On Wed, 2014-07-23 at 10:19 +0200, rsmits-l wrote:
> We have an incoming email which was discarded because of the high spam
> score. In the logging we see no rules being triggered. What could be the
> cause of this ?
This is an amavis question. SA does not reject (or discard) mail.
(Speaking of "discarding", you don't actually mean simply throwing an
already accepted message into the great bit-bucket after SMTP stage, do
you?)
The logs do not show any list of rules at all. This does not mean no
rules being triggered. It does mean that important information is
missing from your logs. Seems to be a mis-configuration to me, given
those extensive timings being logged.
Add logging of SA rules (tests) to your Amavis configuration.
> Jul 23 03:56:09 mx3 amavis[23021]: (23021-14) do_notify_and_quarantine:
> spam level exceeds quarantine cutoff level 20
> Jul 23 03:56:09 mx3 amavis[23021]: (23021-14) Blocked SPAM
> {DiscardedInbound}, [209.85.220.54]:51315 [58.216.164.98]
> <weijiam...@xxxxxx.com> -> <xxx...@xxxxxx.xxxxxx.net>, Message-ID:
> <005a01cfa619$40d13780$c273a680$@xxxxxx.com>, mail_id: hAn9gito5pOy,
> Hits: 41.149, size: 39241, 1024 ms
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
