[Postfixbuch-users] habe nen Problem mit Amavis-new

Uwe Driessen driessen at fblan.de
Mi Jan 10 04:27:40 CET 2007


Ich verfolge mit großen Interesse diese Mails denn auch bei mir habe ich das
Problem das ich obwohl sowohl Clamd als auch Spamd in ps aux als gestartet
angezeigt werden Amavis-new im debug-mode 

Jan 10 02:21:26 fblan.de /usr/sbin/amavisd-new[21838]: ANTI-VIRUS code
NOT loaded
Jan 10 02:21:26 fblan.de /usr/sbin/amavisd-new[21838]: ANTI-SPAM code
NOT loaded
Jan 10 02:21:26 fblan.de /usr/sbin/amavisd-new[21838]: ANTI-SPAM-SA code
NOT loaded

bringt.

ps aux |grep spamd

root     16106  0.0  4.3  30280 22408 ?        Ss   Jan06   0:02
/usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir -d
--pidfile=/var/run/spamd.pid
root     16108  0.0  3.8  30280 20084 ?        S    Jan06   0:00 spamd child
root     16109  0.0  3.9  30280 20172 ?        S    Jan06   0:00 spamd child
root     27241  0.0  0.1   2252   756 pts/0    S+   04:21   0:00 grep spamd

ps aux |grep amavis

amavis   24803  0.0  6.9  48736 36180 ?        Ss   01:00   0:08
/usr/sbin/clamd
amavis   25426  0.0  4.6  31096 23980 ?        Ss   03:56   0:00 amavisd
(master)
amavis   25427  0.0  4.6  32224 24272 ?        S    03:56   0:00 amavisd
(ch1-avail)
amavis   25428  0.0  4.4  31864 23244 ?        S    03:56   0:00 amavisd
(virgin child)
root     27301  0.0  0.1   2244   744 pts/0    S+   04:24   0:00 grep amavis


Amavis wird von Postfix angesprochen und die Mails werden auch zugestellt.
Es erfolgt aber keine Überprüfung nach Spam und/oder Viren (hab ich ein
Glück das noch nichts passiert ist)

Jan 10 00:00:01 fblan amavis[20925]: (20925-01) Passed CLEAN,
<root at fblan.de> -> <root at fblan.de>, Message-ID:
<20070109230001.6E3144DC59C at mail.  fblan.de>, mail_id: eUkOZ5N+RkKH, Hits:
-, queued_as: C13A14DC2B9, 341 ms
Jan 10 00:00:07 fblan amavis[20926]: (20926-01) Passed CLEAN,
<root at fblan.de> -> <root at fblan.de>, Message-ID:
<20070109230007.761F04DC59C at mail.  fblan.de>, mail_id: Jj6-mVuPRDxb, Hits:
-, queued_as: C658D4DC2B9, 274 ms
Jan 10 00:01:04 fblan amavis[20925]: (20925-02) Passed CLEAN,
<vu2070 at fblan.de> -> <manfred at amazonas-tours.de>,<driessen at fblan.de>,
Message-ID:  <20070109230103.C2F764DC59C at mail.fblan.de>, mail_id:
pjgb1BAKP2MJ, Hits: -, queued_as: 451E14DC570, 430 ms



In einem anderen Beitrag steht das Amavis-new ein Problem mit V-host hat und
man soll es auf die IP-Adresse des Servers binden 

http://listi.jpberlin.de/pipermail/postfixbuch-users/2005-October/020468.htm
l

leider steht da nicht dabei in welcher Art und auf welche variablen.

Das ganze System läuft auf Debian ETCH mit VHCS als Verwaltungssystem.
Hat da jemand eine funktionierende amavis.conf das man mal vergleichen
könnte? 

