Le 11 janv. 07 à 17:41, Mark Martinec a écrit : >> Some mail are tagged as Spam (in the header) BUT are not considered >> as spam when we have a look at amavisd log ?? >> They seemed to be marked as non spam mail. > > The choice between 'CLEAN' and 'SPAM' in the "Passed CLEAN" log entry > is determined by kill_level of recipients (if any recipient of the > message sees message spam level above his kill level, the major > contents > category becomes CC_SPAM). > > Marking of message in its header (Subject **SPAM**, etc) happens > at tag2 level, which is either the same as kill level (in which > case there is no discrepancy between marking and log entry), > or tag2 level may be lower than kill level, in which case > message with spam score between both levels would appear > as you describe. > > Mark
Thanks, This was quite clear, to me. Our code for tagging spam is as follow : > # string to prepend to Subject header field when message exceeds > tag2 level > $sa_spam_subject_tag = '##### TASPAM ##### '; # (defaults to > undef, disabled) > # (only seen when spam is passed and > recipient is > # in local_domains*) > $sa_spam_report_header = 1; Our problem was very well describe in a june 2005 post (Mark answered) but there was no follow-up: > > I'm running a mail gateway in front of Exchange using postfix, > amavis, and > > spamassassin. I have virus scanning on the Exchange server, so I > use the > > gateway for Spam filtering only (@bypass_virus_checks_maps = > (1)). Most of > > the time this works great. However, I have a few messages come > through > > with tagged subject lines and no X-Spam entries in the header. I > have > > $sa_tag_level_deflt = -20.0, so that I should be inserting > headers on > > almost every message. I have modified the $sa_spam_subject_tag > so that I > > can be sure it's amavis that is inserting the tag (and it is). > > What would trigger a subject line tag but not insert X-Spam headers? > > > I'm running on SuSE 9.3 Pro, with the vendor packages. postfix > 2.2.1-3; > > amavis 2.2.1-5; spamassassin 3.0.2-4 > > Hmm, this is not supposed to happen, at least some X-Spam-* headers > should be present if Subject gets modified. > Could you please increase the log_level to 4 and search the log > for 'headers CLUSTERING: NEW CLUSTER' of a message that > is lacking X-Spam-* headers. The flags in that log entry are > of interest. > > Btw, setting $sa_tag_level_deflt to undef makes it lower than > any score, i.e. X-Spam-Status and X-Spam-Level should always > appear for local recipients, regardless of spam score. > > Mark Our two mail servers are also used as mail gateway for filtering purposes (inbound and outbound). For inbound we are using policy_bank MYNETS. From what we observed tagging of subject with ##### TASPAM ##### (our tag) occurs on outgoing AND incoming messages in a totally random manner (we have not been able to find a common behavior for all taged mails). Wrongly tagged mail are logged as 'non SPAM' and no header are added to these mail // ONLY the Subject is tagged. Amavisd log logs them as 'Passed CLEAN' and they are tagged !! > Jan 11 15:44:53 ns2 amavis[52433]: (52433-28) Passed CLEAN, > [193.51.206.66] [212.157.42.163] <[EMAIL PROTECTED]> -> > <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, Message-ID: <734001c7358e > [EMAIL PROTECTED]>, Resent-Message-ID: > <[EMAIL PROTECTED]>, mail_id: 0SOuysmi15Xr, > Hits: 0.144, queued_as: CD07431F654, 6197 ms This behavior is really problematic for us because users are filtering mail on their own after receiving them (based on these tag). I guess I'll try to follow up with the same solutions by increasing the debug level. We will catch this 'bug' this time, It has been around for too long ! Do you have any clue ? ________________________________________________ «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Gregober ---> PGP ID --> 0x1BA3C2FD bsd @at@ todoo.biz ________________________________________________ «?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§«?»¥«?»§ ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ P "Please consider your environmental responsibility before printing this e-mail" ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
