I've done an upgrade of mailserver from debian etch (amavisd-new 
2.4.2-6.1) to lenny (2.6.1.dfsg-1).

In amavis I use hard whitelisting of a domains (mydomain.cz) and emails. 
In lenny it seems amavis changed its behaviour (?) and is whitelisting on 
both MAIL FROM (i.e. Retrun-Path) and From: from mail body. In 
documentation I found it should only use MAIL FROM:

http://www.ijs.si/software/amavisd/#faq
# The (hard) w/b listing in amavisd-new works on envelope sender address
(i.e. the return-path). If triggered, the call to SA is skipped to save
time, as it would not have a chance to overrule the w/b list decision
already taken.
# The soft w/b listing in amavisd-new (the @score_sender_maps, available
since 2.0) also works on envelope sender address, but only modifies the
spam score as returned by SA, and does not bypass calling SA.

Just a few lines from debug log (removed lt and gt signs)

Feb  1 00:16:54.650 mailserver /usr/sbin/amavisd-new[28432]: (28432-07)
Checking: 5hIX-LxPFIwM [187.50.230.174]  ->
Feb  1 00:16:54.651 mailserver /usr/sbin/amavisd-new[28432]: (28432-07)
2822.From: pe...@mydomain.cz, 2821.Mail_From: l...@alssnowmobile.com
Feb  1 00:16:56.954 mailserver /usr/sbin/amavisd-new[28432]: (28432-07)
wbl: checking sender l...@alssnowmobile.com, pe...@mydomain.cz,
Feb  1 00:16:56.960 mailserver /usr/sbin/amavisd-new[28432]: (28432-07)
wbl: whitelisted sender l...@alssnowmobile.com, pe...@mydomain.cz,
Feb  1 00:16:56.961 mailserver /usr/sbin/amavisd-new[28432]: (28432-07)
sender white/blacklisted, skipping spam_scan

Side note: Just the email address from "From:" is triggering whitelisting, 
however wbl says both addresses are whitelisted. (Maybe just 
missunderstanding of the message.) This is obvious from complete log, but 
I did not copied it to make the message sorter.

Anyway, the main problem is the "From:" is causing whitelisting too, and 
skiping of spamassassin, which is causing problems. Whitelisting on MAIL 
FROM is ok, as postfix refuses mails with mydomain.cz in MAIL FROM as the 
sender out of mydomain.cz is not allowed to send such emails. But 
whitelisting on fake "From:" I am not able to work around (ok - with hard 
whitelisting).

Thanks for any insight.

Adam Pribyl


------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to