Spam Filter not functioning

[Cracklefish]

I'm running Perfect Server + suse11.1 + ispconfig 3.0.1

spam filter policy = Normal; all options = No
Quarantine options = blank ( I don't know what to put there!)
Tag Levels = 3,6,7,0,0,YES,***SPAM3***, ***SPAM6***
Other = blank, blank, blank, blank, No, No, blank, blank, blank, blank, blank, 0, blank (( I don't know what to put there either!)

all domains and mailboxes have the filter turned on.

I get shed loads of spam in all the boxes every day but never is one tagged.

[ago2guy]

I am by far no expert but while hinting around on an unrelated issue I noticed that the default Client template has some 0's listed as default values in the limits section.

Click on "Client" tab, select the client and then click the Limits tab. About the middle are 3 entries for spam

a.

[till]

Please take a look in the mail headers and check if the spam is marked there.

[Cracklefish]

Looks like it's checking for viruses but not spam, here is a header:

Return-Path: <gvnwyuwts@bonnetts.com>
Received: from localhost (unknown [127.0.0.1])
	by hostname.mydomain.tld (Postfix) with ESMTP id 5030E7E94B
	for <jmh711nsuk@mymaildomain.tld>; Mon, 18 May 2009 02:48:16 +0000 (UTC)
X-Virus-Scanned: amavisd-new at mydomain.tld
Received: from hostname.mydomain.tld ([127.0.0.1])
	by localhost (hostname.mydomain.tld [127.0.0.1]) (amavisd-new, port 10024)
	with ESMTP id HZIBUAg37l8G for <jmh711nsuk@mymaildomain.tld>;
	Mon, 18 May 2009 03:48:00 +0100 (BST)
Received: from f9da499c37964cf (93-181-221-178.adsl.yaroslavl.ru [93.181.221.178])
	by hostname.mydomain.tld (Postfix) with ESMTP id 3ACA57E923
	for <jmh711nsuk@mymaildomain.tld>; Mon, 18 May 2009 03:47:59 +0100 (BST)
Received: from [93.181.221.178] by mail.bonnetts.com; Mon, 18 May 2009 05:48:28 +0300
Message-ID: <01c9d77c$44629e00$b2ddb55d@gvnwyuwts>
From: "no reply" <gvnwyuwts@bonnetts.com>
To: <jmh711nsuk@mymaildomain.tld>
Subject: Mid-sized businessmen alert
Date: Mon, 18 May 2009 05:48:28 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01C9D77C.44629E00"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1437
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1437

This is a multi-part message in MIME format.

------=_NextPart_000_0007_01C9D77C.44629E00
Content-Type: text/plain;
	charset="Windows-1252"
Content-Transfer-Encoding: quoted-printable

[till]

X-Virus-Scanned: amavisd-new at mydomain.tld

There is just this header for spam scanning and antivirus as both is done by amavisd, so the mails had been gone trogh the spam scanner. You should enable debugging in the amavisd 50-user file to get more details and see why they are not tagged.

[Cracklefish]

I don't have any file called 50-user anywhere on the machine. I guess it should be in /etc/ but all I have there is:

/etc/amavis/amavisd.conf
/etc/amavisd.conf
/etc/amavisd.conf.2009-04-27
/etc/amavisd.conf.NEWe

[till]

Please post the output of:

ls -la /etc/amavisd.conf

and

ls -la
/etc/amavis/amavisd.conf

[Cracklefish]

Please can we continue this in 2 weeks time, I am being dragged off to a computer free zone for msomething called a holiday by you know who!

[3cwired_com]

Originally Posted by Cracklefish

I get shed loads of spam in all the boxes every day but never is one tagged.

I am getting similar results, i am using debian lenny, and ispconfig3.

[till]

Then please do the same that I told Cracklefish and especially make a new thread for it.