Not blocking any mail.

[ozgurerdogan]

I have a domain with .it extension. And it seems PMG does not block any email for that domain. More interesting thing is, email account is getting nearly 30 spam mails in just one minute. How is this possible to get such much spam mail ?

One sample log:

2024-08-07T17:11:55.663981+03:00 antispam postfix/smtpd[898]: connect from 3.mo575.mail-out.ovh.net[46.105.58.60]
2024-08-07T17:11:56.052235+03:00 antispam postfix/smtpd[898]: 0CBA9C0057: client=3.mo575.mail-out.ovh.net[46.105.58.60]
2024-08-07T17:11:56.110412+03:00 antispam postfix/cleanup[950]: 0CBA9C0057: message-id=<7eb36fc731a79891741bc7f7bcc80d73@osarus.com>
2024-08-07T17:11:56.178885+03:00 antispam postfix/qmgr[784]: 0CBA9C0057: from=<infos@osarus.com>, size=6176, nrcpt=1 (queue active)
2024-08-07T17:11:56.178975+03:00 antispam postfix/smtpd[898]: disconnect from 3.mo575.mail-out.ovh.net[46.105.58.60] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
2024-08-07T17:11:56.223612+03:00 antispam pmg-smtp-filter[1015]: C138166B380AC35E70: new mail message-id=<7eb36fc731a79891741bc7f7bcc80d73@osarus.com>#012
2024-08-07T17:11:58.229687+03:00 antispam pmg-smtp-filter[1015]: C138166B380AC35E70: SA score=0/5 time=1.973 bayes=0.00 autolearn=ham autolearn_force=no hits=BAYES_00(-1.9),DKIM_SIGNED(0.1),DKIM_VALID(-0.1),DKIM_VALID_AU(-0.1),DKIM_VALID_EF(-0.1),DMARC_PASS(-0.1),HTML_IMAGE_ONLY_32(0.001),HTML_MESSAGE(0.001),MIME_HTML_ONLY(0.1),RCVD_IN_DNSWL_NONE(-0.0001),RCVD_IN_MSPIKE_H3(0.001),RCVD_IN_MSPIKE_WL(0.001),SPF_HELO_NONE(0.001),SPF_PASS(-0.001)
2024-08-07T17:11:58.231603+03:00 antispam postfix/smtpd[1011]: connect from localhost.localdomain[127.0.0.1]
2024-08-07T17:11:58.232557+03:00 antispam postfix/smtpd[1011]: 38C1BC28CE: client=localhost.localdomain[127.0.0.1], orig_client=3.mo575.mail-out.ovh.net[46.105.58.60]
2024-08-07T17:11:58.233161+03:00 antispam postfix/cleanup[944]: 38C1BC28CE: message-id=<7eb36fc731a79891741bc7f7bcc80d73@osarus.com>
2024-08-07T17:11:58.279895+03:00 antispam postfix/qmgr[784]: 38C1BC28CE: from=<infos@osarus.com>, size=7459, nrcpt=1 (queue active)
2024-08-07T17:11:58.279977+03:00 antispam postfix/smtpd[1011]: disconnect from localhost.localdomain[127.0.0.1] ehlo=1 xforward=1 mail=1 rcpt=1 data=1 commands=5
2024-08-07T17:11:58.280053+03:00 antispam pmg-smtp-filter[1015]: C138166B380AC35E70: accept mail to <user@pmg.com> (38C1BC28CE) (rule: default-accept)
2024-08-07T17:11:58.284639+03:00 antispam pmg-smtp-filter[1015]: C138166B380AC35E70: processing time: 2.059 seconds (1.973, 0.026, 0)
2024-08-07T17:11:58.284884+03:00 antispam postfix/lmtp[1013]: 0CBA9C0057: to=<user@pmg.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=2.5, delays=0.4/0/0.04/2.1, dsn=2.5.0, status=sent (250 2.5.0 OK (C138166B380AC35E70))
2024-08-07T17:11:58.284945+03:00 antispam postfix/qmgr[784]: 0CBA9C0057: removed
2024-08-07T17:11:59.245827+03:00 antispam postfix/smtp[794]: 38C1BC28CE: to=<user@pmg.com>, relay=mail.pointsrl.it[x.x.x.x]:25, delay=1, delays=0.05/0/0.11/0.85, dsn=2.0.0, status=sent (250 OK id=1sbhNU-0004bU-Ue)
2024-08-07T17:11:59.245938+03:00 antispam postfix/qmgr[784]: 38C1BC28CE: removed

 

[joe.young@orecity.k12.or.]

PMG is only using DNS blocklists to limit what servers communicate to your server. [https://pmg.proxmox.com/wiki/index.php/Getting_started_with_Proxmox_Mail_Gateway]

PMG is not inspecting the content of the email.

 

[ozgurerdogan]

This is wrong.