Hi all,
I have a fedora15 system with postfix, amavisd-new-2.6.4,
spamassassin-3.3.1, clamav-0.97, and the latest unofficial-sigs
scripts running. It seems that for some reason messages tagged as
containing a virus are immediately quarantined, while other times 0.1
points are added to the overall spamassassin score and only contribute
to whether it's spam.
For example:
X-Spam-Status: Yes, score=21.428 tag=-100 tag2=5 kill=5
tests=[AV:INetMsg.SpamDomain-2w.internetjobhuntersforyou_info.UNOFFICIAL=0.1,
BAYES_99=3.5, HTML_IMAGE_ONLY_24=1.618, HTML_IMAGE_RATIO_02=0.437,
HTML_MESSAGE=0.001, KHOP_DNSBL_BUMP=2, MIME_HTML_ONLY=0.723,
PYZOR_CHECK=1.392, RCVD_IN_BL_SPAMCOP_NET=1.347,
RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_HOSTKARMA_BL=1.7,
RELAYCOUNTRY_US=0.01, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001,
TO_NO_BRKTS_DIRECT=3.483, TO_NO_BRKTS_NOTLIST=0.001,
T_RP_MATCHES_RCVD=-0.01, URIBL_WS_SURBL=1.608,
URI_NO_WWW_INFO_CGI=2.071] autolearn=no
While other times the message is immediately quarantined:
Jun 12 03:08:45 mail02 amavis[30902]: (30902-14) run_av
(ClamAV-clamd): /var/spool/amavisd/tmp/amavis-20110612T025949-30902/
parts INFECTED: INetMsg.SpamDomain-2w.cosmetictips_net.UNOFFICIAL
Jun 12 03:08:47 mail02 amavis[30902]: (30902-14) local delivery: <> ->
spam-quarantine,
mbx=/var/spool/amavisd/quarantine/spam-416eb744864a591be2ee380158da0303-20110612T030845-30902-14.gz
Can someone help me understand how the distinction is made as to
whether a message should be quarantined immediately?
Sure appreciate any ideas.
Thanks,
Alex
_______________________________________________
Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net
http://www.clamav.net/support/ml
