Oenus wrote:

> Hi all!

> lately we are experiencing a huge amount of spam sent to postmaster. The
> mail logs show that amavisd/sa DO the tests, but email passes through no
> matter what the score is and headers are not appended. it is like no
> filtering was working for this account. I do not have anything at
> virus_lovers or spam_lovers...

> any ideas?

> ignacio

Look in your mail log, e.g.:

grep postmaster /var/log/maillog | grep amavis | grep Passed

and with an entry like this:

May 21 10:34:38 mail amavis[30474]: (30474-05) Passed SPAMMY,
 [84.138.228.157] [84.138.228.157] <[EMAIL PROTECTED]> ->
  <[EMAIL PROTECTED]>, Message-ID: <[EMAIL PROTECTED]>,
   mail_id: nkbms+fGqg5C, Hits: 7.092, size: 29665, queued_as: DFD70224A, 29712 
ms

See if 'Hits:' says: 'Hits: -'

If it does, spam scanning is being bypassed for some reason. Either
postmaster is in a @bypass map or the messages are larger than
$sa_mail_body_size_limit. This would also explain why the headers are
not tagged. If there is a score there, then one possibility is the
envelope sender's score is adjusted somewhere (possibly
@score_sender_maps).

Gary V



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to