I don't believe this has happened to me before. A simple spam mail hit
my server and it was not assigned a SA score. I can't figure out why.
Anyone?
Here are my postfix logs:
postfix/smtpd[3124]: connect from mhb-01-ord.mailhop.org[204.13.249.71]
postfix/smtpd[3124]: 3517C1BC1FB:
client=mhb-01-ord.mailhop.org[204.13.249.71]
postfix/cleanup[22735]: 3517C1BC1FB:
message-id=<[EMAIL PROTECTED]>
postfix/qmgr[5780]: 3517C1BC1FB:
from=<[EMAIL PROTECTED]>, size=1110, nrcpt=1
(queue active)
amavis[27080]: (27080-18) ESMTP::10024
/var/amavisd/tmp/amavis-20080303T152052-27080:
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
SIZE=1110 Received: from host.example.com ([127.0.0.1]) by localhost
(host.example.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for
<[EMAIL PROTECTED]>; Wed, 5 Mar 2008 12:09:33 -0500 (EST)
postfix/smtpd[3124]: disconnect from
mhb-01-ord.mailhop.org[204.13.249.71]
amavis[27080]: (27080-18) Checking: Svlp7LIZr3Jb [204.13.249.71]
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>
amavis[27080]: (27080-18) p001 1 Content-Type: text/plain, size: 176 B,
name:
amavis[27080]: (27080-18) SPAM-TAG,
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, No,
score=0 tagged_above=-9999 required=6.3 tests=[none]
postfix/smtpd[6052]: connect from localhost.lan.example.com[127.0.0.1]
postfix/smtpd[6052]: 40F491BC238:
client=localhost.lan.example.com[127.0.0.1]
postfix/cleanup[22735]: 40F491BC238:
message-id=<[EMAIL PROTECTED]>
amavis[27080]: (27080-18) FWD via SMTP:
<[EMAIL PROTECTED]> ->
<[EMAIL PROTECTED]>,BODY=7BIT 250 2.6.0 Ok, id=27080-18, from
MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 40F491BC238
postfix/smtpd[6052]: disconnect from
localhost.lan.example.com[127.0.0.1]
postfix/qmgr[5780]: 40F491BC238:
from=<[EMAIL PROTECTED]>, size=1679, nrcpt=1
(queue active)
postfix/pipe[20972]: 40F491BC238: to=<[EMAIL PROTECTED]>,
relay=maildrop, delay=0.03, delays=0.01/0.01/0/0.01, dsn=2.0.0,
status=sent (delivered via maildrop service)
postfix/qmgr[5780]: 40F491BC238: removed
amavis[27080]: (27080-18) Passed CLEAN, [204.13.249.71] [201.13.199.32]
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,
Message-ID: <[EMAIL PROTECTED]>, mail_id:
Svlp7LIZr3Jb, Hits: 0, size: 1110, queued_as: 40F491BC238, 6037 ms
amavis[27080]: (27080-18) Passed CLEAN,
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, Hits:
0, tag=-9999, tag2=6.3, kill=16.3, queued_as: 40F491BC238, L/Y/0/0
postfix/smtp[6100]: 3517C1BC1FB: to=<[EMAIL PROTECTED]>,
relay=127.0.0.1[127.0.0.1]:10024, delay=6.7, delays=0.66/0.01/0/6,
dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as 40F491BC238)
postfix/qmgr[5780]: 3517C1BC1FB: removed
amavis[27080]: (27080-18) TIMING [total 6048 ms] - SMTP greeting: 3
(0%)0, SMTP EHLO: 1 (0%)0, SMTP pre-MAIL: 1 (0%)0, SMTP pre-DATA-flush:
3 (0%)0, SMTP DATA: 189 (3%)3, check_init: 1 (0%)3, digest_hdr: 1
(0%)3, digest_body: 0 (0%)3, gen_mail_id: 1 (0%)3, mime_decode: 10
(0%)3, get-file-type1: 45 (1%)4, decompose_part: 1 (0%)4, parts_decode:
0 (0%)4, check_header: 2 (0%)4, AV-scan-1: 4 (0%)4, spam-wb-list: 3
(0%)4, SA parse: 3 (0%)4, SA check: 5687 (94%)98, update_cache: 9
(0%)99, decide_mail_destiny: 1 (0%)99, fwd-connect: 16 (0%)99,
fwd-mail-pip: 17 (0%)99, fwd-rcpt-pip: 0 (0%)99, fwd-data-chkpnt: 0
(0%)99, write-header: 1 (0%)99, fwd-data-contents: 0 (0%)99,
fwd-end-chkpnt: 24 (0%)100, prepare-dsn: 4 (0%)100, main_log_entry: 16
(0%)100, update_snmp: 2 (0%)100, SMTP pre-response: 1 (0%)100, SMTP
response: 1 (0%)100, unlink-1-files: 0 (0%)100, rundown: 1 (0%)100
/juan
Be smarter than spam. See how smart SpamGuard is at giving junk email the
boot with the All-new Yahoo! Mail. Click on Options in Mail and switch to New
Mail today or register for free at http://mail.yahoo.ca
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
