I guess I have a flaw in my system configuration. The numbers from my logs doesn't make sense.

Total received mails on a recent given "low-volume-ham-day" was:

16707
(counting lines from qmail-queue.log containing
"from='.*<[EMAIL PROTECTED]>', subj='.*', via SMTP from ")

Total received mails on the same given day that was quarantined because of SA scoring too high:

10299
(counting lines from qmail-queue.log containing
"SA: yup, this smells like SPAM.*quarantining message\.\.\.")

Total received mails on the same given day that my AV-scanners found a virus in:

13791 (apropos the high number, 13448 of those were Worm.Sober.I)
(counting lines from qmail-queue.log containing
": there be a virus! ")

(10299 + 19791) > 16707
How is that possbile?
My server running Q-S receives mails from other qmail smtp servers in my 
network only.
SA will only scan messages (RELAY_CLIENT variable not set) from my two frontend 
smtp servers.
Does my Q-S pass the same message to my AV-scanners sevaral times?

Here's my configuration:
# ./configure --qs-user qscand --qs-group qscand --spooldir /var/spool/qmailscan --qmaildir /var/qmail 
--bindir /var/qmail/bin --qmail-queue-binary /var/qmail/bin/qmail-queue  --admin postmaster --domain 
mydomain.com --admin-fromname "My Company Postmaster" --notify psender,nmlvadm --local-domains 
just.one.local.domain --silent-viruses auto --block-password-protected 0 --lang en_GB --debug no --minidebug 
1 --unzip 1 --add-dscr-hdrs yes --dscr-hdrs-text "X-Scanned-by-xxxx" --archive 0  
--scanners-per-domain 0 --redundant yes --log-details syslog --log-crypto 0 --fix-mime 2  --ignore-eol-check 
0 --virus-to-delete yes --sa-delta 0 --sa-alt 1 --sa-debug 1 --sa-report 1 --sa-quarantine 5 --sa-delete 0 
--sa-reject 0 --scanners "auto" --install 1

my 
@scanners_default=("clamdscan_scanner","fprot_scanner","fsecure_scanner","spamassassin","perlscan_scanner");



Arvinn



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now. http://productguide.itmanagersjournal.com/
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to