Amamvis in debug mode

Jan 10 03:20:14 fblan.de /usr/sbin/amavisd-new[23013]: starting.
/usr/sbin/amavisd-new at fblan.de amavisd-new-2.4.2 (2006_DE at euro
Jan 10 03:20:14 fblan.de /usr/sbin/amavisd-new[23013]: user=, EUID: 0 (0);
group=, EGID: 0 0 (0 0); log_level=
Jan 10 03:20:14 fblan.de /usr/sbin/amavisd-new[23013]: Perl version
5.008008
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server:
2007/01/10-03:20:15 Amavis (type Net::Server::PreForkSi
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Binding
to UNIX socket file /var/run/amavis/amavisd.soc
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Binding
to TCP port 10024 on host 127.0.0.1
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Setting
gid to "111 111"
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Setting
uid to "111"
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Setting
up serialization via flock
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Amavis::Conf
2.068
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Archive::Tar
1.30
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Archive::Zip
1.18
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module BerkeleyDB
0.31
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Compress::Zlib
2.003
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Convert::TNEF
0.17
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Convert::UUlib
1.08
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Digest::MD5
2.36
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module MIME::Entity
5.420
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module MIME::Parser
5.420
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module MIME::Tools
5.420
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Mail::Header
1.74
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Mail::Internet
1.74
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Net::Cmd
2.26
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Net::SMTP
2.29
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Net::Server
0.94
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Time::HiRes
1.9704
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Module Unix::Syslog
0.99
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Amavis::DB code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Amavis::Cache code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: SQL base code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: SQL::Log code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: SQL::Quarantine
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Lookup::SQL code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Lookup::LDAP code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: AM.PDP-in proto code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: SMTP-in proto code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Courier proto code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: SMTP-out proto code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Pipe-out proto code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: BSMTP-out proto code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Local-out proto code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: OS_Fingerprint code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: ANTI-VIRUS code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: ANTI-SPAM code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: ANTI-SPAM-SA code
NOT loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Unpackers code
loaded
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found $file
at /usr/bin/file
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No $dspam,
not using it
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.mail
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.asc
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.uue
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.hqx
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.ync
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.F    tried: unfreeze, freeze -d, melt, fcat
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.Z    at /bin/uncompress
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.gz
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.gz   at /bin/gzip -d (backup, not used)
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.bz2  at /bin/bzip2 -d
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.lzo  tried: lzop -d
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.rpm  tried: rpm2cpio.pl, rpm2cpio
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.cpio tried: pax
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.cpio at /bin/cpio
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.tar  tried: pax
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.tar  at /bin/cpio
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.tar  (backup, not used)
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.deb  at /usr/bin/ar
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.zip
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.rar  at /usr/bin/rar
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.arj  at /usr/bin/arj
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.arc  at /usr/bin/arc
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.zoo  at /usr/bin/zoo
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.lha  at /usr/bin/lha
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.doc  tried: ripole
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.cab  at /usr/bin/cabextract
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: No decoder for
.tnef
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Internal decoder for
.tnef
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Found decoder for
.exe  at /usr/bin/rar; /usr/bin/lha; /usr/bin/a
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Creating db in
/var/lib/amavis/db/; BerkeleyDB 0.31, libdb 4.4
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server:
Beginning prefork (2 processes)
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Starting
"2" children
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23021]: Net::Server: Child
Preforked (23021)
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23022]: Net::Server: Child
Preforked (23022)
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23013]: Net::Server: Parent
ready for children.
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23021]: TIMING [total 15 ms]
- bdb-open: 15 (100%)100, rundown: 0 (0%)100
Jan 10 03:20:15 fblan.de /usr/sbin/amavisd-new[23022]: TIMING [total 19 ms]
- bdb-open: 19 (100%)100, rundown: 0 (0%)100



Die  amavis.conf schaut so aus   

use strict;

$MYHOME = '/var/run/amavis';   
$mydomain = 'fblan.de';      
$myhostname = 'mail.fblan.de';  
$daemon_user  = 'amavis';   
$daemon_group = 'amavis';   
$TEMPBASE = $MYHOME;	        
$pid_file  = "/var/run/amavis/amavisd.pid";  
$lock_file = "/var/run/amavis/amavisd.lock"; 
$ENV{TMPDIR} = $TEMPBASE;       
$forward_method = 'smtp:[127.0.0.1]:10025';  
$notify_method = $forward_method;            
$max_servers  =  2;   
$max_requests = 20;   
$child_timeout=5*60;  
$smtpd_timeout = 120; 
@local_domains_maps = ([".$mydomain"], 
 			read_hash('/etc/postfix/vhcs2/domains'));
use DBI;
my $db = "vhcs2";
my $user="root";
my $host="localhost";
my $password="XXXXXXXXXXXXX";
my $dbh = DBI->connect("DBI:mysql:database=$db;host=$host", $user, 
$password, {RaiseError => 1});

my $arr = $dbh->selectcol_arrayref('SELECT domain_name, 1 FROM domain',
{Columns=>[1,2]});

my $arre = $dbh->selectcol_arrayref('SELECT alias_name, 1 FROM
domain_aliasses', {Columns=>[1,2]});
my $lis = ($arre,$arr);
%local_domains = (@$arr,@$arre);
$insert_received_line = 1;       

