Re: [AMaViS-user] Include spamassassin in postfix OR in amavis . Is there a difference ?

2005-12-20 Thread Mark Martinec
Nokin, Because I've already tunned my spamassassin (and spend some time on it), I don't want to change my setup for migrate spamassassin from postfix to amavis. As Matthias pointed out, most of your work done on SA (local.cf, SARE) still work unchanged when SA is called from amavisd instead

Re: [AMaViS-user] Error in processing

2005-12-20 Thread Mark Martinec
MJ, I am running postfix 2.2.4 on Solaris 8 with amavisd-new.2.3.2, SpamAssassin 3.1.0 and Clamav 0.8.7.1 as an AV/AS gateway to my main email system. Today I saw following errors when I executed postqueue -p command to get the queue. Any idea? (host 127.0.0.1[127.0.0.1] said: 451 4.5.0

[AMaViS-user] Re: Include spamassassin in postfix OR in amavis . Is there a difference ?

2005-12-20 Thread mouss
Nokin Jérôme a écrit : Hello, I'm currently using Postfix + Spamassassin at my office. So my master.cf file look like this : #--- smtp inet n - n - - smtpd -o content_filter= spamassassin

[AMaViS-user] RATWARE_ZERO_TZ

2005-12-20 Thread MJ
Hi, I am running postfix 2.2.4 on Solaris 8 with amavisd-new.2.3.2, SpamAssassin 3.1.0 and Clamav 0.8.7.1 as an AV/AS gateway to my main email system. Some messages specially from hotmail.com are getting very high scores, specially RATWARE_ZERO_TZ, can some one tell me what is RATWARE_ZERO_TZ and

RE: [AMaViS-user] RATWARE_ZERO_TZ

2005-12-20 Thread Michael Scheidell
Need DATE headers. RATWARE_ZERO_TZ may refer to a timezone lookup or check, so, need ALL date headers as well. --- This SF.net email is sponsored by: Splunk Inc. Do you grep through log files for problems? Stop! Download the new AJAX search

[AMaViS-user] SEND via SQL

2005-12-20 Thread Cami
Hi Mark, Currently, when a message gets quarantined, you have the following: Dec 20 16:36:10 spamwall01.mweb.co.za amavis[28442]: (28442-01-89) SEND via SQL: [EMAIL PROTECTED] - [EMAIL PROTECTED], mail_id brjsRlsJZ9fZ Would you accept a patch (or be willing to write it), so that the output

Re: [AMaViS-user] RATWARE_ZERO_TZ

2005-12-20 Thread Mark Martinec
MJ, Some messages specially from hotmail.com are getting very high scores, specially RATWARE_ZERO_TZ, can some one tell me what is RATWARE_ZERO_TZ grep the SA rules for RATWARE_ZERO_TZ: 20_ratware.cf: # This ratware always uses a + TZ in the Date header, and has a multiplicity # of

RE: [AMaViS-user] RATWARE_ZERO_TZ

2005-12-20 Thread MJ
Thanks Michael, here is another example with full header Received: from hotmail.com (bay20-f13.bay20.hotmail.com [64.4.54.102]) by mailgate2.cyberia.net.sa (Postfix) with ESMTP id A33A71F07EF for [EMAIL PROTECTED]; Tue, 20 Dec 2005 17:44:05 +0300 (GMT) Received: from mail pickup

Re: [AMaViS-user] logging spam, but not adding headers below sa_kill_level_deflt

2005-12-20 Thread John Beamon
Mark Martinec wrote: John, I'm not sure I understand your setup - are these mailers processing mail one after another? There is only one 'Received' header field in your sample. amavisd-new removes all previous X-Spam-* headers from a message if it is doing spam checking by itself. This is to

Re: [AMaViS-user] Editing subject line

2005-12-20 Thread Gary V
Mark wrote: Gary, ...you can set: $sa_spam_subject_tag = '***SPAM*** '; if you have not already done so. In fact you may want to do this as an alternative to setting this in SQL because the trailing space will get trimmed from the SQL data (annoying). Oops, annoying indeed, thanks for

Re: [AMaViS-user] Editing subject line

2005-12-20 Thread Gary V
from future 2.4.0 rel.notes: - new config variable $trim_trailing_space_in_lookup_result_fields controls trimming of trailing whitespace from SQL fields, LDAP attribute values and associative array righthand-sides (hash values) as read by read_hash(); enabled by default for

Re: [AMaViS-user] logging spam, but not adding headers below sa_kill_level_deflt

2005-12-20 Thread Mark Martinec
John, Mail comes into the network through one of the two MX hosts, is filtered for spam and viruses, and is delivered to the mailbox server. The mailbox server runs amavis, but only as a virus scanner. Ok, so the mailbox server is not stripping X-Spam-* header fileds, as it has spam checking

Re: [AMaViS-user] Editing subject line

2005-12-20 Thread Peter
--- Gary V [EMAIL PROTECTED] wrote: Peter wrote: --- Mark Martinec [EMAIL PROTECTED] wrote: Peter, Should the subject line being edited be reflected in the logs then? I just want to make sure it's being done. At log level 5 you should see log entries like: (55083-04)

Re: [AMaViS-user] Editing subject line

2005-12-20 Thread Peter
--- Gary V [EMAIL PROTECTED] wrote: Peter wrote: I put $DO_SYSLOG = 1 and now I see a lot more logging including the subject editing stuff. However, at the same time I added $sa_spam_modifies_subj = 1; $sa_spam_subject_tag = '*** SPAM *** '; to my config file so I'm not sure

[AMaViS-user] Virus scanner log reporting

2005-12-20 Thread Bill Landry
I am using custom log reporting ($log_temp1) in my amavisd.conf; however, I am having a difficult time trying to come up with the proper syntax to report virus scanners detecting a virus and the virus name the scanner reported. I am looking for a format as follows: Scanner1 detected

Re: [AMaViS-user] Editing subject line

2005-12-20 Thread Gary V
Peter wrote: Side question: Let's say a few SQL-defined users DO NOT want their mail passed (D_PASS). How do I accomodate them? Let's just consider spam. I think you would have to rethink the structure. If you are passing spam to everyone right now, if it were me, I would start by insuring

RE: [AMaViS-user] Include spamassassin in postfix OR in amavis . Is there a difference ?

2005-12-20 Thread Nokin Jérôme
Ok guys, Many thank for your awnswer. I see more clearly now . Jérôme -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Martinec Sent: mardi 20 décembre 2005 14:42 To: amavis-user@lists.sourceforge.net Subject: Re: [AMaViS-user] Include spamassassin