bsd wrote:

> Ok,
> So we have enabled the debug andÂ… found a false positive :

<...>
> Jan 15 10:07:46 ns1 amavis[67239]: (67239-28) loaded policy bank
> "MYNETS"
<...>
> Jan 15 10:07:46 ns1 amavis[67239]: (67239-28) , Subject: "test 4"

This should also show (on a log entry you have not shown):
Passed CLEAN, MYNETS
and:
Hits: -,

To me this shows a message sent from a computer in @mynetworks that
used the MYNETS policy bank and therefore no spam scanning was
performed (because of your policy). If no spam scanning was performed
you should not get the subject rewritten at this point and AFAICT the
subject of "test 4" was not changed. Why is this a false positive? If
the subject was changed, it does not appear it happened at this point
(but them I'm not certain at which point this "test 4" log entry is
displayed).

If the recipient received this message with the subject changed, carefully
review the headers of the message in order to trace which machines
this particular message passed through.

This log entry also appears incomplete for a level 4 log entry. Some
systems log more info if you change $syslog_priority to 'info'.

$DO_SYSLOG = 1;              # log via syslogd (preferred)
$syslog_facility = 'mail';   # Syslog facility as a string
           # e.g.: mail, daemon, user, local0, ... local7
$syslog_priority = 'debug';  # Syslog base (minimal) priority as a string,
           # choose from: emerg, alert, crit, err, warning, notice, info, debug

At $log_level 4 however your logs may grow hugh in a short time - so
be aware of it.

Gary V


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to