Package: amavisd-new
Version: 1:2.3.3-3
Severity: normal
Per subject, amavis is not tagging unless the mail is put in the
spam quarantine (score exceeds sa_tag2_levl_deflt).
Here is the relevant configuration, a log entry and sample headers of a
mail which amavis considered spam, but didn't tag:
(from 20-debian_defaults)
use strict;
# COMMONLY ADJUSTED SETTINGS:
$QUARANTINEDIR = "$MYHOME/quarantine/";
$log_recip_templ = undef; # disable by-recipient level-0 log entries
$DO_SYSLOG = 1; # log via syslogd (preferred)
$SYSLOG_LEVEL = 'mail.debug'; # switch to mail.info to drop debug output, etc
$enable_db = 1; # enable use of BerkeleyDB/libdb (SNMP and nanny)
$enable_global_cache = 1; # enable use of libdb-based cache if $enable_db=1
$inet_socket_port = 10024; # default listenting socket
$sa_spam_subject_tag = '***SPAM*** ';
$sa_tag_level_deflt = -10; # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 5; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 15; # triggers spam evasive actions
$sa_dsn_cutoff_level = 0; # spam level beyond which a DSN is not sent
$sa_mail_body_size_limit = 500*1024; # don't waste time on SA if mail is larger
$sa_local_tests_only = 0; # only tests which do not require internet access?
# Quota limits to avoid bombs (like 42.zip)
$MAXLEVELS = 14;
$MAXFILES = 1500;
$MIN_EXPANSION_QUOTA = 100*1024; # bytes
$MAX_EXPANSION_QUOTA = 300*1024*1024; # bytes
# OTHER MORE COMMON SETTINGS (defaults may suffice):
# You should:
# Use D_DISCARD to discard data (viruses)
# Use D_BOUNCE to generate local bounces by amavisd-new
# Use D_REJECT to generate local or remote bounces by the calling MTA
# Use D_PASS to deliver the message
#
# Whatever you do, *NEVER* use D_REJECT if you have other MTAs *forwarding*
# mail to your account. Use D_BOUNCE instead, otherwise you are delegating
# the bounce work to your friendly forwarders, which might not like it at all.
#
# On dual-MTA setups, one can often D_REJECT, as this just makes your own
# MTA generate the bounce message. Test it first.
#
# Bouncing viruses is stupid, always discard them after you are sure the AV
# is working correctly. Bouncing real SPAM is also useless, if you cannot
# D_REJECT it (and don't D_REJECT mail coming from your forwarders!).
$final_virus_destiny = D_DISCARD; # (data not lost, see virus quarantine)
$final_banned_destiny = D_DISCARD; # D_REJECT when front-end MTA
$final_spam_destiny = D_DISCARD;
$final_bad_header_destiny = D_PASS; # False-positive prone (for spam)
$virus_admin = "[EMAIL PROTECTED]"; # due to D_DISCARD default
# Leave empty (undef) to add no header
$X_HEADER_LINE = "Debian $myproduct_name at $mydomain";
[rest of 20-debian_defaults unchanged from the distributed version]
Log entry indicates spam which should be tagged:
Jan 20 04:58:19 o9 amavis[25469]: (25469-08) Passed SPAM, [81.199.49.228]
<[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>, Message-ID: <[EMAIL PROTECTED]>,
mail_id: 0YsPs5Ury+RQ, Hits: 13.114, 5661 ms
But no header tag, no Subject: tag:
>From [EMAIL PROTECTED] Fri Jan 20 04:58:19 2006
Return-Path: <[EMAIL PROTECTED]>
X-Original-To: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: from localhost (localhost [127.0.0.1])
by o9.88.net (Postfix) with ESMTP id 01F3C430008
for <[EMAIL PROTECTED]>; Fri, 20 Jan 2006 04:58:19 +0000 (GMT)
Received: from o9.88.net ([127.0.0.1])
by localhost (o9.88.net [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 25469-08 for <[EMAIL PROTECTED]>;
Fri, 20 Jan 2006 04:58:13 +0000 (GMT)
Received: from hotmail.com (bay7-f5.bay7.hotmail.com [64.4.11.5])
by o9.88.net (Postfix) with ESMTP id EE1E4430007
for <[EMAIL PROTECTED]>; Fri, 20 Jan 2006 04:58:12 +0000 (GMT)
Received: from mail pickup service by hotmail.com with Microsoft SMTPSVC;
Thu, 19 Jan 2006 20:57:04 -0800
Message-ID: <[EMAIL PROTECTED]>
Received: from 81.199.49.228 by by7fd.bay7.hotmail.msn.com with HTTP;
Fri, 20 Jan 2006 04:57:04 GMT
X-Originating-IP: [81.199.49.228]
X-Originating-Email: [EMAIL PROTECTED]
X-Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
From: "Williams Adenuga" <[EMAIL PROTECTED]>
Subject: Real Offer
Date: Fri, 20 Jan 2006 04:57:04 +0000
Mime-Version: 1.0
Content-Type: text/plain; format=flowed
X-OriginalArrivalTime: 20 Jan 2006 04:57:04.0878 (UTC)
FILETIME=[F53708E0:01C61D7D]
To: undisclosed-recipients:;
X-Virus-Scanned: Debian amavisd-new at 88.net
Thanks,
Thomas
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15
Locale: LANG=en_GB, LC_CTYPE=en_GB (charmap=ISO-8859-1)
Versions of packages amavisd-new depends on:
ii adduser 3.80 Add and remove users and groups
ii file 4.15-2 Determines file type using "magic"
ii libarchive-tar-perl 1.26-2 Archive::Tar - manipulate tar file
ii libarchive-zip-perl 1.16-1 Module for manipulation of ZIP arc
ii libberkeleydb-perl 0.27-1 use Berkeley DB 4 databases from P
ii libcompress-zlib-perl 1.41-1 Perl module for creation and manip
ii libconvert-tnef-perl 0.17-4 Perl module to read TNEF files
ii libconvert-uulib-perl 1.0.5.1-1 Perl interface to the uulib librar
pn libdigest-md5-perl <none> (no description available)
ii libio-stringy-perl 2.110-1 Perl5 modules for IO from scalars
ii libmailtools-perl 1.62-1 Manipulate email in perl programs
pn libmime-base64-perl <none> (no description available)
ii libmime-perl 5.418-1 Perl5 modules for MIME-compliant m
ii libnet-perl 1:1.19-3 Implementation of Internet protoco
ii libnet-server-perl 0.90-1 An extensible, general perl server
ii libunix-syslog-perl 0.100-4 Perl interface to the UNIX syslog(
ii perl [libtime-hires-perl] 5.8.7-10 Larry Wall's Practical Extraction
ii perl-modules [libnet-perl] 5.8.7-10 Core Perl modules
amavisd-new recommends no packages.
-- no debconf information
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
