: spamd: processing message <6C0D7B228BE448F6AAB84ADE11B1BF54.MAI@relay.gouldhall.net> for (unknown):0
Thu Oct 12 09:30:21 2017 [-3584] info: spamd: clean message (0.5/3.0) for (unknown):0 in 1.4 seconds, 8908 bytes.
Thu Oct 12 09:30:21 2017 [-3584] info: spamd: result: . 0 - BAYES_00,HTML_IMAGE_ONLY_24,HTML_MESSAGE,MPART_ALT_DIFF,SPF_PASS,T_REMOTE_IMAGE scantime=1.4,size=8908,user=(unknown),uid=0,required_score=3.0,rhost=mailserver,raddr=127.0.0.1,rport=49509,mid=<6C0D7B228BE448F6AAB84ADE11B1BF54.MAI@relay.gouldhall.net>,bayes=0.000000,autolearn=no autolearn_force=no,shortcircuit=no[/code]
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 01:54

Ok - fixed - dont understand why, but I can explain my steps...and thanks guys for your patience and help.


Here are my steps for if someone else searches this......

At an elevated command prompt:

sc stop spamassassin #(spamassassin is my service name - replace with whatever you called yours)
sc delete spamassassin

Run the nssm installer as per viewtopic.php?f=21&t=28133 and use all the settings as in the guide but dont use the --round-robin parameter.

User avatar
mattg
Moderator
Moderator
Posts: 20231
Joined: 2007-06-14 05:12
Location: 'The Outback' Australia

Re: Spamassassin

Post by mattg » 2017-11-14 02:38

Perhaps this is caused by hMailsevrer service calling the SpamAssassin Service and the hMailserver credentials are used... :?

Glad you have it sorted
Just 'cause I link to a page and say little else doesn't mean I am not being nice.
https://www.hmailserver.com/documentation

User avatar
jimimaseye
Moderator
Moderator
Posts: 8157
Joined: 2011-09-08 17:48

Re: Spamassassin

Post by jimimaseye » 2017-11-14 09:39

paultilley100 wrote:Ok - fixed - dont understand why, but I can explain my steps...and thanks guys for your patience and help.
..
Thanks for updating. All a little strnage but at least its now going.

BTW (unrelated), did you notice: "Greylisting: !! ENABLED BUT NOT ACTIVATED!! " throughout your report? You have those domains enabled for greylisting but you know the function itself is disabled so its not actually doing anything?
HMS 5.6.6 B2383 on Win Server 2008 R2 Foundation, + 5.6.7-B2415 on test.
SpamassassinForWindows 3.4.0 spamd service
AV: Clamwin + Clamd service + sanesecurity defs : https://www.hmailserver.com/forum/viewtopic.php?f=21&t=26829

paultilley100
Normal user
Normal user
Posts: 72
Joined: 2017-01-05 23:48

Re: Spamassassin

Post by paultilley100 » 2017-11-14 12:50

Thankyou for the heads up, but yes I am aware. The proxy (Xeams) is doing this for me before it gets to HMS.


Paul

Post Reply