Amavisd.conf vs. X-Spam-Status

Hello, all--
I'm seeing lots of spam come through with a 'negative' score
(X-Spam-Status: No, hits=-5.541, for example.)
I have amavisd.conf configured to tag at 1.4 and kill at 5.
1.4 seems quite aggressive, and I wouldn't feel comfortable going much lower. How is spam going to get caught when most of it is scoring way under 1.4---way under zero, for that matter? Any tips/insights greatly appreciated.
BTW, I am training SA nightly, using spamtrainer.
Thanks very much--
Xserve   Mac OS X (10.4.8)  

Hi Pterobyte--
The symlink issue is fixed, and I'm not using virtual domains. Here are some headers:
Return-Path: <[email protected]>
Received: from murder ([unix socket])
by ourdomain.com (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Sat, 30 Dec 2006 13:15:08 -0800
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by mail.ourdomain.com (Postfix) with ESMTP id 82DB1A2DA15;
Sat, 30 Dec 2006 13:15:08 -0800 (PST)
Received: from mail.ourdomain.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 08580-01; Sat, 30 Dec 2006 13:15:00 -0800 (PST)
Received: from aapu115.neoplus.adsl.tpnet.pl (aapu115.neoplus.adsl.tpnet.pl [83.5.154.115])
by mail.ourdomain.com (Postfix) with ESMTP id B40E2A2D9ED;
Sat, 30 Dec 2006 13:14:58 -0800 (PST)
Received: from 65.254.254.51 (HELO mx.yemenia.com)
by ourdomain.com with esmtp (AA?,0+/HNBS .3)56.)
id -A1/A3--,LS-H-=.
for [email protected]; Sat, 30 Dec 2006 21:16:47 -0060
Date: Sat, 30 Dec 2006 21:16:47 -0060
From: "Hallie Coffey" <[email protected]>
X-Mailer: The Bat! (v3.5) UNREG / CD5BF9353B3B7091
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: [email protected]
Subject: Best prices for you
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------2CBD3AE925FF8BD"
X-Spam: Not detected
X-Virus-Scanned: by amavisd-new at ourdomain.com
X-Spam-Status: No, hits=-0.377 tagged_above=-999 required=1.3 tests=BAYES_05,
HTML4050, HTML_MESSAGE
X-Spam-Level:
#########Another Header:###########
Return-Path: <[email protected]>
Received: from murder ([unix socket])
by ourdomain.com (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Mon, 01 Jan 2007 04:50:27 -0800
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by mail.ourdomain.com (Postfix) with ESMTP id 0F5A5A337B9
for <[email protected]>; Mon, 1 Jan 2007 04:50:27 -0800 (PST)
Received: from mail.ourdomain.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 28204-07 for <[email protected]>;
Mon, 1 Jan 2007 04:50:19 -0800 (PST)
Received: from mail.mycommail.com (unknown [58.38.72.51])
by mail.ourdomain.com (Postfix) with ESMTP id 29157A33798
for <[email protected]>; Mon, 1 Jan 2007 04:50:16 -0800 (PST)
Received: from 211.238.198.67 (HELO mail.080flower.com)
by ourdomain.com with esmtp (FF.7LH,RM1L O/PE,)
id 6-23/4-C(YT(/-9*
for [email protected]; Mon, 1 Jan 2007 12:50:31 -0480
Message-ID: <01c72da3$6be30df0$6c822ecf@flower>
From: "Kirk Ayala" <[email protected]>
To: <[email protected]>
Subject: Ideal Refinance approved
Date: Mon, 1 Jan 2007 12:50:31 -0480
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=NextPart_000_000701C72DE6.7A064DF0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400
X-Virus-Scanned: by amavisd-new at ourdomain.com
X-Spam-Status: No, hits=-1.625 tagged_above=-999 required=1.3 tests=BAYES_00,
DATEIN_FUTURE_0306, HTML5060, HTML_MESSAGE, MIMEQP_LONGLINE
X-Spam-Level:
#########One More Header:###########
Return-Path: <[email protected]>
Received: from murder ([unix socket])
by ourdomain.com (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Fri, 29 Dec 2006 01:52:03 -0800
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by mail.ourdomain.com (Postfix) with ESMTP id CBCBEA244A3
for <[email protected]>; Fri, 29 Dec 2006 01:52:03 -0800 (PST)
Received: from mail.ourdomain.com ([127.0.0.1])
by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP
id 03710-09 for <[email protected]>;
Fri, 29 Dec 2006 01:51:56 -0800 (PST)
Received: from SpeedTouch.lan (unknown [85.101.255.39])
by mail.ourdomain.com (Postfix) with ESMTP id 88DACA2447E
for <[email protected]>; Fri, 29 Dec 2006 01:51:55 -0800 (PST)
Received: from 213.221.253.152 (HELO spam.redmouse.ch)
by ourdomain.com with esmtp (SM25),)YX3 M0V)NJ)
id D+@=(5-4HM@TB-..
for [email protected]; Fri, 29 Dec 2006 09:51:58 -0120
From: "Eric White" <[email protected]>
To: <[email protected]>
Subject: Get our medications at a special Christmas price.
Date: Fri, 29 Dec 2006 09:51:58 -0120
Message-ID: <01c72b2e$fb4a9ed0$6c822ecf@barnolde>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=NextPart_000_000601C72B3F.BED36ED0"
X-Mailer: Microsoft Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Thread-Index: Aca6Q>>'23)36GM'./=2,LV-0K@9A.==
X-Virus-Scanned: by amavisd-new at Our-Server1.local
X-Spam-Status: No, hits=-2.559 tagged_above=-999 required=1.7 tests=BAYES_00,
HTML_MESSAGE, MIMEQP_LONGLINE
X-Spam-Level:
Thanks for your assistance.
Xserve   Mac OS X (10.4.8)  
Xserve   Mac OS X (10.4.8)  

Similar Messages

  • Which socket to use in amavisd.conf for clamav??

    Hi!
    I just updated clamav and amavisd with the help of Alex' excellent tutorials.
    Everything worked as expected, mails also get received, but regarding the logfiles there is an error with the clamav socket in the amavisd.conf file.
    Jul 28 09:41:20 knserver amavis[28447]: (28447-01) (!)ClamAV-clamd: Can't connect to UNIX socket /var/clamav/clamd.sock: Connection refused, retrying (2)
    Jul 28 09:41:26 knserver amavis[28447]: (28447-01) (!)run_av (ClamAV-clamd, built-in i/f): Too many retries to talk to /var/clamav/clamd.sock (Can't connect to UNIX socket /var/clamav/clamd.sock: Connection refused) at (eval 43) line 310.
    Jul 28 09:41:26 knserver amavis[28447]: (28447-01) (!!)ClamAV-clamd av-scanner FAILED: CODE(0x1801470) Too many retries to talk to /var/clamav/clamd.sock (Can't connect to UNIX socket /var/clamav/clamd.sock: Connection refused) at (eval 43) line 310. at (eval 43) line 511.
    I looked in the original amavisd.conf file, there has been the same entry!
    What to do?

    I once again read the whole tutorial. I also tried the tip with switching from clamscan to clamd. So I replaced the the socket entry "/var/clamav/clamd.sock" with "/tmp/clamd". Sadly I still get the same errors. Of course I also tried "/var/amavis/clamd" with no luck...
    Rebooting has been done, reloading the processes with the launchctl tool also.
    Jul 28 11:22:55 knserver amavis[285]: (00285-02) (!)ClamAV-clamd: Can't connect to UNIX socket /tmp/clamd: No such file or directory, retrying (2)
    Jul 28 11:23:01 knserver amavis[285]: (00285-02) (!)run_av (ClamAV-clamd, built-in i/f): Too many retries to talk to /tmp/clamd (Can't connect to UNIX socket /tmp/clamd: No such file or directory) at (eval 43) line 310.
    Jul 28 11:23:01 knserver amavis[285]: (00285-02) (!!)ClamAV-clamd av-scanner FAILED: CODE(0x1801470) Too many retries to talk to /tmp/clamd (Can't connect to UNIX socket /tmp/clamd: No such file or directory) at (eval 43) line 310. at (eval 43) line 511.
    Jul 28 11:23:01 knserver amavis[285]: (00285-02) (!!)WARN: all primary virus scanners failed, considering backups
    Please help! Thx.

