Hi,
It looks like $sa_kill_level_deflt not working (for me)!
Mailreceiver gets the mail even if Score is way above kill level.
local_domains seems to be right, due to subject rewrite.
Why does it get delivered and not "killed"?
Header in quarantined mail:
===========================
X-Spam-Flag: YES
X-Spam-Score: 16.56
X-Spam-Level: ****************
X-Spam-Status: Yes, score=16.56 tag=x tag2=4 kill=6.25 tests=[BAYES_99=3.5,
HTML_IMAGE_ONLY_16=1.526, HTML_IMAGE_RATIO_02=0.383,
HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001,
MIME_HTML_ONLY=1.457,
MISSING_DATE=0.001, MISSING_MID=0.001, NUMERIC_HTTP_ADDR=0.001,
RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SPF_FAIL=1.5,
SPF_HELO_FAIL=0.001, URIBL_AB_SURBL=1.86, URIBL_BLACK=1.955,
URIBL_JP_SURBL=1.501, URIBL_SBL=1.499, URI_HEX=0.368] autolearn=spam
Header in delivered mail:
=========================
X-Spam-Flag: YES
X-Spam-Score: 16.56
X-Spam-Level: ****************
X-Spam-Status: Yes, score=16.56 required=4 tests=[BAYES_99=3.5,
HTML_IMAGE_ONLY_16=1.526, HTML_IMAGE_RATIO_02=0.383,
HTML_MESSAGE=0.001, HTML_SHORT_LINK_IMG_3=0.001,
MIME_HTML_ONLY=1.457,
MISSING_DATE=0.001, MISSING_MID=0.001, NUMERIC_HTTP_ADDR=0.001,
RCVD_IN_PBL=0.905, RDNS_DYNAMIC=0.1, SPF_FAIL=1.5,
SPF_HELO_FAIL=0.001, URIBL_AB_SURBL=1.86, URIBL_BLACK=1.955,
URIBL_JP_SURBL=1.501, URIBL_SBL=1.499, URI_HEX=0.368] autolearn=spam
From "maillog":
=================
Feb 9 08:45:57 amavis1 amavis[27121]: starting. /usr/sbin/amavisd-new
at mx10.maindomain.se amavisd-new-2.6.4 (20090625), Unicode aware,
LANG="en_US.UTF-8"
Feb 9 08:45:57 amavis1 amavis[27121]: Perl version 5.010000
Feb 9 08:45:57 amavis1 amavis[27131]: Net::Server: Group Not Defined.
Defaulting to EGID '112 112'
Feb 9 08:45:57 amavis1 amavis[27131]: Net::Server: User Not Defined.
Defaulting to EUID '105'
Feb 9 08:45:57 amavis1 amavis[27131]: Module Amavis::Conf 2.207
Feb 9 08:45:57 amavis1 amavis[27131]: Module Archive::Zip 1.18
Feb 9 08:45:57 amavis1 amavis[27131]: Module BerkeleyDB 0.39
Feb 9 08:45:57 amavis1 amavis[27131]: Module Compress::Zlib 2.008
Feb 9 08:45:57 amavis1 amavis[27131]: Module Convert::TNEF 0.17
Feb 9 08:45:57 amavis1 amavis[27131]: Module Convert::UUlib 1.11
Feb 9 08:45:57 amavis1 amavis[27131]: Module Crypt::OpenSSL::RSA 0.25
Feb 9 08:45:57 amavis1 amavis[27131]: Module DB_File 1.816_1
Feb 9 08:45:57 amavis1 amavis[27131]: Module Digest::MD5 2.36_01
Feb 9 08:45:57 amavis1 amavis[27131]: Module Digest::SHA 5.45
Feb 9 08:45:57 amavis1 amavis[27131]: Module Digest::SHA1 2.12
Feb 9 08:45:57 amavis1 amavis[27131]: Module IO::Socket::INET6 2.54
Feb 9 08:45:57 amavis1 amavis[27131]: Module MIME::Entity 5.427
Feb 9 08:45:57 amavis1 amavis[27131]: Module MIME::Parser 5.427
Feb 9 08:45:57 amavis1 amavis[27131]: Module MIME::Tools 5.427
Feb 9 08:45:57 amavis1 amavis[27131]: Module Mail::DKIM::Verifier 0.33
Feb 9 08:45:57 amavis1 amavis[27131]: Module Mail::Header 2.04
Feb 9 08:45:57 amavis1 amavis[27131]: Module Mail::Internet 2.04
Feb 9 08:45:57 amavis1 amavis[27131]: Module Mail::SPF v2.006
Feb 9 08:45:57 amavis1 amavis[27131]: Module Mail::SpamAssassin 3.002005
Feb 9 08:45:57 amavis1 amavis[27131]: Module Net::DNS 0.65
Feb 9 08:45:57 amavis1 amavis[27131]: Module Net::Server 0.97
Feb 9 08:45:57 amavis1 amavis[27131]: Module NetAddr::IP 4.024
Feb 9 08:45:57 amavis1 amavis[27131]: Module Socket6 0.20
Feb 9 08:45:57 amavis1 amavis[27131]: Module Time::HiRes 1.9711
Feb 9 08:45:57 amavis1 amavis[27131]: Module URI 1.37
Feb 9 08:45:57 amavis1 amavis[27131]: Module Unix::Syslog 1.1
