[Postfixbuch-users] Spamassassin + amavisd
Sandy Drobic
postfixbuch-users at japantest.homelinux.com
Do Nov 9 22:00:53 CET 2006
Jan Dinger wrote:
> Ok, anbei ein kompletter amavisd-debug auszug.
Puh, ein ganz schöner Happen!
>
> ------------------------------------------------------------------------
>
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) Net::Server: 2006/11/09-21:29:06 CONNECT TCP Peer: "127.0.0.1:49814" Local: "127.0.0.1:10024"
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) idle_proc, hi : was idle, 495334.3 ms, total idle 495.336 s, busy 1.656 s
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) loaded base policy bank
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) lookup_ip_acl (inet_acl): key="127.0.0.1" matches "127.0.0.1", result=1
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) process_request: fileno sock=12, STDIN=0, STDOUT=1
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) switch_to_my_time 480 s, new request
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-01) process_request: suggested_protocol="" on TCP
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) SMTP> 220 [127.0.0.1] ESMTP amavisd-new service ready
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) switch_to_client_time 480 s, smtp response sent
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) idle_proc, 4: was busy, 1.6 ms, total idle 495.336 s, busy 1.658 s
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) idle_proc, 5: was idle, 0.4 ms, total idle 495.336 s, busy 1.658 s
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) SMTP< EHLO cassiopeia.noro-online.de\r\n
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) switch_to_my_time 480 s, SMTP EHLO received
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-[127.0.0.1]
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-VRFY
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-PIPELINING
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-SIZE
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-ENHANCEDSTATUSCODES
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-8BITMIME
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250-DSN
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP> 250 XFORWARD NAME ADDR PROTO HELO
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) switch_to_client_time 480 s, smtp response sent
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) idle_proc, 6: was busy, 1.7 ms, total idle 495.336 s, busy 1.659 s
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) idle_proc, 5: was idle, 0.3 ms, total idle 495.336 s, busy 1.659 s
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) ESMTP< XFORWARD NAME=mailout07.sul.t-online.com ADDR=194.25.134.83\r\n
> Nov 9 21:29:06 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) switch_to_my_time 480 s, SMTP XFORWARD received
Das hier ist interessant. Das XFORWARD deutet darauf hin, dass du
amavisd-new als Before-Queue-Filter einsetzt. Weist du erkannten Spam ab?
final_spam_destiny = REJECT;
Soweit ich gehört habe, werden dann keine Spamtest-header eingefügt, wenn
final_spam_destiny nicht auf D_PASS steht. Beschwören kann ich es jedoch
nicht.
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) lookup (bypass_spam_checks) => undef, "info at noro.de" does not match
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) lookup: (scalar) matches, result="-1000"
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) lookup (spam_tag_level) => true, "info at noro.de" matches, result="-1000", matching_key="(constant:-1000)"
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) lookup: (scalar) matches, result="5"
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) lookup (spam_tag2_level) => true, "info at noro.de" matches, result="5", matching_key="(constant:5)"
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) headers CLUSTERING: NEW CLUSTER <info at noro.de>: score=2.261, tag=0, tag2=0, subj=0, subj_u=0, local=0, bl=, s=
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) header: X-Virus-Scanned: Debian amavisd-new at cassiopeia.noro-online.de\n
> Nov 9 21:29:08 cassiopeia.noro-online.de /usr/sbin/amavisd-new[27006]: (27006-02) headers CLUSTERING: done all 1 recips in one go
Der Virus-Scanned Header wird gesetzt, aber kein Header für die Tests.
Das hier habe ich gerade mal zu /etc/mail/spamassassin/local.cf hinzugefügt:
add_header spam Flag _YESNOCAPS
Das gibt bei mir folgende header:
X-Spam-Status: No, score=-2.531 required=3.5 tests=[AWL=-0.067,
BAYES_00=-2.599, FORGED_RCVD_HELO=0.135]
Ist es das, was du vermisst?
Sandy
--
Antworten bitte nur in die Mailingliste!
PMs bitte an: news-reply2 (@) japantest (.) homelinux (.) com
Mehr Informationen über die Mailingliste Postfixbuch-users