This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

How can users tell Astaro about SPAM?

How can my users behind the Astaro gateway tell Astaro that an email is spam?

I have some users that receive spam through the Astaro, but they don't want the Administrator to have to go in and add to a blacklist.  Is there a way for the users to do this?  How?

Thanks,

Joe


This thread was automatically locked due to age.
Parents
  • Joe, what version of Astaro - 7.402?  Are you using the SMTP Proxy or POP3?

    What kind of spams are getting through?  With V7.4 SMTP Anti-Spam, the only thing I see is advance-fee fraud, and they know they have a problem with that.  In any case, none of those emails could have been on a blacklist because they have spoofed "From:" addresses from random domains.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • Joe, what version of Astaro - 7.402?  Are you using the SMTP Proxy or POP3?

    What kind of spams are getting through?  With V7.4 SMTP Anti-Spam, the only thing I see is advance-fee fraud, and they know they have a problem with that.  In any case, none of those emails could have been on a blacklist because they have spoofed "From:" addresses from random domains.

    Cheers - Bob



    Hi Bob

    I got today 3 spam emails that astaro let through

    Query Log:	
    
    Filter:
    Autoscroll
    /var/log/pop3/2009/05/pop3-2009-05-20.log.gz:2009:05:20-12:07:04 Astaro pop3proxy[20309]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="M-Easton@dfid.gov.uk" to="arash@arash1st.co.uk" subject="Important FightCamp 09 news!" size="9075" srcip="85.158.136.35" dstip="62.1.217.180" uid="50" ident="0/20309-1-1242817623"
    /var/log/pop3/2009/05/pop3-2009-05-21.log.gz:2009:05:21-22:40:34 Astaro pop3proxy[10772]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="M-Easton@dfid.gov.uk" to="arash@arash1st.co.uk" subject="Schola FightCamp: Important!" size="8665" srcip="85.158.136.3" dstip="62.1.217.180" uid="51" ident="0/10772-19-1242942033"
    /var/log/pop3/2009/05/pop3-2009-05-22.log.gz:2009:05:22-11:17:18 Astaro pop3proxy[11206]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="M-Easton@dfid.gov.uk" to="arash@arash1st.co.uk" subject="FightCamp 09" size="7954" srcip="194.106.220.51" dstip="62.1.217.180" uid="52" ident="0/11206-1-1242987437"
    /var/log/pop3.log:2009:05:27-10:23:18 Astaro pop3proxy[21949]: id="1100" severity="info" sys="SecureMail" sub="pop3" name="email passed" from="M-Easton@dfid.gov.uk" to="arash@arash1st.co.uk" subject="FW: Schola: BFHS insurance" size="286934" srcip="194.106.220.51" dstip="62.1.217.180" uid="53" ident="0/21949-1-1243416184"



    That's the pop3 log.Neither the From nor the TO address is mine. I can block it via the user control but I don't know which user gets those emails!
  • I don't really know much about the POP3 Anti-Spam.  Anyone else?

    Wingman, those are all individual emails that appear to be daily from one individual to another.  Almost like standard "opt-out" marketing.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • I don't really know much about the POP3 Anti-Spam.  Anyone else?

    Wingman, those are all individual emails that appear to be daily from one individual to another.  Almost like standard "opt-out" marketing.
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data