$unix_socketname = "/var/run/amavis/amavisd.sock"; 
$inet_socket_port = 10024;        
@inet_acl = qw(127.0.0.1 [::1]);  

$DO_SYSLOG = 1;                   
$syslog_ident = 'amavis';     
$syslog_facility = 'local4';    
$syslog_priority = 'debug';   
$LOGFILE = "$MYHOME/amavis.log";  
$log_level = 2;		   
$log_recip_templ = undef;  
$final_virus_destiny      = D_DISCARD; 
$final_banned_destiny     = D_BOUNCE;  
$final_spam_destiny       = D_BOUNCE;  
$final_bad_header_destiny = D_PASS;    
@viruses_that_fake_sender_maps = (new_RE(
  qr'nimda|hybris|klez|bugbear|yaha|braid|sobig|fizzer|palyh|peido|holar'i,
  qr'tanatos|lentin|bridex|mimail|trojan\.dropper|dumaru|parite|spaces'i,
  qr'dloader|galil|gibe|swen|netwatch|bics|sbrowse|sober|rox|val(hal)?la'i,
qr'frethem|sircam|be?agle|tanx|mydoom|novarg|shimg|netsky|somefool|moodown'i
,
  [qr/^/ => 1],   
));

$virus_admin = "virusalert\@$mydomain";
$mailfrom_notify_admin     = "virusalert\@$mydomain";
$mailfrom_notify_recip     = "virusalert\@$mydomain";
$mailfrom_notify_spamadmin = "spam.police\@$mydomain";
$mailfrom_to_quarantine = '';   
$QUARANTINEDIR = '/var/mail/virusmails';  
$virus_quarantine_to  = 'virus-quarantine';    
$banned_quarantine_to     = 'banned-quarantine';     
$bad_header_quarantine_to = 'bad-header-quarantine'; 
$spam_quarantine_to       = 'spam-quarantine';       
$X_HEADER_TAG = 'X-Virus-Scanned';	
$remove_existing_x_scanned_headers = 0; 
$remove_existing_spam_headers  = 1;     
@keep_decoded_original_maps = (new_RE(
  qr'^MAIL-UNDECIPHERABLE$',  
  qr'^(ASCII(?! cpio)|text|uuencoded|xxencoded|binhex)'i,
));

$banned_filename_re = new_RE(
  qr'^\.(exe-ms|dll)$',                   
  [ qr'^\.(rpm|cpio|tar)$'       => 0 ],  
  qr'.\.(pif|scr)$'i,                     
  qr'^application/x-msdownload$'i,        
  qr'^application/x-msdos-program$'i,
  qr'^application/hta$'i,
 
qr'\.[^./]*[A-Za-z][^./]*\.\s*(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)[.\s]*$'i
,
  qr'.\.(exe|vbs|pif|scr|cpl)$'i,             
);

$banned_namepath_re = new_RE(
  qr'(?
     ^ (.*\t)? T=(exe-ms|dll) (\t.*)? $'xm, 
  qr'(?
     ^ (.*\t)? N= [^\t\n]* \. (pif|scr) (\t.*)? $'xmi,
  qr'(?
     ^ (.*\t)? N= [^\t\n]* \. [^./\t\n]* [A-Za-z] [^./\t\n]* \. \ *
                  (exe|vbs|pif|scr|bat|cmd|com|cpl|dll) [. ]* (\t.*)? $'xmi,
  [ qr'(?
       ^ (.*\t)? M=application/(octet-stream|x-msdownload|x-msdos-program)
       \t(.*\t)* T=empty (\t.*)? $'xmi
    => 'DISCARD' ],
  qr'(?
     ^ (.*\t)? N= [^\t\n]* \. (exe|vbs|pif|scr|cpl) (\t.*)? $'xmi,
);
  $banned_namepath_re = undef;  
%banned_rules = (
  'MYNETS-DEFAULT' => new_RE(   
    [ qr'^\.(rpm|cpio|tar)$' => 0 ],  
    qr'.\.(vbs|pif|scr)$'i,     
  ),
  'DEFAULT' => $banned_filename_re,
);

