How to configure spamassassin to reject mails having invalid return path

[Nitin Bhadauria]

Hello Frnds

I am having spam mails in my inbox and spamassesion can't do any thing
about it because mail are coming from my own mail id but the return path
and massage-id are different.

So how can tell spamassassin to block the mail not having from id and
return path same.


Here is the header .......


From: Clarissa Fischer <jeebesh@...>

Date: 9 July 2008 1:08:09 PM GMT+05:30

To: <jeebesh@...>

Subject: RE: Dear jeebesh@... 79% Savings ...3 Days Only

Return-Path: <telg@...>

X-Original-To: jeebesh@...

Delivered-To: jeebesh@...

Received: by mail.sarai.net (Postfix, from userid 1006) id 4DC952C48011;
Wed, 9 Jul 2008 13:08:14 +0530 (IST)

Received: from kassa-1 (unknown [195.177.116.170]) by mail.sarai.net
(Postfix) with SMTP id F10C02C48003 for <jeebesh@...>; Wed, 9 Jul
2008 13:08:09 +0530 (IST)

X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mail.sarai.net

X-Spam-Status: No, score=-63.8 required=4.7 tests=DIGEST_MULTIPLE,
HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,
PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
RCVD_IN_XBL,RDNS_NONE,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,
URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,USER_IN_WHITELIST
autolearn=no version=3.2.4

X-Mailer: CME-V6.5.4.3; MSN

Message-Id: <20080709123810.3101.qmail@kassa-1>

X-Antivirus: avast! (VPS 080708-0, 08.07.2008), Outbound message

X-Antivirus-Status: Clean

X-Sanitizer: Advosys mail filter

Mime-Version: 1.0

Content-Type: text/html; charset="ISO-8859-1"

Content-Transfer-Encoding: 7bit

[Martin.Hepworth]

Hi

That's because you've put 'from me@...' in the whitelist.

This is a bad idea as you've found out, as spammers almost always fake the from address.

I find it's best not to call SA when the email if from trusted IP-Addresses not email addresses, esp for my local domain. Depends on what you're using to call Spamassassin on how you do this.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: [phone]

> -----Original Message-----
> From: Nitin Bhadauria [mailto:nitin.bhadauria@...]
> Sent: 23 July 2008 11:25
> To: users@...
> Subject: How to configure spamassassin to reject mails having
> invalid return path
>
> Hello Frnds
>
> I am having spam mails in my inbox and spamassesion can't do
> any thing about it because mail are coming from my own mail
> id but the return path and massage-id are different.
>
> So how can tell spamassassin to block the mail not having
> from id and return path same.
>
>
> Here is the header .......
>
>
> From: Clarissa Fischer <jeebesh@...>
>
> Date: 9 July 2008 1:08:09 PM GMT+05:30
>
> To: <jeebesh@...>
>
> Subject: RE: Dear jeebesh@... 79% Savings ...3 Days Only
>
> Return-Path: <telg@...>
>
> X-Original-To: jeebesh@...
>
> Delivered-To: jeebesh@...
>
> Received: by mail.sarai.net (Postfix, from userid 1006) id
> 4DC952C48011; Wed, 9 Jul 2008 13:08:14 +0530 (IST)
>
> Received: from kassa-1 (unknown [195.177.116.170]) by mail.sarai.net
> (Postfix) with SMTP id F10C02C48003 for <jeebesh@...>;
> Wed, 9 Jul
> 2008 13:08:09 +0530 (IST)
>
> X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on
> mail.sarai.net
>
> X-Spam-Status: No, score=-63.8 required=4.7
> tests=DIGEST_MULTIPLE,
> HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,
> PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,R
> AZOR2_CHECK,
> RCVD_IN_XBL,RDNS_NONE,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,
> URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,USER_IN_WHITELIST
> autolearn=no version=3.2.4
>
> X-Mailer: CME-V6.5.4.3; MSN
>
> Message-Id: <20080709123810.3101.qmail@kassa-1>
>
> X-Antivirus: avast! (VPS 080708-0, 08.07.2008), Outbound message
>
> X-Antivirus-Status: Clean
>
> X-Sanitizer: Advosys mail filter
>
> Mime-Version: 1.0
>
> Content-Type: text/html; charset="ISO-8859-1"
>
> Content-Transfer-Encoding: 7bit
>

