ExtMail服务器社区's Archiver

ysgoto 发表于 2010-1-6 17:13

内部邮件经常变成垃圾邮件--已解决

公司内部架设了个EMOS,但是最近发现很多正常的内部邮件,自己跑到垃圾邮件去了,web上看也是,请问怎么处理呢

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
header_checks = regexp:/etc/postfix/dspam_header_checks
mail_name = EMOS V1.4 (Postfix)
mail_owner = postfix
mailbox_size_limit = 20971520
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 1d
message_size_limit = 20971520
mydestination = $mynetworks, $myhostname
mydomain = sgoco.com
myhostname = mail.sgoco.com
mynetworks = 127.0.0.1
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
receive_override_options = no_address_mappings
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
show_user_unknown_table_name = no
smtp_tls_CAfile = /etc/postfix/tls/smtpd.pem
smtp_tls_cert_file = /etc/postfix/tls/smtpd.pem
smtp_tls_key_file = /etc/postfix/tls/smtpd.pem
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_error_sleep_time = 0s
smtpd_recipient_restrictions = permit_mynetworks,       permit_sasl_authenticated,      reject_non_fqdn_hostname,       reject_non_fqdn_sender, reject_non_fqdn_recipient,      reject_unauth_destination,      reject_unauth_pipelining,reject_invalid_hostname,        check_policy_service inet:127.0.0.1:10030
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noanonymous
smtpd_sender_login_maps = mysql:/etc/postfix/mysql_virtual_sender_maps.cf,mysql:/etc/postfix/mysql_virtual_alias_maps.cf
smtpd_sender_restrictions = permit_mynetworks,  reject_sender_login_mismatch,reject_authenticated_sender_login_mismatch,     reject_unauthenticated_sender_login_mismatch
smtpd_starttls_timeout = 60s
smtpd_tls_CAfile = /etc/postfix/tls/smtpd.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/tls/smtpd.pem
smtpd_tls_key_file = /etc/postfix/tls/smtpd.pem
smtpd_tls_loglevel = 0
smtpd_tls_received_header = yes
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_transport = maildrop:

[[i] 本帖最后由 ysgoto 于 2010-1-12 14:40 编辑 [/i]]

liushaobo 发表于 2010-1-6 17:37

EMOS同一个域是不扫描的,我的没发现这个问题

ysgoto 发表于 2010-1-6 17:40

我是还加了白名单的,但是一样有问题

liushaobo 发表于 2010-1-6 17:47

那就说不清了,要看你的配置文件才知道

ysgoto 发表于 2010-1-6 18:24

要看哪个配置文件,我贴给你

gcp1126 发表于 2010-1-6 22:41

楼主应该贴 postconf -n给老大看。

gcp1126 发表于 2010-1-8 00:42

[quote]原帖由 [i]liushaobo[/i] 于 2010-1-6 17:37 发表 [url=http://www.extmail.org/forum/redirect.php?goto=findpost&pid=71995&ptid=13047][img]http://www.extmail.org/forum/images/common/back.gif[/img][/url]
EMOS同一个域是不扫描的,我的没发现这个问题 [/quote]

同一个域不扫描是指dspam不扫描还是?
我的也有这个情况,本域发的邮件也到垃圾邮件箱里面了。

ysgoto 发表于 2010-1-8 09:15

alias_database = hash:/etc/postfix/aliases
alias_maps = hash:/etc/postfix/aliases
bounce_queue_lifetime = 1d
broken_sasl_auth_clients = yes
command_directory = /usr/sbin
config_directory = /etc/postfix
content_filter = smtp-amavis:[127.0.0.1]:10024
daemon_directory = /usr/libexec/postfix
debug_peer_level = 2
header_checks = regexp:/etc/postfix/dspam_header_checks
mail_name = EMOS V1.4 (Postfix)
mail_owner = postfix
mailbox_size_limit = 20971520
mailq_path = /usr/bin/mailq.postfix
manpage_directory = /usr/share/man
maximal_queue_lifetime = 1d
message_size_limit = 20971520
mydestination = $mynetworks, $myhostname
mydomain = sgoco.com
myhostname = mail.sgoco.com
mynetworks = 127.0.0.1
newaliases_path = /usr/bin/newaliases.postfix
queue_directory = /var/spool/postfix
receive_override_options = no_address_mappings
sample_directory = /etc/postfix
sendmail_path = /usr/sbin/sendmail.postfix
setgid_group = postdrop
show_user_unknown_table_name = no
smtp_tls_CAfile = /etc/postfix/tls/smtpd.pem
smtp_tls_cert_file = /etc/postfix/tls/smtpd.pem
smtp_tls_key_file = /etc/postfix/tls/smtpd.pem
smtpd_banner = $myhostname ESMTP $mail_name
smtpd_error_sleep_time = 0s
smtpd_recipient_restrictions = permit_mynetworks,       permit_sasl_authenticated,      reject_non_fqdn_hostname,       reject_non_fqdn_sender, reject_non_fqdn_recipient,      reject_unauth_destination,      reject_unauth_pipelining,reject_invalid_hostname,        check_policy_service inet:127.0.0.1:10030
smtpd_sasl_auth_enable = yes
smtpd_sasl_local_domain = $mydomain
smtpd_sasl_security_options = noanonymous
smtpd_sender_login_maps = mysql:/etc/postfix/mysql_virtual_sender_maps.cf,mysql:/etc/postfix/mysql_virtual_alias_maps.cf
smtpd_sender_restrictions = permit_mynetworks,  reject_sender_login_mismatch,reject_authenticated_sender_login_mismatch,     reject_unauthenticated_sender_login_mismatch
smtpd_starttls_timeout = 60s
smtpd_tls_CAfile = /etc/postfix/tls/smtpd.pem
smtpd_tls_auth_only = no
smtpd_tls_cert_file = /etc/postfix/tls/smtpd.pem
smtpd_tls_key_file = /etc/postfix/tls/smtpd.pem
smtpd_tls_loglevel = 0
smtpd_tls_received_header = yes
smtpd_use_tls = yes
unknown_local_recipient_reject_code = 550
virtual_alias_maps = mysql:/etc/postfix/mysql_virtual_alias_maps.cf
virtual_mailbox_domains = mysql:/etc/postfix/mysql_virtual_domains_maps.cf
virtual_mailbox_maps = mysql:/etc/postfix/mysql_virtual_mailbox_maps.cf
virtual_transport = maildrop:

