Thanks, Eric.
I might add that having spam_hits less than required_score seems
non-sensical to me. spam_hits tells simscan to reject *spam* over a
particular score, not all messages over a particular score. Thus, having
spam_hits less than required_score has the same effect as if they were
equal values. IOW, a message must qualify as spam (exceed
required_score) before spam_hits becomes effective.
In order to reject spam for a given user at a score that's below tagged
spam for all others (required_score), you'd need to be able to specify a
different required_score for that user. I don't know that this is
presently possible.
Once more, I'm interested to know what it is you're try to accomplish.
Can you elaborate?
FWIW, simscan will no longer be used in QMTv2 (amavis will replace it),
so I wouldn't be too concerned with simscan at this point. I would like
to ensure though that whatever it is you're trying to accomplish can be
done with the amavis configuration in QMTv2.
--
-Eric 'shubes'
On 01/06/2011 08:51 AM, Eric Broch wrote:
Randy,
Simscan does not check spam itself, it simply submits email to
spamassassin and clamav, or not, depending on your instructions.
The flags (please check my assertions)
1) spam=yes: tells simscan to submit to spamassassin
2) clamav=yes: tells simscan to submit to clamav
3) spam_passthru=yes: means spam won't be dropped or deleted but allow
to go to the mailbox
4) spam_hits=3: I'm not sure, I'll let you look that up.
5) attach: means that files with specified attachments won't be allow
through. I don't remember how this is handled.
The issue is in this line: 'X-Spam-Status: No, score=3.5 required=5.0'
A score of 5.0 is required to mark this as spam. The score for the email
was 3.5 therefore it is not spam. To change this do the following:
In order to change the required score on spam from 5.0 to a lower number
you'll have to find your spamassassin config file. Mine is in
/etc/mail/spamassassin/local.cf.
Edit the line:
required_score 5
and change it to:
required_score 3
I way to check that simscan is working is to change simcontrol line to
the following (spam=no):
us...@burke.org:clam=yes,spam=no,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif
and see if the spam portion of the email header disappears.
You could also change the 'clam=yes' to 'clam=no' and see if the
'clamav' portion is absent from the email header.
Eric
On 1/6/2011 7:46 AM, Randy Katz wrote:
ok, in this example:
Received: (qmail 30203 invoked by uid 89); 6 Jan 2011 14:32:02 -0000
Received: by simscan 1.4.0 ppid: 30195, pid: 30197, t: 0.2047s
scanners: attach: 1.4.0 clamav: 0.96.5/m:53/d:12485 spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail2.burke.org
X-Spam-Level: ***
X-Spam-Status: No, score=3.5 required=5.0 tests=AWL,FH_DATE_PAST_20XX,
RDNS_NONE autolearn=no version=3.2.5
and in /var/qmail/control/simcontrol the user has:
us...@burke.org:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif
So the message that came in with a score of 3.5 should have been
marked as spam but was not. I have
enabled spam passthru and that now shows in the logs.
Please someone that understands this drop a line, thanks.
Randy
On 1/6/2011 4:02 AM, Anil Aliyan wrote:
HI,
I don't understand on what basis you are saying that its not working?
What
is it in the header you have posted that made you believe so?
Regards,
Anil Aliyan
-----Original Message-----
From: Randy Katz [mailto:rk...@simplicityhosting.com]
Sent: 06 January 2011 13:17
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] scanning question
Hi,
I have email coming into a user, in the header it looks like this:
Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 -0000
Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s
scanners: attach: 1.4.0 clamav: 0.96.5
/m:51/d:9697 spam: 3.2.5
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
mail1.axeze.net
X-Spam-Level:
X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE
autolearn=no version=3.2.5
But in /var/qmail/control/simcontrol the entry for the email address is:
k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach
=.mp3:.src:.bat:.pif
So it seems it is not working correctly. How do I get simscan to be
authoritative for spam scanning, overrides and what gets through, and
how do
I verify that this is working?
Thank you in advance,
Randy Katz
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
