Seba,
> when a user sends a message from an external email client to himself then
> the message is tagged as spam in my setup (score 100). It seems that such a
> message is treated as "faked" bounce message...
So it seems. The $bounce_killer_score is typically set to 100;
> When the user sends a mail to another user in the same domain then all is
> OK - only when he send to himself the message gets a high score.
>
> What options must be set that this does not happen without to deactivate
> this feature?
A quick fix is to disable the feature (remove the: $bounce_killer_score=100).
A true fix would be to see what makes amavisd believe the message is a
bounce of a foreign message, then fix the logic. Can you get hold of
a sample, with intact mail header and MIME structure? Or at least
provide a MIME structure as logged by amavisd at log level 2, e.g.:
p006 1 Content-Type: multipart/mixed
p007 1/1 Content-Type: multipart/alternative
p001 1/1/1 Content-Type: text/plain, size: 370 B, name:
p002 1/1/2 Content-Type: text/html, size: 533 B, name:
p003 1/2 Content-Type: image/jpeg, size: 1369605 B, name: IMG_1478.jpg
p004 1/3 Content-Type: image/jpeg, size: 1330702 B, name: IMG_1479.jpg
p005 1/4 Content-Type: image/jpeg, size: 1630623 B, name: IMG_1460.jpg
I know of one case where a multipart/mixed message with a first part
in plain text and with an attached third-party mail as message/rfc822
causes a false positive. Here is a fix for that particular case:
--- amavisd.orig 2008-04-23 20:50:05.000000000 +0200
+++ amavisd 2008-05-23 15:22:39.000000000 +0200
@@ -10939,5 +10939,8 @@
} elsif (@parts >= 3 && @parts <= 5 &&
$t[0] eq 'multipart/mixed' &&
- ( $t[-1] eq 'text/rfc822-headers' || $t[-1] eq 'message/rfc822' )) {
+ ( $t[-1] eq 'text/rfc822-headers' || $t[-1] eq 'message/rfc822' ) &&
+ ( $sender eq '' ||
+ $sender =~/^(?:postmaster|mailer-daemon)(?:\@|\z)/si ||
+ $rfc2822_from[0]=~/^(?:postmaster|mailer-daemon)(?:\@|\z)/si ) ) {
# qmail, msn?
$fname_ind = -1; $structure_type = 'multipart/mixed with attached msg';
Mark
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
