Christopher J Shaker wrote: > Feb 18 15:07:33 linux amavis[17984]: (17984-09) Passed CLEAN, > [121.27.33.247] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, > Message-ID: <[EMAIL PROTECTED]>, mail_id: > If831cHwmATq, Hits: -222.952, size: 3510, queued_as: 7C4FA404B4, 20009 ms > > > Looks to me like it is getting a '-300' score from some rule that I > can't find. The email comes > in forged to look as if I had sent it, from '[EMAIL PROTECTED]'. > That email address is *not* > in the whitelist in /etc/mail/spamassassin/local.cf
When you run the messages through spamassassin only, amavis-specific score adjustments will not occur, so the scores will differ. Increase amavis' $log_level to 3, and look for the tests and scores in the log lines: ... tests= See which tests and scores are present. MrC > > When I run the leaking email message through spamassassin manually, it > comes up with a score > of 58.4, quite different from what amavis-new reported above! > > Subject: *****SPAM***** February 73% OFF > Date: Mon, 18 Feb 2008 15:07:11 -0800 (PST) > Message-Id: <[EMAIL PROTECTED]> > X-Spam-Flag: YES > X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on > linux.shaker-net.com > X-Spam-Level: ************************************************** > X-Spam-Status: Yes, hits=58.4 required=5.0 tests=AWL,BAYES_95,FAKE_MSN,GIF, > HTML_IMAGE_ONLY_32,HTML_MESSAGE,MIME_HTML_ONLY,OFF,PERCENT, > RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RDNS_NONE,UNKNOWN,URIBL_AB_SURBL, > URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL, > URIBL_WS_SURBL,VIRUS_CLEAN autolearn=unavailable version=3.2.4 ------------------------------------------------------------------------- This SF.net email is sponsored by: Microsoft Defy all challenges. Microsoft(R) Visual Studio 2008. http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/ _______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
