Using amavisd-new-2.6.2 on Ubuntu Server 9.04 64bit.

Ubuntu comes with what I could only describe as a broken Amavis policy: 
@whitelist_sender_acl is preset to $mydomain (or something like that, I 
forgot the original value since I changed it). So, of course a lot of 
spam gets through, because a lot of it uses my own email address for 
Sender or From.

I changed that to:

@whitelist_sender_acl = qw( n0ne );

But still, messages with forged From addresses are not being passed 
through Spamassassin.

Here are headers from a message that was not using a forged From and did 
pass through SA:

X-Virus-Scanned: Debian amavisd-new at andrei.myip.org
X-Spam-Flag: NO
X-Spam-Score: 3.708
X-Spam-Level: ***
X-Spam-Status: No, score=3.708 tagged_above=-100 required=5
        tests=[FH_FROMEML_NOTLD=2.196, RDNS_NONE=0.1,
        SHORT_HELO_AND_INLINE_IMAGE=0.702, TVD_RCVD_SINGLE=0.303,
        XMAILER_MIMEOLE_OL_4B815=0.407] autolearn=no

And here's one forging the From as my own address:

X-Virus-Scanned: Debian amavisd-new at andrei.myip.org

See what I mean? It's not being sent to SA. I perused all the Amavis 
config files (Ubuntu splits them up, not a bad idea in the end) but I 
haven't got a clue. I thought setting @whitelist_sender_acl to a 
nonsense value should stop the problem. Apparently not.

How can I tell what's going on? How do I stop it from whitelisting based 
on the sender domain? Basically, how to put it in debug mode, or 
something like that, so I can see its internal state and actual config 
variables that it's using?

Note: I do whitelist based on IP range, using @mynetworks, which is the 
right thing to do (avoid scanning emails I send) and it works well.

-- 
Florin Andrei

http://florin.myip.org/

------------------------------------------------------------------------------
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day 
trial. Simplify your report design, integration and deployment - and focus on 
what you do best, core application coding. Discover what's new with 
Crystal Reports now.  http://p.sf.net/sfu/bobj-july
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net 
https://lists.sourceforge.net/lists/listinfo/amavis-user 
 AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 
 AMaViS-HowTos:http://www.amavis.org/howto/ 

Reply via email to