Hello Mark,

thank you for your answer:

That is excactly the problem. I do not have different levels set for different 
users. They are all the same, getting their seetings from a mysql db as 
described in the READMEs.

I just looked a the amavisd log, as you suggested. The problem seems to be the 
penpal function I introduced, when I needed it for the bounce-kill feature. The 
one who did get the mail had earlier written a mail to the originator of the 
mail, that was unfortunately declared spam. Thus the person, who got the mail 
resulted in fewer points (5.1), but that only counted for him and not the other 
two, their rating created (8.269)

What is weird though,is that it gives the same number of points for both cases 
(bottom of the lof excerpt, where it says "Passed SPAM" and "Blocked SPAM".

I guess this is just an unfortunate event, or is there something I can do about 
this? I have in the meantime thrown out the FUZZY_OCR check, because it doesn't 
seem to make much difference at the moment, and I might have had the score set 
too high.

Here is the relevant log:

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
AM.PDP  /var/amavis/tmp/afm4MFKfIj030031: <[EMAIL PROTECTED]
lpro.com.ua> -> 
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
Checking: dgoT8Kh49ZB9 AM.PDP-SOCK [62.64.120.200] <uly
[EMAIL PROTECTED]> -> 
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
p005 1 Content-Type: multipart/mixed

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
p007 1/1 Content-Type: multipart/alternative

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
p001 1/1/1 Content-Type: text/plain, size: 407 B, name:

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
p002 1/1/2 Content-Type: text/html, size: 4266 B, name:

May 22 17:20:43 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
p003 1/2 Content-Type: image/jpeg, size: 199719 B, name
: Invoice_2008-82-2_Extermetal.jpg

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
penpals: bonus 3.160, age 2 9:08:27 (205706), SA score
8.269, <[EMAIL PROTECTED]> replying to <[EMAIL PROTECTED]>, 
ref mail_id: CV++40h2JU8w

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
penpals: prev Subject: WG: FCR for plates, payment
May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
penpals: this Subject: invoice for shipment on board of
  barge 545, ex 20012

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
PenPalsSavedFromKill 8.269-3.160, <[EMAIL PROTECTED]
.ua> -> <[EMAIL PROTECTED]>

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
do_notify_and_quarantine: rec_bl_ccat=(1,1), ccat=(6,0)
  [EMAIL PROTECTED]

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
SEND via SQL (DBI:mysql:database=mail;host=127.0.0.1;po
rt=3306): <[EMAIL PROTECTED]> -> 
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, 
mai
l_id dgoT8Kh49ZB9

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754)

SPAM, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]
ahl.com>,<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, 
Yes, score=8.269-3.16 tag=3 tag2=6 kill=6 tests=[AWL=-4.229, B
AYES_50=0.001, DRUGS_STOCK_MIMEOLE=3.496, FUZZY_OCR=10.000, HTML_MESSAGE=0.001, 
RCVD_IN_DNSWL_LOW=-1], autolearn=spam, quaranti
ne dgoT8Kh49ZB9 (spam-quarantine)

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754) 
SPAM-TAG, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]
tahl.com>, No, score=5.109 tagged_above=3 required=6 tests=[AWL=-4.229, 
BAYES_50=0.001, DRUGS_STOCK_MIMEOLE=3.496, FUZZY_OCR=10
.000, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-1]

May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754)

Passed SPAM, AM.PDP-SOCK [62.64.120.200] [85.223.218.20
] <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, quarantine: 
dgoT8Kh49ZB9, Queue-ID: m4MFKfIj030031, Message-ID: <STLP
[EMAIL PROTECTED]>, mail_id: dgoT8Kh49ZB9, Hits: 5.109, size: 284290, 
6758 ms
May 22 17:20:50 adamas.recipientdomain.com /usr/sbin/amavisd[29754]: (29754)

Blocked SPAM, AM.PDP-SOCK [62.64.120.200] [85.223.218.2
0] <[EMAIL PROTECTED]> -> 
<[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, quarantine: 
dgoT8Kh49ZB9, Queue-ID:
m4MFKfIj030031, Message-ID: <[EMAIL PROTECTED]>, mail_id: 
dgoT8Kh49ZB9, Hits: 5.109, size: 284290, 6758 ms


In any case, thank you for your help. If you find, I could improve the 
configuration, please let me know.

All the best

Peter Huetmannsberger, RHCE
Linux Administration

PS: Sorry about the bad formatting of the logfile excerpt.


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/

Reply via email to