kwiqsilver
Guru
Joined: 19 Mar 2003
Posts: 360
|
 Posted: Fri Jan 06, 2006 1:27 am Post subject: Overeager spamassassin in exim |
 |
|
I just added spamassassin support to my exim server, setting it up to add headers if a message is spam, but still accept the message. I sent through a few test emails, and everything was rejected.
Here's the are the two exim logs:
exim_reject.log
| Code: | Subject: try0
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_Part_29355_13491587.1136509830482"
X-Spam_score: 0.6
X-Spam_score_int: 6
X-Spam_bar: /
X-ACL-Warn: accept |
exim_main.log
| Code: | | 2006-01-05 18:10:38 1Eug7o-0002A8-OP H=wproxy.gmail.com [64.233.184.199] F=<me@gmail.com> rejected after DATA |
It says accept, but it's still being rejected. I received an email saying "PERM_FAILURE: SMTP Error (state 12): 550 Administrative prohibition" at my gmail account.
I've included my exim.conf file below, and all the sections related to spamassassin have been highlighted with comments. Any help would be appreciated.
Thanks.
exim.conf
| Code: | domainlist local_domains = machineA : machineB : localhost
domainlist relay_to_domains =
hostlist relay_from_hosts = 127.0.0.1 : 192.168.1.0/16 : 192.168.2.0/16
acl_smtp_rcpt = acl_check_rcpt
##################################Spamassassin
acl_smtp_data = acl_check_data
acl_not_smtp = acl_check_data
##################################Spamassassin
qualify_domain = domain.tld
never_users = root
rfc1413_hosts =
rfc1413_query_timeout = 30s
sender_unqualified_hosts = *.domain.tld
recipient_unqualified_hosts = *.domain.tld
ignore_bounce_errors_after = 2d
timeout_frozen_after = 7d
begin acl
acl_check_spam:
deny dnslists = blackholes.mail-abuse.org
acl_check_rcpt:
accept hosts = :
deny local_parts = ^.*[@%!/|] : ^\\.
accept local_parts = postmaster
domains = +local_domains
accept domains = +local_domains
endpass
message = unknown user
verify = recipient
accept domains = +relay_to_domains
endpass
message = unrouteable address
verify = recipient
accept hosts = +relay_from_hosts
accept authenticated = *
deny message = relay not permitted
##################################Spamassassin
acl_check_data:
warn spam = mail
message = X-is-spam: over spam threshold\n\
X-Spam_flag: yes
warn message = X-Spam_score: $spam_score\n\
X-Spam_score_int: $spam_score_int\n\
X-Spam_bar: $spam_bar\n\
accept
##################################Spamassassin
begin routers
dnslookup:
driver = dnslookup
domains = ! +local_domains
transport = remote_smtp
ignore_target_hosts = 0.0.0.0 : 127.0.0.0/8
no_more
system_aliases:
driver = redirect
allow_fail
allow_defer
data = ${lookup{$local_part}lsearch{/etc/aliases}}
file_transport = address_file
pipe_transport = address_pipe
##################################Spamassassin
spamcheck_router:
no_verify
check_local_user
# When to scan a message :
# - it isn't already flagged as spam
# - it isn't already scanned
condition = "${if and { {!def:h_X-Spam_flag:} {!eq {$received_protocol}{spam-scanned}}} {1}{0}}"
driver = accept
transport = spamcheck
##################################Spamassassin
userforward:
driver = redirect
check_local_user
file = $home/.forward
no_verify
no_expn
check_ancestor
allow_filter
file_transport = address_file
pipe_transport = address_pipe
reply_transport = address_reply
directory_transport = address_directory
localuser:
driver = accept
check_local_user
transport = local_delivery
begin transports
##################################Spamassassin
spamcheck:
driver = pipe
command = /usr/sbin/exim -oMr spam-scanned -bS
use_bsmtp = true
transport_filter = /usr/bin/spamc
home_directory = "/tmp"
current_directory = "/tmp"
# must use a privileged user to set $received_protocol on the way back in!
user = mail
group = mail
log_output = true
return_fail_output = true
return_path_add = false
message_prefix =
message_suffix =
##################################Spamassassin
remote_smtp:
driver = smtp
local_delivery:
driver = appendfile
directory = /home/${local_part}/.maildir
delivery_date_add
envelope_to_add
return_path_add
address_directory:
driver = appendfile
maildir_format
delivery_date_add
envelope_to_add
return_path_add
address_pipe:
driver = pipe
return_output
address_file:
driver = appendfile
delivery_date_add
envelope_to_add
return_path_add
address_reply:
driver = autoreply
begin retry
* * F,2h,15m; G,16h,1h,1.5; F,4d,6h
begin rewrite
begin authenticators |
|
|
Networking & Security
