Luis,
> Hi, people, lately I've been seeing several mails originating at my
> domains (legal, solicited mails) which trigger something like this on
> the logs:
> do_notify_and_quarantine: rec_bl_ccat=(1,0), ccat=(1,1)
> [EMAIL PROTECTED]
>
> Just to clarify, why is it triggering do_notify_and_quarantine? what
> do rec_bl_ccat and ccat mean?
The do_notify_and_quarantine is called for every message.
It checks what is a content type of a message and whether
it needs to be quarantined or not, and whether a notification
needs to be sent to administrator or recipient, or not.
The corresponding logging call in the current version is:
do_log(2,"do_notify_and_quarantine: rec_bl_ccat=(%d,%d), ccat=(%d,%d) %s",
$rec_ccat_maj, $rec_ccat_min, $ccat, $ccat_min, $rec)
if $rec_ccat_maj != $ccat || $rec_ccat_min != $ccat_min;
It is probably all normal, it is just saying that a 'minor contents category'
for a recipient [EMAIL PROTECTED] is different from a
per-message minor contents category, which shows a summarized info
pertaining to all recipients of a message (it takes a max of velues
across all recipients).
In this particular case, the ccat is 1, which means CC_CLEAN:
CC_CATCHALL() { 0 }
CC_CLEAN () { 1 } # tag_level = "CC_CLEAN,1"
CC_MTA () { 2 } # trouble passing mail back to MTA
CC_OVERSIZED() { 3 }
CC_BADH () { 4 }
CC_SPAMMY() { 5 } # tag2_level (and: tag3_level = "CC_SPAMMY,1")
CC_SPAM () { 6 } # kill_level
CC_UNCHECKED() { 7 }
CC_BANNED() { 8 }
CC_VIRUS () { 9 }
A CC_CLEAN with a minor ccat 1 means it crossed tag_level for at least
one recipient, but not for this particular recipient, which has CC_CLEAN,0.
So it seems you have @spam_tag_level_maps which gives different levels
for different recipients. Quite normal.
Mark
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
