apache spamassassin - Block emails

julioclm

• March 15, 2022 13:44

Hello good morning, I have a problem with several emails as spam. I would like to know the correct way to block these emails with jp ending. I tried the blacklist (image1). second option in global mail filters (from - ends with) (from - contains) then delete. (image2). but I still receive emails from termination jp.

• 

  cPRex Jurassic Moderator

  • March 15, 2022 19:10

  Hey there! All of those filter entries look good to me, so I would expect that to block the messages you are intending. Have you tried the "Test Filter" area to see if that shows anything interesting? Details on that can be found here:

  0
• 

  julioclm

  • March 15, 2022 21:21

  but that lets you test a filter without the need to send and wait to receive an actual email.

  
  the test shows the following: Sub-condition is false: not first_delivery Condition is false: not first_delivery and error_message Sub-condition is true: $header_from: ends .jp Sub-condition is true: $header_from: ends .jp or $h_X-Spam-Status: ends jp Sub-condition is true: ($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp Sub-condition is true: (($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp) or $header_from: contains ogawasangyo Sub-condition is true: ((($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp) or $header_from: contains ogawasangyo) or $header_from: contains co.jp Condition is true: (((($header_from: ends .jp or $h_X-Spam-Status: ends jp) or $h_X-Spam-Status: ends .ne.jp) or $header_from: contains ogawasangyo) or $header_from: contains co.jp) or $header_from: contains *.jp Condition is false: $h_X-Spam-Bar: contains ++++ Return-path copied from sender but the problem is that I still receive them. thanks, i will read the page.

  0
• 

  cPRex Jurassic Moderator

  • March 16, 2022 14:40

  It's definitely odd that the test is marking them correctly, but you're still receiving the message. If you don't find anything useful on that page that helps with the situation, and if you have root access to the server, can you submit a ticket to our team so we could check this directly on the machine?

  0

Please sign in to leave a comment.