Hello,
I have a mail server with:
Centos release 5.5 (Final)
postfix.x86_64
amavisd-new.x86_64
clamav.x86_64
clamav-db.x86_64
clamd.x86_64
spamassassin.x86_64
razor-agents.x86_64
Every single incoming mail is considered as passed SPAM
I'm using telnet.
The subject is not rewritten with ***SPAM***
The X-SPAM headers are not added
Could you, please help me to solve this issue?
amavisd.conf
@spam_scanners = (['SpamAssassin','Amavis::SpamControl::SpamAssassin']);
$sa_dsn_cutoff_level = 10; # spam level beyond which a DSN is not sent
$sa_tag_level_deflt = -999; # add spam info headers if at, or above that
level
$sa_tag2_level_deflt = 0; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 0; # triggers spam evasive actions
$sa_quarantine_cutoff_level = 20; # spam level beyond which quarantine is
off
$penpals_bonus_score = 8; # (no effect without a @storage_sql_dsn database)
$penpals_threshold_high = $sa_kill_level_deflt; # don't waste time on hi
spam
$sa_mail_body_size_limit = 400*1024; # don't waste time on SA if mail is
larger
$sa_local_tests_only = 0; # only tests which do not require internet
access?
$sa_spam_subject_tag = '*****SPAM***** ';
$final_banned_destiny = D_REJECT;
$final_virus_destiny = D_REJECT;
$final_spam_destiny = D_PASS;
$final_bad_header_destiny = D_PASS;
local.cf
required_hits 10
report_safe 0
rewrite_header Subject *****SPAM*****
#skip_rbl_checks 1
# By default SpamAssassin runs the Realtime Blackhole List checks.
# It's better to turn this option off.
use_bayes 0
# This turns Bayesean Learning on. 0 turns it off.
bayes_path /var/amavis/.spamassassin/bayes
# Bayesean database location.
use_razor2 1
# Tells SA that we want to use Razor version 2
main.cf
content_filter = smtp-amavis:[127.0.0.1]:10024
master.cf
smtp inet n - n - - smtpd -v
-o smtpd_proxy_filtering=smtp-amavis:[127.0.0.1]:10024
smtp-amavis
unix - - - - 2 smtp
-o smtp_data_done_timeout=1200
-o disable_dns_lookups=yes
127.0.0.1:10025
inet n - n - - smtpd
-o content_filter=
-o smptd_delay_reject=
-o receive_override_options=no_unknown_recipient_checks
-o local_recipient_maps=
-o relay_recipient_maps=
-o smtpd_restriction_classes=
-o smtpd_client_restrictions=
-o smtpd_helo_restrictions=
-o smtpd_sender_restrictions=
-o smtpd_recipient_restrictions=permit_mynetworks,reject
-o mynetworks=127.0.0.0/8
-o strict_rfc821_envelopes=yes
When I run spamassassin -t < spam.txt, I have:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail2.domain.com
X-Spam-Level: **************************************************
X-Spam-Status: Yes, score=1009.0 required=10.0
tests=BODY_ENHANCEMENT2,GTUBE,
MISSING_DATE,MISSING_HB_SEP,MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,
NO_HEADERS_MESSAGE,NO_RECEIVED,NO_RELAYS,TVD_SPACE_RATIO
autolearn=disabled
version=3.2.5
X-Spam-Report:
* 0.0 MISSING_MID Missing Message-Id: header
* 0.0 MISSING_DATE Missing Date: header
* -0.0 NO_RELAYS Informational: message was not relayed via SMTP
* 2.5 MISSING_HB_SEP Missing blank line between message header and
body
* 1.6 MISSING_HEADERS Missing To: header
* 1000 GTUBE BODY: Generic Test for Unsolicited Bulk Email
* 0.7 BODY_ENHANCEMENT2 BODY: Information on getting larger body
parts
* 2.9 TVD_SPACE_RATIO BODY: TVD_SPACE_RATIO
* 1.3 MISSING_SUBJECT Missing Subject: header
* -0.0 NO_RECEIVED Informational: message has no Received headers
* 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
* headers
Do you need VIAGRA? Get your VIAGRA pills at www.moreviagra.com
Subject: *****SPAM*****
X-Spam-Prev-Subject: (nonexistent)
amavisd debug-sa returns:
Dec 6 15:53:55.646 mail2.domain.com /usr/sbin/amavisd[27376]: starting.
