bsd wrote: > Ok, > So we have enabled the debug andÂ… found a false positive :
<...> > Jan 15 10:07:46 ns1 amavis[67239]: (67239-28) loaded policy bank > "MYNETS" <...> > Jan 15 10:07:46 ns1 amavis[67239]: (67239-28) , Subject: "test 4" This should also show (on a log entry you have not shown): Passed CLEAN, MYNETS and: Hits: -, To me this shows a message sent from a computer in @mynetworks that used the MYNETS policy bank and therefore no spam scanning was performed (because of your policy). If no spam scanning was performed you should not get the subject rewritten at this point and AFAICT the subject of "test 4" was not changed. Why is this a false positive? If the subject was changed, it does not appear it happened at this point (but them I'm not certain at which point this "test 4" log entry is displayed). If the recipient received this message with the subject changed, carefully review the headers of the message in order to trace which machines this particular message passed through. This log entry also appears incomplete for a level 4 log entry. Some systems log more info if you change $syslog_priority to 'info'. $DO_SYSLOG = 1; # log via syslogd (preferred) $syslog_facility = 'mail'; # Syslog facility as a string # e.g.: mail, daemon, user, local0, ... local7 $syslog_priority = 'debug'; # Syslog base (minimal) priority as a string, # choose from: emerg, alert, crit, err, warning, notice, info, debug At $log_level 4 however your logs may grow hugh in a short time - so be aware of it. Gary V ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/