  • Spam Status :(import_proper)

    Dear All,
    We are Using SAP Enterprise Ecc6 on Windows 2003 Server and oracle-10.2.01.1.0
    as database.
    my kernel 700 with patch 185, tp version 372.04.40, r3trans version 6.14 (release 700 - 16.10.08 - 16:26:00)
    During SPAM patch SAPKA70010 update i am getting below error message.
    The import was stopped, since an error occurred during the phase
    Software component : Sap_ABA
    Spam Status :(import_proper)
    Current Action : Queue  import (in back ground)
    which the Support Package Manager is unable to
    resolve its hunge
    tp-system log =error:ERROR: stopping on error 12 during TBATG CREATION OF ENQUEUE OBJECTS
    Slog:
    START CMDIMPORT            ACC L      20090422153436              DDIC         oiam 20090422153435     
    STOP  CMDIMPORT            ACC L      20090422153500              DDIC         oiam 20090422153435     
    START DD IMPORT            ACC H      20090422153915              DDIC         oiam 20090422153914     
    STOP  DD IMPORT            ACC H      20090422154143              DDIC         oiam 20090422153914     
    START DD ACTIVATION        ACC A      20090422154805              DDIC         oiam                    
    START tp_getprots          ACC J      20090422154805              DDIC         oiam                    
    ERROR: RFC function TRINT_PROGRESS_INDICATOR error: SYSTEM_FAILURE
    ERROR: RFC function TRINT_PROGRESS_INDICATOR returned 18
    STOP  tp_getprots          ACC J      20090422155952              DDIC         oiam                    
    STOP  DD ACTIVATION        ACC A      20090422155952              DDIC         oiam                    
    START imp all              ACC        20090422170815              BASIS        oiam 20090422170815     
    INFO: event SAP_IMPORT_START triggered successfully
    START SET STOPMARK         ACC        20090422170815              BASIS        oiam 20090422170815     
    INFO: Buffer saved as
    oiam\sapmnt\trans\buffer\ACCSAV.
    STOP  SET STOPMARK         ACC        20090422170816              BASIS        oiam 20090422170815     
    START DISTRIBUTION OF DD-O ACC S      20090422170816              BASIS        oiam 20090422170815     
    START tp_getprots          ACC S      20090422170817              BASIS        oiam 20090422170815     
    STOP  tp_getprots          ACC S      20090422170912              BASIS        oiam 20090422170815     
    STOP  DISTRIBUTION OF DD-O ACC S      20090422170912              BASIS        oiam 20090422170815     
    START TBATG CONVERSION OF  ACC N      20090422170912              BASIS        oiam 20090422170815     
    START tp_getprots          ACC N      20090422170912              BASIS        oiam 20090422170815     
    STOP  tp_getprots          ACC N      20090422170958              BASIS        oiam 20090422170815     
    STOP  TBATG CONVERSION OF  ACC N      20090422170958              BASIS        oiam 20090422170815     
    START MOVE NAMETABS        ACC 6      20090422170958              BASIS        oiam 20090422170815     
    START tp_getprots          ACC P      20090422170958              BASIS        oiam 20090422170815     
    STOP  tp_getprots          ACC P      20090422171623              BASIS        oiam 20090422170815     
    STOP  MOVE NAMETABS        ACC 6      20090422171623              BASIS        oiam 20090422170815     
    START TBATG CREATION OF EN ACC n      20090422171624              BASIS        oiam 20090422170815     
    START tp_getprots          ACC Y      20090422171624              BASIS        oiam 20090422170815     
    WARNING: System ACC. Warning.        20090422175239 :
    ERROR:       The following call returned with exit code -100:
    ERROR:         sapevt.exe SAP_TRIGGER_RDDIMPDP -t name=ACC
    ERROR:       Background jobs cannot be started.
    ERROR:       Please check trace file dev_evt.
    WARNING:       (This warning is harmless if no further warnings follow.)
    WARNING: System ACC. Warning.        20090422175648 :
    ERROR:       The following call returned with exit code -100:
    ERROR:         sapevt.exe SAP_TRIGGER_RDDIMPDP -t name=ACC
    ERROR:       Background jobs cannot be started.
    ERROR:       Please check trace file dev_evt.
    WARNING:       (This warning is harmless if no further warnings follow.)
    STOP  imp all              ACC   7006 20090422175812              BASIS        oiam 20090422170815     
    START imp all              ACC        20090422202941              BASIS        oiam 20090422202940     
    INFO: event SAP_IMPORT_START triggered successfully
    START DD IMPORT            ACC H      20090422202941              BASIS        oiam 20090422202940     
    STOP  DD IMPORT            ACC H      20090422203224              BASIS        oiam 20090422202940     
    START DD ACTIVATION        ACC A      20090422203225              BASIS        oiam 20090422202940     
    START tp_getprots          ACC J      20090422203225              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC J      20090422204242              BASIS        oiam 20090422202940     
    STOP  DD ACTIVATION        ACC A      20090422204242              BASIS        oiam 20090422202940     
    START DISTRIBUTION OF DD-O ACC S      20090422204242              BASIS        oiam 20090422202940     
    START tp_getprots          ACC S      20090422204242              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC S      20090422204257              BASIS        oiam 20090422202940     
    STOP  DISTRIBUTION OF DD-O ACC S      20090422204257              BASIS        oiam 20090422202940     
    INFO  TBATG CONVERSION OF  ACC N      not needed                  BASIS        oiam 20090422202940     
    START MOVE NAMETABS        ACC 6      20090422204258              BASIS        oiam 20090422202940     
    START tp_getprots          ACC P      20090422204258              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC P      20090422204403              BASIS        oiam 20090422202940     
    STOP  MOVE NAMETABS        ACC 6      20090422204403              BASIS        oiam 20090422202940     
    START MAIN IMPORT          ACC I      20090422204403              BASIS        oiam 20090422202940     
    STOP  MAIN IMPORT          ACC I      20090422213315              BASIS        oiam 20090422202940     
    START tp_getprots          ACC Y      20090422213315              BASIS        oiam 20090422202940     
    ERROR ALL                  ACC n 0012 20090422213510              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC Y      20090422213521              BASIS        oiam 20090422202940     
    START TBATG CREATION OF EN ACC n      20090422213521              BASIS        oiam 20090422202940     
    START tp_getprots          ACC Y      20090422213521              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC Y      20090422213522              BASIS        oiam 20090422202940     
    STOP  TBATG CREATION OF EN ACC n      20090422213523              BASIS        oiam 20090422202940     
    ERROR: stopping on error 12 during TBATG CREATION OF ENQUEUE OBJECTS
    START INFORM SAP-SYSTEM OF ACC Q      20090422213523              BASIS        oiam 20090422202940     
    START tp_getprots          ACC Q      20090422213523              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC Q      20090422213524              BASIS        oiam 20090422202940     
    STOP  INFORM SAP-SYSTEM OF ACC Q      20090422213524              BASIS        oiam 20090422202940     
    STOP  imp all              ACC   0012 20090422213524              BASIS        oiam 20090422202940  
    *Alog:*
    ALL                  ACC.ALL t 0000 20090420203835              accadm       oiam 20090420203834001540
    ALL                  ACC.ALL t 0000 20090422153351              DDIC         oiam                    
    SAPKB70010           ACC.ALL m 0000 20090422153411 SAPUSER      DDIC         oiam                    
    SAPKA70010           ACC.ALL m 0000 20090422153432 SAPUSER      DDIC         oiam                    
    SAPKB70010           ACC.ALL L 0004 20090422153454 SAPUSER      DDIC         oiam 20090422153435     
    SAPKA70010           ACC.ALL L 0004 20090422153500 SAPUSER      DDIC         oiam 20090422153435     
    SAPKB70010           ACC.ALL P 0004 20090422153527 SAPUSER      DDIC         oiam 20090422153510     
    SAPKA70010           ACC.ALL P 0004 20090422153533 SAPUSER      DDIC         oiam 20090422153510     
    SAPKB70010           ACC.ALL H 0004 20090422154048 SAPUSER      DDIC         oiam 20090422153914     
    SAPKA70010           ACC.ALL H 0004 20090422154142 SAPUSER      DDIC         oiam 20090422153914     
    ALL                  ACC.ALL t 0000 20090422154804              DDIC         oiam                    
    SAPKA70010           ACC.ALL A 0004 20090422155946 SAPUSER      DDIC         oiam                    
    SAPKB70010           ACC.ALL A 0004 20090422155946 SAPUSER      DDIC         oiam                    
    ALL                  ACC.ALL t 0000 20090422161849              DDIC         oiam                    
    ALL                  ACC.ALL t 0000 20090422162554              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422162652              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422162730              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422162829              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422164156              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422164221              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422164641              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422164807              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422170106              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422170322              BASIS        oiam                    
    ALL                  ACC.ALL a 0000 20090422170816              BASIS        oiam 20090422170815     
    ALL                  ACC.ALL S 0000 20090422170904              BASIS        oiam 20090422170815     
    ALL                  ACC.ALL N 0000 20090422170949              BASIS        oiam 20090422170815     
    ALL                  ACC.ALL 6 0004 20090422171620              BASIS        oiam 20090422170815     
    ALL                  ACC.ALL t 0000 20090422174340              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422174634              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422181013              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422184657              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422200323              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422201626              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422202939              BASIS        oiam                    
    SAPKB70010           ACC.ALL H 0004 20090422203144 SAPUSER      BASIS        oiam 20090422202940     
    SAPKA70010           ACC.ALL H 0004 20090422203223 SAPUSER      BASIS        oiam 20090422202940     
    SAPKA70010           ACC.ALL A 0004 20090422204239 SAPUSER      BASIS        oiam 20090422202940     
    SAPKB70010           ACC.ALL A 0004 20090422204239 SAPUSER      BASIS        oiam 20090422202940     
    ALL                  ACC.ALL S 0000 20090422204255              BASIS        oiam 20090422202940     
    ALL                  ACC.ALL 6 0000 20090422204402              BASIS        oiam 20090422202940     
    SAPKB70010           ACC.ALL I 0004 20090422212459 SAPUSER      BASIS        oiam 20090422202940     
    SAPKA70010           ACC.ALL I 0004 20090422213312 SAPUSER      BASIS        oiam 20090422202940     
    ALL                  ACC.ALL n 0012 20090422213510              BASIS        oiam 20090422202940     
    ALL                  ACC.ALL n 0000 20090422213522              BASIS        oiam 20090422202940     
    ALL                  ACC.ALL Q 0000 20090422213523              BASIS        oiam 20090422202940     
    SAPKB70010           ACC.ALL m 0000 20090422215948 SAPUSER      BASIS        oiam                    
    SAPKA70010           ACC.ALL m 0000 20090422220101 SAPUSER      BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422220209              BASIS        oiam                    
    ALL                  ACC.ALL t 0000 20090422232136              TMSADM       oiam                       
    thanks for support
    Keshava

