All emails shown in quarantine and blacklisted domains

[viper407]

Good afternoon.

I have eFa running at my customer and they see that all emails are showing under quarantine. Is this behaviour by design?

My second questions is does eFa do lookups if a domain is blacklisted? If so where do i enable this?

Thanks
Edward

[freyuh]

Hello Edward,

I have eFa running at my customer and they see that all emails are showing under quarantine. Is this behaviour by design?

Yes, if the Mailscanner.conf reads 'Non Spam Actions = store deliver header "X-Spam-Status:No"'
So the 'store' tells, that also 'non spam' is stored and therefore displayed in the quarantine.

My second questions is does eFa do lookups if a domain is blacklisted? If so where do i enable this?

Search the forum for "reject_rbl_client".

A postfix config (main.cf) could look like this:
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_unauth_pipelining,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_rbl_client mail.de.bl.blocklist.de,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client ix.dnsbl.manitu.net,
reject_rbl_client zombie.dnsbl.sorbs.net,
check_recipient_access hash:/etc/postfix/recipient_access,
check_client_access hash:/etc/postfix/rbl_override,
reject_unverified_recipient,
permit

Ulrich.

[viper407]

Hi Ulrich

Thanks for the quick response, so if I changed the No to a Yes would this stop all mails logging to quarantine?

'Non Spam Actions = store deliver header "X-Spam-Status:Yes"'

I did do a search and found someone mention 3 items that can be added to the file but I get errors saying its missing an attribute after the "=" after i tried to restart the postfix service.

viewtopic.php?f=14&t=4477&p=18713#p18713

If I added the below to the main.cf file, would i add it to the end of the file? Would anything break if I copied the below and added it?

A postfix config (main.cf) could look like this:
smtpd_recipient_restrictions = permit_sasl_authenticated,
permit_mynetworks,
reject_unauth_destination,
reject_unauth_pipelining,
reject_non_fqdn_recipient,
reject_unknown_recipient_domain,
reject_rbl_client mail.de.bl.blocklist.de,
reject_rbl_client zen.spamhaus.org,
reject_rbl_client bl.spamcop.net,
reject_rbl_client ix.dnsbl.manitu.net,
reject_rbl_client zombie.dnsbl.sorbs.net,
check_recipient_access hash:/etc/postfix/recipient_access,
check_client_access hash:/etc/postfix/rbl_override,
reject_unverified_recipient,
permit

Thanks
Edward

[freyuh]

Hello Edward,

Thanks for the quick response, so if I changed the No to a Yes would this stop all mails logging to quarantine?

'Non Spam Actions = store deliver header "X-Spam-Status:Yes"'

that would mark all non SPAM emails as SPAM.

header "X-Spam-Status:Yes"

this is written additionally into the header to be evaluated by following programs. So this should be 'No' for 'Non SPAM Actions'

You have to delete the 'store' entry for not storing 'non SPAM mails' on the eFa: 'Non Spam Actions = deliver header "X-Spam-Status:No"'

If I added the below to the main.cf file, would i add it to the end of the file? Would anything break if I copied the below and added it?

I don't think that it would break anything.
You only have to ensure, that the files /etc/postfix/recipient_access and /etc/postfix/rbl_override and there corresponding db-files are available.

Ulrich.

[viper407]

Thanks very much.

that worked and now quarantine only shows spam etc.