Mark Martinec wrote:
>> Actually, it's another host.
>> But yes, I did change the acl to match amavisd-new's IP address.
>> Otherwise, amavisd-new wouldn't log which operating system was
>> connecting, right?
> 
> Right.
> 
> Did you check the log (as indicated on Gary's referenced old posting):
>   egrep 'Fingerprint collect: |OS_fingerprint: |suppressed for mail from 
> Windows|P0F' \
>   /var/log/amavisd-debug.log
> 
> and did you get rid of "MYNETWORKS" results by taking care of @mynetorks ?

Actually, it appears that it's working - but only partially.

Mails sent from some hosts get P0F headers added, and from other hosts, 
get no P0F headers added.

All hosts sending mails I mention are not trusted/local hosts; just 
normal ISPs offering free email.

For example, when I sent email through poczta.interia.pl, I get P0F 
headres added:

X-DSPAM-Result: Innocent
X-DSPAM-Processed: Fri Oct  6 11:34:32 2006
X-DSPAM-Confidence: 0.9899
X-DSPAM-Probability: 0.0000
X-DSPAM-Signature: 4526232859751122247586
X-DSPAM-Factors: 27,
X-Virus-Scanned: amavisd-new at syneticon.net
X-Spam-Score: -2.639
X-Spam-Level:
X-Spam-Status: No, score=-2.639 required=4.9 tests=[AWL=0.561,
        BAYES_00=-2.599, DSPAM_HAM=-0.1, L_P0F_Unix=-0.5, SPF_PASS=-0.001]


When the mail is sent through mail.gmx.net, it has no P0F header appended:

X-DSPAM-Result: Spam
X-DSPAM-Processed: Fri Oct  6 11:35:03 2006
X-DSPAM-Confidence: 0.5834
X-DSPAM-Probability: 1.0000
X-DSPAM-Signature: 4526234759811336712104
X-DSPAM-Factors: 15,
X-Virus-Scanned: amavisd-new at syneticon.net
X-Spam-Score: -0.477
X-Spam-Level:
X-Spam-Status: No, score=-0.477 required=4.9 tests=[AWL=1.623,
        BAYES_00=-2.599, DSPAM_SPAM=0.5, SPF_PASS=-0.001]


Any ideas why?


-- 
Tomasz Chmielewski
http://wpkg.org


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to