    *Slog:*
    START CMDIMPORT            ACC L      20090422153436              DDIC         oiam 20090422153435     
    STOP  CMDIMPORT            ACC L      20090422153500              DDIC         oiam 20090422153435     
    START DD IMPORT            ACC H      20090422153915              DDIC         oiam 20090422153914     
    STOP  DD IMPORT            ACC H      20090422154143              DDIC         oiam 20090422153914     
    START DD ACTIVATION        ACC A      20090422154805              DDIC         oiam                    
    START tp_getprots          ACC J      20090422154805              DDIC         oiam                    
    ERROR: RFC function TRINT_PROGRESS_INDICATOR error: SYSTEM_FAILURE
    ERROR: RFC function TRINT_PROGRESS_INDICATOR returned 18
    STOP  tp_getprots          ACC J      20090422155952              DDIC         oiam                    
    STOP  DD ACTIVATION        ACC A      20090422155952              DDIC         oiam                    
    START imp all              ACC        20090422170815              BASIS        oiam 20090422170815     
    INFO: event SAP_IMPORT_START triggered successfully
    START SET STOPMARK         ACC        20090422170815              BASIS        oiam 20090422170815     
    INFO: Buffer saved as
    oiam\sapmnt\trans\buffer\ACCSAV.
    STOP  SET STOPMARK         ACC        20090422170816              BASIS        oiam 20090422170815     
    START DISTRIBUTION OF DD-O ACC S      20090422170816              BASIS        oiam 20090422170815     
    START tp_getprots          ACC S      20090422170817              BASIS        oiam 20090422170815     
    STOP  tp_getprots          ACC S      20090422170912              BASIS        oiam 20090422170815     
    STOP  DISTRIBUTION OF DD-O ACC S      20090422170912              BASIS        oiam 20090422170815     
    START TBATG CONVERSION OF  ACC N      20090422170912              BASIS        oiam 20090422170815     
    START tp_getprots          ACC N      20090422170912              BASIS        oiam 20090422170815     
    STOP  tp_getprots          ACC N      20090422170958              BASIS        oiam 20090422170815     
    STOP  TBATG CONVERSION OF  ACC N      20090422170958              BASIS        oiam 20090422170815     
    START MOVE NAMETABS        ACC 6      20090422170958              BASIS        oiam 20090422170815     
    START tp_getprots          ACC P      20090422170958              BASIS        oiam 20090422170815     
    STOP  tp_getprots          ACC P      20090422171623              BASIS        oiam 20090422170815     
    STOP  MOVE NAMETABS        ACC 6      20090422171623              BASIS        oiam 20090422170815     
    START TBATG CREATION OF EN ACC n      20090422171624              BASIS        oiam 20090422170815     
    START tp_getprots          ACC Y      20090422171624              BASIS        oiam 20090422170815     
    WARNING: System ACC. Warning.        20090422175239 :
    ERROR:       The following call returned with exit code -100:
    ERROR:         sapevt.exe SAP_TRIGGER_RDDIMPDP -t name=ACC
    ERROR:       Background jobs cannot be started.
    ERROR:       Please check trace file dev_evt.
    WARNING:       (This warning is harmless if no further warnings follow.)
    WARNING: System ACC. Warning.        20090422175648 :
    ERROR:       The following call returned with exit code -100:
    ERROR:         sapevt.exe SAP_TRIGGER_RDDIMPDP -t name=ACC
    ERROR:       Background jobs cannot be started.
    ERROR:       Please check trace file dev_evt.
    WARNING:       (This warning is harmless if no further warnings follow.)
    STOP  imp all              ACC   7006 20090422175812              BASIS        oiam 20090422170815     
    START imp all              ACC        20090422202941              BASIS        oiam 20090422202940     
    INFO: event SAP_IMPORT_START triggered successfully
    START DD IMPORT            ACC H      20090422202941              BASIS        oiam 20090422202940     
    STOP  DD IMPORT            ACC H      20090422203224              BASIS        oiam 20090422202940     
    START DD ACTIVATION        ACC A      20090422203225              BASIS        oiam 20090422202940     
    START tp_getprots          ACC J      20090422203225              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC J      20090422204242              BASIS        oiam 20090422202940     
    STOP  DD ACTIVATION        ACC A      20090422204242              BASIS        oiam 20090422202940     
    START DISTRIBUTION OF DD-O ACC S      20090422204242              BASIS        oiam 20090422202940     
    START tp_getprots          ACC S      20090422204242              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC S      20090422204257              BASIS        oiam 20090422202940     
    STOP  DISTRIBUTION OF DD-O ACC S      20090422204257              BASIS        oiam 20090422202940     
    INFO  TBATG CONVERSION OF  ACC N      not needed                  BASIS        oiam 20090422202940     
    START MOVE NAMETABS        ACC 6      20090422204258              BASIS        oiam 20090422202940     
    START tp_getprots          ACC P      20090422204258              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC P      20090422204403              BASIS        oiam 20090422202940     
    STOP  MOVE NAMETABS        ACC 6      20090422204403              BASIS        oiam 20090422202940     
    START MAIN IMPORT          ACC I      20090422204403              BASIS        oiam 20090422202940     
    STOP  MAIN IMPORT          ACC I      20090422213315              BASIS        oiam 20090422202940     
    START tp_getprots          ACC Y      20090422213315              BASIS        oiam 20090422202940     
    ERROR ALL                  ACC n 0012 20090422213510              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC Y      20090422213521              BASIS        oiam 20090422202940     
    START TBATG CREATION OF EN ACC n      20090422213521              BASIS        oiam 20090422202940     
    START tp_getprots          ACC Y      20090422213521              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC Y      20090422213522              BASIS        oiam 20090422202940     
    STOP  TBATG CREATION OF EN ACC n      20090422213523              BASIS        oiam 20090422202940     
    ERROR: stopping on error 12 during TBATG CREATION OF ENQUEUE OBJECTS
    START INFORM SAP-SYSTEM OF ACC Q      20090422213523              BASIS        oiam 20090422202940     
    START tp_getprots          ACC Q      20090422213523              BASIS        oiam 20090422202940     
    STOP  tp_getprots          ACC Q      20090422213524              BASIS        oiam 20090422202940     
    STOP  INFORM SAP-SYSTEM OF ACC Q      20090422213524              BASIS        oiam 20090422202940     
    STOP  imp all              ACC   0012 20090422213524              BASIS        oiam 20090422202940

