Suse 9.0, amavisd-new-20030616-p5, spamassasion 2.63, (turned
off to debug error: razor 2.40, dcc 1.2.50 and pyzor 0.40.
I wrote an thread last week, but till now I do not have any
success on my problem:
In /var/log/messages I see that SA recognizes that a mail
is spam, but when receiving mail the subject will never
change to "***SPAM*** <old subject>". My bayes database
is now feeded with spams of the last months. Also I have
to mention that I am using SA in learning mode.
What is the reason that amavis_new do not change subject
after getting the message from SA that IT IS realy a spam ?
I put the configuration of amavis_new and SA after my thanks.
Thanks Harald
Configuration (/etc/mail/spamassassin/local.cf):
================================================
rewrite_subject 1
report_safe 0
use_terse_report 0
use_bayes 1
bayes_path /var/spool/amavis/.spamassassin/bayes
auto_learn 1
skip_rbl_checks 0
use_razor2 0
razor_config /var/spool/amavis/.razor/razor-agent.conf
use_dcc 0
dcc_path /usr/bin/dccproc
use_pyzor 0
dcc_add_header 1
dns_available yes
header LOCAL_RCVD Received =~ /.*\(\S+\.arnold\.at\s+\[.*\]\)/
describe LOCAL_RCVD Received from local machine
score LOCAL_RCVD -50
score DCC_CHECK 4.000
score RAZOR2_CHECK 2.500
score BAYES_99 4.300
score BAYES_90 3.500
score BAYES_80 3.000
/etc/amavisd.conf (this time all entries, but AV configuration):
================================================================
use strict;
$MYHOME = '/var/spool/amavis';
$mydomain = 'arnold.at';
$daemon_user = 'vscan';
$daemon_group = 'vscan';
$TEMPBASE = $MYHOME;
$helpers_home = $MYHOME;
$pid_file = "$MYHOME/amavisd.pid";
$lock_file = "$MYHOME/amavisd.lock";
$ENV{TMPDIR} = $TEMPBASE;
$forward_method = 'smtp:127.0.0.1:10025';
$notify_method = $forward_method;
$max_servers = 5;
$max_requests = 15;
$child_timeout=15*60;
@local_domains_acl = ( ".$mydomain" );
$unix_socketname = "$MYHOME/amavisd.sock";
$inet_socket_port = 10024;
@inet_acl = qw( 127.0.0.1 );
$DO_SYSLOG = 1;
$SYSLOG_LEVEL = 'user.info';
$LOGFILE = "$MYHOME/amavis.log";
$log_level = 2;
$log_templ = '[? %
<%o> -> [<%R>|,][? %i ||, quarantine %i], Message-ID: %m, Hits: %c';
$final_virus_destiny = D_PASS;
$final_banned_destiny = D_PASS;
$final_spam_destiny = D_PASS;
$final_bad_header_destiny = D_PASS;
$warnvirusrecip = 1;
$warnbannedrecip = 1;
$viruses_that_fake_sender_re = new_RE(
qr'nimda|hybris|klez|bugbear|yaha|braid|sobig|fizzer|palyh|peido|holar'i,
qr'tanatos|lentin|bridex|mimail|trojan\.dropper'i,
);
$virus_admin = undef;
$spam_admin = undef;
$mailfrom_notify_admin = "[EMAIL PROTECTED]";
$mailfrom_notify_recip = "[EMAIL PROTECTED]";
$mailfrom_notify_spamadmin = "[EMAIL PROTECTED]";
$mailfrom_to_quarantine = undef;
$QUARANTINEDIR = '/var/spool/amavis/virusmails';
$virus_quarantine_to = undef;
$spam_quarantine_to = undef;
$X_HEADER_TAG = 'X-Virus-Scanned';
$X_HEADER_LINE = "by amavisd-new at $mydomain";
$remove_existing_x_scanned_headers = 0;
$remove_existing_spam_headers = 1;
$keep_decoded_original_re = new_RE(
qr'^(ASCII|text|uuencoded|xxencoded|binhex)'i,
);
$banned_filename_re = new_RE(
qr'\.[a-zA-Z][a-zA-Z0-9]{0,3}\.(vbs|pif|scr|bat|com|exe|dll)$'i,
qr'.\.(exe|vbs|pif|scr|bat|com)$'i,
);
$sql_select_white_black_list = undef;
$addr_extension_virus = 'virus';
$recipient_delimiter = '-';
$replace_existing_extension = 1;
$localpart_is_case_sensitive = 0;
$blacklist_sender_re = new_RE(
qr'^(bulkmail|offers|cheapbenefits|earnmoney|foryou|greatcasino)@'i,
qr'^(investments|lose_weight_today|market.alert|money2you|MyGreenCard)@'i,
qr'^(new\.tld\.registry|opt-out|opt-in|optin|saveonlsmoking2002k)@'i,
qr'^(specialoffer|specialoffers|stockalert|stopsnoring|wantsome)@'i,
qr'^(workathome|yesitsfree|your_friend|greatoffers)@'i,
qr'^(inkjetplanet|marketopt|MakeMoney)\d*@'i,
);
read_hash(\%whitelist_sender, '/var/spool/amavis/whitelist_sender');
read_hash(\%blacklist_sender, '/var/spool/amavis/blacklist_sender');
read_hash(\%spam_lovers , '/var/spool/amavis/spam_lovers');
$MAXLEVELS = 14;
$MAXFILES = 1500;
$MIN_EXPANSION_QUOTA = 100*1024;
$MAX_EXPANSION_QUOTA = 300*1024*1024;
$MIN_EXPANSION_FACTOR = 5;
$MAX_EXPANSION_FACTOR = 500;
$path = '/usr/local/sbin:/usr/local/bin:/usr/sbin:/sbin:/usr/bin:/bin';
$file = 'file';
$gzip = 'gzip';
$bzip2 = 'bzip2';
$lzop = 'lzop';
$uncompress = ['uncompress', 'gzip -d', 'zcat'];
$unfreeze = ['unfreeze', 'freeze -d', 'melt', 'fcat'];
$arc = ['nomarch', 'arc'];
$unarj = ['arj', 'unarj'];
$unrar = ['rar', 'unrar'];
$zoo = 'zoo';
$lha = 'lha';
$cpio = 'cpio';
$sa_local_tests_only = 0;
$sa_auto_whitelist = 1;
$sa_mail_body_size_limit = 64*1024;
$sa_tag_level_deflt = -999.0;
$sa_tag2_level_deflt = 5.0;
$sa_kill_level_deflt = 9999.0;
$sa_spam_subject_tag = '***SPAM*** ';
$sa_spam_modifies_subj = 1;
@av_scanners = (
[...] lines removed
@av_scanners_backup = (
[...] lines removed
$sa_debug = 1;
