Oenus wrote:
> Hi all!
> lately we are experiencing a huge amount of spam sent
to postmaster. The
> mail logs show that amavisd/sa DO the tests, but email
passes through no
> matter what the score is and headers are not appended.
it is like no
> filtering was working for this account. I do not have
anything at
> virus_lovers or spam_lovers...
> any ideas?
> ignacio
Look in your mail log, e.g.:
grep postmaster /var/log/maillog | grep amavis | grep
Passed
and with an entry like this:
May 21 10:34:38 mail amavis[30474]: (30474-05) Passed
SPAMMY,
[84.138.228.157] [84.138.228.157] <lbethelofxj example.org> ->
<postmaster example.com>, Message-ID:
<000b01c79bc5$da8b66e0$6400a8c0 dip.t-dialin.net>,
mail_id: nkbms+fGqg5C, Hits: 7.092, size: 29665,
queued_as: DFD70224A, 29712 ms
See if 'Hits:' says: 'Hits: -'
If it does, spam scanning is being bypassed for some reason.
Either
postmaster is in a bypass map or the messages are larger
than
$sa_mail_body_size_limit. This would also explain why the
headers are
not tagged. If there is a score there, then one possibility
is the
envelope sender's score is adjusted somewhere (possibly
score_sender_maps).
Gary V
------------------------------------------------------------
-------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and
take
control of your XML. No limits. Just data. Click to get it
now.
http://sourcefor
ge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
AMaViS-user lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/
|