At 16:41 +0530 14-05-2013, Kunal Soni wrote:
Hi ST,
We have already enabled sa_quarantine and sa_delete to blocks spam mails.
qmail-queue.log is big file.
1. How to use qmail-queue.log with MINIDEBUG
Edit qmail-scanner-queue.pl (usually
/var/qmail/bin/qmail-scanner-queue.pl) then search for DEBUG and
change:
my $DEBUG='0';
my $MINIDEBUG='1';
2. How to rotate qmail-queue.log file.
Just to be quick you can rename the file: mv qmail-queue.log qmail-queue.log.1
I usually use logrotate, it is very easy, you only need to create a
file like this one (assuming your system has logrotate on it...)
[root@hedwig-1 ~]# more /etc/logrotate.d/qmail-scanner
/var/spool/qscan/qmail-queue.log {
weekly
rotate 5
copytruncate
#compress
notifempty
missingok
}
/var/spool/qscan/quarantine.log {
weekly
rotate 5
copytruncate
#compress
notifempty
missingok
}
Regards
ST
Thanks in advance.
On Tue, May 14, 2013 at 4:08 PM, Salvatore Toribio
<<mailto:tori...@pusc.it>tori...@pusc.it> wrote:
Hi Kunal
Please check qmail-queue.log, at least with MINIDEBUG enabled. There
you should find what qmail-scanner does with the spam messages.
Remember you need to enable sa_quarantine or sa_delete to block spam mails.
Regards
ST
PS: versio 1.25st is really old.
At 13:42 +0530 14-05-2013, Kunal Soni wrote:
Dear Mailing List,
We have been using qmailscanner 1.25 st with Qmail.
Few of the emails which are marked SPAM in Maillogs are getting
delivered to the Receipients. Please find attached are the email
maillogs and email which was delivered to user.
Please do the needful.
Logs ----
May 14 12:49:15 bismail spamd[6598]: spamd: identified spam
(24.3/5.0) for qscand:510 in 4.1 seconds, 1097 bytes.
May 14 12:49:15 bismail spamd[6598]: spamd: result: Y 24 -
BAYES_99,FSL_HELO_BARE_IP_1,FSL_HELO_BARE_IP_2,MISSING_DATE,MISSING_MID,RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RCVD_NUMERIC_HELO,RDNS_NONE,SUBJ_ALL_CAPS
scantime=4.1,size=1097,user=qscand,uid=510,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=34171,mid=(unknown),bayes=1.000000,autolearn=spam
May 14 12:49:15 bismail spamd[6597]: prefork: child states: II
May 14 12:49:16
bismail <http://qmail-scanner-queue.pl/>qmail-scanner-queue.pl:
qmail-scanner[4267]:
SA:SPAM-QUARANTINE:RC:0(178.123.185.86):SA:1(24.3/5.0): 5.386898
1097
<> <mailto:vikas.man...@mpgbis.com>vikas.mandal@mpgbis.comYOU_NEED_TO_READ_THIS
<<mailto:136851595110704...@bismail.mpgbis.com>136851595110704...@bismail.mpgbis.com>
bismail.mpgbis.com13685159507754267-unpacked:1097
In the Attached email, when we check the email source, it doesnt
yield the SPAM Score.
--
Kunal Soni
(9810019739)
--
Kunal Soni
(9810019739)
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
_______________________________________________
Qmail-scanner-general mailing list
Qmail-scanner-general@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
