RE: [AMaViS-user] Upgrading from SA 3.0.4 to SA 3.1.0
Hi Mark, I did the upgrade and all went OK. In the syslog now I can see the version is 3.001000. Will this new version block more SPAM than the previous version? My understanding is that each new version of SA has a new set of rules to encounter the current Spammers and their techniques, right? Junaid -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Martinec Sent: Tuesday, November 29, 2005 2:31 PM To: amavis-user@lists.sourceforge.net Subject: Re: [AMaViS-user] Upgrading from SA 3.0.4 to SA 3.1.0 MJ, Thanks for your reply. Do I need to perform following tasks to upgrade Bayesian database? As suggested in the UPGRADE file? - run sa-learn --rebuild, this will sync your journal - upgrade SA to 3.0.0 - run sa-learn --sync, which will cause the db format to be upgraded Yes, it is needed. As far as amavisd-new is concerned: just follow the usual SA upgrade instructions. Wherever it mentions spamd, think amavisd. Secondly, how crucial is to upgrade amavisd-new from 2.3.2 to 2.3.3? See its release notes and decide for yourself if any of these fixes apply to your setup. It is probably not that crucial, but 2.3.3 is the best we have so far, so why not benefit. Mark --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/ --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] LDAP_OPERATIONS_ERROR if ldap connection drops
(already posted on groups, but perhaps this's the right place)
Hi,
with latest amavisd-new (amavisd-new-2.3.3) seems that if the ldap
connection to the server drops (ie after being idle for sometime)
amavisd is not able to reconnect, or to explain it better, it
reconnects for for some reasons the query fails.
The only way to solve that is to restart amavisd.
here's my ldap connection params into amavisd.conf :
$enable_ldap = 1;
$default_ldap = {
hostname = 'ldap.mydomain.net',
tls = 0,
base = 'o=hosting,dc=mydomain,dc=net',
bind_dn = 'cn=phamm,o=hosting,dc=mydomaint,dc=net',
bind_password = 'blah',
query_filter = '((objectClass=amavisAccount)(mail=%m))'
};
and here's the logs from amavisd:
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) query_keys:
[EMAIL PROTECTED], @mydomainmasqued.it, @.mydomainmasqued.it,
@.it, @.
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) lookup_ldap
[EMAIL PROTECTED], query keys: [EMAIL PROTECTED],
@mydomainmasqued.it, @.mydomainmasqued.it, @.it, @., base:
o=hosting,dc=mydomain,dc=net, filter:
((objectClass=amavisAccount)(mail=%m))
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) ldap begin_work
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) lookup_ldap:
searching base=o=hosting,dc=mydomain,dc=net, scope=sub,
filter=((objectClass=amavisAccount)(|([EMAIL PROTECTED])([EMAIL
PROTECTED])([EMAIL PROTECTED])([EMAIL PROTECTED])([EMAIL PROTECTED])))
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) NOTICE: do_search:
trying again: LDAP_OPERATIONS_ERROR
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) disconnecting from
LDAP
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) Connecting to LDAP
server
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) connect_to_ldap:
trying ldap.mydomain.net
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) connect_to_ldap:
connected to ldap.mydomain.net
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) connect_to_ldap:
bind cn=phamm,o=hosting,dc=mydomain,dc=net succeeded
Nov 29 23:40:20 megarelay amavis[11979]: (11979-15) lookup_ldap:
searching (again) base=o=hosting,dc=mydomain,dc=net, scope=sub,
filter=((objectClass=amavisAccount)(|([EMAIL PROTECTED])([EMAIL
PROTECTED])([EMAIL PROTECTED])([EMAIL PROTECTED])([EMAIL PROTECTED])))
Nov 29 23:40:20 megarelay amavis[11980]: (11980-14) disconnecting from
LDAP
Nov 29 23:40:20 megarelay amavis[11980]: (11980-14) lookup_ldap:
do_search: failed again, at (eval 36) line 152, DATA line 392.
Nov 29 23:40:20 megarelay amavis[11980]: (11980-14) TROUBLE in
process_request: do_search: failed again, at (eval 36) line 152,
DATA line 392. at (eval 36) line 433, DATA line 392.
Nov 29 23:40:20 megarelay amavis[11980]: (11980-14) Requesting process
rundown after fatal error
now I'll try to check into the code why this fails... but I'm not a
perl expert :)
Greetings, Matteo
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37alloc_id865op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Re: LDAP_OPERATIONS_ERROR if ldap connection drops
Hi,
I think I've found out the bug
On 11/30/05, matteo brancaleoni [EMAIL PROTECTED] wrote:
with latest amavisd-new (amavisd-new-2.3.3) seems that if the ldap
connection to the server drops (ie after being idle for sometime)
amavisd is not able to reconnect, or to explain it better, it
reconnects for for some reasons the query fails.