  • Applied SP but it is not showing in SPAM Status Package Level

    Hi all,
    I have applied Basis and ABAP Support Package on our XI system.
    SP applied : SAPKB64011,SAPKB64012,SAPKB64013
                SAPKA64011,SAPKA64012,SAPKA64013
    ODS packages were successfully imported, i have verified it using
    SPAM>Directory>Imported Support Packages>Display. It is showing all green.
    But when I go to SPAM>Status>Package Level it is showing level 10 for BASIS
    and ABAP both.
    Please help, why this is happening? what to do to resolve it?
    Regards
    Naivedya

    Yes I tried Restarting server but it doesnt help.
    Regards
    Naivedya

  • TS3456 amavisd.conf - file to change behavior of bounced mail

    I found useful to know that from 10.8 is this file located here: /Library/Server/Mail/Config/amavisd/amavisd.conf and you can modify it in the same way.

    I deleted " /private/var/clamav/daily.inc/daily.mdb" and the other files that were created at the same time. Restarted the machine. Seems this fixed the problem. Somehow this file became corrupted.
    I hope this resolved my problem! I'll watch everything for a few days and see.

  • Amavisd.conf forward method

    greetings
    i am using amavis to forward to an internal relay.
    $forward_method = 'smtp:10.10.10.1'
    I have recently setup 2 new smtp relays running SSL only port 465
    i have setup round robin DNS names
    can i use a this config ?
    $forward_method = 'smtp:smtp.example.com:465'
    or do I have to use an IP address ?

    okay,.. solved problem. ( well work around )
    posting this for the good of the community.
    to keep the ssl available for clients and accept relay from my amavis host I had to create another port on the smtp relays to accept incoming mail without ssl.
    on amavisd host:
    amavis.conf
    $forward_method = 'smtp:smtp.example.com:2525';
    smtp1
    master.cf
    # ==========================================================================
    # service type private unpriv chroot wakeup maxproc command + args
    # (yes) (yes) (yes) (never) (100)
    # ==========================================================================
    smtp inet n - n - - smtpd
    2525 inet n - n - - smtpd
    -o mynetworks=10.10.1.6
    -o smtpdclient_restrictions=permitmynetworks,reject
    -o smtpdenforcetls=no
    -o smtpdsasl_authenable=no
    smtp2
    master.cf
    # ==========================================================================
    # service type private unpriv chroot wakeup maxproc command + args
    # (yes) (yes) (yes) (never) (100)
    # ==========================================================================
    smtp inet n - n - - smtpd
    2525 inet n - n - - smtpd
    -o mynetworks=10.10.1.6
    -o smtpdclient_restrictions=permitmynetworks,reject
    -o smtpdenforcetls=no
    -o smtpdsasl_authenable=no
    where 10.10.1.6 is the address of the amavisd host.
    then create a DNS record for SMTP1 & SMTP2
    work great

  • Zend core xe / doesn't display server conf Unable to get status information

    HI,
    i've installed zend core + oracle xe.
    However in zend core / system overview section i cannot read any info.
    I got the message:
    Unable to get status information from the web server.
    Either the server-status module is not loaded, or it is not properly configured.
    To load server-status module (if your server was not compiled with it),
    please insert following string into your apache configuration file:
    LoadModule status_module modules/mod_status.so
    To configure it, please insert following section:
    <Location /server-status>
    SetHandler server-status
    Order deny, allow
    Deny from all
    Allow from localhost
    </Location>
    I've enabled LoadModule status_module modules/mod_status.so
    I've added SetHandler server-status to existing /zendcore serve alias
    any idea
    thanx

    Hey,
    i've fixed.
    However i got this problem with zend core 1.31 windows / oracle xe / apache:
    1 - I've removed the old one and apache 2 (last version) 2.058.
    2 - Then i've searched all the registry key (apache / zend related) and erased them.
    3 - Last step: installed zend core 1.4 (with the bundled version of the apache 2).
    It works.
    Note: for me you have always to delete all the apache group previous installation as well as the zend directory.
    These directory are not deleted automatically by uninstall process.

  • Recipient_delimiter w/ virtual hosting?

    All of my past OS X Server Mail installations have used local domains (not virtual hosting) until my most recent installation....
    I generally setup amavisd.conf to deliver spam to a user+spam@ address.
    Back to my most recent install. This is my first site running virtual hosting. The setup was done 'the Apple way' with the domains added in WorkGroup Manager (virtual hosts) and the full email address added to short names for each user.
    I then enabled recipient_delimiter = + in main.cf and restarted postfix.
    Mail addressed to [email protected] is rejected.
    At minimum, even if the spam mailbox didn't exist, the mail should be delivered to [email protected]
    I've set this up many times with local domains.
    What am I missing for virtual hosting???
    Jeff

    Jeff,
    you are absolutely right. My fault, should have made it clearer in the docs.
    Reject-before-scan will not work with WGM style virtual domains.
    - Reject-before-scan code. Does it require a postfix-style setup of virtual users?
    postfix-style (actually, you can do sort of a "hybrid" setup, but it is not "clean" and can get messy, so let's stick to postfix-style).
    Well, yes this topic is sort of drifting, but since its more of a private conversation between you and me.... no harm done. If we had done this via e-mail, no one else would have benefitted.
    So while we are at it:
    I'll edit my docs to make this clearer. The setting up virtual users tutorial was really meant for beginners who were afraid of terminal. Once somebody starts using postfix to it's full (or at least fuller) extent, the GUI has to go and anything but a basic config will cause problems when modified through the GUI (I know you know this, but I am writing it for the benefit of the unexperienced). Actually I am in the process of writing a documentation on what can be safely done with the GUI and what can't, but since time is precious I have no clue when I'll be done.
    Coming back to your original issue. You need an advanced postfix setup, but want the end-user to be able to administer it. The best way would most likely be to re-compile postfix to include MySQL support and then have the user use postfixadmin. This not for the faint hearted, but you should have no problem with this.
    Alternatively, if it is only one customer you need this for, you might as well configure everything to use postfix style virtual aliases and then write a shell script to help the end-user in adding aliases to /etc/postfix/virtual
    To add an alias, use something along the lines of:
    sudo echo [email protected] [email protected] >> /etc/postfix/virtual
    to delete:
    grep '[email protected]' /etc/postfix/virtual | sed "do your substitution here"
    Obviously you could also create a GUI for editing /etc/postfix/virtual. Should be very simple to do.
    Just a few thoughts. Pick the one you like best
    Alex

