Koozali.org: home of the SME Server

Email Issue: Whitelist does not work?

Offline ghorst352

  • ****
  • 180
  • +0/-0
Email Issue: Whitelist does not work?
« on: May 01, 2012, 08:00:57 PM »
Currently running SME Server 7.5.1 as a dedicated email server.  Right now I am having a problem with one outside contact who generates invoices with a scanner and then at a certain time of the day the invoice is emailed to our accounts payable dpt email address.  We probably receive about 6 emails every week from this contact and only recently started getting this issue were the client is getting a bounce back.  Below you will find the exact error produced within the qpsmptd log file.  I have already white listed the ip address of the sender, the sender @addresss and I still cannot receive emails from this automated generated email for invoices.  We can send emails back and forth its only with this automated email from MTARBOX@METALPLATE.COM going to accountspayable@ourdomain do we have an issue.     :shock:


012-05-01 13:07:51.709977500 24832 Accepted connection 0/40 from 67.220.101.207 / vsmail.digitrends.com
2012-05-01 13:07:51.709978500 24832 Connection from vsmail.digitrends.com [67.220.101.207]
2012-05-01 13:07:51.709980500 24832 running plugin (set_hooks): peers
2012-05-01 13:07:51.714970500 24832 peers hooking valid_auth
2012-05-01 13:07:51.714972500 24832 peers hooking set_hooks
2012-05-01 13:07:51.714973500 24832 logging::logterse hooking queue
2012-05-01 13:07:51.714975500 24832 logging::logterse hooking deny
2012-05-01 13:07:51.714976500 24832 tls plugin (init): ciphers: ALL:!aNULL:!ADH:!eNULL:!LOW:!EXP:RC4+RSA:+HIGH:+MEDIUM
2012-05-01 13:07:51.714977500 24832 tls hooking connect
2012-05-01 13:07:51.714979500 24832 tls hooking ehlo
2012-05-01 13:07:51.714980500 24832 tls hooking helo
2012-05-01 13:07:51.714981500 24832 tls hooking rcpt
2012-05-01 13:07:51.714990500 24832 tls hooking mail
2012-05-01 13:07:51.714991500 24832 tls hooking data
2012-05-01 13:07:51.714992500 24832 tls hooking post-connection
2012-05-01 13:07:51.714994500 24832 tls hooking unrecognized_command
2012-05-01 13:07:51.714995500 24832 check_earlytalker hooking connect
2012-05-01 13:07:51.714996500 24832 check_earlytalker hooking data
2012-05-01 13:07:51.714997500 24832 whitelist_soft hooking connect
2012-05-01 13:07:51.714999500 24832 whitelist_soft hooking helo
2012-05-01 13:07:51.715002500 24832 whitelist_soft hooking ehlo
2012-05-01 13:07:51.715004500 24832 whitelist_soft hooking mail
2012-05-01 13:07:51.715005500 24832 whitelist_soft hooking rcpt
2012-05-01 13:07:51.715006500 24832 count_unrecognized_commands hooking connect
2012-05-01 13:07:51.715008500 24832 count_unrecognized_commands hooking unrecognized_command
2012-05-01 13:07:51.715009500 24832 check_relay hooking connect
2012-05-01 13:07:51.715010500 24832 check_norelay hooking connect
2012-05-01 13:07:51.715014500 24832 require_resolvable_fromhost hooking mail
2012-05-01 13:07:51.715015500 24832 check_basicheaders hooking data_post
2012-05-01 13:07:51.715017500 24832 check_badcountries hooking connect
2012-05-01 13:07:51.715018500 24832 rhsbl hooking rcpt
2012-05-01 13:07:51.715024500 24832 rhsbl hooking mail
2012-05-01 13:07:51.715025500 24832 rhsbl hooking disconnect
2012-05-01 13:07:51.715026500 24832 dnsbl hooking connect
2012-05-01 13:07:51.715027500 24832 dnsbl hooking rcpt