The only way to solve that is to restart amavisd.
Seems that here's a typo into
do_search (which leads to be always in error, even if the
recconection is ok) and a missing return if the retry result
is available.
Here's the small patch:
--- /root/amavisd-new-2.3.3/amavisd 2005-08-22 01:46:15.0 +0200
+++ amavisd 2005-11-30 12:11:05.0 +0100
@@ -10603,10 +10603,12 @@
);
if ($result-code) { die $result-error_name, \n; }
};
- if (@_ ne '') {
+ if ($@ ne '') {
my($err) = $@; chomp $err;
$self-disconnect_from_ldap;
die do_search: failed again, $err;
+ } else {
+ return $result;
}
}
die do_search: $err;
Now I'm testing it and all seems ok.
Matteo.
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37alloc_id865op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] Bzip error?
Hi, Guessing this is something similar to the unzip-problem that someone mailed about earlier this week. Yesterday my logs showed lots of lines with errors about bzip. I'm not sure if it's something to worry about or how I shall fix it. Any advice on this matter would be good. //kim Nov 30 10:44:20 smtp amavis[9238]: (09238-07) Decoding of part-3 (bzip2 compressed data, block size = 100k) failed, leaving it unpacked: Error running decompressor /usr/bin/bzip2 -d on part-3, exit status 2 at /usr/sbin/amavisd-new line 4208. Nov 30 10:44:20 smtp amavis[9238]: (09238-07) TROUBLE in check_mail: decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=255 (65280 ) at /usr/sbin/amavisd-new line 3853. Nov 30 10:44:20 smtp amavis[9238]: (09238-07) PRESERVING EVIDENCE in /var/lib/amavis/amavis-20051130T104358-09238 Nov 30 10:54:32 smtp amavis[23303]: (23303-03) Decoding of part-3 (bzip2 compressed data, block size = 100k) failed, leaving it unpacked: Error running decompressor /usr/bin/bzip2 -d on part-3, exit status 2 at /usr/sbin/amavisd-new line 4208. Nov 30 10:54:32 smtp amavis[23303]: (23303-03) TROUBLE in check_mail: decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=255 (65280 ) at /usr/sbin/amavisd-new line 3853. Nov 30 10:54:32 smtp amavis[23303]: (23303-03) PRESERVING EVIDENCE in /var/lib/amavis/amavis-20051130T105340-23303 --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37alloc_id865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Bzip error?
Kim,
Guessing this is something similar to the unzip-problem that someone
mailed about earlier this week. Yesterday my logs showed lots of lines
with errors about bzip. I'm not sure if it's something to worry about or
how I shall fix it. Any advice on this matter would be good.
(09238-07) Decoding of part-3
(bzip2 compressed data, block size = 100k) failed, leaving it unpacked:
Error running decompressor /usr/bin/bzip2 -d on part-3,
exit status 2 at /usr/sbin/amavisd-new line 4208.
This is different than failed unzip attempts on an executable,
which are expected to fail. In this case the bzip2 decompressor
returned status 2, which according to its docs indicate a
corrupt compressed file. It should be treated as a warning
and not as a fatal failure. Luckily the gzip and uncompress seem
to use exits status 2 for the same purpose (warning), so this
can be solved by applying the following patch, which turns
exit status 2 from bzip, gzip and uncompress into a warning:
--- amavisd~Thu Oct 20 20:10:04 2005
+++ amavisd Wed Nov 30 14:03:27 2005
@@ -13715,6 +13715,7 @@
if ($rv) {
# unlink($newpart) or die Can't unlink $newpart: $!;
-die sprintf('Error running decompressor %s on %s, %s',
-$decompressor, $part-base_name, exit_status_str($rv,$rerr));
+my($msg) = sprintf('Error running decompressor %s on %s, %s',
+ $decompressor, $part-base_name, exit_status_str($rv,$rerr));
+if ($rv == 2) { do_log(0,$msg) } else { die $msg }
}
1;
Mark
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Re: LDAP_OPERATIONS_ERROR if ldap connection drops
Hi,
we had the same issue today and resolved it exactly as Matteo.
Matthias
matteo brancaleoni wrote:
Hi,
I think I've found out the bug
On 11/30/05, matteo brancaleoni [EMAIL PROTECTED] wrote:
with latest amavisd-new (amavisd-new-2.3.3) seems that if the ldap
connection to the server drops (ie after being idle for sometime)
amavisd is not able to reconnect, or to explain it better, it
reconnects for for some reasons the query fails.
The only way to solve that is to restart amavisd.
Seems that here's a typo into
do_search (which leads to be always in error, even if the
recconection is ok) and a missing return if the retry result
is available.