liushaobo 发表于 2010-1-8 14:14

更新下SA规则看看

ysgoto 发表于 2010-1-8 14:32

不好意思,我是小菜,咋更新啊?

ysgoto 发表于 2010-1-8 15:20

$sa_tag_level_deflt  = -10;  # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 5.0;  # add 'spam detected' headers at that level
$sa_kill_level_deflt = 10;  # triggers spam evasive actions (e.g. blocks mail)
$sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
$sa_crediblefrom_dsn_cutoff_level = 18; # likewise, but for a likely valid From

gcp1126 发表于 2010-1-8 21:31

EMOS1.5也在受此问题困扰。

ysgoto 发表于 2010-1-12 14:40

已经解决用的这个大哥的办法
[url]http://www.extmail.org/forum/thread-9676-1-2.html[/url]
第二个方法:
修改@mynetworks.
编辑amavisd.conf
默认为:
@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
                  10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );
加入你要跳过过滤的IP网段
例如:
@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
                  10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 222.45.26.0/24 );
同时修改MYNETS策略成如下

$policy_bank{'MYNETS'} = {   # mail originating from @mynetworks
  originating => 1,  # is true in MYNETS by default, but let's make it explicit
  os_fingerprint_method => undef,  # don't query p0f for internal clients
  bypass_spam_checks_maps => [1], # don't spam-check internal mail
  bypass_banned_checks_maps => [1], # don't banned-check internal mail
  bypass_header_checks_maps => [1], # don't header-check internal mail
};
保存后重启amaivsd
以后来自222.45.26.0/24的邮件都跳过检测.
同样会看到如下记录
amavis[15750]: (15750-11) Passed CLEAN, MYNETS LOCAL [222.45.26.132] [222.45.26.132] <[email]world@bendan.com.cn[/email]> -> <[email]duanmingde@yahoo.com.cn[/email]>, Message-ID: <E9E8D264BCF84E23AD210DC0E9A3C1CF@bendan13e0dfc8ed>, mail_id: VbR2kBqI-F1W, Hits: -, size: 11378, queued_as: E741F1D94001, 450 ms
这种方法也不是万金油,他也只能跳过来自@mynetworks中地址的邮件

liushaobo 发表于 2010-1-12 15:40

EMOS本来就有这个配置:lol

nsina 发表于 2010-1-18 02:50

按照上面方法都试了,同一个域的内部邮件还是被过滤,我的EMOS1.5,

gcp1126 发表于 2010-4-23 14:19

同上。。。。。

ken.huang 发表于 2010-5-13 10:14

这个问题还是没有解决吗?我也遇到同样的问题........................:( :( :(

liuzbmcm 发表于 2010-8-22 21:56

dspam 收到邮件就自动关闭,求救

Aug 22 20:41:13 mail dspam[5572]: Client exited with error -5
Aug 22 20:41:13 mail amavis[5379]: (05379-01) (!)DSPAM stderr: 5572: [08/22/2010 20:41:13] Client exited with error -5n
Aug 22 20:41:13 mail amavis[5379]: (05379-01) (!)checking with spam scanner DSPAM failed: DSPAM: error running program /usr/bin/dspam: exit 251
Aug 22 20:41:13 mail amavis[5379]: (05379-01) (!!)TROUBLE in check_mail: spam_scan FAILED: DSPAM failed: DSPAM: error running program /usr/bin/dspam: exit 251 at (eval 99) line 109, <GEN4> line 125.
Aug 22 20:41:13 mail amavis[5379]: (05379-01) (!)PRESERVING EVIDENCE in /var/spool/vscan/tmp/amavis-20100822T204113-05379
Aug 22 20:41:13 mail postfix/smtp[5569]: 90FEE6740344: to=<[email]michaelliu@metronetchina.com[/email]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1.2, delays=0.69/0/0.01/0.54, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1] said: 451 4.5.0 Error in processing, id=05379-01, spam_scan FAILED: DSPAM failed: DSPAM: error running program /usr/bin/dspam: exit 251 at (eval 99) line 109, <GEN4> line 125. (in reply to end of DATA command))
Aug 22 20:43:00 mail amavis[5689]: starting.  /usr/sbin/amavisd at mail.metronetchina.com amavisd-new-2.6.4 (20090625), Unicode aware, LANG="en_US.UTF-8"
Aug 22 20:43:00 mail amavis[5689]: Perl version               5.008008
Aug 22 20:43:00 mail amavis[5690]: Net::Server: Group Not Defined.  Defaulting to EGID '107 107'
Aug 22 20:43:00 mail amavis[5690]: Net::Server: User Not Defined.  Defaulting to EUID '102

页: [1]

Powered by Discuz! Archiver 7.0.0  © 2001-2009 Comsenz Inc.