hi there, how can i force email-attachments to be spamchecked?
amavisd-new runs quite well except one annoying thing:
my emailaddress is being used to send out spam.
i get lots of DSN
(e.g. Content-Type: multipart/report; report-type=delivery-status;),
they have the original spam-mail as attachment.
i made some custom rules, eg:
body CUSTOMSPAM6 /\b(HELO mail.blabla.org)\b/i
describe CUSTOMSPAM6 CUSTOMSPAM6 (spoofed sender bounces)
score CUSTOMSPAM6 17.000
the rule gets triggered perfektly when scanning the email using:
"spamassassin -t < spam"
but it does not work with amavisd, if the search pattern is within an
attachement, eg:
<snip>
From MAILER-DAEMON Sun Oct 15 04:43:03 2006
Return-Path: <>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost [127.0.0.1])
by he.blabla.org (MTA) with ESMTP id D4A9D635CA
for <[EMAIL PROTECTED]>; Sun, 15 Oct 2006 04:43:02 +0200 (CEST)
X-Virus-Scanned: amavisd-new at he.blabla.org
X-Spam-Score: -1.53
X-Spam-Level:
X-Spam-Status: No, score=-1.53 tagged_above=-1000 required=5
tests=[BAYES_00=-2.599, HTML_00_10=1.068, HTML_MESSAGE=0.001]
Received: from he.blabla.org ([127.0.0.1])
by localhost (he.blabla.org [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id fsyErc++eCM6 for <[EMAIL PROTECTED]>;
Sun, 15 Oct 2006 04:42:51 +0200 (CEST)
Received: from smtpin121.livail.co.uk (smtpin121.livail.co.uk
[222.171.216.121])
by he.blabla.org (MTA) with ESMTP id 73E4963555
for <[EMAIL PROTECTED]>; Sun, 15 Oct 2006 04:42:50 +0200 (CEST)
Received: by smtpin121.livail.co.uk (Postfix)
id 8D5AF1A0023; Sun, 15 Oct 2006 03:42:51 +0100 (BST)
Date: Sun, 15 Oct 2006 03:42:51 +0100 (BST)
From: [EMAIL PROTECTED] (Mail Delivery System)
Subject: Undelivered Mail Returned to Sender
To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary="7BBCA1A005F.1160880171/smtpin121.livail.co.uk"
Message-Id: <[EMAIL PROTECTED]>
This is a MIME-encapsulated message.
--7BBCA1A005F.1160880171/smtpin121.livail.co.uk
Content-Description: Notification
Content-Type: text/plain
This is the Postfix program at host smtpin121.livail.co.uk.
I'm sorry to have to inform you that the message returned
below could not be delivered to one or more destinations.
For further assistance, please send mail to <postmaster>
If you do so, please include this problem report. You can
delete your own text from the message returned below.
The Postfix program
<[EMAIL PROTECTED]>: host mailserver.blblmotors.co.uk[222.171.216.65]
said: 550
<[EMAIL PROTECTED]>: Recipient address rejected: User unknown in
virtual
mailbox table (in reply to RCPT TO command)
--7BBCA1A005F.1160880171/smtpin121.livail.co.uk
Content-Description: Delivery report
Content-Type: message/delivery-status
Reporting-MTA: dns; smtpin121.livail.co.uk
X-Postfix-Queue-ID: 7BBCA1A005F
X-Postfix-Sender: rfc822; [EMAIL PROTECTED]
Arrival-Date: Sun, 15 Oct 2006 03:42:49 +0100 (BST)
Final-Recipient: rfc822; [EMAIL PROTECTED]
Action: failed
Status: 5.0.0
Diagnostic-Code: X-Postfix; host mailserver.blblmotors.co.uk[222.171.216.65]
said: 550 <[EMAIL PROTECTED]>: Recipient address rejected: User
unknown
in virtual mailbox table (in reply to RCPT TO command)
--7BBCA1A005F.1160880171/smtpin121.livail.co.uk
Content-Description: Undelivered Message
Content-Type: message/rfc822
Received: from Postfix filter 42a77884ce2a0a03efc6bb50a6dcdb21
(smtpin21l.fasthosts.co.uk [127.0.0.1])
by smtpin121.livail.co.uk (Postfix) with SMTP id 7BBCA1A005F
for <[EMAIL PROTECTED]>; Sun, 15 Oct 2006 03:42:49 +0100 (BST)
Received: from b16d7c840636410 (unknown [222.33.4.48])
by smtpin121.livail.co.uk (Postfix) with ESMTP id 6151F1A0052
for <[EMAIL PROTECTED]>; Sun, 15 Oct 2006 03:42:36 +0100 (BST)
Received: from 222.133.102.245 (HELO mail.blashark.org)
############################### ^^^ the pattern is here !!!
by blblmotors.co.uk with esmtp (MXGRLQPX7M1 F23PU)
id DGOL11-UZDI83-5E
for [EMAIL PROTECTED]; Sun, 15 Oct 2006 02:42:36 -0480
Date: Sun, 15 Oct 2006 02:42:36 -0480
From: "Demetrius Hanson" <[EMAIL PROTECTED]>
X-Mailer: The Bat! (v3.62.14) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Become fit and happy again
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------01096E5409DAAAA"
X-Spam: Not detected
X-Original-To: [EMAIL PROTECTED]
------------01096E5409DAAAA
Content-Type: text/html; charset=windows-1250
Content-Transfer-Encoding: 7bit
<htmlcrap></snip>
is there a possible solution for this, eg. does @keep_decoded_original_maps
also work for spam or is it just for viruses?
thanx in advance,
robert
--
_________________________________________
/ A language that doesn't have everything \
| is actually easier to program in than |
| some that do. |
| |
\ -- Dennis M. Ritchie /
-----------------------------------------
\ ^__^
\ (oo)\_______
(__)\ )\/\
||----w |
|| ||
pgpwrygtjB85e.pgp
Description: PGP signature
------------------------------------------------------------------------- Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________ AMaViS-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
