On 5/30/10 6:15 AM, Harry Lachanas wrote:
> Hi,
>
> I have a setup with debian ( lenny ) +postfix 2.5.5-1.1 +
> amavisd-new1:2.6.1.dfsg-1 + mysql + spamassassin 3.2.5-2+lenny2 + clamav ,
>
> Some times amavis delivers a message that is purely spam as Not-Spam ...
>
> However when I scan the mail from spamc as amavis user it detects it
> correctly as spam.
>
> The spam-tag with spamc shows a value greater than 10, while the
> spam-tag from amavis ( same mail ) shows one less than 5
>
>
scanning 'after the fact' is problematic. it is possible that by the
second scan, the url's, ip addresses and/or tokens might be in baysian
filters, uri blacklists and/or ip reputation blacklists. further, you
would need to scan it with the same username as your amavis client is
using. you would need to scan the email with spamc in SECONDS (ps, you
don't use spamc/spamd with amavis. maybe you should check using "su - m
{amavisusername} -c 'spamassassin -TD < {copy of email}'"
other issue might be size, SA will scan up to 500K email, and amavisd
might have a smaller cap.
you could post, for testing, the full email, headers, warts and all, at
pastebin.com and post a link to your posting here on this list if you
still think amavisd (which uses spamassassin perl libraries, not
spamc/spamd) is still missing something. post both of them. first, the
full amavisd scored email, with amavisd headers. then the email scored
by spamassassin. look at the rule differences and see why and you may
have your answer.
--
Michael Scheidell, CTO
Phone: 561-999-5000, x 1259
> *| *SECNAP Network Security Corporation
* Certified SNORT Integrator
* 2008-9 Hot Company Award Winner, World Executive Alliance
* Five-Star Partner Program 2009, VARBusiness
* Best Anti-Spam Product 2008, Network Products Guide
* King of Spam Filters, SC Magazine 2008
______________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.secnap.com/products/spammertrap/
______________________________________________________________________
------------------------------------------------------------------------------
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
Please visit http://www.ijs.si/software/amavisd/ regularly
For administrativa requests please send email to rainer at openantivirus dot
org