Here's the small patch:
--- /root/amavisd-new-2.3.3/amavisd 2005-08-22 01:46:15.0 +0200
+++ amavisd 2005-11-30 12:11:05.0 +0100
@@ -10603,10 +10603,12 @@
);
if ($result-code) { die $result-error_name, \n; }
};
- if (@_ ne '') {
+ if ($@ ne '') {
my($err) = $@; chomp $err;
$self-disconnect_from_ldap;
die do_search: failed again, $err;
+ } else {
+ return $result;
}
}
die do_search: $err;
Now I'm testing it and all seems ok.
Matteo.
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37alloc_id865op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] spam filter no longer works properly after up2date
I am running amavisd-new 2.1.2 as the content filter to filter spam with SpamAssassin 3.0 on my Postfix mail relay (Postfix 2.1.3 on Red Hat ES 3.0). Amavis is chrooted - /var/amavis Recently, up2date was run on the box. The admin running up2date was unfamiliar with our setup and updated all available packages. The content filter still works as mail is still passing through 10024 and 10025 on the localhost, but a minute number of messages are getting quarantined (around 100-200 messages a day compared to the 4000+ on my other mail relay that is still working as up2date wasn't run on this box). RATWARE_RCVD_PF, X_MESSAGE_INFO, and HDR_ORDER_TRIMRS are the only rules flagged in the messages in the quarantine folder. Perhaps updated code being loaded before the chroot is part of the problem, but I'm not sure where to start to correct the issue. Thanks, Brett --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37alloc_id865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] setting up rulesdujour
I am trying to set up the rulesdujour script and I see it likes to have access to an init script. I suppose I can cook up something on my own but is there anything out there already that works with OpenBSD? I know there is a script in the source but it looks like it is designed for Linux only. BTW, is there anything I should know about running RDJ with amavisd-new? Thanks. __ Find your next car at http://autos.yahoo.ca --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Upgrading from SA 3.0.4 to SA 3.1.0
Mark Martinec wrote: You may consider taking the opportunity and moving your Bayes db to SQL, as SA 3.1 brings some performance and reliability improvements when choosing: bayes_store_module Mail::SpamAssassin::BayesStore::MySQL While at it, you can upgrade amavisd-new to 2.3.3. Never jumped the gun with MySQL - where's a good pointer to get it installed and/or configured just for amavisd/SA ? I'll still compile it instead of installing an RPM... I still have to move from Sendmail to Postfix but that I need more time... TIA... -- °(((=((===°°°(((=== --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_idv37alloc_id865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] setting up rulesdujour
--- Keith Dunnett [EMAIL PROTECTED] wrote: Peter wrote: I am trying to set up the rulesdujour script and I see it likes to have access to an init script. Does it? What for? Been using it for 2 or 3 years without one, cron works just fine. The script only needs to run once per day, which it does quite nicely from cron. Well if the SA rules are updated doesn't amavisd-new need to be restarted? I have a problem. Even though inside the RDJ script I place the path of SA (/var/amavisd/etc/mail/spamassassin) it continues to parse local.cf found at /etc/mail/spamassassin. Any ideas on that? For your other message, how are you generating those stats? __ Find your next car at http://autos.yahoo.ca --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] setting up rulesdujour
Peter wrote: BTW, is there anything I should know about running RDJ with amavisd-new? Correction / addition to previous reply (again, not specific to amavisd-new): Be aware that the SARE rulesets will generate a substantial amount of hits. If you use spamassassin for a large userbase, you might like to raise the threshold slightly. The default will become more aggressive with the addition of SARE. This is great if it's what you want. However... SA just blocked a legitimate e-mail (albeit spammy and full of HTML) from my bank, 5 points of which came from a single SARE rule. X-Spam-Report: * 5.0 SARE_URI_EQUALS URI: Trying to hide the real URL with IE parsing bug The normal reason for using SARE is that you *want* spamassassin to be more aggressive, so I didn't think to mention this first time. However, if you apply the default threshold to a large userbase, you WILL get complaints. To put that in perspective, stats for the day: 329 messages checked by spamd. - 318 messages passed as clean. - 11 messages identified as spam. - 28 suspect messages flagged by SARE rulesets (almost 10% of my mail is suspect???) - 7 suspect messages flagged by DNS blacklists. - 11 suspect messages flagged by URI blacklists. - 9 suspect messages flagged by Razor2. - 1 suspect messages flagged by DCC. Regards, Keith --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] setting up rulesdujour
--- Keith Dunnett [EMAIL PROTECTED] wrote: Peter wrote: Well if the SA rules are updated doesn't amavisd-new need to be restarted? To the best of my knowledge, no. Certainly I got away without doing so for a couple of years. When using spamd, *that* certainly does need to be restarted, but as I understand it amavisd invokes spamassassin on a per-occasion basis, meaning that it will load whatever rules it finds at the time. I invite corrections if I am wrong or out of date, but I did not find it necessary. Another poster suggest 'amavisd reload'. That worked for me. I have a problem. Even though inside the RDJ script I place the path of SA (/var/amavisd/etc/mail/spamassassin) it continues to parse local.cf found at /etc/mail/spamassassin. Any ideas on that? Does it write to the correct place? Do you have more than one copy of the script configured in different parts of your path? I get the RDJ cf files I signed up for placed in /var/amavisd/etc/mail/spamassassin AND in /var/amavisd/etc/mail/spamassassin/RulesDuJour. Other than that, and reading the wrong local.cf file, my setup works. For your other message, how are you generating those stats? Using logwatch, plus a ripped off copy of the amavisd parser script from logwatch, which I rewrote to count a few things related to spamd. Far from fit for release yet... done two days ago, but I may be improving it in a few days and trying to get it into the logwatch release when done. That would be nice of you. __ Find your next car at http://autos.yahoo.ca --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
RE: [AMaViS-user] Two-level quarantine in gateway config?