2012-05-01 13:07:51.715029500 24832 dnsbl hooking disconnect
2012-05-01 13:07:51.715030500 24832 check_badmailfrom hooking rcpt
2012-05-01 13:07:51.715031500 24832 check_badmailfrom hooking mail
2012-05-01 13:07:51.715032500 24832 check_badrcptto_patterns hooking rcpt
2012-05-01 13:07:51.715036500 24832 check_badrcptto hooking rcpt
2012-05-01 13:07:51.717101500 24832 check_spamhelo hooking ehlo
2012-05-01 13:07:51.717103500 24832 check_spamhelo hooking helo
2012-05-01 13:07:51.717104500 24832 check_goodrcptto hooking rcpt
2012-05-01 13:07:51.717106500 24832 rcpt_ok hooking rcpt
2012-05-01 13:07:51.717107500 24832 virus::pattern_filter hooking data_post
2012-05-01 13:07:51.717108500 24832 tnef2mime hooking data_post
2012-05-01 13:07:51.717109500 24832 spamassassin hooking data_post
2012-05-01 13:07:51.717111500 24832 spamassassin hooking data_post
2012-05-01 13:07:51.717112500 24832 spamassassin hooking data_post
2012-05-01 13:07:51.717120500 24832 virus::clamav hooking data_post
2012-05-01 13:07:51.717121500 24832 queue::qmail_2dqueue hooking queue
2012-05-01 13:07:51.717123500 24832 Plugin peers, hook set_hooks returned DECLINED,
2012-05-01 13:07:51.717124500 24832 running plugin (connect): tls
2012-05-01 13:07:51.717125500 24832 Plugin tls, hook connect returned DECLINED,
2012-05-01 13:07:51.717127500 24832 running plugin (connect): check_earlytalker
2012-05-01 13:07:52.719962500 24832 check_earlytalker plugin (connect): remote host said nothing spontaneous, proceeding
2012-05-01 13:07:52.719965500 24832 Plugin check_earlytalker, hook connect returned DECLINED,
2012-05-01 13:07:52.719966500 24832 running plugin (connect): whitelist_soft
2012-05-01 13:07:52.719968500 24832 trying to get config for whitelisthosts
2012-05-01 13:07:52.719969500 24832 Plugin whitelist_soft, hook connect returned DECLINED,
2012-05-01 13:07:52.719970500 24832 running plugin (connect): count_unrecognized_commands
2012-05-01 13:07:52.719978500 24832 Plugin count_unrecognized_commands, hook connect returned DECLINED,
2012-05-01 13:07:52.719979500 24832 running plugin (connect): check_relay
2012-05-01 13:07:52.719981500 24832 trying to get config for relayclients
2012-05-01 13:07:52.719982500 24832 trying to get config for morerelayclients
2012-05-01 13:07:52.719983500 24832 Plugin check_relay, hook connect returned DECLINED,
2012-05-01 13:07:52.719985500 24832 running plugin (connect): check_norelay
2012-05-01 13:07:52.719999500 24832 trying to get config for norelayclients
2012-05-01 13:07:52.720000500 24832 Plugin check_norelay, hook connect returned DECLINED,
2012-05-01 13:07:52.720001500 24832 running plugin (connect): check_badcountries
2012-05-01 13:07:52.720003500 24832 check_badcountries plugin (connect): GeoIP Country: US
2012-05-01 13:07:52.720004500 24832 trying to get config for badcountries
2012-05-01 13:07:52.720005500 24832 Plugin check_badcountries, hook connect returned DECLINED,
2012-05-01 13:07:52.720009500 24832 running plugin (connect): dnsbl
2012-05-01 13:07:52.720015500 24832 dnsbl plugin (connect): RBLSMTPD not set for 67.220.101.207
2012-05-01 13:07:52.720017500 24832 trying to get config for dnsbl_allow
2012-05-01 13:07:52.720018500 24832 trying to get config for dnsbl_zones
2012-05-01 13:07:52.720020500 24832 dnsbl plugin (connect): Checking 207.101.220.67.zen.spamhaus.org for TXT record in the background
