hi to every body
i admin my personal system for a lot a clients, and server woks fine, but… there are clients ( in fact, several) they mencioned they receive many spam, and in the past ( we other host company), they dont
can i modyfile profiles of spam filters), where? i trace forum locking for info, but several entries are so old, and virtualmin interface change a lot in the last 15 years!
tx a lot
so smapassasin nad clam are ON,
today i check the header of posible spam mail, (mark like normal) and i found "dkim=fail reason=“signature verification failed” "
has it relation?
is it normal?
why spam dont mark like spam?
i have this exact setting!
i only find razor is not installed
but i dont know is this is default setting because i dont change anything yet
how can test or check is my spam wall is working or not, how can i simulate bad mails?
You can start by checking e-mail headers and see what X-spam tells you, if it doesnt have X-spam headers it means spamassassin isnt scanning e-mails, also a good idea is to check maillog when you receive a mail and see what it tells you, for example if you get something like this: “SPAMD: RESULT: . 0 - DKIM_SIGNED,DKIM_VALID…” it means spamassassin is scanning and 0 in this case is the spam score when it gets to 5 by default its recognised as spam, depending on the score the spans you’re receiving are getting you can decrease the score threshold to 3 or 4 so it catches more spam in Webmin > SpamAssassin Mail Filter > Spam Classification, but you’ll also increase the chance of getting a false positive.
Good we’re getting somewhere, now check /var/log/procmail.log when you receive a mail and see if you get any errors for any clamd or spamc errors or any errors at all.
this file is huge, but this is a tiny part, an example, i see this example several times
From sharathbabu.g@rediffmail.com Thu Sep 14 00:23:02 2023
Subject: =?UTF-8?B?SGk=?=
Folder: /home/xxxxxxxshop/homes/info/Maildir/new/1694643784.90185_0. 5325
Time:1694643784 From:sharathbabu.g@rediffmail.comTo:info@xxxxxxxxshop.comUser:info@xxxxxxxxxshop.com Size:5385 Dest:/home/lxxxxxxxxxxop/homes/info/Maildir/new/1694643784.90185_0.xxxxxx.xxxxxxxa.es Mode:None
Sep 14 00:24:19.884 [90248] warn: config: cannot opendir /etc/webmin/virtual-server/spam/1693585826396092: Permission denied
Sep 14 00:24:19.884 [90248] warn: readdir() attempted on invalid dirhandle SA_CF_DIR at /usr/share/perl5/Mail/SpamAssassin.pm line 2101.
Sep 14 00:24:19.884 [90248] warn: closedir() attempted on invalid dirhandle SA_CF_DIR at /usr/share/perl5/Mail/SpamAssassin.pm line 2103.
Sep 14 00:24:19.885 [90248] warn: config: cannot opendir /etc/webmin/virtual-server/spam/1693585826396092: Permission denied
Sep 14 00:24:19.885 [90248] warn: readdir() attempted on invalid dirhandle SA_CF_DIR at /usr/share/perl5/Mail/SpamAssassin.pm line 2101.
Sep 14 00:24:19.885 [90248] warn: closedir() attempted on invalid dirhandle SA_CF_DIR at /usr/share/perl5/Mail/SpamAssassin.pm line 2103.
Timeout::_run: check: no loaded plugin implements ‘check_main’: cannot scan!
Check that the necessary ‘.pre’ files are in the config directory.
At a minimum, v320.pre loads the Check plugin which is required. at /bin/spamassassin line 413.
procmail: Program failure (255) of “/bin/spamassassin”
procmail: Rescue of unfiltered data succeeded
can i set individual setting for any virtual server), where?
recheck brief
The status of your system is being checked to ensure that all enabled features are available and properly configured …
Your system has 15.5 GiB of memory, which is at or above the Virtualmin recommended minimum of 256 MiB
BIND DNS server is installed
Mail server Postfix is installed and configured
Postfix is configured to support per-domain outgoing IP addresses
Apache is installed
CGI scripts can be executed using suEXEC or FCGIwrap
Apache supports HTTP/2 on your system
The following PHP execution modes are available : cgi fcgid fpm
The following PHP versions are available : 7.4.33 (/bin/php-cgi7.4), 8.1.23 (/bin/php-cgi8.1), 8.2.10 (/bin/php-cgi8.2)
The following PHP-FPM versions are available : 7.4.33 (php7.4-fpm) 8.1.23 (php8.1-fpm) 8.2.10 (php8.2-fpm)
Apache is configured to host SSL websites
MariaDB 10.6.12 is installed and running
ProFTPD is installed
Logrotate is installed
SpamAssassin and Procmail are installed and configured for use
ClamAV is installed and assumed to be running
Plugin AWStats reporting is installed
Plugin Protected web directories is installed
Using network interface enp2s0 for virtual IPs
Default IPv4 address for virtual servers is 192.168.0.8
Both user and group quotas are enabled for home and email directories
All commands needed to create and restore backups are installed
The selected package management and update systems are installed
Chroot jails are available
no
i tell you, i use defalut setting for allthing
when i migrate from my previous server ( based in ISxxxxxxFIG) after 4 years i "feel " a diference in the pattern or relation of amount of normal mail and spam mail.( from the begin) but because it was “sensation” i i am not sure. but now after a lot o month every day i more sure abot something is not working in spam filter
ths rest of component are work properly
PD. i have some freeze of daemon spamassasin in past. i talk about it here , i finnaley i increase RAm to 16g , after this time no more freeze. ( before i had 8G)
The standalone program will create a process for every mail you receive and will consume A LOT of resources, try changing it to spamc and see if it solves the memory issue and the spam issue
ok i go to change to spamC and i tell you in a couple of days!
anyway, after change this setting, in running proccess list CLAMAV is in the top with 1.25G, is it normal, do i need to restart?
