OK, to review:

I have a QMT install that doesn't seem to be running SpamAssassin against inbound mail. I hope here to show what is going on so that someone can interpret the logs (better than I can).

I have setup a forward on the domain that is not being scanned properly. Messages go into the account (through what should be a spam/virus scanner) and then gets bounced back to my regular mail server.

Here are the header entries for the message going into the client's mail server (remember, log file entries work their way UP -- that is, new log entries go at the TOP of the header):

   *Received:*(qmail 13916 invoked by uid 89); 22 Oct 2014 00:10:45 -0000
   *Received:*by simscan 1.4.0 ppid: 13908, pid: 13912, t: 0.3950s
         scanners: attach: 1.4.0 clamav: 0.98.1/m:55/d:19525
   *Received:*from unknown (HELO b-b-b.com) ([email protected]
   
<https://mail.it4soho.com/src/compose.php?send_to=dan%40it4soho.com>@10.11.12.13)
   by
         mail.host.com with ESMTPA; 22 Oct 2014 00:10:45 -0000

And here are the headers for when the message comes back into my server...

   *Received:*(qmail 13967 invoked by uid 89); 22 Oct 2014 00:11:03 -0000
   *Received:*by simscan 1.4.0 ppid: 13952, pid: 13955, t: 3.6881s
         scanners: attach: 1.4.0 clamav: 0.98.1/m:55/d:19525 spam: 3.3.2
   *X-Spam-Checker-Version:*SpamAssassin 3.3.2 (2011-06-06) on
   host.it4soho.com
   *X-Spam-Level:****
   *X-Spam-Status:*No, score=3.3 required=5.0
   tests=AWL,BAYES_99,HTML_MESSAGE,
         RDNS_NONE autolearn=no version=3.3.2
   *Received:*from unknown (HELO a-a-a.com) (1.2.3.4)
         by mail.it4soho.com with SMTP; 22 Oct 2014 00:11:00 -0000

Note the conspicuous ABSENCE of the X-Spam-* entries that come from SpamAssassin in the first collection...

Now, when I look at the contents of the spamd log file, I see the same types of entries I see in the main server that DOES put the headers where they are expected.

So I am next thinking there is an issue with SpamAssassin itself... but I have ZERO experience with SA (I have so much else to do, I typically turn it on and just let it go! Never debugged SA before!) :)

Any help is appreciated..

Dan
IT4SOHO

Reply via email to