Block Spam from a certain IP address

ctye13 · 09-10-2010, 06:48 AM

Hello, I am new to these forums, and I have a problem that I am unable to solve with the Spam Blocker in untangle. The president of our company is receiving an excessive amount of spam email on his blackberry, which he uses to check company emails on, and I am just wondering if there is a way to block spam coming from the blackberry IP address, so it will be blocked from ever reaching his cell? I have been checking the Spam Blocker Event Log, and I see multiple emails coming from that IP address that are being passed that shouldn't be. I have set the SMTP Strength Threshold to the "Extreme" setting, as well as for the POP and IMAP. We are currently using Untangle "Build: 7.4.1~svn20100830r27350release7.4-1lenny" and we are using the "Lite" package of Untangle w/ no paid modules. Please let me know if anyone may have a solution to this issue, or could provide some assistance. Your help is greatly appreciated. Please let me know if there is any additional information you may need from me, thanks.

dwasserman · 09-10-2010, 07:40 AM

Where is your mail server? inside your network?
You like stop spam "to" blackberry or "from" blackberry, your text is confused.

ctye13 · 09-10-2010, 08:13 AM

Our mail server is located inside our network, and I apologize for the way I worded the post, I would like to stop spam going to the blackberry.

dwasserman · 09-10-2010, 08:18 AM

The anti spam app must block before the mails arrive to your mail server and then the blackberry can view their.
With the others accounts work fine? What settings are applied? mark, drop, or quarantine?.

ctye13 · 09-10-2010, 11:05 AM

See attachments. I have attached two screen shots of my Untangle Server settings if this helps at all. Let me know if there is anything else that you may need from me to assist with the issue, thanks.

joshgay · 09-10-2010, 01:21 PM

Do the emails have "SPAM" in the subject?
Is that user the primary recipient in the e-mail header?

proactivens · 09-10-2010, 01:59 PM

setting the action to "mark" will still allow spam to be delivered to the users, it will just say "SPAM" in the header. You need to configure your BES (if your using one) to drop or at least not deliver mail with "SPAM" in its header to your phones.

ctye13 · 09-10-2010, 02:38 PM

I am not sure if the emails have "SPAM" in the subject (I haven't been able to check the phone to tell), and I am also not sure if he is the primary recipient either. I am attaching a sample Spam Blocker Event Log if that may help anyone out there. This sample event log entry was taken a few days ago when the user was reporting receiving quite a bit of spam on his Blackberry (I blurred out the recipient's email address for privacy and security reasons). We are using a Postfix Mail Server v2.6.1 w/ Dovecot IMAP/POP3 Server v1.2.9. Our Untangle Server sits between a Linksys RV042 10/100 4-port VPN Router/Firewall and an openSUSE 11.2 64-bit machine where our mail server is installed. I am an administrator for a small company w/ only about 10-12 employees and I am the only IT person here, I am a beginner in dealing w/ Linux Mail servers and spam filtering on linux as well, so the more detail in any response I get, the more it will help me out. I will try to provide any additional info that I can if needed/requested from me. Thanks to everyone out there on the Untangle Forums, you guys do an awesome job!!

ctye13 · 09-10-2010, 02:45 PM

Quote:

Originally Posted by proactivens

setting the action to "mark" will still allow spam to be delivered to the users, it will just say "SPAM" in the header. You need to configure your BES (if your using one) to drop or at least not deliver mail with "SPAM" in its header to your phones.

Yeah I think I read that in the Untangle documentation online about it only marking the spam and still passing it to the users, and we are not using BES. we are using Postifx so I am not sure exactly how to set it up to block the spam to going to the IP address of the blackberry....at least not yet

(Still learning about Postfix and filtering with Procmail and Spamassassin)

dwasserman · 09-10-2010, 04:44 PM

I dont know Postfix Mail Server v2.6.1, I use exchange only, but sure you can create a rule to move the mails with [SPAM] in the subjet to a spam folder created "ad hoc".
Untnagle work fine, doing the job, mark the spam.
Or take the risk, and change the mark to delete option in the filter, but who is responsible if loose a million dollar mail?

09-10-2010, 06:48 AM	#1 (permalink)
ctye13 Newbie Join Date: Aug 2010 Location: Houston, Texas Posts: 14	Block Spam from a certain IP address Hello, I am new to these forums, and I have a problem that I am unable to solve with the Spam Blocker in untangle. The president of our company is receiving an excessive amount of spam email on his blackberry, which he uses to check company emails on, and I am just wondering if there is a way to block spam coming from the blackberry IP address, so it will be blocked from ever reaching his cell? I have been checking the Spam Blocker Event Log, and I see multiple emails coming from that IP address that are being passed that shouldn't be. I have set the SMTP Strength Threshold to the "Extreme" setting, as well as for the POP and IMAP. We are currently using Untangle "Build: 7.4.1~svn20100830r27350release7.4-1lenny" and we are using the "Lite" package of Untangle w/ no paid modules. Please let me know if anyone may have a solution to this issue, or could provide some assistance. Your help is greatly appreciated. Please let me know if there is any additional information you may need from me, thanks.

09-10-2010, 07:40 AM	#2 (permalink)
dwasserman Join Date: Jun 2008 Location: Argentina URLs submitted: 57 Posts: 3,634	Where is your mail server? inside your network? You like stop spam "to" blackberry or "from" blackberry, your text is confused. __________________ The world is divided into 10 kinds of people, who know binary and those not

09-10-2010, 08:18 AM	#4 (permalink)
dwasserman Join Date: Jun 2008 Location: Argentina URLs submitted: 57 Posts: 3,634	The anti spam app must block before the mails arrive to your mail server and then the blackberry can view their. With the others accounts work fine? What settings are applied? mark, drop, or quarantine?. __________________ The world is divided into 10 kinds of people, who know binary and those not

09-10-2010, 01:59 PM	#7 (permalink)
proactivens Join Date: Sep 2008 Location: Greensburg, Pa Posts: 2,307	setting the action to "mark" will still allow spam to be delivered to the users, it will just say "SPAM" in the header. You need to configure your BES (if your using one) to drop or at least not deliver mail with "SPAM" in its header to your phones. __________________ www.untangleappliances.com Toll Free: 866-794-8879 UNTANGLE PLATINUM PARTNER Follow us at spiceworks!

09-10-2010, 04:44 PM	#10 (permalink)
dwasserman Join Date: Jun 2008 Location: Argentina URLs submitted: 57 Posts: 3,634	I dont know Postfix Mail Server v2.6.1, I use exchange only, but sure you can create a rule to move the mails with [SPAM] in the subjet to a spam folder created "ad hoc". Untnagle work fine, doing the job, mark the spam. Or take the risk, and change the mark to delete option in the filter, but who is responsible if loose a million dollar mail? __________________ The world is divided into 10 kinds of people, who know binary and those not

Protect

Filter

Perform

Connect

Manage

Add-Ons

09-10-2010, 08:13 AM	#3 (permalink)
ctye13 Newbie Join Date: Aug 2010 Location: Houston, Texas Posts: 14	Our mail server is located inside our network, and I apologize for the way I worded the post, I would like to stop spam going to the blackberry.

09-10-2010, 01:21 PM	#6 (permalink)
joshgay Untangler Join Date: Dec 2009 Location: Olympia, WA Posts: 76	Do the emails have "SPAM" in the subject? Is that user the primary recipient in the e-mail header?