I've got two different mailservers, both using SA 3.0.2 and Qmail-Scanner 1.24 st.... One had SA 3.0.2 when QS was configured, the other one has been upgraded from 2.64 to 3.0.2 recently...
In the maillog from the one, who initially had 3.0.2, I get these log entries:
Jan 18 23:16:12 wbel spamd[12249]: identified spam (17.0/5.0) for [EMAIL PROTECTED]:500 in 2.5 seconds, 7685 bytes.
<snip> But the one which initially had 2.64 and now has been upgraded, the entries
look like this:
Jan 18 23:28:39 mail spamd[19492]: checking message <[EMAIL PROTECTED]> for qscand:501.
<snip>
How come, that the real email adress (receipient - [EMAIL PROTECTED]) is listed on the first one - and on the second box, it is using qscand:501 ??
The "qscand:501" vs "[EMAIL PROTECTED]:500" is a difference in how spamc is called. The information printed is the user and userID number for the account that spamd setuid'ed itself to when scanning.
It sounds like one box has Qmail-Scanner passing a -u parameter to spamc, whereas the other does not and spamd just runs as qscand, the calling user, instead.
