Thanks for your response Johannes.
But i also noticed the same situation even when the subject has no ***SPAM***
prefix, please see below :
04-16 16:10:14 simscan:[14340]:CLEAN (0.00/6.00):4.9623s:$50 off $200 + TRIPLE
Points
Event!:63.236.76.196:bo-b914y6ja508xtyaumawd2dy9hft...@b.neimanmarcusemail.com:******@******
04-16 16:11:04 simscan:[14434]:CLEAN
(0.00/6.00):2.3609s:=?UTF-8?B?4piFIEthbXUgY29jb2sgZGVuZ2FuIFJhIGRpIFR3b28=?=:77.73.183.15:nore...@twoomail.com:
******@******
04-16 16:16:13 simscan:[15021]:CLEAN (0.00/6.00):2.8733s:RE_ Online
Banking:216.82.254.103:doris.c...@sc.com:******@******
Infact, all simscan result is always " CLEAN (0.00/6.00) "
Then i compare simscan result with spamd log as below :
spamd log :
04-16 17:41:00 Apr 16 17:41:00.417 [10421] info: spamd: identified spam
(21.3/6.0) for clamav:89 in 1.7 seconds, 3034 bytes.
04-16 17:41:00 Apr 16 17:41:00.417 [10421] info: spamd: result: Y 21 -
ADVANCE_FEE_4_NEW_MONEY,BAYES_99,BAYES_999,DEAR_FRIEND,DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,FREEMAIL_REPLYTO,IN_BCUDA_RBL,LOTS_OF_MONEY,MILLION_USD,MONEY_FRAUD_5,MONEY_FROM_41,RCVD_IN_BCUDA_RELAY,RDNS_NONE,URG_BIZ
scantime=1.7,size=3034,user=clamav,uid=89,required_score=6.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=57617,mid=<220534.34570...@web100501.mail.kks.yahoo.co.jp>,bayes=1.000000,autolearn=spam
simscan said :
@40000000552f91c618f361ec simscan:[23083]:CLEAN (0.00/6.00):1.7990s:***SPAM***
Dear Friend:183.79.28.131:ol_ale...@yahoo.co.jp:******@******
Spamd scored 21.3/6.00 , spamassassin add prefix ***SPAM*** to subject but
simscan still display (0.00/6.00) and let the spam go through
Regards,
Nelson
On Thursday, 16 April 2015, 16:44, Johannes Weberhofer
<jweberho...@weberhofer.at> wrote:
Am 16.04.2015 um 11:08 schrieb nelson:
> Hi guys,
>
> I've noticed today that simscan is weird because it always display result
> "CLEAN" and the score always (0.00/6.00) even when spamassassin clearly mark
> ***SPAM***
>
> Also, if i check the email header of the message, clearly the score is not
> 0.00 as simscan result.
>
> 04-16 15:46:51 simscan:[10602]:CLEAN (0.00/6.00):2.6082s:***SPAM*** In My
> WILL:122.52.144.108:evelyncohenco...@aol.de:******@******
> 04-16 15:46:58 simscan:[10611]:CLEAN (0.00/6.00):5.8803s:***SPAM*** In My
> WILL:122.52.144.108:evelyncohenco...@aol.de:******@******
IMHO the "***SPAM***" prefix has been added by the sending SMTP server not by
yours, as the log-lines indicate the original mail's subject. I believe
everything is OK.
Best regards,
Johannes
> Below is my /var/qmail/control/simcontrol
>
> :clam=yes,spam=yes,spam_hits=6,attach=.mp3:.src:.bat:.pif
>
> Below is my /etc/mail/spamassassin/local.cf
>
> ok_locales all
> skip_rbl_checks 0
>
> required_score 6
> report_safe 0
> rewrite_header Subject ***SPAM***
>
> use_pyzor 1
> use_auto_whitelist 0
>
> use_bayes 1
> use_bayes_rules 1
> bayes_auto_learn 1
>
> use_dcc 1
> dcc_home /var/dcc
> dcc_path /usr/local/bin/dccproc
>
> add_header all Score _SCORE_
> add_header all Tests _TESTS_
> add_header all Autolearn _AUTOLEARN_
> add_header all Level _STARS(*)_
> add_header all Status _YESNO_
> add_header all DCC _DCCB_: _DCCR_
> add_header all Report _REPORT_
> add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on
> _HOSTNAME_
>
> I've tried to search for hints regarding this situation but could not find
> any.
>
> Anyone have a hint where i should look ?
>
> Thanks.
>
>
>
>
--
Johannes Weberhofer
Weberhofer GmbH, Austria, Vienna
---------------------------------------------------------------------
To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com
For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
