SpamCannibal blocking valid domains.... How do I disable it?

Question

Level 1

0 points

SpamCannibal blocking valid domains.... How do I disable it?

Hello all,

I have been running fine for a few months, and I recently started getting bounce problems stemming from SpamCannibal. I found that when I send email to my mail server from an external account, i get a bounce message on my external account that states that SpamCannibal is blocking this email because my external accounts mail server is a spam server. It isn't, but that's neither here nor there.

After doing some research I have found that many many people have stopped using SpamCannibal due to their higher standards, and I found a few documents on how to disable it in a standard Linux install of SpamAssassin. However, the info isn't valid with regards to a standard Leopard Server install of SpamAssassin as the file exim.conf that is referred to in the other documents does not appear to exist in a Leopard Server environment.

Any suggestions?

2- xServe quad 2.8 xeon, 16GB +1 MacPro Dual 2.4 12GB, Mac OS X (10.5.6), Standard Leopard Mail Server (no frills)

Posted on Jan 27, 2009 6:09 PM

Reply

Answer 1

pterobyte

Level 6

11,104 points

Jan 27, 2009 11:45 PM in response to RunNerdRun

I have never used SpamCannibal, but it is definitely not being used by amavisd/SpamAssassin on a stock OS X Server.

Are you sure it is your server blocking you and not some other?
Can you post the exact rejection message you get?
Also, if you are sure it is your server rejecting, send yourself a message and check /var/log/mail.log. You should see the reason for rejection.

HTH,
Alex

Reply

Answer 2

RunNerdRun Author

Level 1

0 points

Jan 28, 2009 10:48 PM in response to pterobyte

the IP and domain are accurate. I talked to the host, and of course they are blaming my servers. I am on a T1, so I don't think that there is another server trying to block email.

Alex, I trust you enough to know that if you say SpamCannibal isn't installed, then SpamCannibal isn't installed.

The message looks like my server is kicking it back, but I wonder if it is something that the host is using to keep their users from using their servers as spam servers. But I am watching my firewall when I test this, and I am not seeing the message come through. Anyways, here is the bounce that I am recieving for what it is worth

------------------------------------------------------------------------
When trying to deliver your message, the mail server at
gwa4.webcontrolcenter.xx encountered
problems with the following addresses:

For , Site (southsoundchristian.xx/70.102.95.26) said: 554 5.7.1 Service
unavailable; Client host [63.134.207.20] blocked using bl.spamcannibal.org;
blocked, See:
http://www.spamcannibal.org/cannibal.cgi?page=lookup&lookup=63.134.207.20

For a more detailed explanation see
http://netwinsite.com/surgemail/deliver_failed.htm

Reply

Answer 3

pterobyte

Level 6

11,104 points

Jan 28, 2009 11:26 PM in response to RunNerdRun

According to the logs, it is Postfix rejecting the message. So you probably are using their blacklist but not their script.

You should be able to remove it by going to Server Admin - Mail - Settings - Relay. In the bottom list, remove "bl.spamcannibal.org".
If this is the only RBL you have, you might want to replace it with zen.spamhaus.org

Alex

Reply

Answer 4

RunNerdRun Author

Level 1

0 points

Jan 29, 2009 4:33 PM in response to pterobyte

You were right, I removed spam cannibal from my blacklist sites. Thanks for your help (again).

Chris

Reply