2012-05-01 13:07:52.721334500 24832 dnsbl plugin (connect): Checking 207.101.220.67.dnsbl.njabl.org for TXT record in the background
2012-05-01 13:07:52.721336500 24832 dnsbl plugin (connect): Checking 207.101.220.67.whois.rfc-ignorant.org for TXT record in the background
2012-05-01 13:07:52.721338500 24832 Plugin dnsbl, hook connect returned DECLINED,
2012-05-01 13:07:52.721341500 24832 trying to get config for smtpgreeting
2012-05-01 13:07:52.721343500 24832 220 mail.ourdomain.com ESMTP
2012-05-01 13:07:52.721344500 24832 trying to get config for timeoutsmtpd
2012-05-01 13:07:52.755442500 24832 dispatching EHLO vsmail.digitrends.com
2012-05-01 13:07:52.755443500 24832 running plugin (ehlo): tls
2012-05-01 13:07:52.755447500 24832 Plugin tls, hook ehlo returned DECLINED,
2012-05-01 13:07:52.755448500 24832 running plugin (ehlo): whitelist_soft
2012-05-01 13:07:52.755449500 24832 trying to get config for whitelisthelo
2012-05-01 13:07:52.755451500 24832 Plugin whitelist_soft, hook ehlo returned DECLINED,
2012-05-01 13:07:52.755452500 24832 running plugin (ehlo): check_spamhelo
2012-05-01 13:07:52.755453500 24832 trying to get config for badhelo
2012-05-01 13:07:52.755460500 24832 Plugin check_spamhelo, hook ehlo returned DECLINED,
2012-05-01 13:07:52.755462500 24832 trying to get config for tls_before_auth
2012-05-01 13:07:52.755463500 24832 trying to get config for me
2012-05-01 13:07:52.755464500 24832 trying to get config for databytes
2012-05-01 13:07:52.755466500 24832 250-ourdomain Hi vsmail.digitrends.com [67.220.101.207]
2012-05-01 13:07:52.755467500 24832 250-PIPELINING
2012-05-01 13:07:52.755468500 24832 250-8BITMIME
2012-05-01 13:07:52.755472500 24832 250-SIZE 20000000
2012-05-01 13:07:52.755473500 24832 250 STARTTLS
2012-05-01 13:07:52.813952500 24832 dispatching MAIL FROM:<MTARBOX@METALPLATE.COM> SIZE=58693
2012-05-01 13:07:52.813954500 24832 full from_parameter: FROM:<MTARBOX@METALPLATE.COM> SIZE=58693
2012-05-01 13:07:52.813956500 24832 from email address : [<MTARBOX@METALPLATE.COM>]
2012-05-01 13:07:52.813957500 24832 running plugin (mail): tls
2012-05-01 13:07:52.813958500 24832 Plugin tls, hook mail returned DECLINED,
2012-05-01 13:07:52.813960500 24832 running plugin (mail): whitelist_soft
2012-05-01 13:07:52.813961500 24832 trying to get config for whitelistsenders
2012-05-01 13:07:52.813970500 24832 Plugin whitelist_soft, hook mail returned DECLINED,
2012-05-01 13:07:52.813971500 24832 running plugin (mail): require_resolvable_fromhost
2012-05-01 13:07:52.813972500 24832 trying to get config for invalid_resolvable_fromhost
2012-05-01 13:07:52.813974500 24832 trying to get config for require_resolvable_fromhost
2012-05-01 13:07:52.973740500 24832 Plugin require_resolvable_fromhost, hook mail returned DECLINED,
2012-05-01 13:07:52.973771500 24832 running plugin (mail): rhsbl
2012-05-01 13:07:52.973855500 24832 trying to get config for rhsbl_zones
2012-05-01 13:07:52.974005500 24832 rhsbl plugin (mail): Checking METALPLATE.COM.dsn.rfc-ignorant.org for TXT record in the background
2012-05-01 13:07:52.974618500 24832 Plugin rhsbl, hook mail returned DECLINED,
2012-05-01 13:07:52.974646500 24832 running plugin (mail): check_badmailfrom
2012-05-01 13:07:52.974685500 24832 trying to get config for badmailfrom
2012-05-01 13:07:52.975152500 24832 Plugin check_badmailfrom, hook mail returned DECLINED,
2012-05-01 13:07:52.975223500 24832 getting mail from <MTARBOX@METALPLATE.COM>
