Welcome, Guest
Please Login or Register.
Lost Password?
TONS OF SPAM!!! HELP!!! (1 viewing)
Post Reply

TOPIC: TONS OF SPAM!!! HELP!!!

#12035
nhsitehost (User)
Posts: 45
graphgraph
TONS OF SPAM!!! HELP!!! 2008/04/29 04:43  
OK.. panic mode here... i'm getting TONS of spam to my an email address within one of my domains.. it's as if the spam filter is not working... i've poked around in the various logs but have not been able find anything...

where should i look?

or better yet..how can i STOP the spam!!!

thanks...
  The administrator has disabled public write access.
#12036
nihal (User)
Posts: 20
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 07:48  
i have same problem from yesterday. All the domains mail quotas blocked with this spam mail. So how can i delete all this spam. And how can change the spam mail saving configuration. what must i do delete all the spam directly?

Please help
  The administrator has disabled public write access.
#12038
nhsitehost (User)
Posts: 45
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 10:33  
issue is that email is not getting scanned by the spam filter so none of the email is getting caught... it's all being passed to the inbox instead of the mail folder.. it's like spamassisan just stopped working
  The administrator has disabled public write access.
#12041
nihal (User)
Posts: 20
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 12:12  
yes, what must we do ?
  The administrator has disabled public write access.
#12042
nihal (User)
Posts: 20
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 12:16  
at this day we update some packages, and at that moment we are under spam rain
  The administrator has disabled public write access.
#12043
nhsitehost (User)
Posts: 45
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 12:19  
i've reviewed a few email headers and noticed that spamassassin was not canning any of the emails.. or at least there was no sign on scanning in the email header.. maybe Joe from virtualmin will chime in here and help...
  The administrator has disabled public write access.
#12044
Joe (Admin)
Posts: 4117
graph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 13:27  
Hey guys,

I actually saw this behavior on Virtualmin.com a few days ago--not sure what triggered it, but a restart of the spamassassin daemon fixed it. Of course, if you aren't using spamd, then this definitely won't solve the problem.

On most Linux systems, I think this would do it:

/etc/init.d/spamassassin restart

If that doesn't solve the problem, check the maillog/mail.log to be sure mail is being delivered to procmail-wrapper. If so, look in the procmail.log to see if there are any clues about what's going wrong. If not, send along your /etc/procmailrc and we'll see if there are any hints there. Finally, the procmail rules for the domain in question have the final say on delivery--but that's a little harder to find, as it's in a numbered file within /etc/webmin/virtual-server/procmail.
  The administrator has disabled public write access.
#12045
nhsitehost (User)
Posts: 45
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 13:45  
ok a restart is now showing the X headers in the email

X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on mysite.com
X-Spam-Level: *
X-Spam-Status: No, score=1.5 required=3.0 tests=BAYES_00,FORGED_RCVD_HELO,
HTML_MESSAGE,KAM_STOCKOTC,URIBL_BLACK autolearn=no version=3.1.9
X-Original-To: me@mysite.com

but the scoring is way off... this email was a huge spam email... viraga content...and such..

so how do i fix the spam level.. and i dont mean the user_prefs I've change the score to 3.0

emails that are MAJOR spam are being marked really low..
  The administrator has disabled public write access.
#12046
nihal (User)
Posts: 20
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 13:45  
There is no change when ru /etc/init.d/spamassasin.

So now what must we do? This so urgent for my server. Please say clearly again.
  The administrator has disabled public write access.
#12047
nhsitehost (User)
Posts: 45
graphgraph
Re:TONS OF SPAM!!! HELP!!! 2008/04/29 13:49  
another sample


Code:

Return-Path: <Cash4Gold@remotenow.info> X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on mysite.com X-Spam-Level: X-Spam-Status: No, score=0.7 required=5.0 tests=BAYES_00,GET_PAID,HTML_MESSAGE,     OPTING_OUT_CAPS,URIBL_BLACK autolearn=no version=3.1.9 X-Original-To: me@mysite.com



This one scored a bit higher bit still was not blocked..
the score of 4.5 was higher than the 3.o required..
Code:

Return-Path: <3f0.4.44416897-6343066@guylikesme.com> X-Spam-Checker-Version: SpamAssassin 3.1.9 (2007-02-13) on mysite.com X-Spam-Level: **** X-Spam-Status: No, score=4.6 required=3.0 tests=BAYES_00,HTML_90_100,     HTML_MESSAGE,MIME_HTML_MOSTLY,URIBL_BLACK,URIBL_OB_SURBL autolearn=no     version=3.1.9 X-Original-To: me@mysite.com

  The administrator has disabled public write access.
Post Reply
get the latest posts directly to your desktop

Talk and Get Help

Support
Forums
Bugs and Issues

Get Virtualmin

OS Support
Buy Online
Download
Copyright 2005-2007 Virtualmin, Inc. All rights reserved.