  • Amavisd not running, mails not delivered when spam filter is enabled

    Hey everyone,
    So I've got a slight problem here with a 10.4.11 server. Our spam filter was set to be too tolerant of spam, allowing a threshold 22.0 before bouncing it, so through the command line I edited /etc/amavisd.conf to $sa_kill_level_deflt = 6.0; tag2 is set to 3.0. Then I bounced amavisd via:
    sudo /bin/launchctl unload /System/Library/LaunchDaemons/org.amavis.amavisd.plist
    sudo /bin/launchctl load /System/Library/LaunchDaemons/org.amavis.amavisd.plist
    Well that caused all sorts of whacky issues with the queue. The server couldn't connect to itself and wouldn't deliver any mail, only queue it up. So I went back in to amavisd.conf and changed the parameters back to default, then bounced amavisd again. To no avail. Then I restored from a backup file I had created and bounced amavisd again to no avail.
    Finally I removed the junkmail and virus filters via SA, saved, then reenabled them to no avail. Then I just disabled them and mail is flowing again, but I still have 187 messages in my queue that wont get delivered no matter how many times I flush it.
    After more research, I issued a ps -U clamav to see if amavisd is running, below are the only results I get:
    PID TT STAT TIME COMMAND
    1291 ?? Ss 0:00.01 freshclam -d -D -pfreshclam.pid -c 1
    I would assume it is NOT running...? I next issued amavisd to see if it throws any errors, and get the following:
    ERROR: MISSING REQUIRED BASIC MODULES:
    MIME::Parser
    BEGIN failed--compilation aborted at /usr/bin/amavisd line 139.
    So my next question is how do I repair amavisd so I can get it to run so I can reenable the content filter. Here are the results of postconf in case you need them:
    2bounce_notice_recipient = postmaster
    access_map_reject_code = 554
    address_verify_default_transport = $default_transport
    address_verify_local_transport = $local_transport
    address_verify_map =
    address_verify_negative_cache = yes
    address_verify_negative_expire_time = 3d
    address_verify_negative_refresh_time = 3h
    address_verify_poll_count = 3
    address_verify_poll_delay = 3s
    address_verify_positive_expire_time = 31d
    address_verify_positive_refresh_time = 7d
    address_verify_relay_transport = $relay_transport
    address_verify_relayhost = $relayhost
    address_verify_sender = postmaster
    address_verify_service_name = verify
    address_verify_transport_maps = $transport_maps
    address_verify_virtual_transport = $virtual_transport
    alias_database = hash:/etc/aliases
    alias_maps = hash:/etc/aliases
    allow_mail_to_commands = alias, forward
    allow_mail_to_files = alias, forward
    allow_min_user = no
    allow_percent_hack = yes
    allow_untrusted_routing = no
    alternate_config_directories =
    always_bcc =
    append_at_myorigin = yes
    append_dot_mydomain = yes
    application_event_drain_time = 100s
    backwards_bounce_logfile_compatibility = yes
    berkeley_db_create_buffer_size = 16777216
    berkeley_db_read_buffer_size = 131072
    best_mx_transport =
    biff = yes
    body_checks =
    body_checks_size_limit = 51200
    bounce_notice_recipient = postmaster
    bounce_queue_lifetime = 5d
    bounce_service_name = bounce
    bounce_size_limit = 50000
    broken_sasl_auth_clients = no
    canonical_maps =
    cleanup_service_name = cleanup
    command_directory = /usr/sbin
    command_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
    command_time_limit = 1000s
    config_directory = /etc/postfix
    content_filter =
    daemon_directory = /usr/libexec/postfix
    daemon_timeout = 18000s
    debug_peer_level = 2
    debug_peer_list =
    default_database_type = hash
    default_delivery_slot_cost = 5
    default_delivery_slot_discount = 50
    default_delivery_slot_loan = 3
    default_destination_concurrency_limit = 20
    default_destination_recipient_limit = 50
    default_extra_recipient_limit = 1000
    default_minimum_delivery_slots = 3
    default_privs = nobody
    default_process_limit = 100
    default_rbl_reply = $rbl_code Service unavailable; $rbl_class [$rbl_what] blocked using $rbl_domain${rbl_reason?; $rbl_reason}
    default_recipient_limit = 10000
    default_transport = smtp
    default_verp_delimiters = +=
    defer_code = 450
    defer_service_name = defer
    defer_transports =
    delay_notice_recipient = postmaster
    delay_warning_time = 0h
    deliver_lock_attempts = 20
    deliver_lock_delay = 1s
    disable_dns_lookups = no
    disable_mime_input_processing = no
    disable_mime_output_conversion = no
    disable_verp_bounces = no
    disable_vrfy_command = no
    dont_remove = 0
    double_bounce_sender = double-bounce
    duplicate_filter_limit = 1000
    empty_address_recipient = MAILER-DAEMON
    enable_errors_to = no
    enable_original_recipient = yes
    enable_server_options = yes
    error_notice_recipient = postmaster
    error_service_name = error
    expand_owner_alias = no
    export_environment = TZ MAIL_CONFIG
    fallback_relay =
    fallback_transport =
    fast_flush_domains = $relay_domains
    fast_flush_purge_time = 7d
    fast_flush_refresh_time = 12h
    fault_injection_code = 0
    flush_service_name = flush
    fork_attempts = 5
    fork_delay = 1s
    forward_expansion_filter = 1234567890!@%-_=+:,./abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ
    forward_path = $home/.forward${recipient_delimiter}${extension}, $home/.forward
    hash_queue_depth = 1
    hash_queue_names = incoming, active, deferred, bounce, defer, flush, hold, trace
    header_address_token_limit = 10240
    header_checks =
    header_size_limit = 102400
    helpful_warnings = yes
    home_mailbox =
    hopcount_limit = 50
    html_directory = no
    ignore_mx_lookup_error = no
    import_environment = MAIL_CONFIG MAIL_DEBUG MAIL_LOGTAG TZ XAUTHORITY DISPLAY
    in_flow_delay = 1s
    inet_interfaces = all
    initial_destination_concurrency = 5
    invalid_hostname_reject_code = 501
    ipc_idle = 100s
    ipc_timeout = 3600s
    ipc_ttl = 1000s
    line_length_limit = 2048
    lmtp_cache_connection = yes
    lmtp_connect_timeout = 0s
    lmtp_data_done_timeout = 600s
    lmtp_data_init_timeout = 120s
    lmtp_data_xfer_timeout = 180s
    lmtp_destination_concurrency_limit = $default_destination_concurrency_limit
    lmtp_destination_recipient_limit = $default_destination_recipient_limit
    lmtp_lhlo_timeout = 300s
    lmtp_mail_timeout = 300s
    lmtp_quit_timeout = 300s
    lmtp_rcpt_timeout = 300s
    lmtp_rset_timeout = 120s
    lmtp_sasl_auth_enable = no
    lmtp_sasl_password_maps =
    lmtp_sasl_security_options = noplaintext, noanonymous
    lmtp_send_xforward_command = no
    lmtp_skip_quit_response = no
    lmtp_tcp_port = 24
    lmtp_xforward_timeout = 300s
    local_command_shell =
    local_destination_concurrency_limit = 2
    local_destination_recipient_limit = 1
    local_recipient_maps =
    local_transport = local:$myhostname
    luser_relay = undeliverable
    mail_name = Postfix
    mail_owner = postfix
    mail_release_date = 20040915
    mail_spool_directory = /var/mail
    mail_version = 2.1.5
    mailbox_command =
    mailbox_command_maps =
    mailbox_delivery_lock = flock
    mailbox_size_limit = 0
    mailbox_transport = cyrus
    mailq_path = /usr/bin/mailq
    manpage_directory = /usr/share/man
    maps_rbl_domains =
    maps_rbl_reject_code = 554
    masquerade_classes = envelope_sender, header_sender, header_recipient
    masquerade_domains =
    masquerade_exceptions =
    max_idle = 100s
    max_use = 100
    maximal_backoff_time = 4000s
    maximal_queue_lifetime = 5d
    message_size_limit = 0
    mime_boundary_length_limit = 2048
    mime_header_checks = $header_checks
    mime_nesting_limit = 100
    minimal_backoff_time = 1000s
    multi_recipient_bounce_reject_code = 550
    mydestination = $myhostname,localhost.$mydomain,localhost,mail.mnn.org,$mydomain,youthchannel.o rg,mnn.org
    mydomain = mnn.org
    mydomain_fallback = localhost
    myhostname = mail.mnn.org
    mynetworks = 127.0.0.0/8,192.168.0.0/16,216.164.83.160/27
    mynetworks_style = host
    myorigin = $myhostname
    nested_header_checks = $header_checks
    newaliases_path = /usr/bin/newaliases
