Hi folks,
I've this problem: I would that qmailscanner checks only the incoming
traffic, and not LAN emails or emails from local domain's users. However,
normally my emails are checked from spamassassin, and I wouldn't.
This is my tcp.smtp
-------------------
# No Qmail-Scanner at all for mail from 127.0.0.1
127.:allow,RELAYCLIENT="",RBLSMTPD="",QMAILQUEUE="/var/qmail/bin/qmail-queue
"
# Use Qmail-Scanner without SpamAssassin on any mail from the LAN
192.168.:allow,RELAYCLIENT="",RBLSMTPD="",TCPREMOTEIP="Protected",QMAILQUEUE
="/var/qmail/bin/qmail-scanner-queue.pl"
# Use Qmail-Scanner with SpamAssassin on any mail from the rest of the world
:allow,DENYMAIL="DNSCHECK",QMAILQUEUE="/var/qmail/bin/qmail-scanner-queue.pl
"
This is an email from me to my collegue (same local domain)
-----------------------------------------------------------
Received: (qmail 27360 invoked by uid 1008); 10 Dec 2003 17:41:05 -0000
Received: from [EMAIL PROTECTED] by
observe.nesys.it by uid 1001 with qmail-scanner-1.20
(f-prot: 4.0.0/3.13.3. spamassassin: 2.60.
Clear:RC:0(205.206.231.26):SA:0(-92.9/7.0):.
Processed in 1.349387 secs); 10 Dec 2003 17:41:05 -0000
Received: from unknown (HELO outgoing2.securityfocus.com) (205.206.231.26)
by 0 with SMTP; 10 Dec 2003 17:41:03 -0000
Received: from lists2.securityfocus.com (lists2.securityfocus.com
[205.206.231.20])
by outgoing2.securityfocus.com (Postfix) with QMQP
id 617BD8F538; Wed, 10 Dec 2003 04:26:58 -0700 (MST)
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Id: <bugtraq.list-id.securityfocus.com>
List-Post: <mailto:[EMAIL PROTECTED]>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <mailto:[EMAIL PROTECTED]>
Delivered-To: mailing list [EMAIL PROTECTED]
Delivered-To: moderator for [EMAIL PROTECTED]
Received: (qmail 11478 invoked from network); 10 Dec 2003 17:06:33 -0000
Date: Wed, 10 Dec 2003 17:10:51 GMT
From: Cisco Systems Product Security Incident Response Team
<[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Cisco Security Advisory: Vulnerability in Authentication Library
for ACNS
Message-Id: <[EMAIL PROTECTED]>
X-Mailer: Cisco Systems PSIRT Mailer
Content-Return: Prohibited
Errors-To: [EMAIL PROTECTED]
X-Errors-To: [EMAIL PROTECTED]
Prevent-NonDelivery-Report:
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
observe.nesys.it
X-Spam-Level:
X-Spam-Status: No, hits=-92.9 required=7.0 tests=LOCAL_CABLE,LOCAL_CHANNEL,
LOCAL_PLING,MY_NO_QU,MY_OBFUJ,MY_OBFUT,MY_OBFUZ,USER_IN_WHITELIST
autolearn=no version=2.60
X-Spam-Report:
* 1.0 LOCAL_PLING BODY: Three punctuation chars in a row in body
* 0.7 MY_OBFUZ BODY: Z with unusual chars
* 0.7 MY_OBFUJ BODY: J with unusual chars
* 0.7 MY_OBFUT BODY: T with unusual chars
* 1.0 MY_NO_QU BODY: Q without a U
* 1.5 LOCAL_CHANNEL BODY: Refers to channel
* 1.5 LOCAL_CABLE BODY: Refers to cable
* -100 USER_IN_WHITELIST From: address is in the user's white-list
And this is the spamassassin response (why?)
--------------------------------------------
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 15308 invoked by uid 89); 10 Dec 2003 23:24:24 -0000
Received: (qmail 9968 invoked by uid 1008); 10 Dec 2003 23:24:24 -0000
Received: from [EMAIL PROTECTED] by observe.nesys.it by uid 1001 with
qmail-scanner-1.20
(f-prot: 4.0.0/3.13.3. spamassassin: 2.60.
Clear:RC:0(212.131.248.100):SA:1(9.5/7.0):.
Processed in 1.667828 secs); 10 Dec 2003 23:24:24 -0000
Received: from localhost [127.0.0.1] by observe.nesys.it
with SpamAssassin (2.60 1.212-2003-09-23-exp);
Thu, 11 Dec 2003 00:24:24 +0100
From: "Dott. Andrea Riela" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: I: Cisco Security Advisory: Vulnerability in Authentication Library
for ACNS
Date: Thu, 11 Dec 2003 00:24:19 +0100
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
observe.nesys.it
X-Spam-Level: *********
X-Spam-Status: Yes, hits=9.5 required=7.0 tests=HTML_20_30,HTML_MESSAGE,
LINES_OF_YELLING,LOCAL_CABLE,LOCAL_CHANNEL,LOCAL_HTML_HOAX_1,
LOCAL_PLING,MY_NO_QU,MY_OBFUJ,MY_OBFUT,MY_OBFUX,MY_OBFUZ,MY_OBFU_MISC,
RM_rb_ANCHOR,RM_rb_BODY,RM_rb_BREAK,RM_rb_FONT,RM_rb_HTML,RM_rb_PARA,
RM_rb_TITLE autolearn=no version=2.60
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_3FD7AB28.2E8D680D"
Could you help me?
Thanks for your patience and support
Regards
Andrea
-------------------------------------------------------
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
Click now! http://ads.osdn.com/?ad_id78&alloc_id371&op=click
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
