Mark, I think the reason of this problem is the new bounce killer feature. $bounce_killer_score was set to 10 and all log IDs containing score=x+ also have an entry with "bounce killed".
All quarantined mails have other mails attached as message/rfc822. The bounce killer feature misleadingly identifies the attached messages as bounced mails and did not find a corresponding message ID in the SQL database. Tested it by sending attached mails to myself. "bounce killed" was logged with these mails. In some cases sender addresses are softwhitelisted with a score of -4. That's why sometimes score=x+6 is logged. Additionally spam_dsn_cutoff_level might be ignored and DSN notifications are sent by amavisd Greetings Bernd > -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] [mailto:amavis-user- > [EMAIL PROTECTED] Im Auftrag von Mark Martinec > Gesendet: Donnerstag, 12. Juni 2008 21:00 > An: amavis-user@lists.sourceforge.net > Betreff: Re: [AMaViS-user] amavis score=x+10 > > Bernd, > > > I realized that sometimes mails are handled as spam-mails although > these > > mails never hit spamassassin because they are too large. Amavis logs > > > > spam_scan: not wasting time on SA, message longer than 204800 bytes > > [...]Yes, score=x+10 tag=-999 tag2=5 kill=8 tests=[], quarantine > > > > Notifications are sent too although I don't use notifications > > > > DSN: NOTIFICATION: Action:failed, LOCAL 554 Spam, > > > > Usually the score is x+10 but I saw once or twice score=x+6 > > > > I'm using amavis 2.6.0. > > Anyone knows where this score comes from and how to turn it off? > > Besides the score points from SpamAssassin, there are some mechanisms > in amavisd to allow it to contribute its own score points to the > end result (sometimes called score_boost, can be positive or negative). > > The following mechanisms can currently contribute score points: > - soft black- and whitelisting (controlled by: @score_sender_maps or > SQL); > - pen pals (controlled by: $penpals_bonus_score, $penpals_halflife); > - bounce killer ($bounce_killer_score); > and a somewhat differently implemented mechanism but similar in effect: > - @virus_name_to_spam_score_maps > > Judging from your reported score (+10, an integer), my first guess is > you have a non-empty @score_sender_maps. > > Mark > > ----------------------------------------------------------------------- > -- > Check out the new SourceForge.net Marketplace. > It's the best place to buy or sell services for > just about anything Open Source. > http://sourceforge.net/services/buy/index.php > _______________________________________________ > AMaViS-user mailing list > AMaViS-user@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/amavis-user > AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 > AMaViS-HowTos:http://www.amavis.org/howto/ ------------------------------------------------------------------------- Check out the new SourceForge.net Marketplace. It's the best place to buy or sell services for just about anything Open Source. http://sourceforge.net/services/buy/index.php _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
