this is the main machine config files.. I don't know where to set it up for the specific domain... I assume that this is controlling all mail coming through the box..

John
----------------------------------------------------------------------------------------------------------------------------
Jake Vickers wrote:
John Carlson wrote:

here are my headers from an e-mail I sent my self.. that had just garbled text in it..

*Return-Path:* <[EMAIL PROTECTED] <http://192.168.1.152/webmail/src/compose.php?send_to=john%40mnww.com>> *Delivered-To:* [EMAIL PROTECTED] <http://192.168.1.152/webmail/src/compose.php?send_to=john%40fergusfalls.org>
*Received:* (qmail 8466 invoked by uid 510); 20 Apr 2007 17:43:55 -0000
*Received:* by simscan 1.3.1 ppid: 8460, pid: 8461, t: 1.8441s
     scanners: attach: 1.3.1 clamav: 0.90.1-exp/m:42
*Received:* from unknown (HELO server.mnww.com) (209.59.201.251)
by fergusfalls.org with (DHE-RSA-AES256-SHA encrypted) SMTP; 20 Apr 2007 17:43:53 -0000
*Received:* from [216.161.238.81] (helo=[192.168.1.251])
     by server.mnww.com with esmtpa (Exim 4.63)
(envelope-from <[EMAIL PROTECTED] <http://192.168.1.152/webmail/src/compose.php?send_to=john%40mnww.com>>)
     id 1Hex9D-0002Pj-6G
for [EMAIL PROTECTED] <http://192.168.1.152/webmail/src/compose.php?send_to=john%40fergusfalls.org>; Fri, 20 Apr 2007 12:43:52 -0500
*Message-ID:* <[EMAIL PROTECTED]>
*Date:* Fri, 20 Apr 2007 12:43:49 -0500
*From:* John Carlson <[EMAIL PROTECTED] <http://192.168.1.152/webmail/src/compose.php?send_to=john%40mnww.com>>
*User-Agent:* Thunderbird 1.5.0.10 (Macintosh/20070221)
*MIME-Version:* 1.0
*To:* [EMAIL PROTECTED] <http://192.168.1.152/webmail/src/compose.php?send_to=john%40fergusfalls.org>
*Subject:* Hello john thiss iss spam
*Content-Type:* multipart/alternative;
     boundary="------------080206030404020106000908"
*X-AntiAbuse:* This header was added to track abuse, please include it with any abuse report
*X-AntiAbuse:* Primary Hostname - server.mnww.com
*X-AntiAbuse:* Original Domain - fergusfalls.org
*X-AntiAbuse:* Originator/Caller UID/GID - [47 12] / [47 12]
*X-AntiAbuse:* Sender Address Domain - mnww.com
*X-Source:*
*X-Source-Args:*
*X-Source-Dir:*

I see that it shows simscan running through it.. but I don't see it saying anything about spamassassin.. it shows clamav and the attach scanners.. but that is it.. and here is my simcontrol file config..
:clam=yes,spam=yes,spam_hits=20,attach=.src:.bat:.pif:.exe:.cmd:.com

and spam_hits of 20 is allot I think.. considering in the spamassassin config file I have required score of 3 and I had required hits at 5 but I removed the required hits.

also I used to see in my log for qmail before I installed qmailtoaster that it would tell me when spamd checked the mail.. but now it is just saying simscan..

any help is appreciated.
Was this sent from a domain on the same machine as the recipient address?
The score of 20 in the simcontrol file is the number at which the email will be deleted without being delivered to the user.

Reply via email to