amavis not filtering spam

exodist · 12-15-2005, 12:03 PM

I have a working postfix+amavis setup where postfix passes mail to amavis for checking and when finished amavis passes it back to postfix for delivery.

I used this tutorial: http://gentoo-wiki.com/HOWTO_Email:_...d_SpamAssassin

problem:

amavis is not filtering the messages, it runs some kind of processing, but even when the message has the spam-filter checking string that should trigger the filter:

Quote:

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

it fails to catch it as spam and just passes it back to postfix.

I sent a test message containing that string in the body, spoofed sending as seller@ebay.com just to make sure the thing screamed spam.

here is a snippet from the amavis log:

Code:

Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP> 250 2.5.0 Ok XFORWARD
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 6: was busy, 0.4 ms, total idle 0.001 s, busy 0.005 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 5: was idle, 0.1 ms, total idle 0.001 s, busy 0.005 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after reading SMTP command: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP< MAIL FROM:<buy@ebay.com> SIZE=620\r\n
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after MAIL FROM received - timer reset: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) check_mail_begin_task: task_count=1
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prepare_tempdir: creating directory /var/amavis/tmp/amavis-20051215T093445-08103
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prepare_tempdir: creating file /var/amavis/tmp/amavis-20051215T093445-08103/email.txt
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (debug_sender) => undef, "buy@ebay.com" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP> 250 2.1.0 Sender buy@ebay.com OK
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 6: was busy, 1.8 ms, total idle 0.001 s, busy 0.007 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 5: was idle, 0.1 ms, total idle 0.001 s, busy 0.007 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after reading SMTP command: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP< RCPT TO:<cgranum@garymckelvey.com>\r\n
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP> 250 2.1.5 Recipient cgranum@garymckelvey.com OK
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 6: was busy, 0.5 ms, total idle 0.001 s, busy 0.008 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 5: was idle, 0.1 ms, total idle 0.001 s, busy 0.008 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after reading SMTP command: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP< DATA\r\n
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after DATA received - timer reset: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP::10024 /var/amavis/tmp/amavis-20051215T093445-08103: <buy@ebay.com> -> <cgranum@gary
mckelvey.com> Received: SIZE=620 from gma-web.garymckelvey.com ([127.0.0.1]) by localhost (mail.garymckelvey.com [127.0.0.1]) (amavisd-new, port 10024) with LMTP i
d 08103-01 for <cgranum@garymckelvey.com>; Thu, 15 Dec 2005 09:34:45 -0800 (PST)
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP> 354 End data with <CR><LF>.<CR><LF>
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP< .\r\n
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) setting body type: 7BIT (0,0)
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) body hash: 9b931d26ba7682b06b8f83544b5e5657
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Original mail size: 620; quota set to: 310000 bytes
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Checking: vFLOECxYwOLk [192.168.3.105] <buy@ebay.com> -> <cgranum@garymckelvey.com>
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) query_keys: cgranum@garymckelvey.com, cgranum@, garymckelvey.com, .garymckelvey.com, .com
, .
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_hash(cgranum@garymckelvey.com), no matches
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (bypass_virus_checks) => undef, "cgranum@garymckelvey.com" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Extracting mime components
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Issued a new file name: p001
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Charging 70 bytes to remaining quota 310000 (out of 310000, (0%)) - by mime_decode
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) p001 1 Content-Type: text/plain, size: 70 B, name: 
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after mime_decode-1: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) decode_parts: level=1, #parts=1 : p001
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) run_command: [8112] /usr/bin/file p001 </dev/null 2>&1
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) result line from file(1): p001: ASCII text
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_re("ASCII text") matches key "(?i-xsm:^(ASCII|text)\b)", result="asc"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (map_full_type_to_short_type) => true,  "ASCII text" matches, result="asc", matchi
ng_key="(?i-xsm:^(ASCII|text)\\b)"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) File-type of p001: ASCII text; (asc)
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) do_ascii: Decoding part p001
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) do_ascii: Decoding part p001 (0 items), uulib V0.5pl20
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) decompose_part: p001 - atomic
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after parts_decode: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) query_keys: cgranum@garymckelvey.com, cgranum@, garymckelvey.com, .garymckelvey.com, .com
, .
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_hash(cgranum@garymckelvey.com), no matches
