Randy,
Simscan does not check spam itself, it simply submits email to
spamassassin and clamav, or not, depending on your instructions.
The flags (please check my assertions)
1) spam=yes: tells simscan to submit to spamassassin
2) clamav=yes: tells simscan to submit to clamav
3) spam_passthru=yes: means spam won't be dropped or deleted but allow
to go to the mailbox
4) spam_hits=3: I'm not sure, I'll let you look that up.
5) attach: means that files with specified attachments won't be allow
through. I don't remember how this is handled.
The issue is in this line: 'X-Spam-Status: No, score=3.5 required=5.0'
A score of 5.0 is required to mark this as spam. The score for the email
was 3.5 therefore it is not spam. To change this do the following:
In order to change the required score on spam from 5.0 to a lower number
you'll have to find your spamassassin config file. Mine is in
/etc/mail/spamassassin/local.cf.
Edit the line:
required_score 5
and change it to:
required_score 3
I way to check that simscan is working is to change simcontrol line to
the following (spam=no):
[email protected]:clam=yes,spam=no,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif
and see if the spam portion of the email header disappears.
You could also change the 'clam=yes' to 'clam=no' and see if the
'clamav' portion is absent from the email header.
Eric
On 1/6/2011 7:46 AM, Randy Katz wrote:
ok, in this example:
Received: (qmail 30203 invoked by uid 89); 6 Jan 2011 14:32:02 -0000
Received: by simscan 1.4.0 ppid: 30195, pid: 30197, t: 0.2047s
scanners: attach: 1.4.0 clamav: 0.96.5/m:53/d:12485 spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail2.burke.org
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=5.0 tests=AWL,FH_DATE_PAST_20XX,
RDNS_NONE autolearn=no version=3.2.5
and in /var/qmail/control/simcontrol the user has:
[email protected]:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif
So the message that came in with a score of 3.5 should have been
marked as spam but was not. I have
enabled spam passthru and that now shows in the logs.
Please someone that understands this drop a line, thanks.
Randy
On 1/6/2011 4:02 AM, Anil Aliyan wrote:
HI,
I don't understand on what basis you are saying that its not working?
What
is it in the header you have posted that made you believe so?
Regards,
Anil Aliyan
-----Original Message-----
From: Randy Katz [mailto:[email protected]]
Sent: 06 January 2011 13:17
To: [email protected]
Subject: [qmailtoaster] scanning question
Hi,
I have email coming into a user, in the header it looks like this:
Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 -0000
Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s
scanners: attach: 1.4.0 clamav: 0.96.5
/m:51/d:9697 spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail1.axeze.net
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE
autolearn=no version=3.2.5
But in /var/qmail/control/simcontrol the entry for the email address is:
[email protected]:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach
=.mp3:.src:.bat:.pif
So it seems it is not working correctly. How do I get simscan to be
authoritative for spam scanning, overrides and what gets through, and
how do
I verify that this is working?
Thank you in advance,
Randy Katz
----------------------------------------------------------------------------
-----
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them
today!
----------------------------------------------------------------------------
-----
Please visit qmailtoaster.com for the latest news, updates, and
packages.
To unsubscribe, e-mail:
[email protected]
For additional commands, e-mail:
[email protected]
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them
today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and
packages.
To unsubscribe, e-mail:
[email protected]
For additional commands, e-mail:
[email protected]
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and
installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and
packages.
To unsubscribe, e-mail:
[email protected]
For additional commands, e-mail:
[email protected]
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