$sql_select_white_black_list = undef;  
@score_sender_maps = ({  
  '.' => [  
   new_RE(  
    [qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou)@'i         =>
5.0],
    [qr'^(greatcasino|investments|lose_weight_today|market\.alert)@'i=>
5.0],
    [qr'^(money2you|MyGreenCard|new\.tld\.registry|opt-out|opt-in)@'i=>
5.0],
    [qr'^(optin|saveonlsmoking2002k|specialoffer|specialoffers)@'i   =>
5.0],
    [qr'^(stockalert|stopsnoring|wantsome|workathome|yesitsfree)@'i  =>
5.0],
    [qr'^(your_friend|greatoffers)@'i                                =>
5.0],
    [qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i                    =>
5.0],
   ),

   { 
     'nobody at cert.org'                        => -3.0,
     'cert-advisory at us-cert.gov'              => -3.0,
     'owner-alert at iss.net'                    => -3.0,
     'slashdot at slashdot.org'                  => -3.0,
     'securityfocus.com'                      => -3.0,
     'ntbugtraq at listserv.ntbugtraq.com'       => -3.0,
     'security-alerts at linuxsecurity.com'      => -3.0,
     'mailman-announce-admin at python.org'      => -3.0,
     'amavis-user-admin at lists.sourceforge.net'=> -3.0,
     'amavis-user-bounces at lists.sourceforge.net' => -3.0,
     'spamassassin.apache.org'                => -3.0,
     'notification-return at lists.sophos.com'   => -3.0,
     'owner-postfix-users at postfix.org'        => -3.0,
     'owner-postfix-announce at postfix.org'     => -3.0,
     'owner-sendmail-announce at lists.sendmail.org'   => -3.0,
     'sendmail-announce-request at lists.sendmail.org' => -3.0,
     'donotreply at sendmail.org'                => -3.0,
     'ca+envelope at sendmail.org'               => -3.0,
     'noreply at freshmeat.net'                  => -3.0,
     'owner-technews at postel.acm.org'          => -3.0,
     'ietf-123-owner at loki.ietf.org'           => -3.0,
     'cvs-commits-list-admin at gnome.org'       => -3.0,
     'rt-users-admin at lists.fsck.com'          => -3.0,
     'clp-request at comp.nus.edu.sg'            => -3.0,
     'surveys-errors at lists.nua.ie'            => -3.0,
     'emailnews at genomeweb.com'                => -5.0,
     'yahoo-dev-null at yahoo-inc.com'           => -3.0,
     'returns.groups.yahoo.com'               => -3.0,
     'clusternews at linuxnetworx.com'           => -3.0,
     lc('lvs-users-admin at LinuxVirtualServer.org')    => -3.0,
     lc('owner-textbreakingnews at CNNIMAIL12.CNN.COM') => -5.0,

     'sender at example.net'                     =>  3.0,
     '.example.net'                           =>  1.0,

   },
});


@blacklist_sender_maps = ( new_RE(
   qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou|greatcasino)@'i,
 
qr'^(investments|lose_weight_today|market\.alert|money2you|MyGreenCard)@'i,
    qr'^(new\.tld\.registry|opt-out|opt-in|optin|saveonlsmoking2002k)@'i,
    qr'^(specialoffer|specialoffers|stockalert|stopsnoring|wantsome)@'i,
    qr'^(workathome|yesitsfree|your_friend|greatoffers)@'i,
    qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i,
));

