Re: [AMaViS-user] Spam flagged mail not being discarded

Haines wrote:

>> > Nov 4 07:31:31 teufel amavis[2770]: (02770-03) Not-Delivered,
>> > <internotice4@hotmail.com> -> <brownh@localhost>, quarantine
>> > spam-ea38889258a990fcadce38ba769da151-20051104-073131-02770-03,
>> > Message-ID: <BAY19-F21E8D8A6115E3128FE2CB585600@phx.gbl>,
>> > Hits: 9.687

I do have an explanation. At first it appears this message was
quarantined, but because you have
$spam_quarantine_to = undef;
and
$final_spam_destiny = D_DISCARD;
this message was in fact discarded. This is why it cannot be found.
This is what a discarded message will look like in mail.log.
The next line in your log will say "250 2.7.1 Ok, discarded, UBE,"

Note that you will see very little logging in /var/log/mail.log when
you have:
$log_level = 0;
in amavisd.conf. If you would like to see more details, set $log_level
to a higher value (the range is 0 to 5).

>>
>> So, it passed at 7.6 and quarantined at 9.7. Not what you seem to have
>> configured.
>>

Is it possible you took my advice and set?:
$sa_tag_level_deflt = -999.0;
$sa_tag2_level_deflt = 5.0;
$sa_kill_level_deflt = 8.0;
If so, this would explain this.

>> Also:
>> grep amavisd.conf /usr/sbin/amavisd-new
>> to see which amavisd.conf amavisd-new is looking for.

> The return is: /etc/amavisd.conf

Are you sure this didn't say "/etc/amavis/amavisd.conf"?
I suspect it did. From a previous post, I found you said:

"In /etc/amavis/amavisd.conf, I have:"
So it looks like you are using the Debian version of amavisd-new which
uses /etc/amavis/amavisd.conf. I would think if amavisd-new was looking
for /etc/amavisd.conf, and the file did not exist, the program would
not start.

>> > $virus_quarantine_to = undef;
>> > # $QUARANTINEDIR = '/var/lib/amavis/virusmails'; (commented)
>> > I do have this virusmails directory, but it is empty.
>> > $spam_quarantine_to = undef;

I would *not* comment out:
$QUARANTINEDIR = '/var/lib/amavis/virusmails';
Commenting this out will not prevent messages from being quarantined,
it may only change where they get quarantined to, and that may be a
directory that does not exist, so it may cause problems. Please remove
the #.

> The /var/lib/amavis/razor-agent.log has been running the last two
> days, and seems to recognize mail as being either known spam or not
> known spam. I left its permission 640.

Just so you know, you can stop razor from logging by setting
debuglevel = 0
in razor-agent.conf. Your razor-agent.conf should be either (or both):
/etc/razor/razor-agent.conf
and/or
/var/lib/amavis/.razor/razor-agent.conf


On another subject, make sure all your domains are listed in @local_domains_acl
(including rewritten addresses like 'localhost'):
@local_domains_acl(".$mydomain", '.hartford-hwp.com', 'localhost', 'localhost.localdomain')

Gary V



-------------------------------------------------------
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server. Download
it for free - -and be entered to win a 42" plasma tv or your very own
Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/