Does moving a message from JUNK to INBOX whitelist the sender? Thank you!
No. There is a bayesian thingamajig called sa-learn that some day will figure out what you want without you having to tell it what to do.
well I am being spammed repeatedly with close to the same advertisement. most of them are being blocked but some are leaking through. any suggestions?
If you post the email headers, especially the spamscore and authentication-results, that would be easier for helping with this.
Return-Path: hovansong201@gmail.com
Delivered-To: ces@ecovillage.cc
Received: from box.ecovillage.cc ([127.0.0.1])
by box.ecovillage.cc with LMTP id EMt4H+I5omHndgAAMoO61A
for ces@ecovillage.cc; Sat, 27 Nov 2021 06:00:02 -0800
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on box.ecovillage.cc
X-Spam-Level: *
X-Spam-Status: No, score=1.7 required=10.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,DMARC_PASS,FREEMAIL_FROM,HTML_MESSAGE,PDS_OTHER_BAD_TLD,
PYZOR_CHECK,RCVD_IN_DNSWL_NONE,RCVD_IN_MSPIKE_H2,SPF_HELO_NONE,
SPF_PASS,T_KAM_HTML_FONT_INVALID,UNPARSEABLE_RELAY autolearn=no
autolearn_force=no version=3.4.2
X-Spam-Report:
* -0.1 DMARC_PASS DMARC check passed
* -0.1 SPF_PASS SPF check passed
* 0.0 PDS_OTHER_BAD_TLD Untrustworthy TLDs
* [URI: 56he6hhdfh.xyz (xyz)]
* 0.0 FREEMAIL_FROM Sender email is commonly abused enduser mail
* provider (allisonstalberg[at]gmail.com)
* (upamanyu.das5[at]gmail.com) (hovansong201[at]gmail.com)
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
* -0.0 RCVD_IN_MSPIKE_H2 RBL: Average reputation (+2)
* [209.85.222.48 listed in wl.mailspike.net]
* 0.0 HTML_MESSAGE BODY: HTML included in message
* -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at
* https://www.dnswl.org/, no trust
* [209.85.222.48 listed in list.dnswl.org]
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
* author’s domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 2.0 PYZOR_CHECK Listed in Pyzor
* (Welcome to Pyzor’s documentation! — Pyzor 1.0 documentation)
* 0.0 T_KAM_HTML_FONT_INVALID Test for Invalidly Named or Formatted
* Colors in HTML
* 0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
* lines
X-Spam-Score: 1.7
Received: from mail-ua1-f48.google.com (mail-ua1-f48.google.com [209.85.222.48])
(using TLSv1.3 with cipher TLS_AES_128_GCM_SHA256 (128/128 bits))
(No client certificate requested)
by box.ecovillage.cc (Postfix) with ESMTPS id 48FDA3E8F9
for admin@web-analysts.net; Sat, 27 Nov 2021 06:00:02 -0800 (PST)
Authentication-Results: box.ecovillage.cc; dmarc=pass (p=none dis=none) header.from=gmail.com
Authentication-Results: box.ecovillage.cc; spf=pass smtp.mailfrom=hovansong201@gmail.com
Authentication-Results: box.ecovillage.cc;
dkim=pass (2048-bit key; unprotected) header.d=gmail.com header.i=@gmail.com header.b=“RF0HXanu”;
dkim-atps=neutral
Received: by mail-ua1-f48.google.com with SMTP id ay21so24153175uab.12
for admin@web-analysts.net; Sat, 27 Nov 2021 06:00:02 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20210112;
h=mime-version:from:date:message-id:subject:to;
bh=CAxbtAnnlkonA1gJkx1jZhLuHS2KvHNytb7hUQWC3Vc=;
b=RF0HXanuZeAqJBTKIOjfiVZlgFONSgQSOeIBM8h1RjdIp++LdkWZd4nVbPL1UQ0uID