    non_fqdn_reject_code = 504
    notify_classes = resource, software
    owner_request_special = yes
    parent_domain_matches_subdomains = debug_peer_list,fast_flush_domains,mynetworks,permit_mx_backup_networks,qmqpd_a uthorized_clients,relay_domains,smtpd_access_maps
    permit_mx_backup_networks =
    pickup_service_name = pickup
    prepend_delivered_header = command, file, forward
    process_id_directory = pid
    propagate_unmatched_extensions = canonical, virtual
    proxy_interfaces =
    proxy_read_maps = $local_recipient_maps $mydestination $virtual_alias_maps $virtual_alias_domains $virtual_mailbox_maps $virtual_mailbox_domains $relay_recipient_maps $relay_domains $canonical_maps $sender_canonical_maps $recipient_canonical_maps $relocated_maps $transport_maps $mynetworks
    qmgr_clog_warn_time = 300s
    qmgr_fudge_factor = 100
    qmgr_message_active_limit = 20000
    qmgr_message_recipient_limit = 20000
    qmgr_message_recipient_minimum = 10
    qmqpd_authorized_clients =
    qmqpd_error_delay = 1s
    qmqpd_timeout = 300s
    queue_directory = /private/var/spool/postfix
    queue_file_attribute_count_limit = 100
    queue_minfree = 0
    queue_run_delay = 1000s
    queue_service_name = qmgr
    rbl_reply_maps =
    readme_directory = /usr/share/doc/postfix
    receive_override_options =
    recipient_bcc_maps =
    recipient_canonical_maps =
    recipient_delimiter =
    reject_code = 554
    relay_clientcerts =
    relay_destination_concurrency_limit = $default_destination_concurrency_limit
    relay_destination_recipient_limit = $default_destination_recipient_limit
    relay_domains = $mydestination
    relay_domains_reject_code = 554
    relay_recipient_maps =
    relay_transport = relay
    relayhost =
    relocated_maps =
    require_home_directory = no
    resolve_dequoted_address = yes
    resolve_null_domain = no
    rewrite_service_name = rewrite
    sample_directory = /usr/share/doc/postfix/examples
    sender_based_routing = no
    sender_bcc_maps =
    sender_canonical_maps =
    sendmail_path = /usr/sbin/sendmail
    service_throttle_time = 60s
    setgid_group = postdrop
    show_user_unknown_table_name = yes
    showq_service_name = showq
    smtp_always_send_ehlo = yes
    smtp_bind_address =
    smtp_connect_timeout = 30s
    smtp_data_done_timeout = 600s
    smtp_data_init_timeout = 120s
    smtp_data_xfer_timeout = 180s
    smtp_defer_if_no_mx_address_found = no
    smtp_destination_concurrency_limit = $default_destination_concurrency_limit
    smtp_destination_recipient_limit = $default_destination_recipient_limit
    smtp_enforce_tls = no
    smtp_helo_name = $myhostname
    smtp_helo_timeout = 300s
    smtp_host_lookup = dns
    smtp_line_length_limit = 990
    smtp_mail_timeout = 300s
    smtp_mx_address_limit = 0
    smtp_mx_session_limit = 2
    smtp_never_send_ehlo = no
    smtp_pix_workaround_delay_time = 10s
    smtp_pix_workaround_threshold_time = 500s
    smtp_quit_timeout = 300s
    smtp_quote_rfc821_envelope = yes
    smtp_randomize_addresses = yes
    smtp_rcpt_timeout = 300s
    smtp_rset_timeout = 120s
    smtp_sasl_auth_enable = no
    smtp_sasl_password_maps =
    smtp_sasl_security_options = noplaintext, noanonymous
    smtp_sasl_tls_security_options = $var_smtp_sasl_opts
    smtp_sasl_tls_verified_security_options = $var_smtp_sasl_tls_opts
    smtp_send_xforward_command = no
    smtp_skip_5xx_greeting = yes
    smtp_skip_quit_response = yes
    smtp_starttls_timeout = 300s
    smtp_tls_CAfile =
    smtp_tls_CApath =
    smtp_tls_cert_file =
    smtp_tls_cipherlist =
    smtp_tls_dcert_file =
    smtp_tls_dkey_file = $smtp_tls_dcert_file
    smtp_tls_enforce_peername = yes
    smtp_tls_key_file = $smtp_tls_cert_file
    smtp_tls_loglevel = 0
    smtp_tls_note_starttls_offer = no
    smtp_tls_per_site =
    smtp_tls_scert_verifydepth = 5
    smtp_tls_session_cache_database =
    smtp_tls_session_cache_timeout = 3600s
    smtp_use_tls = no
    smtp_xforward_timeout = 300s
    smtpd_authorized_verp_clients = $authorized_verp_clients
    smtpd_authorized_xclient_hosts =
    smtpd_authorized_xforward_hosts =
    smtpd_banner = $myhostname ESMTP $mail_name
    smtpd_client_connection_count_limit = 50
    smtpd_client_connection_limit_exceptions = $mynetworks
    smtpd_client_connection_rate_limit = 0
    smtpd_client_restrictions = permit_mynetworks reject_rbl_client zen.spamhaus.org reject_rbl_client bl.spamcop.net permit
    smtpd_data_restrictions =
    smtpd_delay_reject = yes
    smtpd_enforce_tls = no
    smtpd_error_sleep_time = 1s
    smtpd_etrn_restrictions =
    smtpd_expansion_filter = \t\40!"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghi jklmnopqrstuvwxyz{|}~
    smtpd_hard_error_limit = 20
    smtpd_helo_required = no
    smtpd_helo_restrictions =
    smtpd_history_flush_threshold = 100
    smtpd_junk_command_limit = 100
    smtpd_noop_commands =
    smtpd_null_access_lookup_key =
    smtpd_policy_service_max_idle = 300s
    smtpd_policy_service_max_ttl = 1000s
    smtpd_policy_service_timeout = 100s
    smtpd_proxy_ehlo = $myhostname
    smtpd_proxy_filter =
    smtpd_proxy_timeout = 100s
    smtpd_pw_server_security_options = gssapi,cram-md5,login,plain
    smtpd_recipient_limit = 1000
    smtpd_recipient_overshoot_limit = 1000
    smtpd_recipient_restrictions = permit_sasl_authenticated,permit_mynetworks,reject_unauth_destination,permit
    smtpd_reject_unlisted_recipient = yes
    smtpd_reject_unlisted_sender = no
    smtpd_restriction_classes =
    smtpd_sasl_application_name = smtpd
    smtpd_sasl_auth_enable = yes
    smtpd_sasl_exceptions_networks =
    smtpd_sasl_local_domain =
    smtpd_sasl_security_options = noanonymous
    smtpd_sasl_tls_security_options = $smtpd_sasl_security_options
    smtpd_sender_login_maps =
    smtpd_sender_restrictions =
    smtpd_soft_error_limit = 10
    smtpd_starttls_timeout = 300s
    smtpd_timeout = 300s
    smtpd_tls_CAfile =
    smtpd_tls_CApath =
    smtpd_tls_ask_ccert = no
    smtpd_tls_auth_only = no
    smtpd_tls_ccert_verifydepth = 5
    smtpd_tls_cert_file =
    smtpd_tls_cipherlist =
    smtpd_tls_dcert_file =
    smtpd_tls_dh1024_param_file =
    smtpd_tls_dh512_param_file =
    smtpd_tls_dkey_file = $smtpd_tls_dcert_file
    smtpd_tls_key_file =
    smtpd_tls_loglevel = 0
    smtpd_tls_received_header = no
    smtpd_tls_req_ccert = no
    smtpd_tls_session_cache_database =
    smtpd_tls_session_cache_timeout = 3600s
    smtpd_tls_wrappermode = no
    smtpd_use_pw_server = yes
    smtpd_use_tls = no
    soft_bounce = no
    stale_lock_time = 500s
    strict_7bit_headers = no
    strict_8bitmime = no
    strict_8bitmime_body = no
    strict_mime_encoding_domain = no
    strict_rfc821_envelopes = no
    sun_mailtool_compatibility = no
    swap_bangpath = yes
    syslog_facility = mail
    syslog_name = postfix
    tls_daemon_random_bytes = 32
    tls_daemon_random_source =
    tls_random_bytes = 32
    tls_random_exchange_name = ${config_directory}/prng_exch
    tls_random_prng_update_period = 60s
    tls_random_reseed_period = 3600s
    tls_random_source =
    trace_service_name = trace
    transport_maps =
    transport_retry_time = 60s
    trigger_timeout = 10s
    undisclosed_recipients_header = To: undisclosed-recipients:;
    unknown_address_reject_code = 450
    unknown_client_reject_code = 450
    unknown_hostname_reject_code = 450
    unknown_local_recipient_reject_code = 550
    unknown_relay_recipient_reject_code = 550
    unknown_virtual_alias_reject_code = 550
    unknown_virtual_mailbox_reject_code = 550
    unverified_recipient_reject_code = 450
    unverified_sender_reject_code = 450
    verp_delimiter_filter = -=+
    virtual_alias_domains = $virtual_alias_maps
    virtual_alias_expansion_limit = 1000
    virtual_alias_maps = $virtual_maps
    virtual_alias_recursion_limit = 1000
    virtual_destination_concurrency_limit = $default_destination_concurrency_limit
    virtual_destination_recipient_limit = $default_destination_recipient_limit
    virtual_gid_maps =
    virtual_mailbox_base =
    virtual_mailbox_domains = $virtual_mailbox_maps
    virtual_mailbox_limit = 51200000
    virtual_mailbox_lock = fcntl
    virtual_mailbox_maps =
    virtual_minimum_uid = 100
    virtual_transport = virtual
    virtual_uid_maps =
    TIA for an help!
    Andrew

