Thanks for the replay Eric. Here's the full header:
Received: (qmail 11511 invoked by uid 1010); 9 Jan 2011 16:09:23 -0800
Received: from 192.168.100.122 by mail.norcalisp.com (envelope-from
<michael.col...@gmail.com>, uid 1008) with qmail-scanner-1.25-st-qms
(clamdscan: 0.91.2/1082. spamassassin: 3.2.0. perlscan: 1.25-st-qms.
Clear:RC:1(192.168.100.122):.
Processed in 0.094059 secs); 10 Jan 2011 00:09:23 -0000
X-Antivirus-NorCalISP-Mail-From: michael.col...@gmail.com via
mail.norcalisp.com
X-Antivirus-NorCalISP: 1.25-st-qms (Clear:RC:1(192.168.100.122):. Processed
in 0.094059 secs Process 11504)
Received: from unknown (HELO mail.norcalisp.com) (192.168.100.122)
by mail.norcalisp.com with SMTP; 9 Jan 2011 16:09:23 -0800
Received: (qmail 2795 invoked by uid 89); 10 Jan 2011 00:09:21 -0000
Received: by simscan 1.4.0 ppid: 2790, pid: 2791, t: 0.0720s
scanners: attach: 1.4.0 clamav: 0.96.3/m:53/d:12497
Received: from unknown (HELO mail-yi0-f49.google.com) (209.85.218.49)
by mail.norcalisp.com with SMTP; 10 Jan 2011 00:09:21 -0000
Received: by yib2 with SMTP id 2so5429037yib.36
for <mcol...@norcalisp.com>; Sun, 09 Jan 2011 16:08:50 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=gamma;
h=domainkey-signature:mime-version:received:received:date:message-id
:subject:from:to:content-type;
bh=GMPLCtUDsw0tenqLVZLtyBTLSH7m83E9a36NIFIzX9g=;
b=bWDAXb5wt2YuhvYKE7ro9LDiNbkPOGFqmKDyzpOJjorI1+fPSMQeg4O9y8xKt2WXRM
dUeOdL8G59F79xUsHPTDODYlT1pL6/PCDS9dONYO4LRce/OACwGjn+sn+vA1xrOMcasi
45mLzT4w+UxhAjN474zs8TBauKQtTxYJwoXPI=
DomainKey-Signature: a=rsa-sha1; c=nofws;
d=gmail.com; s=gamma;
h=mime-version:date:message-id:subject:from:to:content-type;
b=Tai3/7m8KcMRAUo7vQvthAx35Er2+qbRq+OsI548wcn3rH9m/3wvFrP3MPhkShqa35
Zhv9HOjRaxuw4w+afZhYWdwF53IkzI77UYQ5UZTIgVvpDSAfP61wmAOwSS7PcMdBOT25
NOxzSWtxSdbj9D9wFQ+ULFH5OAUp5P85IBvOQ=
MIME-Version: 1.0
Received: by 10.100.48.4 with SMTP id v4mr488017anv.47.1294618130674; Sun,
09
Jan 2011 16:08:50 -0800 (PST)
Received: by 10.100.120.20 with HTTP; Sun, 9 Jan 2011 16:08:50 -0800 (PST)
Date: Sun, 9 Jan 2011 16:08:50 -0800
Message-ID: <aanlkti=tmjszfszjr7ngoxjhcar4meaorua2jxhz1...@mail.gmail.com>
Subject: Testing
From: Michael Colvin <michael.col...@gmail.com>
To: Michael Colvin <mcol...@norcalisp.com>
Content-Type: multipart/alternative; boundary=0016e642d6a8cc75ba049972c53e
This message is sent, obviously, from Gmail, so it's not an intra-host
e-mail, and no authentication is involved...
Qmlog spamd shows:
01-09 16:01:46 [2113] info: spamd: server started on port 783/tcp (running
version 3.2.5)
01-09 16:01:46 [2113] info: spamd: server pid: 2113
01-09 16:01:46 [2113] info: spamd: server successfully spawned child
process, pid 2387
01-09 16:01:46 [2113] info: spamd: server successfully spawned child
process, pid 2388
01-09 16:01:46 [2113] info: prefork: child states: II
These are the only entries since the last reboot...
Shouldn't the header line: scanners: attach: 1.4.0 clamav:
0.96.3/m:53/d:12497 also show spamd though? In other posts that I'd found
in the archive, there was a notation on that line that indicated
spamassassin was invoked...
To me, it looks like qmlog spamd doesn't have any errors, but should it show
that messages were scanned too? I don't think spamassassin isn't running,
it just doesn't look like simscan is sending messages from qmail to
spamassassin...
That's just a guess though...
Thanks again for your input!
Mike
-----Original Message-----
From: Eric Shubert [mailto:e...@shubes.net]
Sent: Sunday, January 09, 2011 5:12 PM
To: qmailtoaster-list@qmailtoaster.com
Subject: [qmailtoaster] Re: SpamAssassin not being invoked by SimContro
On 01/09/2011 05:24 PM, Michael J. Colvin wrote:
> I did some checking in the archives, but didn't find a solution,
> although I found some similar items, none of them seemed to point me in
> the right direction.
>
> I just realized that, for some reason, mail on two newly created servers
> is not being scanned by SpamAssassin, or at least it appears as though
> it isn't.
>
> E-mails arrive with the following contained in the headers:
>
> Received: by simscan 1.4.0 ppid: 2790, pid: 2791, t: 0.0720s
>
> scanners: attach: 1.4.0 clamav: 0.96.3/m:53/d:12497
>
> Which leads me to believe that only "attach" and "clamav" are being
invoked.
>
> Here's my tcp.smtp:
>
> 127.:allow,RELAYCLIENT="",DKSIGN="/var/qmail/control/domainkeys/%/private"
>
>
:allow,BADMIMETYPE="",SENDER_NOCHECK="1",BADLOADERTYPE="M",QMAILQUEUE="/var/
qmail/bin/simscan"
>
> Here's simcontrol:
>
> :clam=yes,spam=yes,spam_hits=12,attach=.mp3:.src:.bat:.pif
>
> I've got two servers, both new builds using the ISO, that are behaving
> identical. Obviously, I made some changes to tcp.smtp, but other than
> that, I haven't made any changes to any files that I'm aware of, that
> effect invoking simscan, and then spamassassin..
>
> Any thoughts?
>
> Additional info:
>
> qtp-whatami v0.3.7 Sun Jan 9 16:18:36 PST 2011
>
> DISTRO=CentOS
>
> OSVER=5.5
>
> QTARCH=i686
>
> QTKERN=2.6.18-194.8.1.el5
>
> BUILD_DIST=cnt50
>
> BUILD_DIR=/usr/src/redhat
>
> Thanks in advance!
>
> Mike
>
The "Received: by simscan" information won't show when a message is
scanned by spamassassin. Look for X-Spam-* headers for an indication of
this.
You should check the spamd log (qmlog spamd) to verify the condition of
spamassassin. Any errors will show there, as well as messages pertaining
to scans.
Also, all messages aren't scanned by SA. Intra-host messages (more
specifically, messages submitted with authentication) are not scanned,
nor are messages above a certain size. I don't recall off hand what that
size limit is, or where it's specified. It'd be nice if that were
documented on the wiki if it's not already.
--
-Eric 'shubes'
----------------------------------------------------------------------------
-----
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
----------------------------------------------------------------------------
-----
Please visit qmailtoaster.com for the latest news, updates, and
packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail:
qmailtoaster-list-h...@qmailtoaster.com
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
