Gary V wrote:
Gary wrote:
Dec 16 15:43:22 server1.franklinamerican.com amavisd-new[13045]:
(13045-06) SPAM-TAG, <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>, Yes, hits=5.3 tagged_above=1.0 required=3.5
tests=AWL, BAYES_99, HTML_90_100, HTML_IMAGE_RATIO_02, HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG, MIME_HTML_ONLY
I find this in the headers of the delivered message on the mailbox
server. (snipped)
Return-Path: <[EMAIL PROTECTED]>
Received: from server1.franklinamerican.com ([127.0.0.1])
by localhost (server1.franklinamerican.com [127.0.0.1]) (amavisd-new,
port 10024)
with ESMTP id 13045-06 for <[EMAIL PROTECTED]>;
Fri, 16 Dec 2005 15:43:21 -0600 (CST)
Date: Fri, 16 Dec 2005 15:43:16 -0600 (CST)
From: More Coupons <[EMAIL PROTECTED]>
Reply-To: E-Family Values <[EMAIL PROTECTED]>
To: Fake User <[EMAIL PROTECTED]>
Subject: Jamie, Here's more free coupons for your baby
Mime-Version: 1.0
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-MRX: miinquufqwlxlwlvulvkuvll sswnilkiilkvwnnxik lllquiqusk
X-Virus-Scanned: by amavis at mx1.franklinamerican.com
X-Virus-Scanned: by amavis at imap.franklinamerican.com
Are you certain the quarantined messages that do have X-Spam headers
are addressed to franklinamerican.com? Are you certain franklinamerican.com is
listed in your @local_domains_maps? Is there any reason you could not
lower $sa_tag_level_deflt? I admit it should not necessary to do that,
but try it and see what happens.
Gary V
Gary, our mail server does recipient checks during SMTP. We don't even
accept mail not addressed to us, let alone put headers on it and deliver
it to our users. I could lower the default tag level, but I'm already
configured to add SA headers above 1.0. Even the basic "X-Spam-Score:
1.2" headers aren't being added.
The $sa_tag_level_deflt only affects the X-Spam type headers. You can
safely include these headers in every mail, spam or not by setting:
$sa_tag_level_deflt = undef;
which for this particular setting means 'lower than any possible score'.
It is assumed you only accept mail addressed to you. I could not
assume however that you receive mail for only one single domain. The
point is every domain you accept mail for must be listed in
@local_domains_maps if you want the X-Spam headers inserted for
those domains. If you do any address rewriting, it is a good idea
to include those domains also (e.g. 'localhost'). The score must also
fall at or above $sa_tag_level_deflt. The only case I can think of where
mail addressed to a particular domain would see the X-Spam headers in
the spam that is quarantined, but not in spam that is passed to a
recipient is when the score of the mail passed to the recipient falls
below $sa_tag_level_deflt.
I think the mx1 server is working, and am I correct in saying that
is where the quarantine is kept? If so, then that would explain why
items in the quarantine have the X-Spam headers inserted. If so,
the problem is the second server is not configured correctly. It
removes the headers from the previous server, but does not insert
its own, possibly because the recipient domain is not in
@local_domains_maps. Do you rewrite the address between the servers?
Maybe to something like [EMAIL PROTECTED] If so, make
sure 'imap.franklinamerican.com' (or '.franklinamerican.com') is
listed in @local_domains_maps on the imap server.
Gary V
As mentioned in the original message, there is no address rewriting
configured in the system. There's one thing you mentioned that caught
my attention, @local_domains_maps. The server having the problem was
set up to run mailman at a domain of "lists.franklinamerican.com" some
six months ago. Amavis has '@local_domains_acl = ( ".$mydomain" );',
$mydomain being 'franklinamerican.com'. Amavis scans mail directed to
mailman at lists.franklinamerican.com and to users at
franklinamerican.com. We do have messages regularly blocked from the
listserv by Amavis' virus scanner, so it's checking mail for both domains.
I will give the mailbox server a close look. There would have to be
some obvious statement somewhere that says "skip mail from THIS_SERVER",
but I haven't seen one.
--
John Beamon
Systems Administrator
Franklin American Mortgage Co.
em: [EMAIL PROTECTED]
-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
