False positive on SpamHaus

[SansGuidon]

@girish said in False positive on SpamHaus:

@ccfu good catch. I removed that misleading message, thanks

I think your change just render obsolete the code comment saying to remove the duration in notification but I'm not sure https://git.cloudron.io/platform/box/-/blob/master/src/cron.js?ref_type=heads#L113

[girish]

@SansGuidon it does, yes

[timconsidine]

Grrrr, I got the same issue now - Cloudron says in blacklist, Spamhaus says not.
Trying to get my head around this long thread.

EDIT : errr, so TL;DR is nothing we can do and Cloudron will fix it “sometime” ?
Maybe I read too fast, but that’s my takeaway at the moment ...

[ccfu]

@timconsidine That's about right, yes.

[tadeas]

Hello, I seem to have the same issue. My email contacts are getting error message from their mailservers, because their messages to me are getting rejected, falsely marked as positives.

[jdaviescoates]

@tadeas said in False positive on SpamHaus:

Hello, I seem to have the same issue. My email contacts are getting error message from their mailservers, because their messages to me are getting rejected, falsely marked as positives.

That sounds like a completely different issue to me.

[p44]

Me too I'm having false positive on SpamHaus, and a lot of spam in inbox...

[james]

@p44 people here did have great reviews for @d19dotca custom SpamAssasin rules https://forum.cloudron.io/post/105256
That might reduce your spam in the inbox

[p44]

@james great, I will try. Thanks a lot

[ccfu]

SpamHaus connections from Cloudron are not at all reliable at the moment. As @girish wrote, something seems to have changed recently at SpamHaus.

There are two issues that would appear to both be caused by the same problem (refused connections to the SpamHaus servers): the false positive reports that the IP is on the blocklist and the lack of blocklist checking of incoming mails resulting in mails from IPs that are on the blocklist not being identified as such. That could explain an increase in the amount spam getting through, though SpamAssassin rules should still filter a lot of these. SpamAssassin cannot delete incoming mails but can at least make sure they go straight to the Spam folder.

There are other blocklists for incoming mail. I have had good results with Abusix, for example. It is not possible to set a different blocklist in the mail configuration checks though.

[p44]

@ccfu I exactly followed your advice: removed SpamHaus and added SpamAssassin rules https://forum.cloudron.io/post/105256 by @d19dotca

[sponch]

Same here.

[neki]

Hi, any news regarding the SpamHaus issue? My Cloudron server refuses messages from trustworthy addresses, and it really complicates my work. Thank you.

[james]

We really need some more insights about this issue since reproduction is very hard to impossible.

Disclaimer

If you are not comfortable posting your details here, I just enabled that everyone in the forum can send me private messages.
Anything not related to this topic in my private messages will be ignored.

---

To everyone affected, please provide us with the output of the following command from your Cloudron server:

 cloudron-support --send-diagnostics

Adding to that, we could need the domain that you are using for mail.
Furthermore, the more detailed you can describe your system and how you use it, the better we can try to reproduce this to find a solution.

[p44]

I removed SpamHaus form Mail ACL list and system continue giving "Email is not configured properly"...

[ccfu]

@p44 Removing the entry there only stops IP addresses of incoming mail from being checked against the blocklist. It does not affect the email configuration checks, and there is apparrently no way to override this at the moment.

[p44]

@ccfu thanks for your answer.

[neki]

@james, I sent you details via chat yesterday. Or did you mean something else by "private message"?

[james]

@neki that is all good.

[thetomester13]

I just noticed that my Cloudron instance is experiencing similar symptoms: my Email status settings says that my IP is blocked by SpamHaus Zen, but when I put my IP into SpamHaus Zen's checker it comes up clean.

It's a bit unclear at the moment if there is a resolution to this or not?