[Users] Zimbra Anti-Spam Best Practices - 2019

[L Mark Stone]

Lorenzo,

I fixed your name in the blog post and did a little more homework on the X-Originating-IP false positives thing.  Years ago I too removed adding this header for the same reason, but today I use it for DoSFilter, which I like very much in combination with a failed lockout policy<https://www.missioncriticalemail.com/2018/10/19/using-zimbras-dosfilter-and-failed-login-lockout-policy-together/>.

I egrepped all of my zimbra.log files and have found zero instances of RCVD_IN_PBL tests, even though I have many, many users who work remotely from dynamic IP addresses sure to be listed in Spamhaus's PBL.

Not sure when/how Zimbra addressed this, but the biggest false positive issue I have faced is from ZCO users, and the two MX test scores I added to sauser.cf in my blog post fixes that.

I just don't see any X-Originating-IP false positives any more on 8.8.x like we all used to years ago.

Hope that helps,
Mark

_________________________________________________

Another Message From...   L. Mark Stone


________________________________
From: Lorenzo Milesi <maxxer at yetopen.it>
Sent: Friday, March 22, 2019 7:35 AM
To: L Mark Stone
Cc: users
Subject: Re: [Users] Zimbra Anti-Spam Best Practices - 2019

One last matter: I usually need to remove x-originating-ip in config because it caused SA/Amavis from considering this IP as "originating", thus marking mails as spam based on the client connection. Did you ever run in such problem?

--
Lorenzo Milesi - lorenzo.milesi at yetopen.it

YetOpen S.r.l. - https://www.yetopen.it/
Via Salerno 18 - 23900 Lecco - ITALY -
Tel +39 0341 220 205 - Fax +39 178 6070 222

Think green - Non stampare questa e-mail se non necessario / Don't print this email unless necessary

-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo 679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci non appena possibile.
Grazie.

Confidentiality notice: this email message including any attachment is for the sole use of the intended recipient and may contain confidential and privileged information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or distribution
is prohibited. If you are not the intended recepient please delete this message without copying, printing or forwarding it to others, and alert us as soon as possible.
Thank you.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.zetalliance.org/pipermail/users_lists.zetalliance.org/attachments/20190322/58407dc0/attachment.html>