Hi folks, I continuing receiving spams, I am very worried ...
The messages was verified by spamd but the spams are delivered to users mail
box.
I get the following messages from my maillog:
Jun 16 17:09:40 spamd[4928]: connection from localhost.domain.com.br
[127.0.0.1] at port 3423
Jun 16 17:09:40 spamd[4928]: connection from localhost.domain.com.br
[127.0.0.1] at port 3423
Jun 16 17:09:40 spamd[4978]: info: setuid to clamav succeeded
Jun 16 17:09:40 spamd[4978]: info: setuid to clamav succeeded
Jun 16 17:09:40 spamd[4978]: processing message
<[EMAIL PROTECTED]> for clamav:1007.
Jun 16 17:09:40 spamd[4978]: processing message
<[EMAIL PROTECTED]> for clamav:1007.
Jun 16 17:09:40 spamd[4978]: clean message (0.0/5.0) for clamav:1007 in 0.0
seconds, 1787 bytes.
Jun 16 17:09:40 spamd[4978]: clean message (0.0/5.0) for clamav:1007 in 0.0
seconds, 1787 bytes.
Please Could you help me?
Regards.
Eicke.
----- Original Message -----
From: "Eicke" <[EMAIL PROTECTED]>
To: "Fred" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, June 16, 2004 2:40 PM
Subject: Re: Doubts
> Postfix master.cf:
>
> smtp inet n - n - - smtpd
> -o content_filter=clamav:clamav
> clamav unix - n n - - pipe
> flags=Rq user=clamav argv=/usr/libexec/postfix/clamav-filter.sh -f
> ${sender} -- ${recipient}
>
>
> In /usr/libexec/postfix/clamav-filter.sh there is a variable:
>
> SENDMAIL=/usr/bin/spamc -f -e /usr/sbin/sendmail -i
>
> The result is something like this:
>
> /usr/bin/spamc -f -e /usr/sbin/sendmail -i -f sender -- recipient
>
>
> Tks.
> Eicke.
>
>
> ----- Original Message -----
> From: "Fred" <[EMAIL PROTECTED]>
> To: "Eicke" <[EMAIL PROTECTED]>;
> <[EMAIL PROTECTED]>
> Sent: Wednesday, June 16, 2004 2:29 PM
> Subject: Re: Doubts
>
>
> > How are you calling spamc and passing the message to it?
> >
> > Frederic Tarasevicius
> > Internet Information Services, Inc.
> > http://www.i-is.com/
> > 810-794-4400
> > mailto:[EMAIL PROTECTED]
> >
> >
> >
> > Eicke wrote:
> > > Hi folks,
> > >
> > > I am starts with spamassassin yesterday.
> > >
> > > My Environment:
> > >
> > > FreeBSD Server 4.8
> > > Postfix 2.0.16
> > > SpamAssassin
> > > Clamav
> > >
> > > I guess the spamassassin is not configured correctly in my server
> > > because I continuing receiving a lot of spams.
> > > I read the documentation and faq, but I dont know what is wrong.
> > >
> > > I started the spamd as follow:
> > > /usr/local/bin/spamd -a -c -d -C /etc/mail/spamassassin
> > >
> > > Inside /etc/mail/spamassassin there is a file local.cf as follow:
> > >
> > >> # This is the right place to customize your installation of
> > >> SpamAssassin. #
> > >> # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
> > >> # tweaked.
> > >> #
> > >>
> > >
> >
>
###########################################################################
> > >> #
> > >> # rewrite_subject 0
> > >> # report_safe 1
> > >> # trusted_networks 212.17.35.
> > >> rewrite_subject 1
> > >> report_header 1
> > >> subject_tag *****SPAM DETECTADO*****
> > >> use_terse_report 0
> > >> required_hits 5.0
> > >> skip_rbl_checks 0
> > >> use_bayes 1
> > >> auto_learn 1
> > >> awl->add_known_bad_address($addr);
> > >
> > > I get the folowing message that is a spam:
> > >
> > > Jun 16 12:20:22 postfix/smtpd[82231]: connect from
> > > mag.magicallyenormous.com[206.131.244.11]
> > > Jun 16 12:20:22 postfix/smtpd[82231]: connect from
> > > mag.magicallyenormous.com[206.131.244.11]
> > > Jun 16 12:20:23 postfix/smtpd[82231]: 3598B40EC7:
> > > client=mag.magicallyenormous.com[206.131.244.11]
> > > Jun 16 12:20:23 postfix/smtpd[82231]: 3598B40EC7:
> > > client=mag.magicallyenormous.com[206.131.244.11]
> > > Jun 16 12:20:24 postfix/cleanup[82719]: 3598B40EC7:
> > >
> >
>
message-id=<q9821,015,[EMAIL PROTECTED]
> > > com>
> > > Jun 16 12:20:24 postfix/cleanup[82719]: 3598B40EC7:
> > >
> >
>
message-id=<q9821,015,[EMAIL PROTECTED]
> > > com>
> > > Jun 16 12:20:24 postfix/qmgr[75405]: 3598B40EC7:
> > > from=<[EMAIL PROTECTED]>,
> > > size=2829, nrcpt=1 (queue active)
> > > Jun 16 12:20:24 postfix/qmgr[75405]: 3598B40EC7:
> > > from=<[EMAIL PROTECTED]>,
> > > size=2829, nrcpt=1 (queue active)
> > > Jun 16 12:20:24 spamd[83282]: processing message
> > > <q9821,015,[EMAIL PROTECTED]>
> > > for clamav:1007.
> > > Jun 16 12:20:24 spamd[83282]: processing message
> > > <q9821,015,[EMAIL PROTECTED]>
> > > for clamav:1007.
> > > Jun 16 12:20:24 postfix/pickup[81483]: 3454740EF4: uid=1007
> > > from=<[EMAIL PROTECTED]>
> > > Jun 16 12:20:24 postfix/pickup[81483]: 3454740EF4: uid=1007
> > > from=<[EMAIL PROTECTED]>
> > > Jun 16 12:20:24 postfix/cleanup[82107]: 3454740EF4:
> > >
> >
>
message-id=<q9821,015,[EMAIL PROTECTED]
> > > com>
> > > Jun 16 12:20:24 postfix/cleanup[82107]: 3454740EF4:
> > >
> >
>
message-id=<q9821,015,[EMAIL PROTECTED]
> > > com>
> > > Jun 16 12:20:24 postfix/qmgr[75405]: 3454740EF4:
> > > from=<[EMAIL PROTECTED]>,
> > > size=3116, nrcpt=1 (queue active)
> > > Jun 16 12:20:24 postfix/qmgr[75405]: 3454740EF4:
> > > from=<[EMAIL PROTECTED]>,
> > > size=3116, nrcpt=1 (queue active)
> > > Jun 16 12:20:28 postfix/smtpd[82231]: disconnect from
> > > mag.magicallyenormous.com[206.131.244.11]
> > > Jun 16 12:20:28 postfix/smtpd[82231]: disconnect from
> > > mag.magicallyenormous.com[206.131.244.11]
> > >
> > >
> > >
> > > Please, could you help me?
> > > Thanks a lot and regards.
> > > Eicke.
> >
>
