Ubuntu – Postfix drops all spam, but shouldn’t do this

amavispostfixsmtpspamassassinUbuntu

i'm using a mailserver setup with postfix, amavis and spamassassin.

Some parts of my current configuration (Ubuntu 12.04.2):

/etc/amavis/conf.d/20-debian_defaults

$sa_spam_subject_tag = '***SPAM*** ';
$sa_tag_level_deflt  = 2.0;
$sa_tag2_level_deflt = 6.31;
$sa_kill_level_deflt = 6.31;
$sa_dsn_cutoff_level = 10;
$final_spam_destiny  = D_PASS;

/etc/amavis/conf.d/15-content_filter_mode

use strict;
@bypass_virus_checks_maps = (
   \%bypass_virus_checks, \@bypass_virus_checks_acl, \$bypass_virus_checks_re);
@bypass_spam_checks_maps = (
   \%bypass_spam_checks, \$bypass_spam_checks_re);
1;

All incoming spam is dropped by postfix and isn't delivered with the "***SPAM***" subject tag:

/var/log/mail.log

Jun 19 07:20:07 host amavis[27625]: (27625-04) Blocked SPAM, [209.85.214.175] [209.85.214.175] <source@sourcedomain.com> -> <target@targetdomain.com>, quarantine: l/spam-l+tLTgmVhQi7.gz, Message-ID: <CAPQPMVfXTAWzdV8mpSSfxBnZTRgL5TjEZZnRTz_h1Y65nuzWzQ@mail.sourcedomain.com>, mail_id: l+tLTgmVhQi7, Hits: 999.902, size: 2226, dkim_id=@sourcedomain.com, 1406 ms
Jun 19 07:20:07 host postfix/smtp[28237]: E650348C126B: to=<target@targetdomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.9, delays=0.46/0/0/1.4, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=27625-04 - SPAM)
Jun 19 07:20:07 host postfix/qmgr[28163]: E650348C126B: removed

This behavior should be not the case (spam should be delivered with the spam tag). I dont know whats wrong here…

Any help would be very appreciated!

Best Answer

The OP indicated this solved the issue:

Because I'm using a Ubuntu system, the D_PASS settings must be configured in /etc/amavis/conf.d/21-ubuntu_defaults instead of the Debian file. Also the "@local_domains_maps" setting was not set in the /etc/amavis/conf.d/05-domain_id file.

Related Solutions

Postfix skip spam checks for authorized SMTP

In the main.cf, set

smtpd_data_restrictions = reject_unauth_pipelining,permit_sasl_authenticated,check_sender_access pcre:/etc/postfix/content_filter.pcre

Do not set content_filter= in main.cf!

/etc/postfix/content_filter.pcre should be something like:

/^/ FILTER smtp-amavis:[127.0.0.1]:10024

Do not forget to run

postmap /etc/postfix/content_filter.pcre

master.cf should be something like:

127.0.0.1:10025 inet n  -   n -   -  smtpd
    -o content_filter=
    -o local_recipient_maps=
    -o relay_recipient_maps=
    -o smtpd_data_restrictions=
    -o smtpd_restriction_classes=
    -o smtpd_client_restrictions=
    -o smtpd_helo_restrictions=
    -o smtpd_sender_restrictions=
    -o smtpd_recipient_restrictions=permit_mynetworks,reject
    -o mynetworks=127.0.0.0/8
    -o smtpd_error_sleep_time=0
    -o smtpd_soft_error_limit=1001
    -o smtpd_hard_error_limit=1000
smtp-amavis unix -      -       n       -       16       lmtp
    -o lmtp_data_done_timeout=1200
    -o lmtp_send_vforward_command=yes
    -o disable_dns_lookups=yes

Hope this helps. See http://www.postfix.org/postconf.5.html for further info.

No spam headers on a postfix mailserver

Quote from the fine manual (https://www.ijs.si/software/amavisd/):

No spam-related headers inserted? Here are some reasons:

@local_domains_acl is not correctly set. These headers are only inserted for recipients matching @local_domains_acl lookup (or local_domains or $local_domains_re or field 'local' in SQL lookups);
headers can only be added or edited when messages pass through amavisd-new. This currently is not the case with sendmail milter setup (using the helper program amavis-milter.c);
tag level is set too high ($sa_tag_level_defl); *when SpamAssassin is not being called (disabled, message larger than the $sa_mail_body_size_limit, sender white/blacklisted), or SA returns an empty score e.g. when it times out, the spam score is empty (undefined); *to make message with spam score above kill_level still pass, either set globally: $final_spam_destiny=D_PASS, or declare recipient a spam_lover.

I think the first one is the one biting you. Somewhere in the folder you need to fill the @local_domains_acl array with the virtual domains info.

Related Topic