Here is my configure options:
./configure --qs-user qscand --qs-group qscand --spooldir /var/spool/qmailscan --qmaildir /var/qmail --bindir /var/qmail/bin --qma
il-queue-binary /var/qmail/bin/qmail-queue --admin spam --domain 11deaes.com --admin-fromname "System Anti-Virus Administrator" --n
otify sender,admin --local-domains 11deaes.com --silent-viruses auto --lang en_GB --debug yes --minidebug 1 --unzip 0 --add-dscr-hdr
s 0 --dscr-hdrs-text "X-Qmail-Scanner" --archive 0 --run-first-p-s yes --redundant no --log-details yes --log-crypto 0 --fix-mime 1
--sa-quarantine 8 --sa-delete 10 --scanners "auto" --install 1
and my spamassassin 2.6 local.cf:
required_hits 1 rewrite_subject 1 report_header 1 report_charset 1 use_terse_report 1 defang_mime 1 dns_available yes dcc_add_header 1 dcc_home /usr/local dcc_path /usr/local/bin pyzor_path /usr/bin use_pyzor 1 use_razor2 1 use_dcc 1 use_bayes 1 auto_learn 1 subject_tag ********This could be SPAM********* timelog_path /var/log/spamassassin
when i send and email messages that get 1000 points from spam control the program don't delete it. Here what the log look like:
tail -f /var/spool/qmailscan/qmail-queue.log
Wed, 26 Nov 2003 15:33:33 -0400:9013: +++ starting debugging for process 9013 by uid=502 at Wed, 26 Nov 2003 15:33:33 -0400
Wed, 26 Nov 2003 15:33:33 -0400:9013: setting UID to EUID so subprocesses can access files generated by this script
Wed, 26 Nov 2003 15:33:33 -0400:9013: program name is qmail-scanner-queue.pl, version 1.20
Wed, 26 Nov 2003 15:33:33 -0400:9013: incoming SMTP connection from via SMTP from 200.105.128.48
Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: mkdir /var/spool/qmailscan/tmp/mx210698752134979013
Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: start dumping incoming msg into /var/spool/qmailscan/working/tmp/mx210698752134979013 [1069875213.16363]
Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: primary Content-Type of text/plain found
Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: rename new msg from /var/spool/qmailscan/working/tmp/mx210698752134979013 to /var/spool/qmailscan/working/new/mx210698752134979013 [1069875213.16628]
Wed, 26 Nov 2003 15:33:33 -0400:9013: d_m: starting /usr/local/bin/reformime -x/var/spool/qmailscan/tmp/mx210698752134979013/ </var/spool/qmailscan/working/new/mx210698752134979013 [1069875213.16671]
Wed, 26 Nov 2003 15:33:33 -0400:9013: d_m: finished /usr/local/bin/reformime -x/var/spool/qmailscan/tmp/mx210698752134979013/ [1069875213.17581]
Wed, 26 Nov 2003 15:33:33 -0400:9013: d_m: unpacking message took 0.009383 seconds
Wed, 26 Nov 2003 15:33:33 -0400:9013: unsetting QMAILQUEUE env var
Wed, 26 Nov 2003 15:33:33 -0400:9013: g_e_h: return-path is "[EMAIL PROTECTED]", recips is "[EMAIL PROTECTED]"
Wed, 26 Nov 2003 15:33:33 -0400:9013: from=Jesus Ruiz <[EMAIL PROTECTED]>,subj=Test spam mail (GTUBE), x-qmail-scanner-message-id=<[EMAIL PROTECTED]> via SMTP from 200.105.128.48
Wed, 26 Nov 2003 15:33:33 -0400:9013: This is a PLAIN text message (because it's either not mime, or is text/plain), skip virus scanners - but not SA
Wed, 26 Nov 2003 15:33:33 -0400:9013: ini_sc: start scanning
Wed, 26 Nov 2003 15:33:33 -0400:9013: ini_sc: recursively scan the directory /var/spool/qmailscan/tmp/mx210698752134979013/
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: starting scan of directory "/var/spool/qmailscan/tmp/mx210698752134979013"...
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '81:ILOVEYOU' = 'Virus-subject' = 'Love Letter Virus/Trojan'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing subject: ILOVEYOU
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '82:message/partial.*' = 'Virus-content-type' = 'Message/partial MIME attachments blocked by policy'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing content-type: message/partial.*
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '85:.{100,}' = 'Virus-date' = 'MIME Header Buffer Overflow'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing date: .{100,}
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '86:.{100,}' = 'Virus-mime-version' = 'MIME Header Buffer Overflow '
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing mime-version: .{100,}
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '87:.{100,}' = 'Virus-resent-date' = 'MIME Header Buffer Overflow'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing resent-date: .{100,}
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '90:[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]' = 'Virus-to' = 'BadTrans Trojan exploit!'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing to: [EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: 'eicar.com' = '69' = 'EICAR Test Virus'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a size!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: 'happy99.exe' = '10000' = 'Happy99 Trojan'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a size!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: 'zipped_files.exe' = '120495' = 'W32/ExploreZip.worm.pak virus'
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a size!
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: skipping auto-generated file 1069875213.9015-0.mx2
Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: finished scan of dir "/var/spool/qmailscan/tmp/mx210698752134979013" in 0.004198 secs
Wed, 26 Nov 2003 15:33:33 -0400:9013: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/mx210698752134979013"...
Wed, 26 Nov 2003 15:33:33 -0400:9013: scanloop: scanner=spamassassin,plain_text_msg=1
Wed, 26 Nov 2003 15:33:33 -0400:9013: scanloop: finished scan of "/var/spool/qmailscan/tmp/mx210698752134979013"...
Wed, 26 Nov 2003 15:33:33 -0400:9013: ini_sc: scanning message took 0.004688 seconds
Wed, 26 Nov 2003 15:33:33 -0400:9013: q_r: fork off child into /var/qmail/bin/qmail-queue...
Wed, 26 Nov 2003 15:33:33 -0400:9016: q_r: xstatus=0
Wed, 26 Nov 2003 15:33:33 -0400:9013: qmail-scanner: Clear:RC:1(200.105.128.48): 0.019189 1252 [EMAIL PROTECTED] [EMAIL PROTECTED] Test spam mail (GTUBE) <[EMAIL PROTECTED]> 1069875213.9015-0.mx2:547
Wed, 26 Nov 2003 15:33:33 -0400:9013: cleanup: /bin/rm -rf /var/spool/qmailscan/tmp/mx210698752134979013/ /var/spool/qmailscan/working/new/mx210698752134979013
Wed, 26 Nov 2003 15:33:33 -0400:9013: --- all finished. Total of 0.157843 secs
------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
