From marc at merlins.org Sun Aug 27 07:28:36 2006 From: marc at merlins.org (Marc MERLIN) Date: Sun, 27 Aug 2006 07:28:36 -0700 Subject: [SA-exim] SA being bypassed or not processing some mails In-Reply-To: References: Message-ID: <20060827142836.GK5627@merlins.org> On Sat, Aug 26, 2006 at 08:49:32PM -0400, rec9140 at gmail.com wrote: > I have an issue with Exim and SA on a remote host where SA is not processing > some mails but is processing others. > > Exim: V4.52 > SA: V3.1.4 > Linux Host > SA: IS enabled, > SpamBox : IS ENABLED > > I have toggled them off then on again to be sure. CPanel shows them enabled. SA-Exim is not running at all, in either of your mails. You have no X-SA-Exim headers. Check your exim/sa-exim configuration and exim logs to see why the sa-exim module isn't being run Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From jclark at crownofmaine.net Sun Aug 27 08:08:11 2006 From: jclark at crownofmaine.net (Jeff Clark) Date: Sun, 27 Aug 2006 11:08:11 -0400 Subject: [SA-exim] SA-Exim Greylist IP Whitelist? Message-ID: I've been using SA-Exim for sometime now (very happy with it) and have just recently began using the greylisting feature. I've read that there are certain services (like Gmail, etc) that should have their IPs exempted from greylisting. Is there a way in sa-exim to exclude certain IP addresses just from greylisting, or do I have to exclude sa-exim from running on them at all using the X-SA-Do-Not-Run headers? Thanks for any help! Jeff -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.merlins.org/archives/sa-exim/attachments/20060827/595ef54e/attachment-0001.htm From marc at merlins.org Sun Aug 27 09:38:14 2006 From: marc at merlins.org (Marc MERLIN) Date: Sun, 27 Aug 2006 09:38:14 -0700 Subject: [SA-exim] SA-Exim Greylist IP Whitelist? In-Reply-To: References: Message-ID: <20060827163814.GL5627@merlins.org> On Sun, Aug 27, 2006 at 11:08:11AM -0400, Jeff Clark wrote: > I've been using SA-Exim for sometime now (very happy with it) and have just > recently began using the greylisting feature. I've read that there are > certain services (like Gmail, etc) that should have their IPs exempted from > greylisting. Is there a way in sa-exim to exclude certain IP addresses just > from greylisting, or do I have to exclude sa-exim from running on them at > all using the X-SA-Do-Not-Run headers? Greylisting should only be configured to kick in when you receive something that's almost certainly spam. The implementation that comes with SA-Exim therefore does not have any whitelisting support built in, however it's easy to add one anyway with 1) You write an SA rule that counteracts/disables the SA rule that helps with greylisting 2) You add a quick hack to /usr/share/perl5/Mail/SpamAssassin/Plugin/Greylisting.pm Note however that: 1) you can greylist gmail just like everyone else. I do (and I work for google) 2) it's hard to get an up to date list of all sending IPs for big providers. Those can change at any time Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From marc at merlins.org Sun Aug 27 15:56:17 2006 From: marc at merlins.org (Marc MERLIN) Date: Sun, 27 Aug 2006 15:56:17 -0700 Subject: [SA-exim] SA being bypassed or not processing some mails In-Reply-To: <6fl3f25e0abqhhv4jcn87l7ithqdsu3e95@4ax.com> References: <20060827142836.GK5627@merlins.org> <6fl3f25e0abqhhv4jcn87l7ithqdsu3e95@4ax.com> Message-ID: <20060827225617.GM5627@merlins.org> On Sun, Aug 27, 2006 at 01:31:47PM -0400, rec9140 at gmail.com wrote: > On Sun, 27 Aug 2006 07:28:36 -0700, Marc MERLIN wrote: > > > >SA-Exim is not running at all, in either of your mails. You have no > >X-SA-Exim headers. > >Check your exim/sa-exim configuration and exim logs to see why the sa-exim > >module isn't being run > > Have never had X-SA-Exim headers and SA has been running prior to this just > fine, and fills up the SA SpamBox, and still does, it just selectively processes > mail. I've went back thru years worth mail from this host and never had > X-SA-Exim headers. > > The only headers I've ever gotten have been: > > X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on > 1.alexsrv41.com > X-Spam-Level: > X-Spam-Status: No, score=-91.8 required=4.0 tests=AWL,BAYES_50,HTML_50_60, > HTML_MESSAGE,USER_IN_WHITELIST autolearn=no version=3.1.4 > > Then something changed where it process some mail, then it doesn't process some > mail, then repeats the cycle, process, no process, process.... I can't tell you what runs SpamAssassin on 1.alexsrv41.com, this is for you to know :) I just know that SA-Exim isn't running, which is why I recommended that you look at the SA-Exim and exim configs to see if it's actually turned on. (maybe your exim isn't even loading the sa-exim module) Until you see some 'SA:' headers in /var/log/exim/mainlog (or wherever), SA-Exim isn't being run Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/