Context
Working on an email-host with local mailboxes for 4 domains facing the internet.
When testing if spammassasin works I sended some test emails coming form the internet.
Since I had defined a spam-header (####spam####) I was expecting that spam would be passed to endusers and tagged.
However, some spam was bounced to the internet.
logging:
Feb 12 20:55:30 mail amavis[1043]: (01043-01) Blocked SPAM {BouncedInternal,Quarantined}, LOCAL [172.19.3.101]:57278 <[email protected]> -> <[email protected]>, quarantine: L/spam-LMHsfmxldtMS.gz, Queue-ID: 35EE580A20, mail_id: LMHsfmxldtMS, Hits: 1005.482, size: 544, 999 ms
Feb 12 20:55:30 mail postfix/smtp[13246]: 35EE580A20: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=28, delays=27/0/0.01/1, dsn=2.5.0, status=sent (250 2.5.0 Ok, id=01043-01, BOUNCE)
Feb 12 20:55:30 mail postfix/qmgr[1975]: 35EE580A20: removed
Feb 12 20:55:30 mail postfix/smtp[13254]: Trusted TLS connection established to vlees-nl.mail.protection.outlook.com[104.47.2.36]:25: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
Feb 12 20:55:31 mail postfix/smtp[13254]: 88DC380B30: to=<[email protected]>, relay=vlees-nl.mail.protection.outlook.com[104.47.2.36]:25, delay=0.84, delays=0/0.01/0.18/0.65, dsn=2.6.0, status=sent (250 2.6.0 <[email protected]> [InternalId=11055245821936, Hostname=AM6PR06MB5845.eurprd06.prod.outlook.com] 10723 bytes in 0.137, 75.892 KB/sec Queued mail for delivery)
Users in my setup want to get all email (except from rbl-tagged hosts etc), since non of it can be missed. So rejecting mail on the basis of mail content is not desirable.
Secondly sending bounces to probably forged recipient email addresses is not clever.
Expected Behavior
spam should be delivered to users and tagged.
Actual Behavior
spam is quarantained and user never he he missed something. And a bounce to internet is sent.
Possible Fix
Some parameter to adjust this in /etc/amavis/conf.d/20-debian_defaults:
$final_banned_destiny = D_BOUNCE; # D_REJECT when front-end MTA ##changed to reject
$final_spam_destiny = D_BOUNCE;
I want banned to reject and spam to pass
Steps to Reproduce
send this email from internet with an acceptable recipient and see what happens (the long string tips off spamassasin / amavis):
telnet 172.19.3.172 smtp
ehlo mail.vlees.nl
mail from:<[email protected]>
rcpt to:<[email protected]>
data
please sell a loan now
buy naked women online
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
Context
Working on an email-host with local mailboxes for 4 domains facing the internet.
When testing if spammassasin works I sended some test emails coming form the internet.
Since I had defined a spam-header (####spam####) I was expecting that spam would be passed to endusers and tagged.
However, some spam was bounced to the internet.
logging:
Users in my setup want to get all email (except from rbl-tagged hosts etc), since non of it can be missed. So rejecting mail on the basis of mail content is not desirable.
Secondly sending bounces to probably forged recipient email addresses is not clever.
Expected Behavior
spam should be delivered to users and tagged.
Actual Behavior
spam is quarantained and user never he he missed something. And a bounce to internet is sent.
Possible Fix
Some parameter to adjust this in /etc/amavis/conf.d/20-debian_defaults:
$final_banned_destiny = D_BOUNCE; # D_REJECT when front-end MTA ##changed to reject
$final_spam_destiny = D_BOUNCE;
I want banned to reject and spam to pass
Steps to Reproduce
send this email from internet with an acceptable recipient and see what happens (the long string tips off spamassasin / amavis):