Started noticing the system flagging spam emails but not deleting them:
Jun 11 07:37:13 pinot postfix/smtpd[8568]: connect from unknown[160.79.37.83]Jun 11 07:37:14 pinot postfix/smtpd[8568]: 9F6CBE88001: client=unknown[160.79.37.83] Jun 11 07:37:16 pinot postfix/cleanup[11935]: 9F6CBE88001: message-id=<[EMAIL PROTECTED]> Jun 11 07:37:16 pinot postfix/qmgr[7184]: 9F6CBE88001: from=<[EMAIL PROTECTED]>, size=4038, nrcpt=1 (queue active) Jun 11 07:37:16 pinot amavis[10738]: (10738-04) ESMTP::10024 /var/spool/amavis/tmp/amavis-20060611T044830-10738: <[EMAIL PROTECTED]> -> <realemailaddressremoved> Received: SIZE=4038 BODY=8BITMIME from pinot.rnome.com ([127.0.0.1]) by localhost (pinot [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 10738-04 for <realemailaddressremoved>; Sun, 11 Jun 2006 07:37:16 -0400 (EDT) Jun 11 07:37:16 pinot amavis[10738]: (10738-04) Checking: <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]> Jun 11 07:37:18 pinot amavis[10738]: (10738-04) spam_scan: hits=24.677 tests=BAYES_99,HTML_50_60,HTML_IMAGE_ONLY_20,HTML_MESSAGE,HTML_SHORT_LINK_IMG_3,HTML_TEXT_AFTER_BODY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,TW_EH,TW_NH,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL Jun 11 07:37:18 pinot amavis[10738]: (10738-04) SPAM, <[EMAIL PROTECTED]> -> <realemailaddressremoved>, Yes, hits=24.7 tag1=-999.0 tag2=4.0 kill=4.0 tests=BAYES_99, HTML_50_60, HTML_IMAGE_ONLY_20, HTML_MESSAGE, HTML_SHORT_LINK_IMG_3, HTML_TEXT_AFTER_BODY, RAZOR2_CF_RANGE_51_100, RAZOR2_CF_RANGE_E4_51_100, RAZOR2_CF_RANGE_E8_51_100, RAZOR2_CHECK, TW_EH, TW_NH, URIBL_JP_SURBL, URIBL_OB_SURBL, URIBL_SBL, URIBL_WS_SURBL Jun 11 07:37:18 pinot amavis[10738]: (10738-04) FWD via SMTP: [127.0.0.1]:10025 <[EMAIL PROTECTED]> -> <realemailaddressremoved>
System is SuSE Linux Enterprise Server9 with spamassassin 3.1.0 and amavisSpamassassin lints OK, and here are relevant portions of /etc/amavisd.conf (probably may wordwrap).
$sa_tag_level_deflt = -999.0; # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 4.0;
$sa_kill_level_deflt = $sa_tag2_level_deflt; # triggers spam evasive actions
# at or above that level: bounce/reject/drop,
# quarantine, and adding mail address extension
$sa_dsn_cutoff_level = 6.5; # spam level beyond which a DSN is not sent,
# effectively turning D_BOUNCE into D_DISCARD;
# undef disables this feature and is a default;
$sa_spam_subject_tag = '***SPAM*** '; # (defaults to undef, disabled)
# (only seen when spam is not to be rejected
# and recipient is in local_domains*)
Given the configuration, I would have expected the message to have
been discarded. What did I miss?
Thanks, Mark -- _________________________________________________________ A Message From... L. Mark Stone Reliable Networks of Maine, LLC "We manage your network so you can manage your business" 477 Congress Street Portland, ME 04101 Tel: (207) 772-5678 Web: http://www.rnome.com This email was sent from Reliable Networks of Maine LLC. It may contain information that is privileged and confidential. If you suspect that you were not intended to receive it, please delete it and notify us as soon as possible. Thank you.
bindklhQDFNd4.bin
Description: PGP Public Key