2012-05-01 13:07:52.975263500 24832 250 <MTARBOX@METALPLATE.COM>, sender OK - how exciting to get mail from you!
2012-05-01 13:07:53.010897500 24832 dispatching RCPT To:<ACCOUNTSPAYABLE@OURDOMAIN>
2012-05-01 13:07:53.010899500 24832 to email address : [<ACCOUNTSPAYABLE@OURDOMAIN>]
2012-05-01 13:07:53.010900500 24832 running plugin (rcpt): tls
2012-05-01 13:07:53.010902500 24832 Plugin tls, hook rcpt returned DECLINED,
2012-05-01 13:07:53.010903500 24832 running plugin (rcpt): whitelist_soft
2012-05-01 13:07:53.010904500 24832 trying to get config for whitelistrcpt
2012-05-01 13:07:53.010906500 24832 Plugin whitelist_soft, hook rcpt returned DECLINED,
2012-05-01 13:07:53.010915500 24832 running plugin (rcpt): rhsbl
2012-05-01 13:07:53.010916500 24832 rhsbl plugin (rcpt): waiting for rhsbl dns
2012-05-01 13:07:54.114931500 24832 rhsbl plugin (rcpt): DONE waiting for rhsbl dns, got  1  answers ...
2012-05-01 13:07:54.114933500 24832 Plugin rhsbl, hook rcpt returned DECLINED,
2012-05-01 13:07:54.114935500 24832 running plugin (rcpt): dnsbl
2012-05-01 13:07:54.114936500 24832 dnsbl plugin (rcpt): waiting for dnsbl dns
2012-05-01 13:07:54.114937500 24832 dnsbl plugin (rcpt): DONE waiting for dnsbl dns, got  3  answers ...
2012-05-01 13:07:54.114939500 24832 Plugin dnsbl, hook rcpt returned DECLINED,
2012-05-01 13:07:54.114940500 24832 running plugin (rcpt): check_badmailfrom
2012-05-01 13:07:54.114948500 24832 Plugin check_badmailfrom, hook rcpt returned DECLINED,
2012-05-01 13:07:54.114949500 24832 running plugin (rcpt): check_badrcptto_patterns
2012-05-01 13:07:54.114951500 24832 trying to get config for badrcptto_patterns
2012-05-01 13:07:54.114952500 24832 Plugin check_badrcptto_patterns, hook rcpt returned DECLINED,
2012-05-01 13:07:54.114954500 24832 running plugin (rcpt): check_badrcptto
2012-05-01 13:07:54.114955500 24832 trying to get config for badrcptto
2012-05-01 13:07:54.114959500 24832 Plugin check_badrcptto, hook rcpt returned DECLINED,
2012-05-01 13:07:54.114960500 24832 running plugin (rcpt): check_goodrcptto
2012-05-01 13:07:54.114961500 24832 check_goodrcptto plugin (rcpt): stripping '-' extensions
2012-05-01 13:07:54.114963500 24832 trying to get config for goodrcptto
2012-05-01 13:07:54.114964500 24832 check_goodrcptto plugin (rcpt): address includes extn '-', checking users: accountspayable
2012-05-01 13:07:54.114966500 24832 Plugin check_goodrcptto, hook rcpt returned DECLINED,
2012-05-01 13:07:54.114972500 24832 running plugin (rcpt): rcpt_ok
2012-05-01 13:07:54.114973500 24832 trying to get config for rcpthosts
2012-05-01 13:07:54.114974500 24832 Plugin rcpt_ok, hook rcpt returned OK,
2012-05-01 13:07:54.115035500 24832 250 <ACCOUNTSPAYABLE@OURDOMAIN>, recipient ok
2012-05-01 13:07:54.147749500 24832 dispatching DATA
2012-05-01 13:07:54.147751500 24832 running plugin (data): tls
2012-05-01 13:07:54.147752500 24832 Plugin tls, hook data returned DECLINED,
2012-05-01 13:07:54.147754500 24832 running plugin (data): check_earlytalker
2012-05-01 13:07:54.147755500 24832 Plugin check_earlytalker, hook data returned DECLINED,
2012-05-01 13:07:54.147757500 24832 354 go ahead
2012-05-01 13:07:54.147758500 24832 max_size: 20000000 / size: 0
2012-05-01 13:07:54.147759500 24832 trying to get config for timeout
2012-05-01 13:07:54.180451500 24832 spooling message to disk
2012-05-01 13:07:55.396912500 24832 max_size: 20000000 / size: 57920