$MAXLEVELS = 14;		
$MAXFILES = 1500;		
$MIN_EXPANSION_QUOTA =      100*1024;  
$MAX_EXPANSION_QUOTA = 300*1024*1024;  
$MIN_EXPANSION_FACTOR =   5;  
$MAX_EXPANSION_FACTOR = 500;  
$virus_check_negative_ttl=  3*60; 
$virus_check_positive_ttl= 30*60; 
$spam_check_negative_ttl = 10*60; 
$spam_check_positive_ttl = 30*60; 
$path = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin';
$file   = 'file';   
$dspam  = 'dspam';
@decoders = (
  ['mail', \&do_mime_decode],
  ['asc',  \&do_ascii],
  ['uue',  \&do_ascii],
  ['hqx',  \&do_ascii],
  ['ync',  \&do_ascii],
  ['F',    \&do_uncompress, ['unfreeze','freeze -d','melt','fcat'] ],
  ['Z',    \&do_uncompress, ['uncompress','gzip -d','zcat'] ],
  ['gz',   \&do_uncompress,  'gzip -d'],
  ['gz',   \&do_gunzip],
  ['bz2',  \&do_uncompress,  'bzip2 -d'],
  ['lzo',  \&do_uncompress,  'lzop -d'],
  ['rpm',  \&do_uncompress, ['rpm2cpio.pl','rpm2cpio'] ],
  ['cpio', \&do_pax_cpio,   ['pax','gcpio','cpio'] ],
  ['tar',  \&do_pax_cpio,   ['pax','gcpio','cpio'] ],
  ['tar',  \&do_tar],
  ['deb',  \&do_ar,          'ar'],
  ['zip',  \&do_unzip],
  ['rar',  \&do_unrar,      ['rar','unrar'] ],
  ['arj',  \&do_unarj,      ['arj','unarj'] ],
  ['arc',  \&do_arc,        ['nomarch','arc'] ],
  ['zoo',  \&do_zoo,        ['zoo','unzoo'] ],
  ['lha',  \&do_lha,         'lha'],
  ['cab',  \&do_cabextract,  'cabextract'],
  ['tnef', \&do_tnef_ext,    'tnef'],
  ['tnef', \&do_tnef],
  ['exe',  \&do_executable, ['rar','unrar'], 'lha', ['arj','unarj'] ],
);

$sa_local_tests_only = 0;   
$sa_mail_body_size_limit = 400*1024; 
$sa_tag_level_deflt  = 2.0; 
$sa_tag2_level_deflt = 6.31;
$sa_kill_level_deflt = $sa_tag2_level_deflt; 
$sa_dsn_cutoff_level = 9;   

@spam_dsn_cutoff_level_bysender_maps = (
  { 
    'virgilio.it' => 7,  'mail.ru'     => 7,  '0451.com' => 7,
    'yahoo.co.uk' => 7,  'yahoo.co.jp' => 7,  'nobody@'  => 7,
    'noreply@'    => 0,  'no-reply@'   => 0,  'donotreply@'     => 0,
    'opt-in@'     => 0,  'opt-out@'    => 0,  'yahoo-dev-null@' => 0,
    '.optin-out.com' => 0,  'daily at astrocenter.com' => 0,
    'spamadmin at fraunhofer.de'=> 7,  
  },

  \$sa_dsn_cutoff_level,  
);

@spam_subject_tag_maps  = ('[possible-spam:_SCORE_] ');
@spam_subject_tag2_maps = ('***SPAM*** _SCORE_ (_REQD_) ');
@spam_subject_tag3_maps = ('***BLATANT*SPAM**** _SCORE_ (_REQD_) ');
$sa_spam_level_char = '*';  
$sa_spam_report_header = 0; 
$first_infected_stops_scan = 1;  

@av_scanners = (
 ['ClamAV-clamd',
   \&ask_daemon, ["CONTSCAN {}\n", "/var/run/amavis/clamd"],
   qr/\bOK$/, qr/\bFOUND$/,
   qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);

@av_scanners_backup = (
  ['ClamAV-clamscan', 'clamscan',
    "--stdout --no-summary -r --tempdir=$TEMPBASE {}",
    [0], qr/:.*\sFOUND$/, qr/^.*?: (?!Infected Archive)(.*) FOUND$/ ],
);

So ich geh jetzt ins Bett habe 6 Stunden gesucht und nix gefunden woran es
liegen könnte und Google schweigt sich leider auch aus 

Besten dank an alle die sich das antun zu lesen und evtl. noch ein paar
Tipps haben woran es liegen könnte oder wie man das ganze einrichtet das es
richtig läuft denn so bringt Amavis außer Zeitaufwand nicht's.

Wenn mich jemand sucht ich schlafe erstmal *gg


Software & Computer
Uwe Drießen
Lembergstraße 33
67824 Feilbingert
Tel.: 06708 / 660045
Fax: 06708 / 661397





Mehr Informationen über die Mailingliste Postfixbuch-users