**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the
addressee only and may be confidential. If they come to you in error
you must take no action based on them, nor must you copy or show them
to anyone. Please advise the sender by replying to this e-mail
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of
the author and unless specifically stated to the contrary, are not
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure
communications medium and can be subject to data corruption. We advise
that you consider this fact when e-mailing us.
Viruses : We have taken steps to ensure that this e-mail and any
attachments are free from known viruses but in keeping with good
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
United Kingdom
**********************************************************************

[Matt Kettler-3]

Nitin Bhadauria wrote:

> Hello Frnds
>
> I am having spam mails in my inbox and spamassesion can't do any thing
> about it because mail are coming from my own mail id but the return path
> and massage-id are different.
>
> So how can tell spamassassin to block the mail not having from id and
> return path same.
>
>  

You mean you want to reject all mailing list posts? (from: is the
poster, return-path is the list)

> X-Spam-Status: No, score=-63.8 required=4.7 tests=DIGEST_MULTIPLE,
> HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,
> PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
> RCVD_IN_XBL,RDNS_NONE,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,
> URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,USER_IN_WHITELIST
> autolearn=no version=3.2.4
>  
Fix your whitelist settings instead. Don't use whitelist_from unless you
cannot possibly avoid it. Use whitelist_from_rcvd instead, which is less
vulnerable to forgery.

[mouss-2]

Nitin Bhadauria wrote:
> Hello Frnds
>
> I am having spam mails in my inbox and spamassesion can't do any thing
> about it because mail are coming from my own mail id

I don't know what is a mail id?

anyway, SA cannot reject mail. SA can only tag mail as spam.

> but the return path
> and massage-id are different.
>
> So how can tell spamassassin to block the mail not having from id and
> return path same.
>
>
> Here is the header .......
>
>
> From: Clarissa Fischer <jeebesh@...>

>
> Date: 9 July 2008 1:08:09 PM GMT+05:30
>
> To: <jeebesh@...>
>
> Subject: RE: Dear jeebesh@... 79% Savings ...3 Days Only
>
> Return-Path: <telg@...>
>
> X-Original-To: jeebesh@...
>
> Delivered-To: jeebesh@...
>
> Received: by mail.sarai.net (Postfix, from userid 1006) id 4DC952C48011;
> Wed, 9 Jul 2008 13:08:14 +0530 (IST)
>
> Received: from kassa-1 (unknown [195.177.116.170]) by mail.sarai.net
> (Postfix) with SMTP id F10C02C48003 for <jeebesh@...>; Wed, 9 Jul
> 2008 13:08:09 +0530 (IST)
>
> X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on mail.sarai.net
>
> X-Spam-Status: No, score=-63.8 required=4.7 tests=DIGEST_MULTIPLE,
> HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,MIME_HTML_ONLY,
> PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
> RCVD_IN_XBL,RDNS_NONE,URIBL_AB_SURBL,URIBL_BLACK,URIBL_JP_SURBL,
> URIBL_OB_SURBL,URIBL_SC_SURBL,URIBL_WS_SURBL,USER_IN_WHITELIST
> autolearn=no version=3.2.4

as others have said, you have a whitelisting problem. if you whitelist
mail, you can't ask to block it.

>
> X-Mailer: CME-V6.5.4.3; MSN
>
> Message-Id: <20080709123810.3101.qmail@kassa-1>
>
> X-Antivirus: avast! (VPS 080708-0, 08.07.2008), Outbound message
>
> X-Antivirus-Status: Clean
>
> X-Sanitizer: Advosys mail filter
>
> Mime-Version: 1.0
>
> Content-Type: text/html; charset="ISO-8859-1"
>
> Content-Transfer-Encoding: 7bit