2012-05-01 13:07:55.396913500 24832 running plugin (data_post): check_basicheaders
2012-05-01 13:07:55.396915500 24832 Plugin check_basicheaders, hook data_post returned DECLINED,
2012-05-01 13:07:55.396916500 24832 running plugin (data_post): virus::pattern_filter
2012-05-01 13:07:55.396918500 24832 trying to get config for pattern_filter
2012-05-01 13:07:55.396919500 24832 trying to get config for signatures_patterns
2012-05-01 13:07:55.396921500 24832 Plugin virus::pattern_filter, hook data_post returned DECLINED,
2012-05-01 13:07:55.396938500 24832 running plugin (data_post): tnef2mime
2012-05-01 13:07:55.406911500 24832 Plugin tnef2mime, hook data_post returned DECLINED,
2012-05-01 13:07:55.406913500 24832 running plugin (data_post): spamassassin
2012-05-01 13:07:55.406915500 24832 spamassassin plugin (data_post): check_spam
2012-05-01 13:07:55.406916500 24832 spamassassin plugin (data_post): check_spam: connected to spamd
2012-05-01 13:07:55.418910500 24832 spamassassin plugin (data_post): check_spam: finished sending to spamd
2012-05-01 13:08:00.634592500 24832 spamassassin plugin (data_post): check_spam: spamd: SPAMD/1.1 0 EX_OK
2012-05-01 13:08:00.634746500 24832 spamassassin plugin (data_post): check_spam: spamd: Content-length: 166
2012-05-01 13:08:00.634748500 24832 spamassassin plugin (data_post): check_spam: spamd: Spam: True ; 6.0 / 5.0
2012-05-01 13:08:00.634749500 24832 spamassassin plugin (data_post): check_spam: spamd:
2012-05-01 13:08:00.637106500 24832 spamassassin plugin (data_post): check_spam: finished reading from spamd
2012-05-01 13:08:00.637108500 24832 spamassassin plugin (data_post): check_spam: Yes, hits=6.0, required=5.0, tests=DATE_IN_PAST_03_06,HTML_IMAGE_ONLY_04,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RCVD_IN_DNSWL_NONE,SPF_HELO_PASS,SUBJ_ALL_CAPS,T_REMOTE_IMAGE,UPPERCASE_75_100
2012-05-01 13:08:00.637111500 24832 Plugin spamassassin, hook data_post returned DECLINED,
2012-05-01 13:08:00.637112500 24832 running plugin (data_post): spamassassin
2012-05-01 13:08:00.637119500 24832 spamassassin plugin (data_post): check_spam_reject: reject_threshold=6
2012-05-01 13:08:00.637120500 24832 spamassassin plugin (data_post): check_spam_reject: score=6.0
2012-05-01 13:08:00.637122500 24832 Plugin spamassassin, hook data_post returned DENY, spam score exceeded threshold (#5.6.1)
2012-05-01 13:08:00.637124500 24832 logging::logterse plugin (deny): ` 67.220.101.207   vsmail.digitrends.com   vsmail.digitrends.com   <MTARBOX@METALPLATE.COM>   <ACCOUNTSPAYABLE@OURDOMAIN>   spamassassin   901   spam score exceeded threshold (#5.6.1)   Yes, hits=6.0 required=5.0_
2012-05-01 13:08:00.637129500 24832 552 spam score exceeded threshold (#5.6.1)
2012-05-01 13:08:00.672830500 24832 dispatching QUIT
2012-05-01 13:08:00.672832500 24832 221 ourdomain closing connection. Have a wonderful day.
2012-05-01 13:08:00.672834500 24832 click, disconnecting
2012-05-01 13:08:00.672835500 24832 running plugin (disconnect): rhsbl
2012-05-01 13:08:00.672837500 24832 Plugin rhsbl, hook disconnect returned DECLINED,
2012-05-01 13:08:00.672838500 24832 running plugin (disconnect): dnsbl
2012-05-01 13:08:00.672839500 24832 Plugin dnsbl, hook disconnect returned DECLINED,
2012-05-01 13:08:00.672841500 24832 running plugin (post-connection): tls
2012-05-01 13:08:00.672858500 24832 Plugin tls, hook post-connection returned DECLINED,

