Re: [qmailtoaster] scanning question
Randy, Simscan does not check spam itself, it simply submits email to spamassassin and clamav, or not, depending on your instructions. The flags (please check my assertions) 1) spam=yes: tells simscan to submit to spamassassin 2) clamav=yes: tells simscan to submit to clamav 3) spam_passthru=yes: means spam won't be dropped or deleted but allow to go to the mailbox 4) spam_hits=3: I'm not sure, I'll let you look that up. 5) attach: means that files with specified attachments won't be allow through. I don't remember how this is handled. The issue is in this line: 'X-Spam-Status: No, score=3.5 required=5.0' A score of 5.0 is required to mark this as spam. The score for the email was 3.5 therefore it is not spam. To change this do the following: In order to change the required score on spam from 5.0 to a lower number you'll have to find your spamassassin config file. Mine is in /etc/mail/spamassassin/local.cf. Edit the line: required_score 5 and change it to: required_score 3 I way to check that simscan is working is to change simcontrol line to the following (spam=no): us...@burke.org:clam=yes,spam=no,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif and see if the spam portion of the email header disappears. You could also change the 'clam=yes' to 'clam=no' and see if the 'clamav' portion is absent from the email header. Eric On 1/6/2011 7:46 AM, Randy Katz wrote: ok, in this example: Received: (qmail 30203 invoked by uid 89); 6 Jan 2011 14:32:02 - Received: by simscan 1.4.0 ppid: 30195, pid: 30197, t: 0.2047s scanners: attach: 1.4.0 clamav: 0.96.5/m:53/d:12485 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail2.burke.org X-Spam-Level: *** X-Spam-Status: No, score=3.5 required=5.0 tests=AWL,FH_DATE_PAST_20XX, RDNS_NONE autolearn=no version=3.2.5 and in /var/qmail/control/simcontrol the user has: us...@burke.org:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif So the message that came in with a score of 3.5 should have been marked as spam but was not. I have enabled spam passthru and that now shows in the logs. Please someone that understands this drop a line, thanks. Randy On 1/6/2011 4:02 AM, Anil Aliyan wrote: HI, I don't understand on what basis you are saying that its not working? What is it in the header you have posted that made you believe so? Regards, Anil Aliyan -Original Message- From: Randy Katz [mailto:rk...@simplicityhosting.com] Sent: 06 January 2011 13:17 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] scanning question Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach =.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Gr
Re: [qmailtoaster] scanning question
ok, in this example: Received: (qmail 30203 invoked by uid 89); 6 Jan 2011 14:32:02 - Received: by simscan 1.4.0 ppid: 30195, pid: 30197, t: 0.2047s scanners: attach: 1.4.0 clamav: 0.96.5/m:53/d:12485 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail2.burke.org X-Spam-Level: *** X-Spam-Status: No, score=3.5 required=5.0 tests=AWL,FH_DATE_PAST_20XX, RDNS_NONE autolearn=no version=3.2.5 and in /var/qmail/control/simcontrol the user has: us...@burke.org:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif So the message that came in with a score of 3.5 should have been marked as spam but was not. I have enabled spam passthru and that now shows in the logs. Please someone that understands this drop a line, thanks. Randy On 1/6/2011 4:02 AM, Anil Aliyan wrote: HI, I don't understand on what basis you are saying that its not working? What is it in the header you have posted that made you believe so? Regards, Anil Aliyan -Original Message- From: Randy Katz [mailto:rk...@simplicityhosting.com] Sent: 06 January 2011 13:17 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] scanning question Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach =.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] scanning question
I am using qtp-newmodel how do I change the config options for simscan? On 1/6/2011 5:48 AM, Eric Broch wrote: Check your compile options http://www.inter7.com/simscan/README On 1/6/2011 12:46 AM, Randy Katz wrote: Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] scanning question
Check your compile options http://www.inter7.com/simscan/README On 1/6/2011 12:46 AM, Randy Katz wrote: Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach=.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
Re: [qmailtoaster] scanning question
The threshold is 3.0 in simscan, threshold in SpamAssassin global is 5.0, why does the email header not show the simscan threshold? Is there a way to get this to happen? On 1/6/2011 4:02 AM, Anil Aliyan wrote: HI, I don't understand on what basis you are saying that its not working? What is it in the header you have posted that made you believe so? Regards, Anil Aliyan -Original Message- From: Randy Katz [mailto:rk...@simplicityhosting.com] Sent: 06 January 2011 13:17 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] scanning question Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach =.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
RE: [qmailtoaster] scanning question
HI, I don't understand on what basis you are saying that its not working? What is it in the header you have posted that made you believe so? Regards, Anil Aliyan -Original Message- From: Randy Katz [mailto:rk...@simplicityhosting.com] Sent: 06 January 2011 13:17 To: qmailtoaster-list@qmailtoaster.com Subject: [qmailtoaster] scanning question Hi, I have email coming into a user, in the header it looks like this: Received: (qmail 15565 invoked by uid 89); 6 Jan 2011 06:31:50 - Received: by simscan 1.4.0 ppid: 15530, pid: 15544, t: 0.7889s scanners: attach: 1.4.0 clamav: 0.96.5 /m:51/d:9697 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail1.axeze.net X-Spam-Level: X-Spam-Status: No, score=0.6 required=5.0 tests=AWL,BAYES_60,RDNS_NONE autolearn=no version=3.2.5 But in /var/qmail/control/simcontrol the entry for the email address is: k1u...@abccompany.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=3,attach =.mp3:.src:.bat:.pif So it seems it is not working correctly. How do I get simscan to be authoritative for spam scanning, overrides and what gets through, and how do I verify that this is working? Thank you in advance, Randy Katz - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com - Qmailtoaster is sponsored by Vickers Consulting Group (www.vickersconsulting.com) Vickers Consulting Group offers Qmailtoaster support and installations. If you need professional help with your setup, contact them today! - Please visit qmailtoaster.com for the latest news, updates, and packages. To unsubscribe, e-mail: qmailtoaster-list-unsubscr...@qmailtoaster.com For additional commands, e-mail: qmailtoaster-list-h...@qmailtoaster.com
