Re: [AMaViS-user] white-listed spam

2006-02-13 Thread Mark Martinec
From mouss: so you certainly use the default quoting option (postfix looks inside quotes, which is not rfc compliant but is what most people probably want). but then, postfix will remove the quotes (and thus the space) before talking to amavisd. this is where I don't see how you realize the

Re: [AMaViS-user] white-listed spam

2006-02-09 Thread mouss
Les Ault a écrit : On Thu, 2006-02-09 at 00:03 +0100, mouss wrote: Les Ault a écrit : [snip] but your postfix log shows a correct address: Feb 7 16:13:01 mta1 postfix/qmgr[3198]: 1E0EE91EF1: from=[EMAIL PROTECTED], size=2460, nrcpt=1 (queue active) Don't you reject_non_fqdn_sender (and

Re: [AMaViS-user] white-listed spam

2006-02-08 Thread mouss
Les Ault a écrit : One of my users just received some spam that made it past amavisd/SpamAssassin; The message was your average text formatted mortgage spam. This message has been blocked by amavisd/SpamAssassin in the past so I did some checking and found the envelope sender on this

Re: [AMaViS-user] white-listed spam

2006-02-08 Thread Les Ault
On Wed, 2006-02-08 at 22:50 +0100, mouss wrote: Les Ault a écrit : [ snip ] Seems like a bug somewhere. - what/who/when/... added the space? the postfix line shows the right sender (no space and no quotes). do you have any canonical maps in postfix that contain such bogus conversion? if

Re: [AMaViS-user] white-listed spam

2006-02-08 Thread mouss
Les Ault a écrit : The space is from the sending MTA (spamming MTA) during the MAIL FROM command. To test my theory, I used a previously quarantined spam message (all my messages are quarantined in BSMTP format). Using vi, I added a space between the tld and the , then re-injected the

[AMaViS-user] white-listed spam

2006-02-07 Thread Les Ault
One of my users just received some spam that made it past amavisd/SpamAssassin; The message was your average text formatted mortgage spam. This message has been blocked by amavisd/SpamAssassin in the past so I did some checking and found the envelope sender on this message was different. The