Input Warden Antispam & Virus Protection Extension for Plesk

[Hangover2]

@Hangover2Because spam policies are hierarchical it becomes difficult to program every edge case once users start entering in their own custom values.

Personally, I think the patch is quite easy. The correct individual value is already inside the form; it's just not activated by JavaScript. I will check the code. Maybe I can help to fix it.

 

[danami]

Just a note to others that the issue that @Hangover2 discovered is fixed in the next Warden release and we were able to keep users being able to set custom spam levels

 

[danami]

Warden Anti-spam and Virus Protection 4.06 has been released:

Announcements - Danami

This release adds the ability to manage Postfix built-in header and body checks, expands the CLI interface, bug fixes, and more!

 

[digitalingo]

I am currently migrating a server and trying to import the settings. However, I keep getting the error message. Plesk memory_limit is set to “2G”
Where do I have to adjust the settings?

PHP Fatal error: Allowed memory size of 268435456 bytes exhausted (tried to allocate 20480 bytes) in /opt/psa/admin/plib/modules/warden/library/modules/database/classes/Kohana/Database/MySQLi.php on line 171

 

[danami]

@digitalingo I recommend that you open a support ticket in our client area and I'm sure that a tech can sort out your issue for you.

 

[W4ru]

I am currently migrating a server and trying to import the settings. However, I keep getting the error message.

Hello, I have exactly the same message at a fresh server. Also when trying to import settings from the previous server.
I have opened a ticket, maybe you can write how you could proceed?

An error occurs even if I change individual values in the filter settings. And the filter-service then gets stuck.

Thank You!

 

[danami]

@W4ru you shouldn't be trying to migrate SA settings unless each OS version is identical. From your ticket your new OS is using a completely different SA version SpamAssassin 4.0.

These are the only settings that I recommend that you migrate (Spam policies, blacklists, whitelists and optionally Bayes data):
How can I migrate Warden settings from one server to another? - Knowledgebase - Danami

 

[W4ru]

For other Pleskians:

The export and import of the settings was the cause of all the errors here.

Manual setup on the server using the settings was necessary. Which means a lot of doing. After all, the basic settings of the mailboxes can be transferred via export-import, as well as the Bayes database. But I had to copy and paste my own customizations and especially RegExp rules. Well, we know that from many software products...

I confirm that the HowTo here: How can I migrate Warden settings from one server to another? - Knowledgebase - Danami
even with version jumps: source server: Ubuntu 22.04.5 LTS, Spamasassassin: 3.4.6, target server: Ubuntu 24.04.1 LTS, Spamasassassin: 4.0.0.

And I would like to point out that the support responds quickly and is very solution-oriented. Awesome!

 

[Joystick]

After looking at the log I found that most of the false positives could be detected by querying AbuseIPDB. So I am wondering if someone managed to add Milter-AbuseIPDB to their warden installation? Milter-AbuseIPDB – The While Family

 

[W4ru]

Hello @Joystick,

I am unsure whether a “ another” integration would be good with Warden installed, because there is a setting for abuseipdb in the Warden, look here: Network Tools Settings | Warden Anti-spam and Virus Protection Documentation

I have set this up since the middle of January and have stored an API key. Unfortunately, I don't see any accesses in the abuseipdb interface, so this is still an open process here.

However, I have just seen that there has been one access TODAY. I have a suspicion that this is due to my server restart... because this is an event that could have triggered it. The settings have been set for many days so far. Since I have set to retrieve every 90min... it should soon become clear whether the retrieval is now working. Or another restart later ... I hope not

Check whether you can set this up.

 

[danami]

@W4ru AbuseIPDB is only used in Warden for looking up the reputation of an IP address. You can click on an IP address in any of the grids. (Look at the screenshot). It doesn't make any sense to use it for fighting spam as it was never built for that and there are much better services that are already fully integrated into SpamAssassin like the SpamHaus DQS.

 

[W4ru]

OK, thank You @danami !
Now it is also clear that I always (only) see these queries. See screen. Because the reputation query as shown in your screen, I had also executed today for the first time (several times), which is all reflected in the Abuse backend. Thank you for the precise explanation of the function.

I have SpamHaus active ( free API ) and would like to confirm to @Joystick that this works perfectly, see this test result:

[DCC_CHECK=1.1,DKIM_SIGNED=0.1,DKIM_VALID=-0.1,DKIM_VALID_AU=-0.1,KAM_MESSAGE_HASHBL_FREEMAIL=10,PYZOR_CHECK=1.392,RCVD_IN_MSPIKE_H2=-0.001,RCVD_IN_PBL=0.001,[B]RCVD_IN_SBL_CSS=3,RCVD_IN_ZEN_LASTEXTERNAL=8[/B],SHORTCIRCUIT=100,SPF_HELO_NONE=0.001]

SH | Warden Anti-spam and Virus Protection Documentation for more information.

 

[danami]

Warden Anti-spam and Virus Protection 4.07 has been released:

Announcements - Danami

This release adds a new queue subgrid, Bayes training page, and more!

 

[Hangover2]

Is there any plan to support older compressed log files in the detailed view of the logs section? We have daily log rotation, which results in "No results" being shown in the detailed view if the email log is older than one day. This makes it very difficult to investigate issues in depth, as we have to manually check the old log files via the command line.

 

[danami]

@Hangover2 No Warden uses the systemd-journal for logs. Read the KB article below for how to repair your systemd-journal or how you can adjust your systemd-journal retention time:

How can I fix empty mail log information in Warden? - Knowledgebase - Danami