> Other than what I mentioned about sending test messages from trusted
> users (users in a policy bank that allows spam to pass for example),
> nothing comes to mind.
>
> I would prepare a spam message (gtube for example):
> http://spamassassin.apache.org/gtube/gtube.txt
>
> and send it from a hotmail or yahoo account (that is not whitelisted)
> and place the sender's address in:
>
> @debug_sender_maps = ( ['[EMAIL PROTECTED]'] );
>
> The first email received from this sender (after amavisd-new is
> reloaded) will log at $log_level 5. I would then look at all the log
> entries for this particular transaction and see if you can discover
> the problem. If not, maybe you could post it to a http server for
> others to look at.

av4:~ # tail -f /var/log/amavis | grep [EMAIL PROTECTED]

Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) ESMTP< MAIL
FROM:<[EMAIL PROTECTED]> SIZE=3894\r\n
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) ESMTP> 250 2.1.0 Sender
<[EMAIL PROTECTED]> OK
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) ESMTP::10024
/var/amavis/scan/amavis-20080117T172354-00340: <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]> SIZE=3894 Received: from av4.sttspa.it ([127.0.0.1]) by
localhost (av4.stt.vir [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
for <[EMAIL PROTECTED]>; Thu, 17 Jan 2008 17:26:35 +0100 (CET)
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) find_or_save_addr: record
inserted, id=1522, [EMAIL PROTECTED]
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) save_info_preliminary:
1522, [EMAIL PROTECTED], new
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) Checking: XhbGjz-Z0mgS
[72.14.214.231] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) wbl: checking sender
<[EMAIL PROTECTED]>
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) query_keys:
[EMAIL PROTECTED], pesce@, gmail.com, .gmail.com, .com, .
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_hash([EMAIL PROTECTED]), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup (blacklist_sender)
=> undef, "[EMAIL PROTECTED]" does not match
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) query_keys:
[EMAIL PROTECTED], pesce@, gmail.com, .gmail.com, .com, .
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_hash([EMAIL PROTECTED]), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup (whitelist_sender)
=> undef, "[EMAIL PROTECTED]" does not match
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_re("[EMAIL PROTECTED]"), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) query_keys:
[EMAIL PROTECTED], pesce@, gmail.com, .gmail.com, .com, .
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_hash([EMAIL PROTECTED]), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup
(score_sender<[EMAIL PROTECTED]>) => undef, "[EMAIL PROTECTED]" does not match
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) SPAM-KILL,
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, score=999.164, kill=6.31
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) lookup
(spam_quarantine_bysender_to) => undef, "[EMAIL PROTECTED]" does not match
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) header: X-Envelope-From:
<[EMAIL PROTECTED]>\n
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) DO_QUARANTINE, sender:
<[EMAIL PROTECTED]>



av4:/etc # cat /var/log/mail | grep EB81B7502A2
Jan 17 17:24:45 av4 postfix/smtpd[1464]: EB81B7502A2:
client=hu-out-0506.google.com[72.14.214.231]
Jan 17 17:24:46 av4 postfix/cleanup[834]: EB81B7502A2:
message-id=<[EMAIL PROTECTED]>
Jan 17 17:24:46 av4 postfix/qmgr[405]: EB81B7502A2:
from=<[EMAIL PROTECTED]>, size=3894, nrcpt=1 (queue active)
Jan 17 17:26:44 av4 postfix/smtp[2004]: EB81B7502A2: to=<[EMAIL PROTECTED]>,
relay=127.0.0.1[127.0.0.1]:10024, conn_use=38, delay=118,
delays=0.65/110/0/8, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1]
said: 451 4.5.0 Error in processing, id=00340-02-38, quar+notif FAILED:
Explicit forwarding, but not all recips done at /usr/local/sbin/amavisd
line 3083. (in reply to end of DATA command))


Please note all 'RO tables' are empty.

rocsca


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to