Re: Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

Mark Martinec wrote:
> Chris,
>
>   
>> Also, your hints about debugging info from
amavisd-new got
>> me reading about the auto whitelist. Used the
following config
>> commands:
>> /etc/mail/spamassassin/local.cf:
>>     use_auto_whitelist      0
>>
>> /usr/local/sbin/amavisd.conf:
>>     $sa_auto_whitelist = 0;
>>     
>
> $sa_auto_whitelist has no effect since version 3.0.0 or
SpamAssassin,
> the use_auto_whitelist (in local.cf) is the only
control.
>   

Mark:

My /usr/local/sbin/amavisd does not contain
'use_auto_whitelist'. 
Appears that
I am running amavisd-new-2.5.3, which explains that.

Which version do you recommend we use?

>> Seems to have disabled the auto whitelist for me,
so that I can
>> run spamassassin on every email. I prefer that
behavior.
>>     
>
> SpamAssassin AWL just adds score points.
> It does not control whether a message is to be checked
or not.
> See Mail::SpamAssassin::Plugin::AWL man page.
>
>   Mark
>   


Yeah, but it adds so many points that some spam forged to
appear as if I 
sent it
ended up with huge negative scores...

Thank you,
Chris Shaker


------------------------------------------------------------
-------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-userlists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user

AMaViS-FAQ:http://www.amav
is.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/ho
wto/