Feb 9 08:45:57 amavis1 amavis[27131]: Amavis::DB code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Amavis::Cache code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: SQL base code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: SQL::Log code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: SQL::Quarantine NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Lookup::SQL code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Lookup::LDAP code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: AM.PDP-in proto code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: SMTP-in proto code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Courier proto code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: SMTP-out proto code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Pipe-out proto code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: BSMTP-out proto code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Local-out proto code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: OS_Fingerprint code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: ANTI-VIRUS code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: ANTI-SPAM code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: ANTI-SPAM-EXT code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: ANTI-SPAM-C code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: ANTI-SPAM-SA code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Unpackers code loaded
Feb 9 08:45:57 amavis1 amavis[27131]: DKIM code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Tools code NOT loaded
Feb 9 08:45:57 amavis1 amavis[27131]: Found $file at
/usr/bin/file
Feb 9 08:45:57 amavis1 amavis[27131]: No $altermime, not using it
Feb 9 08:45:57 amavis1 amavis[27131]: Internal decoder for .mail
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .F
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .Z at
/bin/uncompress
Feb 9 08:45:57 amavis1 amavis[27131]: Internal decoder for .gz
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .bz2 at
/bin/bzip2 -d
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .lzo tried:
lzop -d
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .rpm tried:
rpm2cpio.pl, rpm2cpio
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .cpio at
/usr/bin/pax
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .tar at
/usr/bin/pax
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .deb at
/usr/bin/ar
Feb 9 08:45:57 amavis1 amavis[27131]: Internal decoder for .zip
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .7z tried:
7zr, 7za, 7z
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .rar tried:
unrar-free
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .arj at
/usr/bin/arj
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .arc at
/usr/bin/nomarch
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .zoo at
/usr/bin/zoo
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .lha
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .doc tried:
ripole
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .cab at
/usr/bin/cabextract
Feb 9 08:45:57 amavis1 amavis[27131]: No decoder for .tnef
Feb 9 08:45:57 amavis1 amavis[27131]: Internal decoder for .tnef
Feb 9 08:45:57 amavis1 amavis[27131]: Found decoder for .exe at
/usr/bin/arj
Feb 9 08:45:57 amavis1 amavis[27131]: Using primary internal av scanner
code for ClamAV-clamd
Feb 9 08:45:57 amavis1 amavis[27131]: Found secondary av scanner
ClamAV-clamscan at /usr/bin/clamscan
Feb 9 08:45:57 amavis1 amavis[27131]: Creating db in
/var/lib/amavis/db/; BerkeleyDB 0.39, libdb 4.7
.
.
