At 16:14 -0400 15-05-2011, mark wrote: >Hi, > >I have a qmail server running with qmailscanner 2.08st, spamassassin >3.2.5 running on Perl 5.10.1 with SSL suport, zlib support and clamav >0.97. Is that enough about the system? > >When I run the tests of spamassassin, the 4 e-mails are correctly >delivered (or not delivered as the case may be). But, when a spam >arrives (and is scored above 5.0) the e-mail is delivered to the user >anyway.
Hi Mark REgarding why this mails are not blocked you need to set some values in qmail-scanner. Run /var/qmail/bin/qmail-scanner-queue.pl -V to get the current values. You can also have a look a qmail-queue.log to understan what is going on. YOu should need to set at least 'sa_quarantine_site' to block the spams, it is a relative value to spamassassin's 'required_score' (in you installation 5.0), so if you want to block messages with a score of 6 or higher, set it to 1.01, just edit /var/qmail/bin/qmail-scanner-queue.pl search for sa_quarantine_site and change it. Regards ST >Here is an example of the headers of the message with a spam score of >7.5 that was delivered to me: >Return-Path: <telemar...@kidtosail.com> > Delivered-To: m...@neidorff.com > Received: (qmail 22905 invoked by uid 168); 15 May 2011 >11:55:11 -0400 > Received: from mail.kidtosail.com by mail (envelope-from ><telemar...@kidtosail.com>, uid 89) with qmail-scanner-2.08st > (clamdscan: 0.97/13078. spamassassin: 3.2.5. perlscan: 2.08st. > Clear:RC:0(64.187.124.104):SA:1(7.5/5.0):. > Processed in 0.94203 secs); 15 May 2011 15:55:11 -0000 > X-Spam-Status: Yes, hits=7.5 required=5.0 > X-Spam-Level: +++++++ > X-Qmail-Scanner-Mail-From: telemar...@kidtosail.com via mail > X-Qmail-Scanner: 2.08st (Clear:RC:0(64.187.124.104):SA:1(7.5/5.0):. >Processed in 0.94203 secs Process 22893) > Received: from mail.kidtosail.com (64.187.124.104) > by neidorff.com with SMTP; 15 May 2011 11:55:10 -0400 > Received-SPF: pass (neidorff.com: SPF record at kidtosail.com >designates 64.187.124.104 as permitted sender) > Received: by mail.kidtosail.com (PowerMTA(TM) v3.0c2) id >hpvrgm01g74o; Sun, 15 May 2011 11:51:05 -0400 (envelope-from ><telemar...@kidtosail.com>) > Date: Sun, 15 May 2011 11:50:24 -0400 > From: "Telemarketing Services" <telemar...@kidtosail.com> > Subject: Affordable outbound telemarketing services > To: m...@neidorff.com > Message-ID: <7rn5_svc7lpii3gy4ty...@kidtosail.com> > Mime-Version: 1.0 > Content-Type: text/html; > charset=us-ascii > Content-Transfer-Encoding: 8bit > Content-Disposition: inline > Status: RO > X-Status: RC > X-KMail-EncryptionState: N > X-KMail-SignatureState: N > X-KMail-MDN-Sent: > >Here is the qmail-send log for this e-mail. >@400000004dcff7693afc6144 new msg 1245531 >@400000004dcff7693afc6914 info msg 1245531: bytes 3637 from ><telemar...@kidtosail.com> qp 22905 uid 168 >@400000004dcff7693afc6cfc starting delivery 236: msg 1245531 to local >neidorff.com-m...@neidorff.com >@400000004dcff7693afc70e4 status: local 1/10 remote 0/120 >@400000004dcff76a00b0d77c delivery 236: success: did_0+0+1/ >@400000004dcff76a00b0df4c status: local 0/10 remote 0/120 >@400000004dcff76a00b0e334 end msg 1245531 >@400000004dcff7b5248c0e64 new msg 1245531 >@400000004dcff7b5248c124c info msg 1245531: bytes 16866 from ><searc...@plumberable.com> qp 22925 uid 168 >@400000004dcff7b5248c1634 starting delivery 237: msg 1245531 to local >neidorff.com-flying_angel_...@neidorff.com >@400000004dcff7b5248c1a1c status: local 1/10 remote 0/120 >@400000004dcff7b52522d40c delivery 237: failure: >Sorry,_no_mailbox_here_by_that_name._(#5.1.1)/ >@400000004dcff7b52522dbdc status: local 0/10 remote 0/120 >@400000004dcff7b5257f923c bounce msg 1245531 qp 22929 >@400000004dcff7b5257f9624 end msg 1245531 > >and this comes from /var/log/mail.info (looks just like mail.log to >me) >May 15 11:55:11 mail spamd[17966]: spamd: connection from localhost >[127.0.0.1] at port 1989 >May 15 11:55:11 mail spamd[17966]: Use of uninitialized value $vpopdir >in concatenation (.) or string at /usr/sbin/spamd line 2106, <GEN882> >line 2. >May 15 11:55:11 mail spamd[17966]: Can't exec "/bin/vuserinfo": No >such file or directory at /usr/sbin/spamd line 2106, <GEN882> line 2. >May 15 11:55:11 mail spamd[17966]: Use of uninitialized value $vpopdir >in concatenation (.) or string at /usr/sbin/spamd line 2111, <GEN882> >line 2. >May 15 11:55:11 mail spamd[17966]: Can't exec "/bin/valias": No such >file or directory at /usr/sbin/spamd line 2111, <GEN882> line 2. >May 15 11:55:11 mail spamd[17966]: Use of uninitialized value $dir in >scalar chomp at /usr/sbin/spamd line 2118, <GEN882> line 2. >May 15 11:55:11 mail spamd[17966]: spamd: checking message ><7rn5_svc7lpii3gy4ty...@kidtosail.com> for qscand:89 >May 15 11:55:11 mail spamd[17966]: pyzor: check failed: internal error >May 15 11:55:11 mail spamd[17966]: spamd: identified spam (7.5/5.0) >for qscand:89 in 0.9 seconds, 3087 bytes. >May 15 11:55:11 mail spamd[17966]: spamd: result: Y 7 - >BAYES_50,HTML_COMMENT_SAVED_URL,HTML_IMAGE_ONLY_24,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MIME_HTML_ONLY,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,SPF_PASS,URIBL_JP_SURBL >scantime=0.9,size=3087,user=qscand,uid=89,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=1989,mid=<7rn5_svc7lpii3gy4ty...@kidtosail.com>,bayes=0.508096,autolearn=no >May 15 11:55:11 mail qmail-scanner-queue.pl: qmail-scanner[22893]: >Clear:RC:0(64.187.124.104):SA:1(7.5/5.0): 0.935984 3045 >telemar...@kidtosail.com m...@neidorff.com >Affordable_outbound_telemarketing_services ><7rn5_svc7lpii3gy4ty...@kidtosail.com> 1305474911.22895-0.mail:2340 >May 15 11:55:12 mail spamd[4203]: prefork: child states: II > >I see errors in the mail.info file. What do I do to correct these >errors? Also, would someone please tell me why the message, and many >others that are spam, are being delivered and how do I reconfigure >the system so that these are properly routed to the spam mailbox? > >Many thanks, > >Mark ------------------------------------------------------------------------------ Achieve unprecedented app performance and reliability What every C/C++ and Fortran developer should know. Learn how Intel has extended the reach of its next-generation tools to help boost performance applications - inlcuding clusters. http://p.sf.net/sfu/intel-dev2devmay _______________________________________________ Qmail-scanner-general mailing list Qmail-scanner-general@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