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: Email Issue: Whitelist does not work?
« Reply #1 on: May 01, 2012, 08:11:02 PM »
As far I can see on:
67.220.101.207   vsmail.digitrends.com   vsmail.digitrends.com   <MTARBOX@METALPLATE.COM>   <ACCOUNTSPAYABLE@OURDOMAIN>   spamassassin   901   spam score exceeded threshold (#5.6.1)   Yes, hits=6.0 required=5.0_
2012-05-01 13:08:00.637129500 24832 552 spam score exceeded threshold (#5.6.1)
2012-05-01 13:08:00.672830500 24832 dispatching QUIT
2012-05-01 13:08:00.672832500 24832 221 ourdomain closing connection. Have a wonderful day.

Your server think message is spam.
add sourceuser@yourpartnetdomain.tld  to whitelist (all of them if necessary/in doubt)

...

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #2 on: May 01, 2012, 08:14:34 PM »
Already did that.  Is there a way by command line to legitimately view the active whitelist?  Also is there a way to restart the process or service responsible for the whitelist?   :)

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: Email Issue: Whitelist does not work?
« Reply #3 on: May 01, 2012, 08:37:35 PM »
Already did that.  Is there a way by command line to legitimately view the active whitelist?
For me, this show it:
Code: [Select]
db spamassassin show
Quote
Also is there a way to restart the process or service responsible for the whitelist?   :)
not 100% sure, but I think
Code: [Select]
service spamassassin restart
will do it! Try on!
...

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #4 on: May 01, 2012, 08:52:08 PM »
Still doesn't work.

That command is only for the spam whitelist_from.  The others to restart I figured out are by issuing 'service qpsmtpd restart', FYI.

qpsmtpd whitelisthosts
qpsmtpd whitelisthelo
qpsmtpd whitelistsenders
spamassassin whitelist_from

« Last Edit: May 01, 2012, 08:57:31 PM by bhay3s »

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: Email Issue: Whitelist does not work?
« Reply #5 on: May 01, 2012, 09:10:12 PM »
try this one:
Code: [Select]
db wbl show

and I'm sure update any of them using web interface will restart all services to became active immediatly.

BTW: your problem was being considerated spam... so my last command should work... I'm getting lost!

 
...

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #6 on: May 01, 2012, 09:13:47 PM »
try this one:
Code: [Select]
db wbl show

and I'm sure update any of them using web interface will restart all services to became active immediatly.

BTW: your problem was being considerated spam... so my last command should work... I'm getting lost!

 

It does but I just wanted to make doubly sure.  This is real strange as I have this thing whitelisted from top to bottom and it still sees it as spam.  Right now I am going to have the client log into the MTARBOX@METALPLATE.COM account via the webclient and send a test email to see if that goes threw. 

