Autoresponder Spam

Submitted by izoox on Wed, 04/13/2011 - 12:10

Does the mail get filtered for spam before it get's responded to by the autoresponder? I can't find anywhere that says whether or not this happens.

Status: 
Closed (fixed)

Comments

Submitted by andreychek on Wed, 04/13/2011 - 12:14

Yeah, it should be filtered first.

SpamAssassin and ClamAV are called earlier in the delivery process. The auto-responders are handled right before delivery from the user's own .procmailrc file, which is called after the email is scanned.

Submitted by izoox on Wed, 04/13/2011 - 12:18

I have user's who are complaining about mail delivery messages because the auto-responder seems to be responding to spam... they claim they don't get that much spam in their inbox. I haven't confirmed that yet, I just wanted to make sure it was actually being filtered before responding.

Submitted by izoox on Wed, 04/13/2011 - 12:22

I just confirmed though that the error was from the auto-responder responding to an email that was in the spam folder. I did this by searching for the email listed in the mail deliver error in both the inbox and the spam folder and it was in the spam folder.

Submitted by JamieCameron on Wed, 04/13/2011 - 13:05

How was the autoresponder setup - by the user in Usermin on port 20000, or by the admin on the Edit Mail and FTP Users page in Virtualmin?

The order in which spam processesing is done differs between the two ..

Submitted by izoox on Wed, 04/13/2011 - 13:07

It was done using the api.

Submitted by JamieCameron on Wed, 04/13/2011 - 13:27

The autoresponder script should run spamassassin on email before replying to it to prevent exactly this problem .. but maybe you are running an older version of the script somehow.

If you SSH into your system and run :

grep spamassassin /etc/webmin/virtual-server/autoreply.pl

what does it output?

If there is no mention of spamassassin, try copying /usr/libexec/webmin/postfix/autoreply.pl to /etc/webmin/virtual-server/autoreply.pl

Submitted by izoox on Wed, 04/13/2011 - 16:12

It spits out:

# if spamassassin is installed, feed the email to it
$spam = &has_command("spamassassin");

Submitted by JamieCameron on Wed, 04/13/2011 - 16:37

Ok, that looks good. And I presume your system actually has the spamassassin command on it?

The command which spamassassin will show where it is.

Submitted by izoox on Wed, 04/13/2011 - 16:45

Yeah. It's under /usr/bin/spamassassin. However I have the system setup to use spamc. Does that make a difference?

Submitted by izoox on Thu, 04/14/2011 - 10:35

Any ideas here, the user who reported the issue had 2700 mail delivery messages in his inbox this morning. All seemingly from the autoresponder, responding to messages that are definitely in the spam box.

Submitted by JamieCameron on Thu, 04/14/2011 - 13:54

So the messages in his mailbox were bounces from replies sent by the autoresponder in response to spam?

If possible, I'd like to login to the system and take a look at this. I'd need root SSH access though.

Submitted by izoox on Thu, 04/14/2011 - 14:30

Yep. If I check the to address on the original message inside the mail delivery address, the only place that address exists is inside the spam folder. I just enabled remote logins inside virtualmin.

Submitted by JamieCameron on Thu, 04/14/2011 - 16:22

Ok, I see the cause now .. the headers output by spamassassin on your system are slightly different to what Virtualmin expects, causing the autoresponder to not detect spam.

I have patched this on your system, and will include the fix in the next Webmin release.

Submitted by izoox on Thu, 04/14/2011 - 16:33

Perfect. Thank you, thank you, thank you!

Submitted by Issues on Thu, 04/28/2011 - 18:21

Automatically closed -- issue fixed for 2 weeks with no activity.