Autoreply not checking for spam

Submitted by clawsoon on Thu, 08/05/2010 - 17:47

Autoreplies set up through the interface reply to spam. They shouldn't, since this makes the mail server end up on RBLs.

I've created a possible fix. Check the attached patch. This needs to be applied to:

/usr/libexec/webmin/postfix/autoreply.pl /etc/webmin/virtual-server/autoreply.pl /etc/usermin/forward/autoreply.pl /usr/libexec/webmin/sendmail/autoreply.pl /usr/libexec/webmin/postfix/autoreply.pl /usr/libexec/usermin/forward/autoreply.pl

Status: 
Closed (fixed)

Comments

Submitted by JamieCameron on Fri, 08/06/2010 - 03:26

Thanks for the suggestion, and the patch.

I will update the autoreply.pl script in the next Webmin release to pipe mail through spamassassin, and not reply if spam is detected.

Submitted by clawsoon on Sun, 08/08/2010 - 12:53

Thanks for the quick response.

On second thought, it should probably go through clamd, too...

Submitted by JamieCameron on Sun, 08/08/2010 - 18:37

I think spam is a bigger risk, as the autoreply won't contain the virus in a usable form ..

Submitted by Issues on Mon, 08/23/2010 - 13:21

Automatically closed -- issue fixed for 2 weeks with no activity.

Submitted by IS-V on Sun, 11/07/2010 - 09:30

Dear Developers!

I've just found that with Webmin 1.520 a new feature called "The autoreponder script in the Sendmail, Postfix and Qmail modules now uses SpamAssassin to block replies to spam, if installed." has arrived.

While we installed the new version last night the modify date of the above files - /etc/webmin/virtual-server/autoreply.pl (Mod:2009/06/11) - /etc/usermin/forward/autoreply.pl (Mod:2009/12/06) did not change nor the patch does not seem to be applied.

Our kind question is how (the above or another way) this feature has been implemented?

We use Sendmail however with the same problem being autoreplied the spam also like it was described at https://www.virtualmin.com/node/12330 earlier.

Many thanks and greetings.

Gergo GICZY Hungary/EU

Submitted by JamieCameron on Sun, 11/07/2010 - 12:29

You will need to create or modify an autoresponder alias before the new script gets copied into place.

Or you could just copy /usr/share/webmin/sendmail/autoreply.pl to those locations under /etc

Submitted by IS-V on Sun, 11/07/2010 - 12:46

Well, OK, sounds good, thank you at all.

We'll check it out, but before..

Another important question for us on this case if the incoming message will be classified against the user's own Spamassassin settings or the global SpamAssassin settings to decide if spam nand needed to be autoreplied or not? Think it's the global setting.. but please confirm if we're right.

Submitted by JamieCameron on Sun, 11/07/2010 - 12:48

It depends on how the autoreply was setup - if it is by the user, it will use the user's settings.

If it was setup to run from an alias in Virtualmin, it will use global settings.