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #7 on: May 01, 2012, 10:11:03 PM »
Will I just confirmed that by having the client log into the webclient of the MTARBOX@METALPLATE.COM account and sending a test email to our accountspayable works.  The issue is 100% with the automated email that includes a pdf attached invoice.  Now this is where it gets good.....I just confirmed that they changed the format of the invoice last week which is when the issue started.  I have both an invoice from 2 weeks ago and one from this week and the difference is the older invoice is just a scanned invoice that is written on paper, whereas the newer is a digitized format (filled in pdf doc).  This still makes no sense as we send/receive pdf's all day long, of every kind of format, it's part of what we do as a business.  MAKES NO SENSE  :sad:

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: Email Issue: Whitelist does not work?
« Reply #8 on: May 01, 2012, 11:38:59 PM »
So it's the content the problem... but there are any filters about content in your install ?
I'm not sure what filters have in place in SME...

How big are these new PDFs ?
Find out the EXACT return code bounces back to client. Must be a 5.x.y code + a short text message.

...

Offline mmccarn

  • *
  • 2,626
  • +10/-0
Re: Email Issue: Whitelist does not work?
« Reply #9 on: May 02, 2012, 12:49:46 PM »
Their scanner has the wrong date set:
Quote
tests=DATE_IN_PAST_03_06,HTML_IMAGE_ONLY_04,...

The default score for the DATE_IN_PAST_03_06 is over 1 - so if they fix the date on their scanner the score for this email will fall below your spam threshhold.


Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: Email Issue: Whitelist does not work?
« Reply #10 on: May 02, 2012, 12:56:36 PM »
mmcarn

Great catch... I did not see that and:
1) even if DATE_IN_PAST is over 1, they will be very close to limit value (5). Shouldn't a white list work and be more efective ?
2) where I can see what value has each check of SpamAssassin ?
3) do you know why to add e-mail address in whitelist of SA do not release it from being checked ?
...

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #11 on: May 02, 2012, 01:25:43 PM »
I am waiting to talk to the client to advise on the possible date/time issue.   Its failing w/ the spamassassin checks so I could also add the smtp relay server if you notice in the log which is vsmail.digitrends.com to the whitelist as well.  See right now I only have '@metalplate.com' in the particular white list so maybe by adding 'vsmail.digitrends.com' to that list? but the format says the following:

Any envelope sender of a mail (*@host or user@host) matching an entry in whitelist_from will be exempted from spamassassin rejection.

so not sure if that would work.  Obviously I could raise the level to 7 but I think it would be smarter first like you said to coordinate w/ the client and review the time/date of their scanner first.

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #12 on: May 02, 2012, 08:41:45 PM »
Will the time stamp was not the issue as I had the client check so at this point since for whatever reason the whitelist does not work for this particular client, this I cannot possibly understand.  Anyways I am raising the spam rejection level from 6 to 7 and see if that works.  Beyond that I am dumbfounded?  Maybe this is a bug?

Offline janet

  • ****
  • 4,812
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #13 on: May 02, 2012, 11:34:15 PM »
bhay3s

You were asked earlier to provide the EXACT return message the client (ie the originating sender) is receiving. Please do so, ie the full message please.

Also please confirm exactly what/where/which whitelists you are adding entries to, is it a contrib you have installed, if so which one ? Please describe fully.

Also your dedicated sme mail server, is it a gateway server configuration ? Please describe fully the network layout and where this machine is connected etc and what other servers are in the "mix" ? Thanks
Please search before asking, an answer may already exist.
The Search & other links to useful information are at top of Forum.

Offline ghorst352

  • ****
  • 180
  • +0/-0
Re: Email Issue: Whitelist does not work?
« Reply #14 on: May 03, 2012, 01:39:06 PM »
(Issue has been resolved)  :-P

I discovered this morning that the emails would go threw if they were sent directly to the accounts payable real email address 'carolyn@ourdomain.com' rather than the Pseudonym 'accountspayable@ourdomain.com'.  I don't have an explanation for this but here is the bounce email below.


