View Single Post
  #3  
Old 16th October 2009, 14:38
Cracklefish Cracklefish is offline
Member
 
Join Date: Mar 2009
Posts: 95
Thanks: 8
Thanked 3 Times in 3 Posts
Default

Quote:
Originally Posted by till View Post
Amavisd is not able to start as its pid file exists already. Please try to reboot the server.
That helped. The PID file error has gone and now I get a normal debug report. Funny though the server has been rebooted several times lately for other reasons.

The Amavis still does not seem to be behaving properly.

I have reset the tags in ISPC to:

SPAM tag level = 2.5
SPAM tag2 level = 5
SPAM kill level = 6.8

But amavisd.conf shows

$sa_tag_level_deflt = 2.0
$sa_tag2_level_deflt = 6.2
$sa_kill_level_deflt = 6.2


I have never had an email with ***SPAM*** in the subject field

Here is a header:

Code:
Return-Path: <custodianjxa121@hotelbaboosoorya.com>
Received: from localhost (unknown [127.0.0.1])
	by golf1.sanitised (Postfix) with ESMTP id E0EEC160FF;
	Fri, 16 Oct 2009 11:08:54 +0000 (UTC)
X-Virus-Scanned: amavisd-new at sanitised
X-Spam-Flag: NO
X-Spam-Score: 6.07
X-Spam-Level: ******
X-Spam-Status: No, score=6.07 tagged_above=2 required=6.2 tests=[BAYES_60=1,
	HTML_MESSAGE=0.001, RCVD_IN_SORBS_WEB=0.619, RDNS_NONE=0.1,
	TVD_RCVD_SINGLE=1.351, URIBL_SBL=1.499, URIBL_WS_SURBL=1.5]
Received: from golf1.sanitised ([127.0.0.1])
	by localhost (Golf1.sanitised [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id rMYNV8KuaVzO; Fri, 16 Oct 2009 12:08:41 +0100 (BST)
Received: from YPNCKGMG (unknown [77.120.129.178])
	by golf1.sanitised (Postfix) with ESMTP id 421C016101;
	Fri, 16 Oct 2009 12:08:41 +0100 (BST)
Message-ID: <000d01ca4e51$0232c680$6400a8c0@custodianjxa121>
From: "Ollie Dotson" <custodianjxa121@hotelbaboosoorya.com>
To: <wtop@sanitised>
Subject: Unbelievable prices for spruce watches. 
Date: Fri, 16 Oct 2009 14:08:36 +0200
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01CA4E51.0232C680"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Although the spam score is 6.07 the header has not been modified.

There are 2 mailboxes on this domain, this one and a catchall
Both have a filter set to transfer anything with ***SPAM in subject field to the spam folder (.Spam)

The spam folder for the catchall box has lots of emails in it, the majority are "Considered UNSOLICITED BULK EMAIL..." with a header;

Code:
Return-Path: <MAILER-DAEMON>
Received: from localhost (unknown [127.0.0.1])
	by golf1.sanitised (Postfix) with ESMTP id E7E6516101
	for <wtop@sanitised>; Fri, 16 Oct 2009 12:05:08 +0000 (UTC)
Content-Type: multipart/report; report-type=delivery-status;
 boundary="----------=_1255694708-7025-2"
Content-Transfer-Encoding: 7bit
MIME-Version: 1.0
Subject: Considered UNSOLICITED BULK EMAIL, apparently from you
In-Reply-To: <6704PBT.736021A7.26395804513273LFYMCSVWPYWJJND740@PC3>
Message-ID: <SSY7d3JPt4eQwA@Golf1.greenway.co.uk>
From: "Content-filter at Golf1.sanitised" <postmaster@Golf1.sanitised>
To: <wtop@sanitised>
Date: Fri, 16 Oct 2009 13:04:52 +0100 (BST)
The header from a conventional spam looks like this:

Code:
Return-Path: <pangingatcm5@broadwayplastering.com>
Received: from localhost (unknown [127.0.0.1])
	by golf1.sanitised (Postfix) with ESMTP id 65C3616101
	for <jmh711nsuk@sanitised>; Fri, 16 Oct 2009 12:09:21 +0000 (UTC)
X-Virus-Scanned: amavisd-new at sanitised
X-Spam-Flag: NO
X-Spam-Score: 5.031
X-Spam-Level: *****
X-Spam-Status: No, score=5.031 tagged_above=2 required=6.2 tests=[BAYES_95=3,
	BODY_ENHANCEMENT=0.309, BODY_ENHANCEMENT2=0.001, HTML_MESSAGE=0.001,
	RDNS_DYNAMIC=0.1, URI_NOVOWEL=1.62]
Received: from golf1.sanitised ([127.0.0.1])
	by localhost (Golf1.sanitised [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id fSmE7MdYLuzO for <jmh711nsuk@sanitised>;
	Fri, 16 Oct 2009 13:09:05 +0100 (BST)
Received: from host111-111-dynamic.14-87-r.retail.telecomitalia.it (host111-111-dynamic.14-87-r.retail.telecomitalia.it [87.14.111.111])
	by golf1.sanitised (Postfix) with ESMTP id A74C8160FF
	for <jmh711nsuk@sanitised>; Fri, 16 Oct 2009 13:09:04 +0100 (BST)
Received: from 87.14.111.111 by mailhub13.yellgroup.com; Fri, 16 Oct 2009 14:09:00 +0100
Message-ID: <000d01ca4e59$71e59e50$6400a8c0@pangingatcm5>
From: "Major Daley" <pangingatcm5@broadwayplastering.com>
To: <jmh711nsuk@sanitised>
Subject: By enlarging your instrument you will manage to keep up your good name.
Date: Fri, 16 Oct 2009 14:09:00 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01CA4E59.71E59E50"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Reply With Quote