Re: Received trace question

2017-02-02 Thread Per olof Ljungmark
On 2017-02-02 23:01, Benny Pedersen wrote: > Per olof Ljungmark skrev den 2017-02-02 22:37: > >> So what am I missing? This is clearly not "spam from laocal". > > x-forward > > https://help.ubuntu.com/community/PostfixAmavisNew > > good example config for postfix and amavisd there Yes, but the

Re: Received trace question

2017-02-02 Thread Benny Pedersen
Per olof Ljungmark skrev den 2017-02-02 22:37: So what am I missing? This is clearly not "spam from laocal". x-forward https://help.ubuntu.com/community/PostfixAmavisNew good example config for postfix and amavisd there

Received trace question

2017-02-02 Thread Per olof Ljungmark
Hi, It was a while since I did this so I need to refresh my memory a little. In the following amavisd says 192.168.64.1 is the *first* upsstream client and the message gets flagged as "spam from local". -- First upstream SMTP client IP address: [192.168.64.1]:16601 nh1.nethead.se Received trace

Re: Multiple infections not passed to amavis

2017-02-02 Thread @lbutlr
On Feb 2, 2017, at 2:49 AM, Levente Birta wrote: > OK, the problem was in the amavisd.conf at the @av_scanners section: don't > know why, but missed the /m (Treat string as multiple lines) option > > ['ClamAV-clamd', > \&ask_daemon, ["CONTSCAN {}\n", "/var/run/clamd.amavisd/clamd.sock"], > qr/

Multiple infections not passed to amavis

2017-02-02 Thread Levente Birta
Hi I use amavisd 2.10 and clamav 0.99 with sanesecurity. in the amavisd.conf: @virus_name_to_spam_score_maps = (new_RE( # the order matters! [ qr`^Structured\.(SSN|CreditCardNumber)\b`=> 0.1 ], [ qr`^(Heuristics\.)?Phishing\.` => 0.1 ],

Re: [SOLVED] Multiple infections not passed to amavis

2017-02-02 Thread Levente Birta
On 02/02/2017 11:17, Levente Birta wrote: Hi I use amavisd 2.10 and clamav 0.99 with sanesecurity. in the amavisd.conf: @virus_name_to_spam_score_maps = (new_RE( # the order matters! [ qr`^Structured\.(SSN|CreditCardNumber)\b`=> 0.1 ], [ qr`^(Heuristics\.)?Phis