PDA

View Full Version : SPAM not filtering, everything else working


alain40
04-04-2007, 03:03 PM
Hello Untangle:

Just installed. Great product. Really impressive.

Configured as a bridge between a netgear dual wan firewall and a GB switch.

Have Web filter and Antispyware working, not problem.

Have Spam filter reporting connections and bandwidth, but PASS/BLOCK/SCAN not moving. Log is empty.

What am I doing wrong?

richie
04-04-2007, 05:16 PM
Have you tried clicking on refresh log on Event log tab on Spam Blocker setting?

dmorris
04-04-2007, 05:42 PM
thanks! :D

what protocol are you using? SMTP, POP, or IMAP?

alain40
04-04-2007, 10:51 PM
I use both POP and IMAP since our Email servers are outside.

BTW: more granular controls for POP and IMAP would be a welcome feature. Based on the SPAM score, takes action a, b, or c. Should include pass, mark, and mark + drop the content (just keep the title).

alain40
04-04-2007, 10:55 PM
Yes, when I click refresh (even with ALL EVENTS) the log is empty.

Other "appliances" are working.

dmorris
04-04-2007, 11:43 PM
hmm.. what port are you using?

make sure you've turned off SSL (otherwise the untangle server can't see the traffic to process it)

alain40
04-05-2007, 03:31 PM
Got it working ... but I do not understand why/how.

Enabled SMTP SPAM and all others both inbound/outbound.

Then started to get logs. Now even with only POP and IMAP inbound, I am getting logs.

Not quite sure what happened... but it is fixed.

Did not have SSL before or after.

dmorris
04-05-2007, 03:57 PM
Did it start working once you turned on outbound scanning?

If so, I would verify using the interface tester under config->support that you don't have it plugged in backwards. Everything works backwards, but the policies are backwards. Which is spam blocker's case, means it isn't scanning the spam, whereas web content control works both directions.

Simply go into that panel, and unplug the External interface and click refresh.
Verify that the external interfaces shows it not being connected.
If it shows the internal interface is not connected, the cables can just be switched.

Glad you got it working! :D

edit: of course, the whole 'backwards' thing only applies if you are running as a bridge. If you have the router installed and its working, it isn't plugged in backwards.