List Info

Thread: is this normal amavisd behavior?




is this normal amavisd behavior?
country flaguser name
Spain
2007-05-22 12:41:00
Hi all!

lately we are experiencing a huge amount of spam sent to
postmaster. The
mail logs show that amavisd/sa DO the tests, but email
passes through no
matter what the score is and headers are not appended. it is
like no
filtering was working for this account. I do not have
anything at
virus_lovers or spam_lovers...

any ideas?

ignacio

------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

Re: is this normal amavisd behavior?
country flaguser name
United States
2007-05-22 13:39:30
Oenus wrote:

> Hi all!

> lately we are experiencing a huge amount of spam sent
to postmaster. The
> mail logs show that amavisd/sa DO the tests, but email
passes through no
> matter what the score is and headers are not appended.
it is like no
> filtering was working for this account. I do not have
anything at
> virus_lovers or spam_lovers...

> any ideas?

> ignacio

Look in your mail log, e.g.:

grep postmaster /var/log/maillog | grep amavis | grep
Passed

and with an entry like this:

May 21 10:34:38 mail amavis[30474]: (30474-05) Passed
SPAMMY,
 [84.138.228.157] [84.138.228.157] <lbethelofxjexample.org> ->
  <postmasterexample.com>, Message-ID:
<000b01c79bc5$da8b66e0$6400a8c0dip.t-dialin.net>,
   mail_id: nkbms+fGqg5C, Hits: 7.092, size: 29665,
queued_as: DFD70224A, 29712 ms

See if 'Hits:' says: 'Hits: -'

If it does, spam scanning is being bypassed for some reason.
Either
postmaster is in a bypass map or the messages are larger
than
$sa_mail_body_size_limit. This would also explain why the
headers are
not tagged. If there is a score there, then one possibility
is the
envelope sender's score is adjusted somewhere (possibly
score_sender_maps).

Gary V



------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/

[1-2]

about | contact  Other archives ( Real Estate discussion Medical topics )