Amavis-new und/oder spamassassin

[Klaus Tachtler]

Hallo Frank,

was sagt den das AMaViS-new LOG?

Was hast Du unter: $spam_quarantine_to eingestellt?

Mach doch mal bei: $sa_tag_level_deflt  = '-1000.0';
(Damit werden die Scan-Informationen bei angenommenen E-Mail in der  
E-Mail-Header geschrieben)


Grüße
Klaus.

> Moin!
>
> Mal wieder etwas was ich nicht verstehe:
>
> Amavis-new lädt seinen internen SpamAssassin code:
>
> ==snip==
> Nov  3 10:17:42 smtp2 amavis[12513]: Module Mail::SpamAssassin  3.004001
> ==snip==
>
>
> Eine Spam-Mail kommt durch. Wenn ich dann die komplette Mail durch  
> spamc schiebe, erscheint (hier ist der Level auf 5.0):
>
> ==snip==
> 11.9/5.0
> Spam detection software, running on the system "smtp2.veka.com",
> has identified this incoming email as possible spam.  The original
> message has been attached to this so you can view it or label
> similar future email.  If you have any questions, see
> the administrator of that system for details.
>
> Content preview:  Your email client cannot read this email. To view  
> it online,
>    please go here:  
> http://propertydunia.com/display.php?M=7367604&C=be6308027d831c5e198ca256ed1f0e9e&S=410&L=52&N=34
>    To stop receiving these  
> emails:http://propertydunia.com/unsubscribe.php?M=7367604&C=be6308027d831c5e198ca256ed1f0e9e&L=52&N=410
>    [...]
>
> Content analysis details:   (11.9 points, 5.0 required)
>
>  pts rule name              description
> ---- ----------------------  
> --------------------------------------------------
>  1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE  
> SURBL blocklist
>                             [URIs: propertydunia.com]
>  1.1 DKIM_ADSP_ALL          No valid author signature, domain signs all mail
> -0.0 RP_MATCHES_RCVD        Envelope sender domain matches handover  
> relay domain
>  2.4 URI_NO_WWW_BIZ_CGI     URI: CGI in .biz TLD other than third-level "www"
>  0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not  
> necessarily valid
>  1.1 DCC_CHECK              Detected as bulk mail by DCC (dcc-servers.net)
>  1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
>  0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
>                             [cf: 100]
>  2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
>                             above 50%
>                             [cf: 100]
>  0.0 DIGEST_MULTIPLE        Message hits more than one network digest check
>  0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
> ==snip==
>
>
> Ich weise SPAM in amavis ab mit
>
> ==snip==
> $sa_spam_subject_tag = '***SPAM*** ';
> $sa_tag_level_deflt  = 0.0;  # add spam info headers if at, or above  
> that level
> $sa_tag2_level_deflt = 6.31; # add 'spam detected' headers at that level
> $sa_kill_level_deflt = 6.31; # triggers spam evasive actions
> $sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
> ==snip==
>
> Und
> ==snip==
> $final_spam_destiny       = D_REJECT;
> ==snip==
>
>
> Warum verhält sich amavis nicht wie gewünscht und verweigert die  
> Annahme der Mail?
>
>
> Viele Grüße!
> Frank
> --
> Frank Fiene
> IT-Security Manager VEKA Group
>
> Fon: +49 2526 29-6200
> Fax: +49 2526 29-16-6200
> mailto: ffiene at veka.com
> http://www.veka.com
>
> PGP-ID: 62112A51
> PGP-Fingerprint: 7E12 D61B 40F0 212D 5A55 765D 2A3B B29B 6211 2A51
> Threema: VZK5NDWW
>
> VEKA AG
> Dieselstr. 8
> 48324 Sendenhorst
> Deutschland/Germany
>
> Vorstand/Executive Board: Andreas Hartleif (Vorsitzender/CEO),
> Dr. Andreas W. Hillebrand, Bonifatius Eichwald, Elke Hartleif, Dr.  
> Werner Schuler,
> Vorsitzender des Aufsichtsrates/Chairman of Supervisory Board: Ulrich Weimer
> HRB 8282 AG Münster/District Court of Münster


----- Ende der Nachricht von Frank Fiene <ffiene at veka.com> -----




-- 

------------------------------------------
e-Mail  : klaus at tachtler.net
Homepage: http://www.tachtler.net
DokuWiki: http://www.dokuwiki.tachtler.net
------------------------------------------


-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : nicht verfügbar
Dateityp    : application/pgp-keys
Dateigröße  : 3120 bytes
Beschreibung: Öffentlicher PGP-Schlüssel
URL         : <https://listi.jpberlin.de/pipermail/postfixbuch-users/attachments/20171103/707eb501/attachment.skr>