EvsVZgi+urkqZhjHXaYVC+SfKqf2gSD62ksDPti7/gklkC37CWzIG6r/cvRdIT7YW0nW
9kStGkSIUlmPYPvm50eU4lOQk281+GIEr4beqlBeGCeJhGv/TumG/pgLJRiIaL8npP7P
emduZzuYdkr23MnD4ozE80hhq9o5BsgauhbWB9A0+vZQflvuyGp/+V2zdSLOsA90dQuI
UNq0HRi3BGSyLHPFBfd+OJ2LOcY+H6iOc6bgEp5I+5P0ng/Qd4ioBrtdL4EdHJmLmv25
roxA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20210112;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=CAxbtAnnlkonA1gJkx1jZhLuHS2KvHNytb7hUQWC3Vc=;
b=uq+JcaC3UtwcKisVtlFL+0Arv0oBMkipVcejvD3Jj164DeGgbUWF9fd02vYPLRAxOh
JY18EMGULRRzgLFY856sIYi+WvRmg4/nxnKx5L8DX/JtLhJttRoArJl5DnAvmmYJsLWM
2YG6nfXkrWYfPBIETnCYZULMzoXf14KPbhcj16avf7iOLVEzlxj/nbKTrsnmImYjy+g/
IElob/7OEnFUku5cdYOiDem7lEG6JOUV9g3K8T7gq7z8s20xgZ/pL9lIrm0QZGiDtpsc
ehhXUQh2qt6AjzxexTVH3lN6WopQHfZVZgsPq4BgTQqX0s90azi7Cb+RNC/uet69GDXZ
tqOQ==
X-Gm-Message-State: AOAM533wpcyeuXkLJnX5AKgMOLhhmsYjDtLeecjoxwh1IJxrlzCCmHPx
7eIUUT7fXFETiV1MOVa9MG8FJJUPKDHdtPwh9M8=
X-Google-Smtp-Source: ABdhPJw8y7P2nRWxvScMajFQAEZRh75wAySV17aowS6FmFLKf+/kV8WDl+qrZisTFU1Rny9Som5JB0R57fdgsZ0L56I=
X-Received: by 2002:a67:301:: with SMTP id 1mr23137202vsd.11.1638021601276;
Sat, 27 Nov 2021 06:00:01 -0800 (PST)
Received: from 1046791429235 named unknown by gmailapi.google.com with
HTTPREST; Sat, 27 Nov 2021 06:00:00 -0800
Received: from 1046791429235 named unknown by gmailapi.google.com with
HTTPREST; Sat, 27 Nov 2021 05:59:59 -0800
MIME-Version: 1.0
From: hovansong201@gmail.com
Date: Sat, 27 Nov 2021 06:00:00 -0800
Message-ID: CAG9e-ftKrA4==4ZkoTzkb4JYFvkuZ5WjSQHH_=nVrXJ6Jz_ZhA@mail.gmail.com
Subject: Let’s Go Brandon Shirt
To: undisclosed-recipients:;
Content-Type: multipart/alternative; boundary=“000000000000adb86d05d1c59f3b”
I apologize, but I read your request backward. I thought you were wanting something being classified as spam to go to your inbox.
Other than moving from Inbox to Spam folder like 1000 more times to get sa-learn to understand you don’t want email from this dufus, you can edit one of the few files on the server that will not be overwritten with an update to MiaB.
Spamassassin will read any file in the path and format /etc/spamassassin/*.cf. You can create /etc/spamassassin/localrules.cf, or anything else that suits you, and put in the following:
blacklist_from username@example.com
This will add 100 points of spamscore to all messages from username@example.com, so every message from this address will end up in the spam folder.
Alternatively, if you do not even want this user in a spam folder, you can use the blacklist features of postfix, as described here:
But note that changes in that tutorial will be overwritten whenever MiaB makes a change to main.cf.
I haven’t figured out all of the options for us small server admins to declare email as spam to the various blacklists, but it is possible to declare it through dnswl.org. Also on that site you can add your server, which can help in some small ways to improve inboxing for your server and confirmed domains.
I actually find that the bulk of the worst spam to make it to my inbox comes from gmail, but good luck getting them listed at Spamhaus.
Thank you for all your help!
This topic was automatically closed 40 days after the last reply. New replies are no longer allowed.