efa-project.org

Hi Guys

We use EFA as an inbound/outbound filter for our change environment

When sending messages to one or two recipients we get no issue, however, when sending to multiple (say 10+ addresses), EFA decides that the whitelisted domain doesnt matter, then marks the outbound email as spam citing

0.20 KAM_MANYTO Email has more than one To Header
3.56 RCVD_IN_PBL Received via a relay in Spamhaus PBL
1.28 RCVD_IN_RP_RNBL Relay in RNBL, https://senderscore.org/blacklistlookup/
1.27 RDNS_NONE Delivered to internal network by a host with no rDNS

The email is going from the client via our exchange server, which uses EFA as a smart host, so I dont quite get why EFA is complaining that the mail has been received via a relay, when both the address its sending from is whitelisted as is the server IP address and domain

Any ideas?

Cheers

Alex

1) I'm not sure if you mean that you are whitelisted or the remote parties are whitelisted. Double check your whitelist for your internal server.

2) You are blacklisted. You need to make sure you are not running as an open relay and find out why you are blacklisted.

http://mxtoolbox.com/diagnostic.aspx

3) Your exchange server has no DNS PTR record, or EFA cannot resolve it.

Hi Shawn

The internal is server whitelisted

Reverse DNS issue was to do with IPv6 - sorted that now

The IP range they sit on (Sky Broadband Owned) is blacklisted - but EFA shouldnt care as the message is coming via the internal Exchange server surely?

Its a very strange issue as the email is going outbound, via a whitelisted server with a whitelisted domain

Strange indeed.

Spamassassin scores based on origin, not destination. This doesn't add up...

Hi there, we're having exactly the same problem with outbound email with multiple recipients. Even through the server and sender are whitelisted, if the sender sends out a bulk email (his newsletter), the whitelisting is ignored and EFA classes it as spam.

I've posted a thread here:
viewtopic.php?f=13&t=1230

If I find a fix I'll post it here.

Cheers,
Stuart.

Be curious to hear if you fix it Stuart!

I might have fixed it....

within /etc/MailScanner/MailScanner.conf I found the following line:
"Ignore Spam Whitelist If Recipients Exceed = 20"

Which seems to be my issue exactly. I've upped the limit to 100, restarted MailScanner, and verified the change from the EFA web interface at mailscanner/msconfig.php

Hopefully this might help!

Cheers,
Stuart.

Top man, That sounds like it'll do the trick. Ill edit it on my cluster now!