Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-17 Thread Christopher J Shaker
You're correct. I did not test my 'discovery' properly before jumping to this conclusion. I appreciate the pointer to the IGNORE behavior. I'll endeavor to ignore any virus or spam filtering headers from incoming email. I've still got the mystery of how his email gets in without being scored

Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-17 Thread Christopher J Shaker
Clifton: I am pretty sure amavisd-new does *not* work this way. It has an implicit list of checks to run on each incoming mail, starting with virus scanning, and works its way through them. If it's working this way for you, it may be the result of something funky in your Postfix

Re: [AMaViS-user] Forged 'X-Virus-Scanned' header bypasses Amavis-new scanning

2008-02-17 Thread Mark Martinec
Chris, I've still got the mystery of how his email gets in without being scored by Amavis. When I run spamassassin on it, it gets a very high score. Other spam gets filtered just fine. Somehow, this one spammer avoids it. Perhaps it was larger than $sa_mail_body_size_limit, or the recipient