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (bypass_header_checks) => undef, "cgranum@garymckelvey.com" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) check_header: OK
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Checking for banned types and filenames
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) query_keys: cgranum@garymckelvey.com, cgranum@, garymckelvey.com, .garymckelvey.com, .com
, .
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_hash(cgranum@garymckelvey.com), no matches
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (bypass_banned_checks) => undef, "cgranum@garymckelvey.com" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup: (scalar) matches, result="DEFAULT"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (banned_filename), 1 matches for "cgranum@garymckelvey.com", results: "(constant:D
EFAULT)"=>"DEFAULT"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) collect banned table[0]: cgranum@garymckelvey.com, tables: DEFAULT=>Amavis::Lookup::RE=AR
RAY(0xbaaf60)
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) starting banned checks - traversing message structure tree
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) check_for_banned (p001) text/plain,.asc
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) doing banned check for cgranum@garymckelvey.com on text/plain,.asc
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_re(["text/plain",".asc"]), no matches
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (check_bann:cgranum@garymckelvey.com) => undef, ["text/plain",".asc"] does not mat
ch
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) p.path cgranum@garymckelvey.com: "P=p001,L=1,M=text/plain,T=asc"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) banned check: any=0, all=N (1)
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_re("MAIL"), no matches
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (keep_decoded_original) => undef, "MAIL" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) WARN: all primary virus scanners failed, considering backups
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Using (ClamAV-clamscan): /usr/bin/clamscan --stdout --disable-summary -r --tempdir=/var/a
mavis/tmp /var/amavis/tmp/amavis-20051215T093445-08103/parts
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) run_command: [8113] /usr/bin/clamscan --stdout --disable-summary -r --tempdir=/var/amavis
/tmp /var/amavis/tmp/amavis-20051215T093445-08103/parts </dev/null 2>&1
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) run_av: /usr/bin/clamscan exit 0, /var/amavis/tmp/amavis-20051215T093445-08103/parts/p001
: OK
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) run_av (ClamAV-clamscan): CLEAN
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after virus_scan: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) query_keys: cgranum@garymckelvey.com, cgranum@, garymckelvey.com, .garymckelvey.com, .com
, .
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_hash(cgranum@garymckelvey.com), no matches
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (bypass_virus_checks) => undef, "cgranum@garymckelvey.com" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) no anti-spam code loaded, skipping spam_scan
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup: (scalar) matches, result="6.31"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (spam_kill_level) => true,  "cgranum@garymckelvey.com" matches, result="6.31", mat
ching_key="(constant:6.31)"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) header: Received: from gma-web.garymckelvey.com ([127.0.0.1])\n by localhost (mail.garymc
kelvey.com [127.0.0.1]) (amavisd-new, port 10024)\n with LMTP id 08103-01 for <cgranum@garymckelvey.com>;\n Thu, 15 Dec 2005 09:34:45 -0800 (PST)\n
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_acl(cgranum@garymckelvey.com), no match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (local_domains) => undef, "cgranum@garymckelvey.com" does not match
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) headers CLUSTERING: NEW CLUSTER <cgranum@garymckelvey.com>: score=x, tag=0, tag2=0, subj=
0, subj_u=0, local=0, bl=, s=
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) header: X-Virus-Scanned: amavisd-new at mail.garymckelvey.com\n
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) headers CLUSTERING: done all 1 recips in one go
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) (about to connect to [127.0.0.1]:10025) FWD via SMTP: <buy@ebay.com> -> <cgranum@garymcke
lvey.com>
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Remote host presents itself as: localhost.akadia.com
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-connect: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) sending XFORWARD ADDR=192.168.3.105 PROTO=ESMTP HELO=[192.168.3.105]
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-xforward: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) AUTH not needed, user='', MTA offers ''
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-mail-from: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) response to RCPT TO for <cgranum@garymckelvey.com>: "250 Ok"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-rcpt-to: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) response to DATA: "354 End data with <CR><LF>.<CR><LF>"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) write_header: 0, Amavis::Out=HASH(0x1daaa00)
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-data: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-data-end: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) response to data end: "250 Ok: queued as 9D89788F9"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after fwd-rundown-1: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) FWD via SMTP: <buy@ebay.com> -> <cgranum@garymckelvey.com>, 250 2.6.0 Ok, id=08103-01, fr
