• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Spam filter set to "Move spam to the Spam folder", but spam is marked instead

KilianE

New Pleskian
System:

OS Ubuntu 12.04.3 LTS
Panel version 11.0.9 Update #60, last updated at Dec 9, 2013 04:04 PM

The system is up to date; last checked at Dec 20, 2013 12:28 AM

I have a problem with one mail account. In the spam filter settings, Plesk offers three options:

  • Mark spam messages by adding the following text to message subject
  • Delete all spam messages
  • Move spam to the Spam folder

The last one is enabled. Nevertheless, spam messages keep ending up in the INBOX instead for this mail account, the subject line marked with ****SPAM**** and a spam report along these lines prepended to the body:

Spam detection software, running on the system "lvps91-250-117-82.dedicated.hosteurope.de", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.

Content preview: http://xvcnr.snotmedic.ru/ Watari, 1991 Masy et al. Wheeling,
West Virginia, U. Sofia form 1974 to 1977. I captured this photo myself.
The company was acquired by Johnson Controls in 1970 and then Faraday in 1978.
The club has gone through 2 name changes before the name Secunderabad Club
finally settled. When Bob came back to the village, Kelly made a point of
flirting with him in the pub and suggests that he is interested in her. It
was Graf's 4th title of the year and the 94th of her career. The Sri Lankan
Officials claim that there is little tangible evidence on this case.Although
he is self confident, he is always left speechless by her razor sharp tongue.
The shoreline is irregular, and fish habitat is provided by brush, timber
and aquatic plants. There is also a Melbourne Autumn Racing Carnival, a time
where Group One races are also held. On September 23, 2009, former Skylight
CFO Amy S. After several paranormal sightings, the couple realizes that something
otherworldly has invaded their home. Adair, a British food writer who in
1923 became Boulestin's companion, literary partner and translator. This is
not the Cistercian Beaulieu Abbey in Hampshire. Her high school life and
relationship with Gendo is chronicled in Volume 5. In Alatsata, the residents
were mainly Greek Orthodox Christians. Armstrong College, to form King's
College, Durham. Drogheda midfield and sometimes played up front. Company's
earliest extant Charter. Hynson lived just west of the village. She finished
7th in the 3000 m and 9th in the 1500 m. Silvia Sommer composes for choir,
orchestra, solo instrument and chamber ensemble. [...]

Content analysis details: (27.9 points, 7.0 required)

pts rule name description
---- ---------------------- --------------------------------------------------
0.7 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[187.170.180.46 listed in zen.spamhaus.org]
3.6 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
2.7 RCVD_IN_PSBL RBL: Received via a relay in PSBL
[187.170.180.46 listed in psbl.surriel.com]
1.6 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
[187.170.180.46 listed in bb.barracudacentral.org]
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?187.170.180.46>]
4.5 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: snotmedic.ru]
1.7 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: snotmedic.ru]
1.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: snotmedic.ru]
0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.
See
http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block
for more information.
[URIs: snotmedic.ru]
1.7 URIBL_DBL_SPAM Contains an URL listed in the DBL blocklist
[URIs: snotmedic.ru]
1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words
0.0 HTML_MESSAGE BODY: HTML included in message
1.6 FR_ALMOST_VIAG2 RAW: Almost looks like viagra.
1.3 RDNS_NONE Delivered to internal network by a host with no rDNS
0.8 HELO_DYNAMIC_DHCP Relay HELO'd using suspicious hostname (DHCP)
3.2 HELO_DYNAMIC_IPADDR Relay HELO'd using suspicious hostname (IP addr
1)

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.

I tried to switch to the first option, save the settings, then switch back to the third option and save the settings again, but this does not seem to solve the problem.

Any ideas what I could do to actually make it move spam to the spam folder, or how to diagnose the problem further?
 
Hello,

Try to repair/rebuild mail server configuration on your server

Code:
/usr/local/psa/admin/sbin/mchk --with-spam
 
I tried to switch to the first option, save the settings, then switch back to the third option and save the settings again, but this does not seem to solve the problem.

I tried this again, this time it seems to have worked.

InderS, I'll try your tip if I see the problem again. Thanks!
 
Back
Top