/usr/sbin/amavisd at mail2.domain.com amavisd-new-2.6.4 (20090625), Unicode
aware
Dec 6 15:53:55.646 mail2.domain.com /usr/sbin/amavisd[27376]: Perl
version 5.008008
Dec 6 15:53:55.905 mail2.domain.com /usr/sbin/amavisd[27376]: Net::Server:
Group Not Defined. Defaulting to EGID '106 106'
Dec 6 15:53:55.905 mail2.domain.com /usr/sbin/amavisd[27376]: Net::Server:
User Not Defined. Defaulting to EUID '103'
Dec 6 15:53:55.915 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Amavis::Conf 2.207
Dec 6 15:53:55.915 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Archive::Zip 1.16
Dec 6 15:53:55.915 mail2.domain.com /usr/sbin/amavisd[27376]: Module
BerkeleyDB 0.43
Dec 6 15:53:55.915 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Compress::Zlib 1.42
Dec 6 15:53:55.915 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Convert::TNEF 0.17
Dec 6 15:53:55.915 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Convert::UUlib 1.33
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Crypt::OpenSSL::RSA 0.26
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
DBD::mysql 4.014
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
DBI 1.52
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
DB_File 1.814
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Digest::MD5 2.36
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Digest::SHA 5.48
Dec 6 15:53:55.916 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Digest::SHA1 2.11
Dec 6 15:53:55.917 mail2.domain.com /usr/sbin/amavisd[27376]: Module
IO::Socket::INET6 2.51
Dec 6 15:53:55.917 mail2.domain.com /usr/sbin/amavisd[27376]: Module
MIME::Entity 5.420
Dec 6 15:53:55.917 mail2.domain.com /usr/sbin/amavisd[27376]: Module
MIME::Parser 5.420
Dec 6 15:53:55.917 mail2.domain.com /usr/sbin/amavisd[27376]: Module
MIME::Tools 5.420
Dec 6 15:53:55.917 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Mail::DKIM::Verifier 0.39
Dec 6 15:53:55.917 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Mail::Header 2.07
Dec 6 15:53:55.918 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Mail::Internet 2.07
Dec 6 15:53:55.918 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Mail::SpamAssassin 3.002005
Dec 6 15:53:55.918 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Net::DNS 0.59
Dec 6 15:53:55.918 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Net::Server 0.99
Dec 6 15:53:55.919 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Razor2::Client::Version 2.84
Dec 6 15:53:55.919 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Socket6 0.19
Dec 6 15:53:55.919 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Time::HiRes 1.9717
Dec 6 15:53:55.919 mail2.domain.com /usr/sbin/amavisd[27376]: Module
URI 1.35
Dec 6 15:53:55.919 mail2.domain.com /usr/sbin/amavisd[27376]: Module
Unix::Syslog 1.1
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: Amavis::DB
code loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: Amavis::Cache
code loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: SQL base
code NOT loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: SQL::Log
code NOT loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]:
SQL::Quarantine NOT loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: Lookup::SQL
code NOT loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: Lookup::LDAP
code NOT loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: AM.PDP-in
proto code loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: SMTP-in proto
code loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: Courier proto
code NOT loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: SMTP-out
proto code loaded
Dec 6 15:53:55.920 mail2.domain.com /usr/sbin/amavisd[27376]: Pipe-out
proto code NOT loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: BSMTP-out
proto code NOT loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: Local-out
proto code loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]:
OS_Fingerprint code NOT loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: ANTI-VIRUS
code loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: ANTI-SPAM
code loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: ANTI-SPAM-EXT
code NOT loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: ANTI-SPAM-C
code NOT loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: ANTI-SPAM-SA
code loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: Unpackers
code loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: DKIM
code NOT loaded
Dec 6 15:53:55.921 mail2.domain.com /usr/sbin/amavisd[27376]: Tools
code NOT loaded
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Found
$file at /usr/bin/file
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Found
$altermime at /usr/bin/altermime
