Navigation

falko · #11 22nd February 2009, 19:50

What's in the header of the spam mails that got through? Are there any SpamAssassin lines?

nandelbosc · #12 22nd February 2009, 22:05

I see a line from antivirus...

Code:

From: "Blake Rossi" <telemaquem@hotmail.com>
To: <admin@elsxukurs.org>
Subject: Re: 
Date: Sun, 22 Feb 2009 21:34:39 +0200
MIME-Version: 1.0
Content-Type: multipart/related;
	boundary="----=_NextPart_000_000E_01C99535.5D6D0180"
Thread-Index: Aca6QHHNGGHMW6TATX9MVIXZAQ255E==
Message-ID: <01c99535$5d6d0180$cd74a74e@telemaquem>

This is a multi-part message in MIME format.

------=_NextPart_000_000E_01C99535.5D6D0180
Content-Type: multipart/alternative; boundary="----=_NextPart_001_000F_01C99535.5D6D0180"

------=_NextPart_001_000F_01C99535.5D6D0180
Content-Type: text/plain; charset="windows-1250"
Content-Transfer-Encoding: 7bit

is so often misunderstood,  Noted pediatrician and author  the �zeros� element of your and why everything   activities  this should be your  in between sips of a martini.  in the shuffle,  piece of accurate 
used in the Java API "There's just such a  of every internal industry In a way that lets you put  For now,  will be provides a  Design Patterns, you'll avoid  for some of  such an attitude neurobiology, cogn
itive   the report says. render you any further services.But you don't just  have the resources,  are unregulated and Head First Design Patterns  balanced with plenty  recommended by In a way that lets you p
ut  children are plopped in  the investments within  what to expect--a visually-rich  stress for children  that these investments or on the real relationship  Ginsburg, the report's lead author and  to a mor
tgage endowment.

------=_NextPart_001_000F_01C99535.5D6D0180
Content-Type: text/html; charset="windows-1250"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">

nandelbosc · #13 22nd February 2009, 22:39

I created a test user (prova(AT)elseudomini.net) and sent (from other domain outside of ISPConfig MSerra@MYOTHERDOMAIN.COM) a GTUBE test, here is the header...

Code:

root@vito:/var/www/www.elseudomini.net/user/10prova/Maildir# cat cur/1235338449.3734_1.vito.elseudomini.net\:2\, 
Return-Path: <MSerra@MYOTHERDOMAIN.COM>
X-Original-To: prova@elseudomini.net
Delivered-To: 10prova@vito.elseudomini.net
Received: from triesmailnou.MYOTHERDOMAIN.COM (unknown [81.47.195.202])
	by vito.elseudomini.net (Postfix) with ESMTP id 269FC13C218
	for <prova@elseudomini.net>; Sun, 22 Feb 2009 22:34:09 +0100 (CET)
Content-Class: urn:content-classes:message
MIME-Version: 1.0
X-Security: message sanitized on vito.elseudomini.net
	See http://www.impsec.org/email-tools/sanitizer-intro.html
	for details. $Revision: 1.151 $Date: 2006-01-20 07:29:24-08 
X-Security: The postmaster has not enabled quarantine of poisoned messages.
Content-Type: multipart/alternative;
	boundary="----_=_NextPart_001_01C99535.209CF747"
Subject: XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X 
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.3959
Date: Sun, 22 Feb 2009 22:32:56 +0100
Message-ID: <ECE3012EF7CA654A86F6753CCE68FFAE6C2F@triesmailnou.MYOTHERDOMAIN.COM>
X-MS-Has-Attach: 
X-MS-TNEF-Correlator: 
Thread-Topic: XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X 
thread-index: AcmVNSCVgbh+LECdQUaZRQ/TuElc4g==
From: "Marc Serra" <MSerra@MYOTHERDOMAIN.COM>
To: <prova@elseudomini.net>
X-Virus-Status: No
X-Virus-Checker-Version: clamassassin 1.2.4 with clamdscan / ClamAV 0.94.1rc1/9023/Sun Feb 22 21:11:47 2009

This is a multi-part message in MIME format.

------_=_NextPart_001_01C99535.209CF747
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X=20

For this user I have this check boxes activated... MailScan, Antispam Filter and Antviritus.

falko · #14 23rd February 2009, 18:36

Hm, hard to tell why this isn't working. Is AppArmor disabled?

nandelbosc · #15 23rd February 2009, 18:56

Now i'm not at work, for this reason i can't check if apparmor is enabled, but ... It's enabled by default? The answer of this question is the answer of your question

nandelbosc · #16 23rd February 2009, 20:43

confirmed... AppArmor is not running

Can I try to reinstall Spamassassin?

falko · #17 24th February 2009, 19:36

I don't think that will help. I think I'm at my wit's end here.

nandelbosc · #18 25th February 2009, 09:03

I'm sorry to hear this, but thank you for your patience!

Furthermore, only I have a question ... I am the only one that happens? Some also use the same virtual machine that I?

Thank's again!

falko · #19 26th February 2009, 19:58

I don't have any problems with SpamAssassin...

nandelbosc · #20 30th March 2009, 00:59

Sorry to re-live this post, but i'm still trying to solve it...

In the mail header you can see ...

Code:

...
Content-type: text/plain; charset=ISO-8859-1
Content-transfer-encoding: 7bit
X-virus-status: No
X-virus-checker-version: clamassassin 1.2.4 with clamscan / ClamAV 0.94.2/9180/Sun Mar 29 22:40:14 2009
X-evolution-source: imap: ...

but we should see a line like this, no?...

Code:

X-UKC-CSSpamCheck-Checker-Version: SpamAssassin  3.2.5-1ubuntu1

why that line is missing?

Navigation

Facebook

News

Recent comments

Newsletter