Hi, I've got two different mailservers, both using SA 3.0.2 and Qmail-Scanner 1.24 st.... One had SA 3.0.2 when QS was configured, the other one has been upgraded from 2.64 to 3.0.2 recently...
In the maillog from the one, who initially had 3.0.2, I get these log entries: Jan 18 23:16:12 wbel spamd[12249]: identified spam (17.0/5.0) for [EMAIL PROTECTED]:500 in 2.5 seconds, 7685 bytes. Jan 18 23:16:12 wbel spamd[12249]: result: Y 17 - DCC_CHECK,DIGEST_MULTIPLE,DOMAIN_4U2,EXCUSE_3,FORGED_RCVD_HELO,HOT_NASTY,HTM L_FONT_BIG,HTML_FONT_INVISIBLE,HTML_IMAGE_RATIO_04,HTML_MESSAGE,MY_OBFUX,RAT WARE_RCVD_PF,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL,S UBJECT_SEXUAL,UPPERCASE_25_50,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=2.5,size=7685,mid=<6.0.0.22.1.20050118170737.55ab6753@@xxxstarsfory ou.com>,autolearn=spam But the one which initially had 2.64 and now has been upgraded, the entries look like this: Jan 18 23:28:39 mail spamd[19492]: checking message <[EMAIL PROTECTED]> for qscand:501. Jan 18 23:28:45 mail spamd[19492]: clean message (-2.4/5.0) for qscand:501 in 6.5 seconds, 9883 bytes. Jan 18 23:28:45 mail spamd[19492]: result: . -2 - ALL_TRUSTED,BAYES_50,HTML_FONT_BIG,HTML_MESSAGE,MAILTO_TO_REMOVE,MIME_HTML_O NLY,MY_OBFUX,NO_REAL_NAME scantime=6.5,size=9883,mid=<[EMAIL PROTECTED] S.COM>,bayes=0.499999999999997,autolearn=ham How come, that the real email adress (receipient - [EMAIL PROTECTED]) is listed on the first one - and on the second box, it is using qscand:501 ?? Is it a problem in QS - or is it an SA configuration issue ? Both spamd daemons run on a user-account named qscand (uid 500 on one host, and 501 on another host - this is more or less the only major difference)... Regards, Brian