Feb 9 09:04:25 amavis1 postfix/smtpd[27244]: DF3F5BF7C:
client=localhost[127.0.0.1]
Feb 9 09:04:25 amavis1 postfix/cleanup[27530]: DF3F5BF7C:
message-id=<20100209080425.df3f5b...@mx10.maindomain.se>
Feb 9 09:04:25 amavis1 postfix/qmgr[27231]: DF3F5BF7C:
from=<douekeh9...@arcor-ip.net>, size=3313, nrcpt=1 (queue active)
Feb 9 09:04:25 amavis1 amavis[27619]: (27619-10) Passed SPAM,
[92.78.96.3] [92.78.96.3] <douekeh9...@arcor-ip.net> ->
<u...@maindomain.se>, quarantine: spam-BuASlbXsAVog.gz, mail_id:
BuASlbXsAVog, Hits: 16.56, size: 2174, queued_as: DF3F5BF7C, 328 ms
Feb 9 09:04:25 amavis1 postfix/smtp[27573]: E5BA7BF72:
to=<u...@maindomain.se>, relay=127.0.0.1[127.0.0.1]:10024, delay=3.9,
delays=3.5/0/0/0.33, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=27619-10,
from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as DF3F5BF7C)
Feb 9 09:04:25 amavis1 postfix/qmgr[27231]: E5BA7BF72: removed
Feb 9 09:04:25 amavis1 postfix/smtp[27233]: DCDB0BF7B:
to=<s...@maindomain.se>,
relay=mail-01.internal.maindomain.se[10.10.10.164]:25, delay=0.03,
delays=0.01/0/0.02/0, dsn=2.0.0, status=sent (250 Message accepted for
delivery)
Feb 9 09:04:25 amavis1 postfix/qmgr[27231]: DCDB0BF7B: removed
Feb 9 09:04:25 amavis1 postfix/smtp[27388]: DF3F5BF7C:
to=<u...@maindomain.se>,
relay=mail-02.internal.maindomain.se[10.10.10.165]:25, delay=0.02,
delays=0/0/0.02/0, dsn=2.0.0, status=sent (250 Message accepted for
delivery)
Feb 9 09:04:25 amavis1 postfix/qmgr[27231]: DF3F5BF7C: removed
---------------------------------------
It's an standard Ubuntu 9.10 installation of amavisd-new
Config file 21-ubuntu_defaults(Unchanged):
======================
$enable_dkim_verification = 1;
@whitelist_sender_acl = qw( .$mydomain );
$final_virus_destiny = D_DISCARD; # (defaults to D_BOUNCE)
$final_banned_destiny = D_DISCARD; # (defaults to D_BOUNCE)
$final_spam_destiny = D_DISCARD; # (defaults to D_REJECT)
$final_bad_header_destiny = D_PASS; # (defaults to D_PASS), D_BOUNCE
suggested
$virus_admin = undef;
$spam_admin = undef;
Config file 50-User:
======================
use strict;
$mydomain = 'maindomain.se';
@local_domains_maps = (
['.maindomain.se'],
['.domain2.se'],
['.domain3.se'],
['.domain4.se']
);
@local_domains_acl = undef; # Is defined "earlier" in 05-domain_id as (
".$mydomain" )
@mynetworks = qw(
127.0.0.0/8
X.X.X.X/27
X.X.X.X/32
X.X.X.X/32
X.X.X.X/32
X.X.X.X/32
X.X.X.X/25
);
$spam_admin = "s...@$mydomain";
$virus_admin = "s...@$mydomain";
$mailfrom_notify_admin = "virusale...@$mydomain";
$mailfrom_notify_recip = "virusale...@$mydomain";
$mailfrom_notify_spamadmin = "spam.poli...@$mydomain";
$mailfrom_to_quarantine = '';
$sa_spam_subject_tag = 'Spam: ';
$sa_tag_level_deflt = undef;
$sa_tag2_level_deflt = 4.0;
$sa_kill_level_deflt = 6.25;
$sa_dsn_cutoff_level = 7.0;
$sa_quarantine_cutoff_level = 20;
@spam_lovers_maps = qw(one_addr...@maindomain.se);
$enable_dkim_verification = 0;
$allowed_header_tests{'8bit'} = 0;
$allowed_header_tests{'mime'} = 0;
$allowed_header_tests{'missing'} = 0;
$allowed_header_tests{'multiple'} = 0;
$final_bad_header_destiny = D_PASS;
$quarantine_subdir_levels = 0; # Disable quarantine dir hashing
$X_HEADER_LINE = "Virus och spamchecked at $mydomain";
@bypass_virus_checks_maps = (
\%bypass_virus_checks, \...@bypass_virus_checks_acl,
\$bypass_virus_checks_re);
@bypass_spam_checks_maps = (
\%bypass_spam_checks, \...@bypass_spam_checks_acl, \$bypass_spam_checks_re);
----
Do you need any more info to help me solve this problem?
Regards
ClaesBas
PS
Links to FAQ and others on the mailinglist page at sourceforge not
working...
------------------------------------------------------------------------------
The Planet: dedicated and managed hosting, cloud storage, colocation
Stay online with enterprise data centers and the best network in the business
Choose flexible plans and management services without long-term contracts
Personal 24x7 support from experience hosting pros just a phone call away.
http://p.sf.net/sfu/theplanet-com
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
