I thought it does check for black lists/whitelists in local.cf or even rule scores? amavis-new just ultimately decides what to do with the spam and tagging? no?
-----Original Message----- From: Kevin Peuhkurinen [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 23, 2004 11:56 AM To: Harald Arnold Cc: Liste-Spamassasin Subject: Re: amavis_new with spamassasin FYI -- amavis-new calls SA in such a way that it ignores local.cf so don't even bother putting anything in there. The only thing that looks odd to me in your configuration is: $sa_kill_level_deflt = $sa_tag2_level_deflt; When an email hits $sa_kill_level_deflt, amavisd triggers the spam evasion action, which in your case is nothing. It's just a guess, but I think that if the kill level is the same (or lower) than the tag2 level, the tag2 action (subject re-writing) never gets triggered. Try setting $sa_kill_level_deflt to 99 and see if that works. Harald Arnold wrote: >I installed amavis and spamassassin with the instructions >of Scott Vintinner. I am using: > >SuSE Linux 9.0, amavisd-new-20030616-p5 and spamassasin 2.55 > >It looks like everything is working fine with spamassasin, >but I never get changing mail subject to "*****SPAM*****" ... > >In /var/log/messages I see that SA will recognize the spam >The example below has a hit rate of 12.6, SA tell me that >it is a spam, but when I receive the mail nothing changed >in subject: > >My configuration: > >/etc/mail/spamassassin/local.cf >=============================== >rewrite_subject 1 >report_safe 0 >use_terse_report 0 >use_bayes 1 >bayes_path /var/spool/amavis/.spamassassin/bayes >auto_learn 1 >skip_rbl_checks 0 >use_razor2 1 >razor_config /var/spool/amavis/.razor/razor-agent.conf >use_dcc 0 >use_pyzor 0 >dcc_add_header 1 >dns_available yes >header LOCAL_RCVD Received =~ /.*\(\S+\.arnold\.at\s+\[.*\]\)/ >describe LOCAL_RCVD Received from local machine >score LOCAL_RCVD -50 >score DCC_CHECK 4.000 >score RAZOR2_CHECK 2.500 >score BAYES_99 4.300 >score BAYES_90 3.500 >score BAYES_80 3.000 > >/etc/amavisd.conf (only SA-parts): >================================== >$final_spam_destiny = D_PASS; >$spam_admin = undef; # do not send spam admin notifications (default) >$spam_quarantine_to = undef; >$remove_existing_spam_headers = 1; # remove existing spam headers >read_hash(\%spam_lovers , '/var/spool/amavis/spam_lovers'); >$sa_local_tests_only = 0; # (default: false) >$sa_auto_whitelist = 1; # turn on AWL (default: false) >$sa_mail_body_size_limit = 64*1024; # don't waste time on SA if mail is >larger >$sa_tag_level_deflt = 3.0; # add spam info headers if at, or above that >level >$sa_tag2_level_deflt = 6.3; >$sa_kill_level_deflt = $sa_tag2_level_deflt; # triggers spam evasive >actions >$sa_spam_subject_tag = '***SPAM*** '; # (defaults to undef, disables) >$sa_spam_modifies_subj = 1; # may be a ref to a lookup table, default is >true >$sa_debug = 1; # defaults to false > >/var/log/messages: >================== >Jun 23 16:19:18 sauron amavis[10339]: (10339-06) ESMTP::10024 >/var/spool/amavis/amavis-20040623T155244-10339: <[EMAIL PROTECTED]> >-> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> Received: SIZE=1114 from >sauron.arnold.at ([127.0.0.1]) by localhost (sauron [127.0.0.1]) >(amavisd-new, port 10024) with ESMTP id 10339-06; Wed, 23 Jun 2004 >16:19:18 +0200 (CEST) >Jun 23 16:19:18 sauron amavis[10339]: (10339-06) Checking: ><[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> >Jun 23 16:19:21 sauron amavis[10339]: (10339-06) spam_scan: hits=12.6 >tests=BASE64_ENC_TEXT,CLICK_BELOW,DATE_IN_PAST_03_06,HTML_10_20,HTML_LINK_CLICK_HERE,MIME_HTML_ONLY,MSGID_GOOD_EXCHANGE,RCVD_IN_DSBL,SEMIFORGED_HOTMAIL_RCVD,SUBJ_VIAGRA >Jun 23 16:19:21 sauron amavis[10339]: (10339-06) SPAM, ><[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, >Yes, hits=12.6 tag1=3.0 tag2=6.3 kill=6.3 tests=BASE64_ENC_TEXT, >CLICK_BELOW, DATE_IN_PAST_03_06, HTML_10_20, HTML_LINK_CLICK_HERE, >MIME_HTML_ONLY, MSGID_GOOD_EXCHANGE, RCVD_IN_DSBL, >SEMIFORGED_HOTMAIL_RCVD, SUBJ_VIAGRA >Jun 23 16:19:21 sauron amavis[10339]: (10339-06) FWD via SMTP: >[127.0.0.1:10025] <[EMAIL PROTECTED]> -> ><[EMAIL PROTECTED]>,<[EMAIL PROTECTED]> >Jun 23 16:19:22 sauron amavis[10339]: (10339-06) Passed, ><[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PROTECTED]>, >quarantine >spam-5b1a8cd013349b97fd46384126270aa8-20040623-161921-10339-06, >Message-ID: <[EMAIL PROTECTED]>, Hits: >12.6 >Jun 23 16:19:22 sauron amavis[10339]: (10339-06) TIMING [total 4197 ms] >- SMTP EHLO: 26 (1%), SMTP pre-MAIL: 4 (0%), SMTP pre-DATA-flush: 13 >(0%), SMTP DATA: 77 (2%), body hash: 1 (0%), mime_decode: 69 (2%), >get-file-type: 153 (4%), decompose_part: 6 (0%), parts: 0 (0%), >AV-scan-1: 66 (2%), AV-scan-2: 1173 (28%), SA msg read: 8 (0%), SA >parse: 4 (0%), SA check: 2104 (50%), fwd-connect: 144 (3%), >fwd-mail-from: 12 (0%), fwd-rcpt-to: 15 (0%), write-header: 10 (0%), >fwd-data: 1 (0%), fwd-data-end: 287 (7%), fwd-rundown: 6 (0%), >unlink-1-files: 14 (0%), rundown: 1 (0%) > > > > >