Thanks for that Mark, but I'm having some difficulty in getting it to
work.
I have:
---/etc/postfix/virtual
/^(.*)\+spam@([.*])\.commarc\.co\nz$/ [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
[EMAIL PROTECTED] [EMAIL PROTECTED]
---eof---
...and email to the second two gets redirected as it should. Top line
should be catching and re-directing email sent to addresses like
[EMAIL PROTECTED] - but isn't.
I suspect some problem with the regex in that first line, but it's based
closely on your example, and my attempts at improving it haven't
helped, so I'm somewhat at a loss...
(I have been doing a postmap /etc/virtual /etc/init.dpostfix
restart after editing)
Can you spot my mistake, or should I take this to a Postfix list?
- steve
-Original Message-
From: Mark Martinec [mailto:[EMAIL PROTECTED]
Sent: Tuesday, 15 November 2005 1:16 p.m.
To: amavis-user@lists.sourceforge.net
Subject: Re: [AMaViS-user] Two-level quarantine in gateway config?
Steve,
About to upgrade Amavisd-new and SpamAssassin in a number of gateways
which I administer, and I was expecting to be able to configure to
send ordinary spam (say 5.0 to 15) to one quarantine (an email
address on the main mail server), and Really Bad spam (15+) to a local
address on my gateway/spamfiltering box. I had thought that there were
features in v2.3.3 which would allow me to do this, but now that I
come to do it I can't see how to. Of course,
sa_quarantine_cutoff_level *will* allow me to completely discard
high-scoring spam, but I'm reluctant to go that far. Any easy way to
achieve what I'm after?
1. set kill level at 15, which will quarantine mail with core above 15
to the 'really bad spam' quarantine, configurable with
$spam_quarantine_to (can be a mail address).
2. set tag2_level at 5, which will tag spam with score above 5. Rewrite
recipient address for mail above (possibly per-recipient) tag2_level by
appending address extension, e.g. '+spam':
$recipient_delimiter = '+';
@addr_extension_spam_maps = ('spam');
3. use Postfix virtual maps (e.g. pcre-based) to rewrite addresses of
the form
[EMAIL PROTECTED] to any address you like, e.g.:
/^(.*)\+spam@([EMAIL PROTECTED])\.example\.com$/ [EMAIL PROTECTED]
See:
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#addrext
Mark
---
This SF.Net email is sponsored by the JBoss Inc. Get Certified Today
Register for a JBoss Training Course. Free Certification Exam for All
Training Attendees Through End of 2005. For more info visit:
http://ads.osdn.com/?ad_id=7628alloc_id=16845op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
=
This e-mail has been scanned for Viruses and Content and cleared by CommArc
Cube Server
---
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems? Stop! Download the new AJAX search engine that makes
searching your log files as easy as surfing the web. DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_idv37alloc_id865op=click
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Two-level quarantine in gateway config?
On Thu, Dec 01, 2005 at 02:26:10PM +1300, Steve Brorens wrote: Thanks for that Mark, but I'm having some difficulty in getting it to work. I have: ---/etc/postfix/virtual /^(.*)\+spam@([.*])\.commarc\.co\nz$/ [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] ---eof--- ...and email to the second two gets redirected as it should. Top line should be catching and re-directing email sent to addresses like [EMAIL PROTECTED] - but isn't. Looks to me like you are using a regex- or pcre- style map entry with a normal (non-regex) access map. The regex- or pcre- maps must be specified as such when referenced in the Postfix config file, e.g. regex:rewrite-map, or pcre:rewrite-map Don't try to mix them with your ordinary access maps. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search engine that makes searching your log files as easy as surfing the web. DOWNLOAD SPLUNK! http://ads.osdn.com/?ad_id=7637alloc_id=16865op=click ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
