I've done an upgrade of mailserver from debian etch (amavisd-new 2.4.2-6.1) to lenny (2.6.1.dfsg-1).
In amavis I use hard whitelisting of a domains (mydomain.cz) and emails. In lenny it seems amavis changed its behaviour (?) and is whitelisting on both MAIL FROM (i.e. Retrun-Path) and From: from mail body. In documentation I found it should only use MAIL FROM: http://www.ijs.si/software/amavisd/#faq # The (hard) w/b listing in amavisd-new works on envelope sender address (i.e. the return-path). If triggered, the call to SA is skipped to save time, as it would not have a chance to overrule the w/b list decision already taken. # The soft w/b listing in amavisd-new (the @score_sender_maps, available since 2.0) also works on envelope sender address, but only modifies the spam score as returned by SA, and does not bypass calling SA. Just a few lines from debug log (removed lt and gt signs) Feb 1 00:16:54.650 mailserver /usr/sbin/amavisd-new[28432]: (28432-07) Checking: 5hIX-LxPFIwM [187.50.230.174] -> Feb 1 00:16:54.651 mailserver /usr/sbin/amavisd-new[28432]: (28432-07) 2822.From: pe...@mydomain.cz, 2821.Mail_From: l...@alssnowmobile.com Feb 1 00:16:56.954 mailserver /usr/sbin/amavisd-new[28432]: (28432-07) wbl: checking sender l...@alssnowmobile.com, pe...@mydomain.cz, Feb 1 00:16:56.960 mailserver /usr/sbin/amavisd-new[28432]: (28432-07) wbl: whitelisted sender l...@alssnowmobile.com, pe...@mydomain.cz, Feb 1 00:16:56.961 mailserver /usr/sbin/amavisd-new[28432]: (28432-07) sender white/blacklisted, skipping spam_scan Side note: Just the email address from "From:" is triggering whitelisting, however wbl says both addresses are whitelisted. (Maybe just missunderstanding of the message.) This is obvious from complete log, but I did not copied it to make the message sorter. Anyway, the main problem is the "From:" is causing whitelisting too, and skiping of spamassassin, which is causing problems. Whitelisting on MAIL FROM is ok, as postfix refuses mails with mydomain.cz in MAIL FROM as the sender out of mydomain.cz is not allowed to send such emails. But whitelisting on fake "From:" I am not able to work around (ok - with hard whitelisting). Thanks for any insight. Adam Pribyl ------------------------------------------------------------------------------ The Planet: dedicated and managed hosting, cloud storage, colocation Stay online with enterprise data centers and the best network in the business Choose flexible plans and management services without long-term contracts Personal 24x7 support from experience hosting pros just a phone call away. http://p.sf.net/sfu/theplanet-com _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/