Hi guys,
I’d like to whitelist in spamassassin this:
FAXAGE support@faxage.com
I went into /etc/mail/spamassassin/local.cf
And added the line whitelist_from *faxage.com
But I still get those emails delivered to the junk folder.
Thanks!
1 Like
You have an error …
Whitelist and blacklist addresses are file-glob-style patterns, so friend@somewhere.com, *@isp.com, or *.domain.net will all work.
For example:
whitelist everyone at sparkingwire.com:
whitelist_from *@sparkingwire.com
You need a . after the *
so the line should be whitelist_from *.faxage.com
1 Like
Got it. Thanks Alento!
After adding the dot between * and faxage
I’m still getting those emails delivered to the junk folder.
Sorry … I can only point out the syntax issue … as far as a Spamassassin issue, I am afraid I cannot help.
If changing the syntax didn’t resolve the issue it is a Spamassassin issue I am afraid.
You did restart SA I presume? @HoustonBox
sudo service spamassassin restart
Just for fun, I’ll try the whitelist_from *@faxage.com
Thanks!
I did not restart it.
I will do it now.
You will need to do that anytime you change the configuration files … or the changes will not become effective.
Oh and I just looked it up – for Ubuntu 18 the command is:
sudo service spamassassin restart
1 Like
Restarted it.
Thanks!
Those emails still get delivered to the junk folder.
Is it possible to stop spamassassin for a while just to see if those emails get to the inbox?
Also, I don’t understand why 3 or 4 emails from this sender go to the inbox and the other 60 from the same sender go to the junk folder.
The FROM is exactly the same and the subject starts with the same word too.
If I use thunderbird as client, can I tell it that a faxage email is not junk and that way it will learn to put the future faxage emails in the inbox?
What do the X-Spam headers say … read and compare … maybe they will shed some light.
This is on the email that went to the junk folder:
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on box.mydomain.com
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.3 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FORGED_RELAY_MUA_TO_MX,HTML_IMAGE_ONLY_08,
HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_MID,
RCVD_IN_DNSWL_LOW,SPF_HELO_NONE autolearn=no autolearn_force=no
version=3.4.2
X-Spam-Report:
* -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/,
* low trust
* [66.236.85.199 listed in list.dnswl.org]
* 3.3 FORGED_RELAY_MUA_TO_MX No description available.
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
* 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of
* words
* 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image
* area
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
* author’s domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 0.1 MISSING_MID Missing Message-Id: header
X-Spam-Score: 6.3
Received: from mail.ecdatasys.com (mail.ecdatasys.com [66.236.85.199])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
Compared to inbox???
Email that went to the inbox:
X-Spam-Checker-Version: SpamAssassin 3.4.2 (2018-09-13) on box.mydomain.com
X-Spam-Flag: YES
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.3 required=5.0 tests=DKIM_SIGNED,DKIM_VALID,
DKIM_VALID_AU,FORGED_RELAY_MUA_TO_MX,HTML_IMAGE_ONLY_08,
HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,MISSING_MID,
RCVD_IN_DNSWL_LOW,SPF_HELO_NONE autolearn=no autolearn_force=no
version=3.4.2
X-Spam-Report:
* -0.7 RCVD_IN_DNSWL_LOW RBL: Sender listed at https://www.dnswl.org/,
* low trust
* [66.236.85.199 listed in list.dnswl.org]
* 3.3 FORGED_RELAY_MUA_TO_MX No description available.
* 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record
* 1.8 HTML_IMAGE_ONLY_08 BODY: HTML: images with 400-800 bytes of
* words
* 0.8 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image
* area
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from
* author’s domain
* -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature
* 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily
* valid
* 0.1 MISSING_MID Missing Message-Id: header
X-Spam-Score: 6.3
Received: from mail.ecdatasys.com (mail.ecdatasys.com [66.236.85.199])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
(No client certificate requested)
Hmmm … they are absolutely identical.
I installed thunderbird, created a rule to send all spam emails to the inbox folder.
I started getting 2 copy emails in the inbox.
I deleted the rule.
I’m still getting 2 copy emails.
After further investigation I found out the sending company was the one sending copies of the emails. That has been fixed.
Also, it seems spamassassin learned the thunderbird lesson and is not sending good emails to the junk folder but to the inbox.