Body of message generated response:
552 spam score exceeded threshold (#5.6.1)



Original message follows.

Received: from METALP01.METALP01 [50.58.253.6] by vsmail.digitrends.com with ESMTP
  (SMTPD-11.5) id 1c11000083a1d064; Mon, 30 Apr 2012 19:01:58 -0500
Sender: "MARIE TARBOX - METALPLATE" <MTARBOX@METALPLATE.COM>
Date: Sun, 30 Apr 2012 19:00:10 +0000
From: "MARIE TARBOX - METALPLATE" <MTARBOX@METALPLATE.COM>
MIME-Version: 1.0
To: "CAROLYN WHITEHEAD" <ACCOUNTSPAYABLE@OURDOMAIN>
Cc: "MARIE TARBOX" <MTARBOX@METALPLATE.COM>,
         "GRANT HAUTH" <GHAUTH@METALPLATE.COM>
Subject: METALPLATE - DIXIE PRODUCTS, INC. - ORDER# 119562
Content-Type: multipart/mixed; boundary="--PART.BOUNDARY.1"
Message-Id: <201204301902382.SM33697@METALP01.METALP01>

This is a multi-part message in MIME format.

----PART.BOUNDARY.1
Content-Type: text/html; charset=us-ascii
Content-Transfer-Encoding: 7bit

<img src="http://www.metalplate.com/mpl.jpg" /> ORDER# 119562-->>

-->>THIS EMAIL IS AUTOMATICALLY GENERATED AND IS UNABLE TO ACCOMODATE REPLIES.
 PLEASE CONTACT METALPLATE AT YOUR NEAREST LOCATION IF YOU HAVE ANY
 QUESTIONS.  AS ALWAYS, THANK YOU FOR YOUR BUSINESS!

TERMS AND CONDITIONS: WWW.METALPLATE.COM/PAPERLESS.PHP





----PART.BOUNDARY.1
Content-Type: application/binhex-stream; name="JOB5665-1, INV#=119562,INVOICE 1AAAE1YW.PDF"
Content-Transfer-Encoding: Base64
Content-Disposition: attachment; filename="JOB5665-1, INV#=119562,INVOICE 1AAAE1YW.PDF"

JVBERi0xLjIKJcjIyMgKMSAwIG9iago8PAovQ3JlYXRpb25EYXRlICgxOTowMDoxMCAwNC8zMC8x
MikKL1Byb2R1Y2VyIChcMjUxIFJlYWwgVmlzaW9uIFNvZnR3YXJlLCBJbmMsIDIwMDMpCi9DcmVh
dG9yIChSVkNWVDJQREYsIFJlYWwgVmlzaW9uIFNvZnR3YXJlLCBJbmMuKQovVGl0bGUgKFBERjI2
NDMuUERGKQo+PgplbmRvYmoKMiAwIG9iago8PAovVHlwZSAvQ2F0YWxvZwovUGFnZXMgMyAwIFIK
Pj4KZW5kb2JqCjQgMCBvYmoKPDwgL1R5cGUgL1hvYmplY3QgL1N1YnR5cGUgL0ltYWdlIC9OYW1l
IC9JT1AxCi9XaWR0aCAyNTUwIC9IZWlnaHQgMzMwMAovQml0c1BlckNvbXBvbmVudCA4Ci9Db2xv
clNwYWNlIC9EZXZpY2VHcmF5Ci9GaWx0ZXIgL0RDVERlY29kZQovTGVuZ3RoIDUgMCBSID4+CnN0
cmVhbQr/2P/gABBKRklGAAEBAQEsASwAAP/bAEMAAwICAwICAwMDAwQDAwQFCAUFBAQFCgcHBggM
CgwMCwoLCw0OEhANDhEOCwsQFhARExQVFRUMDxcYFhQYEhQVFP/AAAsIDOQJ9gEBEQD/xAAeAAEA

[message truncated]