Zimbra 8.7 doesnt read sauser.cf

[lisek]

Hello..

Well. Subject is a little lie. SpamAssassin reads sauser.cf file, but completely ignores everything there.

I have my file there:

Code: Select all

/opt/zimbra/data/spamassassin/localrules/sauser.cf

If I run spamassassin -D --lint i Can see:

Dec 7 14:15:56.361 [29735] dbg: config: read file /opt/zimbra/data/spamassassin/localrules/sauser.cf

It's not poping any syntax errors while doing lint (only this)

Code: Select all

spamassassin --lint
Dec  7 14:58:57.854 [28845] warn: netset: cannot include 127.0.0.0/8 as it has already been included
Dec  7 14:58:57.856 [28845] warn: netset: cannot include 0:0:0:0:0:0:0:1/128 as it has already been included

But I have rules in sauser, or whitelists and blacklists - none of them works at all.

My sauser.cf file: (it has some old things from old versions, maybe some of them are problems?)

Code: Select all

pyzor_timeout 10
use_razor2 1
use_pyzor 1
use_bayes 1
use_dcc 1
dcc_path /opt/zimbra/dcc/bin/dccproc
skip_rbl_checks 0
pyzor_options --homedir /opt/zimbra/data/amavisd/.pyzor

score URIBL_BLACK 3.250
score RAZOR2_CHECK 3.250
score PYZOR_CHECK 3.250
score BAYES_99 4.30000
score BAYES_60 2.250
score BAYES_50 1.500
score BAYES_00 -0.500
score RP_MATCHES_RCVD -0.000
score SPF_FAIL 10.000
score SPF_HELO_FAIL 10.000
score DMARC_FAIL_REJECT 6.000
bayes_ignore_header Received: from localhost
bayes_ignore_header Received: from server.pl



whitelist_from *@google.com
whitelist_from *@amazon.com
whitelist_from *@netflix.com
whitelist_from *@microsoft.com
whitelist_from *@toggl.com
whitelist_from *@upc.pl
whitelist_from *@upc.com
whitelist_from *@rentalcars.com
whitelist_from calendar-notification@google.com





blacklist_from *@creativeemailing.com
blacklist_from *@enewsletter.pl

header LIBRO Received=~ /\[1.2.3.4\]/
score LIBRO -99
describe LIBRO Allows relays from librohost

header LOCAL_AUTH_RCVD Received=~ /\(Authenticated sender:.*@(server.com|server2.pl|server3.pl|server4.pl|server5.edu.pl|server6.pl|server7.pl|server8.org|)\) /
score LOCAL_AUTH_RCVD -99
describe LOCAL_AUTH_RCVD Accepts e-mail from local authenticated users

So - file seems to be readed, but non of it's contents work.

What can be wrong? (1.2.3.4 if changed here, it's my other zimbra server)

[JDunphy]

You could view an email then right mouse click and view original. Then copy/paste that original message to /tmp/mail.txt and run

Code: Select all

# su - zimbra
% spamassassin -D < /tmp/mail.txt 2> /tmp/out

Look inside /tmp/out to see what happened. It should all be there. If you don't believe the results, modify /tmp/mail.txt or write a quick rule in your sauser.cf and force a rule to fire.
Also double check this: https://wiki.zimbra.com/wiki/Anti-spam_Strategies to see if your plugin's are configured and installed properly.
I don't see anything from your post that looks odd myself but I don't white list at the SA level.