Cloudron makes it easy to run web apps like WordPress, Nextcloud, GitLab on your server. Find out more or install now.


  • Further Locking Down Email

    Solved Support
    0 Votes
    20 Posts
    204 Views

    @MisterJD yeah, I have seen that some kernels have an upper limit. I haven't found a way to query this limit to show a proper error.

  • SCAMMING

    Solved Support
    1 Votes
    9 Posts
    351 Views

    Generally, we are able to manage posts which have spam content. Most existing users, they are quite benign. I think we are lucky so far with that we do little to no moderation (maybe only fixing some typos and moving to the right category) 🙂

    In this specific case, the issue was the profile page had spam content. This is a bit more elaborate and I am not sure how @SPRADEEP even came across it. I think if we have a script to clean up profiles which are over 2 weeks old and have not posted anything and have some junk profile, we can delete them. I can't imagine it's hard to spot junk in profiles with some basic word matching.

  • Sorbs Blocklist

    Solved Support
    0 Votes
    4 Posts
    313 Views

    @girish thank you for your answer

  • 0 Votes
    10 Posts
    435 Views

    Good notes to follow up when we look into email in the next release.

    IIRC, whitelist setting is a bit dangerous because it allows "spoofed" emails as it pretty much bypasses all the SPF/DMARC/DKIM checks. Meaning, Cloudron does not reject mail if those checks do not pass because there are too many misconfigured mail servers out there. Instead we tag the failures and allow spamassassin to score the rules. whitelisting makes spamassassin bypass the checks altogether.

  • 0 Votes
    7 Posts
    373 Views

    @d19dotca Sadly, they do match. I'm guessing it's something with my current setup that's acting funny. I'll ignore it for now since I plan on migrating either to the new Contabo server that I got or upgrading my current one at DO to Ubuntu 20.04. I just thought it was a wrong setting on my part.

    Thank you for looking into this and for sharing the custom spam rules! I know you've put a lot of time into that 👍

    2443c4d7-ec13-4149-add3-28e1e7ad48ed-image.png

  • 0 Votes
    11 Posts
    852 Views

    I end this thread because I now have a more specific one going.

  • 1 Votes
    4 Posts
    241 Views

    @girish said in Anyone else see many connections denied due to "Mail from domain <domain> is not allowed from your host" repeatedly from spammy IPs?:

    A bit of a wild guess: mail from is usually <> for bounce mail. So, this seems like some poor denial of service or maybe those IPs know that some mail software misbehaves with such carefully crafted mail.

    Ah very interesting, I appreciate that insight. It was definitely strange when I saw it happening - so many requests at once. I'll keep an eye out for it. Sounds like it's all good then as far as Cloudron is concerned. 🙂 Thanks Girish.

  • 9 Votes
    31 Posts
    2k Views

    @d19dotca This looks pretty good. I am testing it now 🙂

  • 0 Votes
    2 Posts
    168 Views

    There is a "Spam" filter type in next release - 6.4

  • 0 Votes
    5 Posts
    300 Views

    Okay... I may be on the side of this working properly again. lol. Maybe I've been wrong this whole time in thinking it wasn't working correctly.

    So coincidentally I was checking the mail server logs and saw another example of the same message go through to the same recipient from the same mail server, it was listed in the logs as "just now" so I quickly checked mxtoolbox and found that only 4 at that time had been listed, none of which were ones I was using.

    Here is how it looked at the very moment I checked when it was "just now" in the logs:

    69bc5a02-12ca-420e-958a-27405c21f7ed-image.png

    07b937c4-4840-4c14-887b-7513acc87251-image.png

    Edit: Checking about 6 minutes later, I see the blocklists have aleady been updated for more (Spamhaus Zen in this case would have caught it if it were about 5 minutes earlier):

    4522d168-dc21-498f-845b-885cfe0a73a1-image.png

    So I guess we can probably mark this as resolved, as I now see conclusive evidence that the various blocklists used just didn't have it listed until a few minutes after the message was received. I guess in order for it to adapt so quickly this spam attack on one of my users from those mail servers must be right at the beginning of a spam wave. Kind of neat actually to see how real-time these lists are. haha.