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .mail
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .asc
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .uue
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .hqx
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .ync
Dec 6 15:53:55.922 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .F at /usr/bin/unfreeze
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .Z at /usr/bin/uncompress
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .gz at /usr/bin/gzip -d
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .bz2 at /usr/bin/bzip2 -d
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .lzo at /usr/bin/lzop -d
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .rpm at /usr/bin/rpm2cpio
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .cpio at /usr/bin/pax
Dec 6 15:53:55.923 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .tar at /usr/bin/pax
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .deb at /usr/bin/ar
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .zip
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .rar at /usr/bin/unrar
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .arj at /usr/bin/arj
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .arc at /usr/bin/nomarch
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .zoo at /usr/bin/zoo
Dec 6 15:53:55.924 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .lha at /usr/bin/lha
Dec 6 15:53:55.925 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .cab at /usr/bin/cabextract
Dec 6 15:53:55.925 mail2.domain.com /usr/sbin/amavisd[27376]: No decoder
for .tnef tried: tnef
Dec 6 15:53:55.925 mail2.domain.com /usr/sbin/amavisd[27376]: Internal
decoder for .tnef
Dec 6 15:53:55.925 mail2.domain.com /usr/sbin/amavisd[27376]: Found decoder
for .exe at /usr/bin/unrar; /usr/bin/lha; /usr/bin/arj
Dec 6 15:53:55.925 mail2.domain.com /usr/sbin/amavisd[27376]: Using primary
internal av scanner code for ClamAV-clamd
Dec 6 15:53:55.927 mail2.domain.com /usr/sbin/amavisd[27376]: Found
secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
Dec 6 15:53:55.929 mail2.domain.com /usr/sbin/amavisd[27376]: Creating db
in /var/spool/amavisd/db/; BerkeleyDB 0.43, libdb 4.3
Dec 6 15:53:56.776 mail2.domain.com /usr/sbin/amavisd[27376]: DKIM
signature verification disabled, corresponding features not available. If
not intentional, consider enabling it by setting: $enable_dkim_verification
to 1, or explicitly disable it by setting it to 0 to quench down this
warning.
/var/log/maillog when I send an email
Dec 6 15:55:40 mail2 postfix/qmgr[27334]: 36F1D3EF49: from=<
gnav...@domain.com>, size=393, nrcpt=1 (queue active)
Dec 6 15:55:40 mail2 postfix/smtpd[27393]: initializing the server-side TLS
engine
Dec 6 15:55:40 mail2 postfix/smtpd[27393]: connect from
localhost[127.0.0.1]
Dec 6 15:55:40 mail2 postfix/trivial-rewrite[27385]: warning: do not list
domain domain.com in BOTH mydestination and virtual_mailbox_domains
Dec 6 15:55:40 mail2 postfix/trivial-rewrite[27385]: warning: do not list
domain domain.com in BOTH mydestination and virtual_mailbox_domains
Dec 6 15:55:40 mail2 postfix/smtpd[27393]: 9E7893EF51:
client=unknown[68.175.49.190]
Dec 6 15:55:40 mail2 postfix/cleanup[27389]: 9E7893EF51: message-id=<
20101206205540.36f1d3e...@mail2.domain.com>
Dec 6 15:55:40 mail2 postfix/qmgr[27334]: 9E7893EF51: from=<
gnav...@domain.com>,size=838, nrcpt=1 (queue active)
Dec 6 15:55:40 mail2 postfix/trivial-rewrite[27385]: warning: do not list
domain domain.com in BOTH mydestination and virtual_mailbox_domains
Dec 6 15:55:40 mail2 postfix/smtp[27390]: 36F1D3EF49: to=<fbo...@domain.com>,
relay=127.0.0.1[127.0.0.1]:10024, delay=14, delays=14/0.01/0.01/0.42,
dsn=2.0.0, status=sent (250 2.0.0 Ok, id=27379-01, from
MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 9E7893EF51)
Dec 6 15:55:40 mail2 postfix/qmgr[27334]: 36F1D3EF49: removed
Dec 6 15:55:40 mail2 postfix/virtual[27394]: 9E7893EF51: to=<
fbo...@domain.com>, relay=virtual, delay=0.03, delays=0.01/0.01/0/0.01,
dsn=2.0.0, status=sent (delivered to maildir)
Dec 6 15:55:40 mail2 postfix/qmgr[27334]: 9E7893EF51: removed
------------------------------------------------------------------------------
What happens now with your Lotus Notes apps - do you make another costly
upgrade, or settle for being marooned without product support? Time to move
off Lotus Notes and onto the cloud with Force.com, apps are easier to build,
use, and manage than apps on traditional platforms. Sign up for the Lotus
Notes Migration Kit to learn more. http://p.sf.net/sfu/salesforce-d2d
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
Please visit http://www.ijs.si/software/amavisd/ regularly
For administrativa requests please send email to rainer at openantivirus dot
org
