Hi, any more ideas what might be causing this?
Greetings Marc On Thu, 07 Apr 2011 08:42:28 +0200, Marc Haber <[email protected]> wrote: >Hi, > >I am using spamassassin and exiscan integration with the following >ACL: > >| accept >| condition = ${if eq{acl_m_spam_no_filter}{1}} >| >| deny >| demime = com:vbs:bat:pif:scr:exe >| message = no Windows executeables accepted here >| log_message = reject, $found_extension file >| >| accept >| condition = ${if >{$message_size}{SPAM_SCAN_THRESHOLD}} >| >| # the following stanzas are only executed for messages that do not >| # exceed the size of SPAM_SCAN_THRESHOLD >| >| discard >| spam = exiscan:true >| log_message = drop, spam_score $spam_score, but delivered from >whitelisted sender $sender_address >| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}} >| senders = ${if exists{CONFDIR/sa_mailinglist_senders}\ >| {CONFDIR/sa_mailinglist_senders}\ >| {}} >| >| discard >| spam = exiscan:true >| log_message = drop, spam_score $spam_score, but delivered from >whitelisted host $host_address >| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}} >| hosts = ${if exists{CONFDIR/sa_noreject_hosts}\ >| {CONFDIR/sa_noreject_hosts}\ >| {}} >| >| deny >| spam = exiscan:true >| message = Message spam score is beyond reject threshold >| log_message = reject, spam_score $spam_score >| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}} >| >| >| deny >| spam = exiscan:true >| message = Message spam score is beyond reject threshold for heavily >filtered recipients, try making your message look less spammy or re-send to >[email protected] >| log_message = reject (heavy), spam_score $spam_score >| condition = ${if eq{acl_m_spam_heavy_filter}{1}} >| condition = ${if >{$spam_score_int}{30}} >| >| warn >| spam = exiscan:true >| set acl_m_spam_score = ($spam_bar) $spam_score >| set acl_m_spam_report = $spam_report > >The score and report are then inserted into the message by the >following system filter: > >|# Exim Filter >| >|headers add "${if !eq {$h_x-malware-found:}{}\ >| {X-Old-Malware-Found: $h_x-malware-found:\n}{}}\ >| ${if !eq {$h_x-spam-score:}{}\ >| {X-Old-Spam-Score: $h_x-spam-score:\n}{}}\ >| ${if !eq {$h_x-spam-report:}{}\ >| {X-Old-Spam-Report: $h_x-spam-report:\n}{}}\ >| ${if !eq {$h_x-spam-checker-version:}{}\ >| {X-Old-Spam-Checker-Version: $h_x-spam-checker-version:\n}{}}\ >| ${if !eq {$h_x-spam-status:}{}\ >| {X-Old-Spam-Status: $h_x-spam-status:\n}{}}\ >| ${if !eq {$h_x-spam-level:}{}\ >| {X-Old-Spam-Level: $h_x-spam-level:\n}{}}\ >| " >|headers remove >X-Malware-Found:X-Spam-Score:X-Spam-Report:X-Spam-Checker-Version:X-Spam-Status:X-Spam-Level >| >|headers add "${if !eq {$acl_m_malware_name}{}\ >| {X-Malware-Found: $acl_m_malware_name\n}{}}\ >| ${if !eq {$acl_m_spam_score}{}\ >| {X-Spam-Score: $acl_m_spam_score\n}{}}\ >| ${if !eq {$acl_m_spam_report}{}\ >| {X-Spam-Report: $acl_m_spam_report\n}{}}\ >| " > >This works, usually. > >But occasionally, a message comes through with no Spamassassin Headers >inserted. When I inspect the logs for this message, I find out that >spamassassin has actually been running on the message (and has found >an exceptionally high score for the message), so it has not been found >to be too large to be scanned. > >There are no other calls to the ACL spam = condition than listed >above, so I can be reasonably sure that the ACL is actually executed, > >What might be going wrong here, and how can I debug and/or fix it? > >Greetings >Marc >-- >-------------------------------------- !! No courtesy copies, please !! ----- >Marc Haber | " Questions are the | Mailadresse im Header >Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/ >Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834 -- -------------------------------------- !! No courtesy copies, please !! ----- Marc Haber | " Questions are the | Mailadresse im Header Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/ Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834 -- ## List details at http://lists.exim.org/mailman/listinfo/exim-users ## Exim details at http://www.exim.org/ ## Please use the Wiki with this list - http://wiki.exim.org/
