On 10/21/2014 8:18 PM, Eric Shubert wrote: > On 10/21/2014 05:45 PM, Dan McAllister wrote: >> OK, to review: >> >> I have a QMT install that doesn't seem to be running SpamAssassin >> against inbound mail. I hope here to show what is going on so that >> someone can interpret the logs (better than I can). >> >> I have setup a forward on the domain that is not being scanned properly. >> Messages go into the account (through what should be a spam/virus >> scanner) and then gets bounced back to my regular mail server. >> >> Here are the header entries for the message going into the client's mail >> server (remember, log file entries work their way UP -- that is, new log >> entries go at the TOP of the header): >> >> *Received:*(qmail 13916 invoked by uid 89); 22 Oct 2014 00:10:45 >> -0000 >> *Received:*by simscan 1.4.0 ppid: 13908, pid: 13912, t: 0.3950s >> scanners: attach: 1.4.0 clamav: 0.98.1/m:55/d:19525 >> *Received:*from unknown (HELO b-b-b.com) ([email protected] >> >> <https://mail.it4soho.com/src/compose.php?send_to=dan%40it4soho.com>@10.11.12.13) >> by >> mail.host.com with ESMTPA; 22 Oct 2014 00:10:45 -0000 >> >> And here are the headers for when the message comes back into my >> server... >> >> *Received:*(qmail 13967 invoked by uid 89); 22 Oct 2014 00:11:03 >> -0000 >> *Received:*by simscan 1.4.0 ppid: 13952, pid: 13955, t: 3.6881s >> scanners: attach: 1.4.0 clamav: 0.98.1/m:55/d:19525 spam: >> 3.3.2 >> *X-Spam-Checker-Version:*SpamAssassin 3.3.2 (2011-06-06) on >> host.it4soho.com >> *X-Spam-Level:**** >> *X-Spam-Status:*No, score=3.3 required=5.0 >> tests=AWL,BAYES_99,HTML_MESSAGE, >> RDNS_NONE autolearn=no version=3.3.2 >> *Received:*from unknown (HELO a-a-a.com) (1.2.3.4) >> by mail.it4soho.com with SMTP; 22 Oct 2014 00:11:00 -0000 >> >> Note the conspicuous ABSENCE of the X-Spam-* entries that come from >> SpamAssassin in the first collection... >> >> Now, when I look at the contents of the spamd log file, I see the same >> types of entries I see in the main server that DOES put the headers >> where they are expected. >> >> So I am next thinking there is an issue with SpamAssassin itself... but >> I have ZERO experience with SA (I have so much else to do, I typically >> turn it on and just let it go! Never debugged SA before!) :) >> >> Any help is appreciated.. >> >> Dan >> IT4SOHO > > I'm real glad other have chimed in, because from what you've > described, I don't really have a clue. > > The Received: by simscan line above shows that spamassassin isn't > being used. Yet your simcontrol says that it should be. > > I think EricB may be on to something. Run cdb to activate the latest > simcontrol file. > > Short of that, I'd like to see samples of your spamd log file, and the > contents of your local.cf configuration file. Maybe something's > defeating sa there. > > Who knows what you did to turn it off??? ;) > The normal way would be to modify the simcontrol file, then run > "qmailctl cdb". > > Let us know how you make out. > Thanks. >
According to the Spamassassin web site you can clear headers by configuring options in /etc/mail/spamassassin/local.cf; however, you cannot clear the X-Spam-Checker-Version header. Spamassasin always puts that in according to this site (http://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Conf.html) as described below: /remove_header { spam | ham | all } header_name// //Headers can be removed from the specified type of messages (spam, ham, or ``all'' to remove from either). All headers begin with X-Spam- (so header_name will be appended to X-Spam-). // //See also clear_headers for removing all the headers at once.// //_*Note that X-Spam-Checker-Version is not removable*_ because the version information is needed by mail administrators and developers to debug problems. // //Without at least one header, it might not even be possible to determine that SpamAssassin is running./ So, you might have to check elsewhere as you cannot completely eradicate email headers using options in local.cf. Eric