  • 3 Votes
    10 Posts
    541 Views

    @girish - this is not possible to do unfortunately in Cloudron it seems, but kindly tell me if I'm doing something wrong here.

    The redirect works for filtering out spam, in other words only non-spam messages get through to the endpoint email using a filter like this:

    # rule:[Forward non-spam messages] if allof (not header :contains "x-spam-status" "Yes,") { redirect "<externalEmailAddress>"; }

    However, all messages marked as spam still save in the mailbox regardless of any filters I set to discard them. In my case, I want the spam messages to be discarded/deleted automatically as there's no sense in them remaining in the "forwarding only" mailbox. It seems maybe there's a priority filter going on elsewhere in Cloudron that's overriding my sieve filter?

    Using a filter like this:

    # rule:[Discard spam messages on arrival] if allof (header :contains "x-spam-status" "Yes,") { discard; stop; }

    ... will still save the email in the Spam folder. I've tried variations of it too but no-dice. Basically I can't get any filters to work when it's an identified spam message, only filters when it's NOT spam.

    Here's a way to reproduce it:

    Set this filter in Roundcube: # rule:[Discard spam messages on arrival] if allof (header :contains "x-spam-status" "Yes,") { discard; stop; }

    Send a message to the email account using the GTUBE string which SpamAssassin automatically marks with 1000 points, it's basically a test for spam filters: XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

    See if the message is really discarded per the sieve filter or if it's still arriving in the Spam folder. In my cases, they still arrive in the Spam folder which seems to be incorrect behaviour.

    Edit: I wrote a dedicated bug for this instead: https://forum.cloudron.io/topic/5189/can-t-discard-spam-messages-on-arrival-using-sieve-filters/1

  • 0 Votes
    8 Posts
    657 Views

    Nevermind, I did not realize sendgrid setup was only for sending email, I see the other parts to setup for receiving email now. Please disregard.

  • 1 Votes
    7 Posts
    390 Views

    @girish Will do

  • 2 Votes
    9 Posts
    451 Views

    I really like the blackllist checking being built-in. Frankly, I'd also be a fan of getting notifications about it. I suppose UX-wise, perhaps this is the appropriate sort of thing to trigger a yellow status on email.

  • Completely discard spam messages

    Solved Support
    0 Votes
    11 Posts
    615 Views
  • 2 Votes
    18 Posts
    911 Views

    @marcusquinn Thank's Marcus, I'll follow your advice to check the reputation BEFORE, and if reputation is poor, just delete and purchase new one.

    Should be interesting that ISP's do themself this control and tell BEFORE the IP reputation.

  • 1 Votes
    2 Posts
    184 Views

    Personally, I'm migrating away from GMail, and wouldn't recommend it, although I appreciate it's difficult to cut those ties for some.

    Another possible solution: would be to forward to any other email service that does support POP3 but doesn't have spam filtering. That way, you're not sending email to GMail, it's pulling and filtering. Appreciate that a 3 mailserver setup is odd though, but then so is GMail.

    I think it's worth just having a POP3 post in Feature Requests though, purely as a way to allow for any other 3rd party email someone wanted to do this with. I can see privacy advantages in POP3 as well, if one didn't want emails stored on their Cloudron and just locally. I wouldn't like to see POP3 ignored as without advantage, when if privacy is a concern, that could be a legitimate use-case.

  • 0 Votes
    19 Posts
    593 Views

    added a Feature Request for #2 -- please upvote https://forum.cloudron.io/topic/5027/pop3-gmail-polling-support

  • 0 Votes
    29 Posts
    1k Views
  • 1 Votes
    8 Posts
    397 Views

    @d19dotca
    We got improvement after the 500 mail for day, feed to our ML filter, BAYES normally need less information, but if you don't have enough fresh data it will always be too late.