Re: [AMaViS-user] README.sql

This is a discussion on Re: [AMaViS-user] README.sql within the Amavis User forums, part of the Anti-Spam and Anti-Virus Related Forums category; > Other than what I mentioned about sending test messages from trusted > users (users in a policy bank that ...


Go Back   Usenet Forums > Anti-Spam and Anti-Virus Related Forums > Amavis User

FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1 (permalink)  
Old 01-17-2008
Rocco Scappatura
 
Posts: n/a
Default Re: [AMaViS-user] README.sql

> Other than what I mentioned about sending test messages from trusted
> users (users in a policy bank that allows spam to pass for example),
> nothing comes to mind.
>
> I would prepare a spam message (gtube for example):
> http://spamassassin.apache.org/gtube/gtube.txt
>
> and send it from a hotmail or yahoo account (that is not whitelisted)
> and place the sender's address in:
>
> @debug_sender_maps = ( ['test-sender@example.com'] );
>
> The first email received from this sender (after amavisd-new is
> reloaded) will log at $log_level 5. I would then look at all the log
> entries for this particular transaction and see if you can discover
> the problem. If not, maybe you could post it to a http server for
> others to look at.


av4:~ # tail -f /var/log/amavis | grep pesce@gmail.com

Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) ESMTP< MAIL
FROM:<pesce@gmail.com> SIZE=3894\r\n
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) ESMTP> 250 2.1.0 Sender
<pesce@gmail.com> OK
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) ESMTP::10024
/var/amavis/scan/amavis-20080117T172354-00340: <pesce@gmail.com> ->
<pesce@pesce.it> SIZE=3894 Received: from av4.sttspa.it ([127.0.0.1]) by
localhost (av4.stt.vir [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
for <pesce@pesce.it>; Thu, 17 Jan 2008 17:26:35 +0100 (CET)
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) find_or_save_addr: record
inserted, id=1522, pesce@gmail.com
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) save_info_preliminary:
1522, pesce@gmail.com, new
Jan 17 17:26:35 av4 amavis[340]: (00340-02-38) Checking: XhbGjz-Z0mgS
[72.14.214.231] <pesce@gmail.com> -> <pesce@pesce.it>
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) wbl: checking sender
<pesce@gmail.com>
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) query_keys:
pesce@gmail.com, pesce@, gmail.com, .gmail.com, .com, .
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_hash(pesce@gmail.com), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup (blacklist_sender)
=> undef, "pesce@gmail.com" does not match
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) query_keys:
pesce@gmail.com, pesce@, gmail.com, .gmail.com, .com, .
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_hash(pesce@gmail.com), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup (whitelist_sender)
=> undef, "pesce@gmail.com" does not match
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_re("pesce@gmail.com"), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) query_keys:
pesce@gmail.com, pesce@, gmail.com, .gmail.com, .com, .
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38)
lookup_hash(pesce@gmail.com), no matches
Jan 17 17:26:42 av4 amavis[340]: (00340-02-38) lookup
(score_sender<pesce@gmail.com>) => undef, "pesce@gmail.com" does not match
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) SPAM-KILL,
<pesce@gmail.com> -> <pesce@pesce.it>, score=999.164, kill=6.31
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) lookup
(spam_quarantine_bysender_to) => undef, "pesce@gmail.com" does not match
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) header: X-Envelope-From:
<pesce@gmail.com>\n
Jan 17 17:26:43 av4 amavis[340]: (00340-02-38) DO_QUARANTINE, sender:
<pesce@gmail.com>



av4:/etc # cat /var/log/mail | grep EB81B7502A2
Jan 17 17:24:45 av4 postfix/smtpd[1464]: EB81B7502A2:
client=hu-out-0506.google.com[72.14.214.231]
Jan 17 17:24:46 av4 postfix/cleanup[834]: EB81B7502A2:
message-id=<44a20bc0801170824j21b79378n4189d31eb32ddd7f@ma il.gmail.com>
Jan 17 17:24:46 av4 postfix/qmgr[405]: EB81B7502A2:
from=<pesce@gmail.com>, size=3894, nrcpt=1 (queue active)
Jan 17 17:26:44 av4 postfix/smtp[2004]: EB81B7502A2: to=<pesce@pesce.it>,
relay=127.0.0.1[127.0.0.1]:10024, conn_use=38, delay=118,
delays=0.65/110/0/8, dsn=4.5.0, status=deferred (host 127.0.0.1[127.0.0.1]
said: 451 4.5.0 Error in processing, id=00340-02-38, quar+notif FAILED:
Explicit forwarding, but not all recips done at /usr/local/sbin/amavisd
line 3083. (in reply to end of DATA command))


Please note all 'RO tables' are empty.

rocsca


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Reply With Quote
Reply
Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is Off
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT +1. The time now is 06:30 AM.


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.0.0