Injected mail marked as spam when X-Originating-IP header is enabled
Injected mail marked as spam when X-Originating-IP header is enabled
Injected mail marked as spam when X-Originating-IP header is enabled
Problem
If the X-Originating-IP header is enabled, zimbra marks injected/local messages as spam.
X-Spam-Flag: YES X-Spam-Score: 7.715 X-Spam-Level: ******* X-Spam-Status: Yes, score=7.715 tagged_above=-10 required=6.6 tests=[BAYES_00=-1.9, RCVD_IN_PBL=3.335, RCVD_IN_RP_RNBL=1.31, RDNS_NONE=0.793, TVD_PH_BODY_ACCOUNTS_PRE=2.393, TVD_PH_REC=1.784] autolearn=no autolearn_force=no
X-Originating-IP: [73.188.218.230] X-Mailer: Zimbra 8.6.0_GA_1153 (ZimbraWebClient - FF36 (Win)/8.6.0_GA_1153)
Resolution
To fix that, we can disable the X-Originating-IP header as follows:
Administrative Console -> Config -> Global Setting -> MTA -> Messages -> uncheck Add X-Originating-IP to messages.
Additional Content
The Spamhaus PBL is a DNSBL database of end-user IP address ranges which should not be delivering unauthenticated SMTP email to any Internet mail server, except those provided for specifically by an ISP for that customer's use. RCVD_IN_PBL lists IP addresses that are not expected to host a normal mail server, and the PBL has Self-Service removal and IP owner management mechanisms.
- IP Address Self-Service Removal Mechanism
A feature of the PBL is the elimination of 'false positives' with a server-identifying and automatic removal mechanism for single IP addresses. This allows end users with static IP addresses within a larger dynamic pool, and legitimate mail server operators, to assert that in their opinion their IP addresses are a trustworthy source of email and to automatically remove (suppress) their IP addresses from the PBL database.
Bugs
zimbra bug: https://bugzilla.zimbra.com/show_bug.cgi?id=77949
spamassasin bug: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=6501
