I have two mail filtering servers ahead of my mailbox server, running
postfix-2.1.5-9, amavisd-new-20030616p10-5 and apamassassin-3.0.3 on
stock Debian Sarge. I have noticed recently that server1 is identifying
spammish mail in its logs, but it is not adding headers to mail below
the quarantine score. I have a second, AFAIK identical, filtering
server that is adding headers above 1.0 and flagging above 3.5 as
expected. That server's messages still bear headers when they reach the
mailbox server.
This is an example of the symptom. Starting amavis on filtering server1
with the following log definitions:
$DO_SYSLOG = 0;
$LOGFILE = "/var/log/amavis.log";
$log_level = 4
I get this in the log for a given message.
Dec 16 15:43:22 server1.franklinamerican.com amavisd-new[13045]:
(13045-06) SPAM-TAG, <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>, Yes, hits=5.3 tagged_above=1.0 required=3.5
tests=AWL, BAYES_99, HTML_90_100, HTML_IMAGE_RATIO_02, HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY
I find this in the headers of the delivered message on the mailbox
server. (snipped)
Return-Path: <[EMAIL PROTECTED]>
Received: from server1.franklinamerican.com ([127.0.0.1])
by localhost (server1.franklinamerican.com [127.0.0.1]) (amavisd-new,
port 10024)
with ESMTP id 13045-06 for <[EMAIL PROTECTED]>;
Fri, 16 Dec 2005 15:43:21 -0600 (CST)
Date: Fri, 16 Dec 2005 15:43:16 -0600 (CST)
From: More Coupons <[EMAIL PROTECTED]>
Reply-To: E-Family Values <[EMAIL PROTECTED]>
To: Fake User <[EMAIL PROTECTED]>
Subject: Jamie, Here's more free coupons for your baby
Mime-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-MRX: miinquufqwlxlwlvulvkuvll sswnilkiilkvwnnxik lllquiqusk
X-Virus-Scanned: by amavis at mx1.franklinamerican.com
X-Virus-Scanned: by amavis at imap.franklinamerican.com
... followed by the message body. There are no X-Spam-Level: headers,
as there are from the other incoming server for any score above 1.0.
For the record, messages quarantined for scoring above the kill level DO
have X-Spam-Level: headers. I'm not sure whether to post the
amavisd.conf from the filtering servers or the Postfix conf from the
mailbox server. I have an 'sdiff -s' comparison of the two filtering
servers' amavis.conf and spamassassin local.cf files.
The mailbox server's Postfix config is a fairly common smtpd -o
content_filter=smtp-amavis:[127.0.0.1]:10024 that returns via :10025.
There is no header-rewriting configured into Postfix. I welcome any
suggestions as to what would cause this and any specific requests for
relevant info to help the cause. Thanks.
--
John Beamon
Systems Administrator
Franklin American Mortgage Co.
em: [EMAIL PROTECTED]
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
