Should have added this. I can find no listing of [EMAIL PROTECTED]
or @owbn.org in any white list yet it passes it as if localdomain to
localdomain isn't being processed.
current:Aug 12 10:44:53 [amavis] (24214-01-5) LMTP::10024
/var/lib/amavis/tmp/amavis-20050812T104038-24214:
<[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> Received:
SIZE=21415 from mail.owbn.org ([127.0.0.1]) by localhost (ns1.owbn.org
[127.0.0.1]) (amavisd-new, port 10024) with LMTP id 24214-01-5; Fri, 12
Aug 2005 10:44:53 -0500 (CDT)
current:Aug 12 10:44:53 [amavis] (24214-01-5) Checking: [62.39.238.158]
<[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>
current:Aug 12 10:44:53 [amavis] (24214-01-5) wbl: whitelisted sender
<[EMAIL PROTECTED]>
current:Aug 12 10:44:54 [amavis] (24214-01-5) FWD via SMTP:
[127.0.0.1]:10025 <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>, <[EMAIL PROTECTED]>
current:Aug 12 10:44:54 [amavis] (24214-01-5) Passed CLEAN,
[62.39.238.158] [62.39.238.158] <[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, Message-ID:
<[EMAIL PROTECTED]>, Hits: -, 537 ms
Bowie Bailey wrote:
From: Ross Anderson [mailto:[EMAIL PROTECTED]
I'm using amavis-new-2.3.0, spamassassin 3.0.4 with postfix 2.1.5
Recently we've been experiencing a few messages slipping
through. They clam the "from" address of an invalid user
within the local domain.
Thus amavis doesn't scan the message. Does anyone have
suggestions on how best to prevent this from happening? Thanks
[snip]
X-Virus-Scanned: amavisd-new at owbn.org
Looks like it's being scanned to me. What makes you think Amavis is not
scanning it?
The more likely explanation is that SpamAssassin is just not catching these
particular spams. The "From" address should not make a difference as it is
generally assumed to be unreliable.
Bowie
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/