    To get the queue going, issue:
    sudo postsuper -r ALL
    That said, I would think you initially introduced a typo in amavisd.conf. Next you probably restored amavisd and amavisd.conf files which were incompatible with each other and/or amavis incompatible with the updated perl modules of the latest security update.
    To fix things, I would re-apply the latest combo updater and security updates (assuming you are running stock versions and have not installed your own versions of amavisd, etc).
    If things still do not work, please post the output of:
    amavisd -V

  • Amavisd log - Blocked SPAM

    Hello,
    We are experiencing a Blocked SPAM for a real e-mail on our Tiger Server machine.
    An excerpt from /var/log/amavisd.log looks like below:
    Jun 29 20:52:49 students.nese.com /usr/bin/amavisd[26186]: (26186-06) Blocked SPAM, <[email protected]> -> <[email protected]>, Hits: 6.718, tag=-999, tag2=4, kill=4, L/Y/Y/Y
    Oct 29 04:23:28 students.nese.com /usr/bin/amavisd[7670]: (07670-04) Blocked SPAM, <[email protected]> -> <[email protected]>, Hits: 6.639, tag=-999, tag2=4, kill=4, L/Y/Y/Y
    the e-mails from "[email protected]" is a real e-mail and for some reason everything that comes in from uhak.com domain has been "Blocked". We are using zen.spamhaus.org for spam filter and I have checked that uhak.com ip address was not on their blacklist. However this domain was blacklisted someplace else (eg. korea.services.net) BUT we do not use that Korea.services.net service. Also uhak.com's rev DNS lookup resolve to spam.mailwood.com (which sounds suspicious)...
    I've read somewhere that Spamassasin does not block spam, it'll just marked it is that true?
    Is there a way to allow our mail server to receive emails from uhak.com but still have spam filter on (we do not want to be vulnerable to spams).
    Thank you very much for your kind assistance!
    Sumomo

    This is not being blocked by an RBL (i.e. spamhaus.org), but by SpamAssassin based on other criteria which make it seem spam (can't tell without seeing mail).
    I've read somewhere that Spamassasin does not block spam, it'll just marked it is that true?
    This depends on the settings in /etc/amavisd.conf. The default setting on Mac OS X Server is to discard spam above kill level and at the same time tag and kill level are set to be the same. Thus, resulting in everything above 4 in your case to be discarded.
    Edit /etc/amavisd.conf and change:
    $sakill_leveldeflt = $satag2_leveldeflt;
    to:
    $sakill_leveldeflt = 10.0;
    save and restart mail services.
    This will mark all spam between 4 and 10, but send it on to the users. Mails above 10 will be discarded.
    For more info see here: http://www200.pair.com/mecham/spam/amavisd-settings.html
    HTH,
    Alex