om MTA([127.0.0.1]:10025): 250 Ok: queued as 9D89788F9
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after forwarding: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) one_response_for_all <buy@ebay.com>: success, r=0,b=0,d=0, dsn_needed=0, '250 2.6.0 Ok, i
d=08103-01, from MTA([127.0.0.1]:10025): 250 Ok: queued as 9D89788F9'
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) warnsender_with_pass=0 (,,,), dsn_needed=0, cnt=, exit=0, 250 2.6.0 Ok, id=08103-01, from
 MTA([127.0.0.1]:10025): 250 Ok: queued as 9D89788F9
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after delivery-notification: remaining time = 300 s
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup: (scalar) matches, result="6.31"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup (spam_tag2_level) => true,  "cgranum@garymckelvey.com" matches, result="6.31", mat
ching_key="(constant:6.31)"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_ip_acl (mynetworks): key="192.168.3.105" matches "192.168.0.0/16", result=1
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) parse_received: from = [192.168.3.105] (unknown [192.168.3.105])\t/[192.168.3.105]/unknow
n/192.168.3.105
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) parse_received: by = gma-web.garymckelvey.com /gma-web.garymckelvey.com//
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) parse_received: with = ESMTP /ESMTP //
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) parse_received: id = 0876D88F4\t/0876D88F4\t//
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) parse_received: for = <cgranum@garymckelvey.com>/<cgranum@garymckelvey.com>//
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) parse_received: ; = Thu, 15 Dec 2005 09:34:44 -0800 (PST)/Thu, 15 Dec 2005 09:34:44 -0800
 (PST)//
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) fish_out_ip_from_received: 192.168.3.105, [192.168.3.105] (unknown [192.168.3.105])\t
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) lookup_ip_acl (publicnetworks): key="192.168.3.105" matches "!192.168.0.0/16", result=0
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) best_try_originator_ip: 192.168.3.105
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) Passed CLEAN, LOCAL [192.168.3.105] [192.168.3.105] <buy@ebay.com> -> <cgranum@garymckelv
ey.com>, Message-ID: <43A1A902.3040204@ebay.com>, mail_id: vFLOECxYwOLk, Hits: -, 660 ms
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) updating snmp variables
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) sending LMTP response for <cgranum@garymckelvey.com>: "250 2.6.0 Ok, id=08103-01, from MT
A([127.0.0.1]:10025): 250 Ok: queued as 9D89788F9"
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) timer stopped after DATA end
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) strip_tempdir: /var/amavis/tmp/amavis-20051215T093445-08103
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) rmdir_recursively: /var/amavis/tmp/amavis-20051215T093445-08103/parts, excl=1
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) TIMING [total 663 ms] - SMTP LHLO: 5 (1%)1, SMTP pre-MAIL: 2 (0%)1, mkdir tempdir: 0 (0%)
1, create email.txt: 0 (0%)1, SMTP pre-DATA-flush: 3 (0%)2, SMTP DATA: 35 (5%)7, body_digest: 1 (0%)7, gen_mail_id: 1 (0%)7, mkdir parts: 0 (0%)7, mime_decode: 8 (
1%)8, get-file-type1: 6 (1%)9, decompose_part: 1 (0%)9, parts_decode: 0 (0%)9, AV-scan-1: 470 (71%)80, update_cache: 2 (0%)81, fwd-connect: 22 (3%)84, fwd-xforward
: 0 (0%)84, fwd-mail-from: 1 (0%)84, fwd-rcpt-to: 11 (2%)86, write-header: 1 (0%)86, fwd-data: 0 (0%)86, fwd-data-end: 70 (11%)97, fwd-rundown: 11 (2%)98, main_log
_entry: 10 (2%)100, update_snmp: 1 (0%)100, unlink-1-files: 1 (0%)100, rundown: 0 (0%)100
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP> 250 2.6.0 Ok, id=08103-01, from MTA([127.0.0.1]:10025): 250 Ok: queued as 9D89788F9
Dec 15 09:34:45 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 6: was busy, 683.5 ms, total idle 0.001 s, busy 0.691 s
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, 5: was idle, 99986.9 ms, total idle 99.988 s, busy 0.691 s
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) prolong_timer after reading SMTP command: remaining time = 0 s
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP< QUIT\r\n
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) LMTP> 221 2.0.0 [127.0.0.1] amavisd-new closing transmission channel
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) post_process_request_hook: timer stopped
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) idle_proc, bye: was busy, 1.7 ms, total idle 99.988 s, busy 0.693 s
Dec 15 09:36:25 mail.garymckelvey.com /usr/sbin/amavisd[8103]: (08103-01) load: 1 %, total idle 99.988 s, busy 0.693 s

the config file is so large that I cannot post it, if a section is needed to help please ask for the specific section.

bigrigdriver · 12-16-2005, 11:44 PM

OK. amavis processes the mail and sends it back to postfix. Maybe this is good; maybe not.

Amavis is a mail-virus scanner, not a spam filter. If your filters are set up correctly, you are sending virus-free mail back to postfix. This is good.

If you also want spam filtering, you need to go back into amavis setup and have amavis send the mail to spamassassin to filter out the spam. Then have spamassassin send the filtered mail back to postfix.

Or, you may have to send the mail back to postfix, then have postfix send it to spamassassin to filter out the spam before sending it back to postfix.

I don't know for certain which you will have to do it. My ISP sends mail through such a torturous route, it's impossible to setup postfix/amavis/spamassassin until the mail actually arrives on my machine. Then it may be too late. I have to trust the ISPs virus scan. The spam filters leave a lot to be desired. I have a choice of this ISP, or no internet connection; so I'm stuck between a rock and a hard place.