Nick Holden wrotr
Salvatore,

I've installed the patch, and it's working, but there's a problem.

Spam between the SpamAssassin threshold and the quarantine gets dealt
with properly (i.e. it is tagged and sent on). Spam above the quarantine
doesn't get tagged, though, which means the word 'spam' isn't in the
title, so the 'silent virus' setting doesn't get activated. So I'm
getting email from the mail server instead of the spam!

Hi Nick


I believe you have missunderstood the way silent_virus works.
The word spam doesn't need to be in the subject. The silent_virus doesn't work with the recips, just doesn't notify sender. And it works with the 'description' field not with the 'subject'.


The problem seems to be that the tagging of the spam's subject happens
after the decision to quarantine or delete the spam, and the passing of
the email through the silent virus checker.

Have you worked out a fix for this?

Nick

You have the notify to recips set up, don't you?
In this case the recips would receive the notification of the spam-message being quaratined but not with the spam-messages being deleted (if you have download the patch after last satarday...).


Have you look the logs (qmail-queue.log)?

For a spam-message being quarantined you will find somethig like this:

23/11/2003 04:33:45:25030: +++ starting debugging for process 25030 by uid=81
23/11/2003 04:33:45:25030: w_c: elapsed time from start 0.012471 secs
23/11/2003 04:33:45:25030: return-path='[EMAIL PROTECTED]', recips='[EMAIL PROTECTED]'
23/11/2003 04:33:45:25030: from='"Alisha Guthrie" <[EMAIL PROTECTED]>', subj='real resultz alway fvxuprqjyzosveyk', via SMTP from 1
93.43.129.131
23/11/2003 04:33:45:25030: p_s: finished scan in 0.020226 secs
23/11/2003 04:33:45:25030: sophie: finished scan in 0.04178 secs
23/11/2003 04:33:45:25030: SA: yup, this smells like SPAM - quarantine message...
23/11/2003 04:33:45:25030: SA: required_hits=6.5 sa_quarantine=8 sa_delete=10
23/11/2003 04:33:45:25030: SA: finished scan in 0.258097 secs - hits=8.5
23/11/2003 04:33:45:25030: ini_sc: finished scan of "/var/spool/qmailscan/tmp/apo136.usc.urbe.it106955842549725030"...
23/11/2003 04:33:45:25030: ini_sc: elapsed time from start 0.353873 secs
23/11/2003 04:33:45:25030: v_v_t_r: Description contain "spam" - so don't notify the sender
23/11/2003 04:33:46:25030: ------ all finished. Total of 0.435323 secs


For a spam-message being deleted:

23/11/2003 07:51:26:25546: +++ starting debugging for process 25546 by uid=81
23/11/2003 07:51:26:25546: w_c: elapsed time from start 0.013116 secs
23/11/2003 07:51:26:25546: return-path='[EMAIL PROTECTED]', recips='[EMAIL PROTECTED]'
23/11/2003 07:51:26:25546: from='"Gwendolyn Villalobos" <[EMAIL PROTECTED]>', subj='holdiay specials: xanax, valium, cialis lengthen w
bqvnnrqoq', via SMTP from 193.43.129.131
23/11/2003 07:51:26:25546: p_s: finished scan in 0.020221 secs
23/11/2003 07:51:26:25546: sophie: finished scan in 0.03965 secs
23/11/2003 07:51:26:25546: SA: yup, this smells like SPAM - deleting message...
23/11/2003 07:51:26:25546: SA: required_hits=6.5 sa_quarantine=8 sa_delete=10
23/11/2003 07:51:26:25546: SA: finished scan in 0.239084 secs - hits=10.5
23/11/2003 07:51:26:25546: ini_sc: finished scan of "/var/spool/qmailscan/tmp/apo136.usc.urbe.it106957028649725546"...
23/11/2003 07:51:26:25546: ini_sc: elapsed time from start 0.333246 secs
23/11/2003 07:51:26:25546: v_v_t_r: Description contain "spam" - so don't notify the sender
23/11/2003 07:51:26:25546: ------ all finished. Total of 0.387769 secs



I've had add last satarday (from a suggest of Federico Lombardo) the feature that spam mail being deleted won't be notified to the recips.


Regards
Salvatore


On Tue, 2003-11-04 at 08:32, Salvatore Toribio wrote:
 I've modified the patch I posted ten days ago, now it's possible to
 delete messages over a threshold.

Donwload from: <http://xoomer.virgilio.it/j.toribio/qmail-scanner/>
>
 --sa-quarantine [num]           (default: 0)
 Spam messages over this score should be quarantined.
 Only relevant if SpamAssassin is used and is greater than
 the "required_hits" set in the configuration file of
 spamassassin.. Score of 0 means deliver all messages.

 --sa-delete [num]               (default: 0)
 Spam messages over this score should be deleted.
 Only relevant if SpamAssassin is used. Score of 0
 means deliver all messages. Defaults to 0.
 If sa-quarantine is set, sa-delete must be greater,
 of course, must be even greater than the "required_hits"
 set in the configuration file of spamassassin.

The routine "sub spamassassin" checks if the values are setting right:

required_hits < sa-quarantine < sa-delete

 It's possible to set sa-quarantine to 0 and sa-delete to another
 value, the mail will be deleted but not quarantined.

 The message is deleted (really not copied to "new") in the routine
 "sub email_quarantine_report".

 After it is installed just edit the file qmail-scanner-queue.pl to
 change the values of sa-quarantine and sa-delete.

Salvatore
--
Nick Holden <[EMAIL PROTECTED]>



------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to