8.7.x spam DMARC_FAIL_REJECT=9 for aol.com and zimbra.com

[JDunphy]

One makes edits here:

• /opt/zimbra/conf/salocal.cf.in

and then after a Zimbra services restart THIS file gets regenerated:

• /opt/zimbra/data/spamassassin/localrules/salocal.cf

is that correct (the regeneration of salocal.cf)?

There is one more file... They say a picture is worth a thousand words.

Code: Select all

% ls -l /opt/zimbra/conf/salocal.cf.in
-rw-r--r-- 1 zimbra zimbra 4512 May 31  2017 /opt/zimbra/conf/salocal.cf.in
%  ls -l /opt/zimbra/data/spamassassin/localrules/salocal.cf
-r--r----- 1 zimbra zimbra 4152 Mar 16 03:48 /opt/zimbra/data/spamassassin/localrules/salocal.cf
% ls -l /opt/zimbra/data/spamassassin/localrules/sauser.cf
-rw-r--r-- 1 zimbra zimbra 32456 Mar 13 23:19 /opt/zimbra/data/spamassassin/localrules/sauser.cf

Where that last one is the local changes that can override the system defaults including that DMARC_FAIL_REJECT. BTW, We never saw any problems adjusting the score DMARC_FAIL_REJECT with more spam. It was a non issue in the end. Go figure.

To recap. Make your changes at: /opt/zimbra/data/spamassassin/localrules/sauser.cf for 8.6 and above. Extra credit if you lint it for errors... then restart to re-read your changes.

Code: Select all

su - zimbra
/opt/zimbra/common/bin/spamassassin --lint
zmantispamctl restart

[L. Mark Stone]

I'm running into this too (with one of our clients, they're running 8.7.11.GA.1854.UBUNTU16.64 NE).

I've been trolling the forum & wiki (for details on the two files I mention below) and trying to parse what I'm seeing (while filtering out documentation for older versions of Zimbra). From what I can see here:

• https://wiki.zimbra.com/wiki/Improving_Anti-spam_system

One makes edits here:

• /opt/zimbra/conf/salocal.cf.in

and then after a Zimbra services restart THIS file gets regenerated:

• /opt/zimbra/data/spamassassin/localrules/salocal.cf

is that correct (the regeneration of salocal.cf)?

Not for a long while; that wiki is very outdated unfortuanately.

if you less the salocal.conf.in file in your Zimbra 8.7.11 installation, you'll see a reference to http://wiki.zimbra.com/wiki/SpamAssassin_Customizations . In that wiki, you'll see the reference to creating an sauser.cf file in /opt/zimbra/data/spamassassin/localrules with all of your preferred customizations as the now-supported way of tweaking SpamAssassin.

The wiki also describes how to have Zimbra update the SpamAssassin rule sets on its own periodically.

I'll send you a bill David...

All the best,
Mark

[DavidMerrill]

I'll send you a bill David...

I'm good for it, I swear!

[L. Mark Stone]

I'll send you a bill David...

I'm good for it, I swear!

Bring me a shrubbery!!

LOL!