  • Problems when updating amavisd-new to 2.5.0

    Hi the list !
    Thanks for the great tips and support we got here. I’m really newbie on mac os x server while it’s now a long time I’m on clients ones.
    I wanted to follow topicdesk.com tutorials to update spamassassin and clamav as I saw here the initial conf by Apple isn’t working.
    Then, I saw before updating SpamAssassin that I had to update amavisd-new first. So, I begin with this tutorial. Here’s what happened (sorry for the long-long post) :
    First installed Xcode 2.4.1.
    Everything was fine until the CPAN Perl Module updates, as I always had the “make had returned bad status, install seems impossible” error. Looking for some info on the net, I then understand that you have to install everything Apple suggests as if you don’t, you’ll have later problems whith “make” command (I know, I first wanted to install only gcc that seemed necessary to me, and when nothing works as expected, I had to go back and install everything ...) In fact, the missing BSD SDK was supsected to be the missing thing, but not only. Then, just install everything and this is fine.
    Updated the whole asked Perl module without any problem, following the tutorial
    Then Reboot the server when asked ; amavisd-new new version 2.5.0 seems OK. Then, the beginning of problems...
    My smtp log which is set in debug mode shows lots of error entries such as
    May 24 13:11:21 xserve postfix/smtpd[302]: connect from xxxx.adsl.hansenet.de[xxx.xxx.xxx.xxx]
    May 24 13:11:22 xserve postfix/smtpd[302]: 0A64A71E1A: client=xxxx.adsl.hansenet.de[xxx.xxx.xxx.xxx]
    May 24 13:11:22 xserve postfix/cleanup[349]: 0A64A71E1A: message-id=<890420070524111120@broilingwhelped>
    May 24 13:11:22 xserve postfix/qmgr[74]: 0A64A71E1A: from=<[email protected]>, size=1188, nrcpt=1 (queue active)
    May 24 13:11:22 xserve postfix/smtp[350]: connect to 127.0.0.1[127.0.0.1]: Connection refused (port 10024)
    May 24 13:11:22 xserve postfix/smtp[350]: 0A64A71E1A: to=<[email protected]>, relay=none, delay=1, status=deferred (connect to 127.0.0.1[127.0.0.1]: Connection refused)
    May 24 13:11:22 xserve postfix/smtpd[302]: disconnect from xxxx.adsl.hansenet.de[xxx.xxx.xxx.xxx]
    Obviously, amavisd-new isn’t running. Then, trying sudo /usr/bin/amavisd and it say there are mistakes in the conf file. BTW, it’s not really obvious trying to migrate settings from the old conf file to the new one :
    I don't understand how this old conf settings
    @local_domains_acl = ( ".$mydomain" ); # $mydomain and its subdomains
    @local_domains_maps = ( 1 );
    # @local_domains_acl = qw(); # default is empty, no recipient treated as local
    # @local_domains_acl = qw( .example.com );
    # @local_domains_acl = qw( .example.com !host.sub.example.net .sub.example.net );
    # @local_domains_acl = ( ".$mydomain", '.example.com', 'sub.example.net' );
    has to bee changed in the new one way :
    @local_domains_maps = ( [".$mydomain"] ); # $mydomain and its subdomains
    # @local_domains_maps = (); # default is empty list, no recip. considered local
    # @local_domains_maps = # using ACL lookup table
    # ( [ ".$mydomain", 'sub.example.net', '.example.com' ] );
    # @local_domains_maps = # similar, split list elements on whitespace
    # ( [qw( .example.com !host.sub.example.net .sub.example.net )] );
    # @local_domains_maps = ( new_RE( qr'[@.]example\.com$'i ) ); # using regexp
    # @local_domains_maps = ( read_hash("$MYHOME/local_domains") ); # using hash
    # perhaps combined with Postfix: mydestination = /var/amavis/local_domains
    # for debugging purposes: dump_hash($local_domains_maps[0]);
    Anyway, I doubt this is the (real?) reason to my problems
    I correct some of these problems (in fact I forgot to look at amavis.log, but here is what it said) :
    May 24 13:53:30 xserve amavis[1072]: INFO: SA version: 3.0.1, 3.000001, no optional modules: Mail::SpamAssassin::SQLBasedAddrList Net::DNS::RR::SOA Net::DNS::RR::NS Net::DNS::RR::MX Net::DNS::RR::A Net::DNS::RR::AAAA Net::DNS::RR::PTR Net::DNS::RR::CNAME Net::DNS::RR::TXT Net::CIDR::Lite Sys::Hostname::Long DBD::mysql IP::Country::Fast Mail::SPF Mail::SPF::Query Mail::SPF::Mech Mail::SPF::Mech::A Mail::SPF::Mech::All Mail::SPF::Mech::Exists Mail::SPF::Mech::IP4 Mail::SPF::Mech::IP6 Mail::SPF::Mech::Include Mail::SPF::Mech::MX Mail::SPF::Mech::PTR Mail::SPF::Mod Mail::SPF::Mod::Exp Mail::SPF::Mod::Redirect Mail::SPF::SenderIPAddrMech Mail::SPF::v1::Record Mail::SPF::v2::Record
    May 24 13:53:30 xserve amavis[1072]: SpamControl: init_pre_chroot done
    May 24 13:53:30 xserve amavis[1072]: Net::Server: 2007/05/24-13:53:30 Amavis (type Net::Server::PreForkSimple) starting! pid(1072)
    May 24 13:53:30 xserve amavis[1072]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM
    May 24 13:53:30 xserve amavis[1072]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
    May 24 13:53:30 xserve amavis[1072]: Net::Server: Setting gid to "82 82"
    May 24 13:53:30 xserve amavis[1072]: Net::Server: Setting uid to "82"
    May 24 13:53:30 xserve amavis[1072]: Module Amavis::Conf 2.086
    May 24 13:53:30 xserve amavis[1072]: Module Archive::Zip 1.18
    May 24 13:53:30 xserve amavis[1072]: Module BerkeleyDB 0.26
    May 24 13:53:30 xserve amavis[1072]: Module Compress::Zlib 2.004
    May 24 13:53:30 xserve amavis[1072]: Module Convert::TNEF 0.17
    May 24 13:53:30 xserve amavis[1072]: Module Convert::UUlib 1.08
    May 24 13:53:30 xserve amavis[1072]: Module DB_File 1.810
    May 24 13:53:30 xserve amavis[1072]: Module Digest::MD5 2.36
    May 24 13:53:30 xserve amavis[1072]: Module MIME::Entity 5.420
    May 24 13:53:30 xserve amavis[1072]: Module MIME::Parser 5.420
    May 24 13:53:30 xserve amavis[1072]: Module MIME::Tools 5.420
    May 24 13:53:30 xserve amavis[1072]: Module Mail::Header 1.77
    May 24 13:53:30 xserve amavis[1072]: Module Mail::Internet 1.77
    May 24 13:53:30 xserve amavis[1072]: Module Mail::SpamAssassin 3.000001
    May 24 13:53:30 xserve amavis[1072]: Module Net::Server 0.96
    May 24 13:53:30 xserve amavis[1072]: Module Net::Server::PreFork 0.96
    May 24 13:53:30 xserve amavis[1072]: Module Net::Server::PreForkSimple 0.96
    May 24 13:53:30 xserve amavis[1072]: Module Time::HiRes 1.9707
    May 24 13:53:30 xserve amavis[1072]: Module URI 1.35
    May 24 13:53:30 xserve amavis[1072]: Module Unix::Syslog 0.99
    May 24 13:53:30 xserve amavis[1072]: Amavis::DB code loaded
    May 24 13:53:30 xserve amavis[1072]: Amavis::Cache code loaded
    May 24 13:53:30 xserve amavis[1072]: SQL base code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: SQL::Log code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: SQL::Quarantine NOT loaded
    May 24 13:53:30 xserve amavis[1072]: Lookup::SQL code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: Lookup::LDAP code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: AM.PDP-in proto code loaded
    May 24 13:53:30 xserve amavis[1072]: SMTP-in proto code loaded
    May 24 13:53:30 xserve amavis[1072]: Courier proto code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: SMTP-out proto code loaded
    May 24 13:53:30 xserve amavis[1072]: Pipe-out proto code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: BSMTP-out proto code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: Local-out proto code loaded
    May 24 13:53:30 xserve amavis[1072]: OS_Fingerprint code NOT loaded
    May 24 13:53:30 xserve amavis[1072]: ANTI-VIRUS code loaded
    May 24 13:53:30 xserve amavis[1072]: ANTI-SPAM code loaded
    May 24 13:53:30 xserve amavis[1072]: ANTI-SPAM-SA code loaded
    May 24 13:53:30 xserve amavis[1072]: Unpackers code loaded
    May 24 13:53:30 xserve amavis[1072]: Found $file at /usr/bin/file
    May 24 13:53:30 xserve amavis[1072]: No $dspam, not using it
    May 24 13:53:30 xserve amavis[1072]: No $altermime, not using it
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .mail
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .asc
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .uue
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .hqx
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .ync
    May 24 13:53:30 xserve amavis[1072]: No decoder for .F tried: unfreeze, freeze -d, melt, fcat
    May 24 13:53:30 xserve amavis[1072]: Found decoder for .Z at /usr/bin/uncompress
    May 24 13:53:30 xserve amavis[1072]: Found decoder for .gz at /usr/bin/gzip -d
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .gz (backup, not used)
    May 24 13:53:30 xserve amavis[1072]: Found decoder for .bz2 at /usr/bin/bzip2 -d
    May 24 13:53:30 xserve amavis[1072]: No decoder for .lzo tried: lzop -d
    May 24 13:53:30 xserve amavis[1072]: No decoder for .rpm tried: rpm2cpio.pl, rpm2cpio
    May 24 13:53:30 xserve amavis[1072]: Found decoder for .cpio at /bin/pax
    May 24 13:53:30 xserve amavis[1072]: Found decoder for .tar at /bin/pax
    May 24 13:53:30 xserve amavis[1072]: Found decoder for .deb at /usr/bin/ar
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .zip
    May 24 13:53:30 xserve amavis[1072]: No decoder for .7z tried: 7zr, 7za, 7z
    May 24 13:53:30 xserve amavis[1072]: No decoder for .rar tried: rar, unrar
    May 24 13:53:30 xserve amavis[1072]: No decoder for .arj tried: arj, unarj
    May 24 13:53:30 xserve amavis[1072]: No decoder for .arc tried: nomarch, arc
    May 24 13:53:30 xserve amavis[1072]: No decoder for .zoo tried: zoo, unzoo
    May 24 13:53:30 xserve amavis[1072]: No decoder for .lha tried: lha
    May 24 13:53:30 xserve amavis[1072]: No decoder for .cab tried: cabextract
    May 24 13:53:30 xserve amavis[1072]: No decoder for .tnef tried: tnef
    May 24 13:53:30 xserve amavis[1072]: Internal decoder for .tnef
    May 24 13:53:30 xserve amavis[1072]: No decoder for .exe tried: rar, unrar; lha; arj, unarj
    May 24 13:53:30 xserve amavis[1072]: Found secondary av scanner ClamAV-clamscan at /usr/bin/clamscan
    May 24 13:53:30 xserve amavis[1072]: (!!)TROUBLE in pre_loop_hook: Please create an empty directory /var/amavis/db to hold a database (config variable $db_home)
    I created the directory, then it says
    May 24 13:58:12 xserve amavis[1133]: (!!)TROUBLE in pre_loop_hook: db_home directory is not writable: /var/amavis/db at /usr/bin/amavisd line 7783.
    I changed CHMOD to 777 (just see later to be more restricitve)
    And then it seems OK
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: starting. /usr/bin/amavisd at localhost amavisd-new-2.2.0 (20041102), Unicode aware
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: user=, EUID: 0 (0); group=, EGID: 0 0 (0 0)
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Perl version 5.008006
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Net::Server: 2007/05/24-14:11:49 Amavis (type Net::Server::PreForkSimple) starting! pid(44)
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Net::Server: Binding to UNIX socket file /var/amavis/amavisd.sock using SOCK_STREAM
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Net::Server: Binding to TCP port 10024 on host 127.0.0.1
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Net::Server: Setting gid to "82 82"
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Net::Server: Setting uid to "82"
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Amavis::Conf 2.033
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Archive::Tar 1.22
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Archive::Zip 1.18
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Compress::Zlib 2.004
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Convert::TNEF 0.17
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Convert::UUlib 1.08
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module DB_File 1.810
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module MIME::Entity 5.420
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module MIME::Parser 5.420
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module MIME::Tools 5.420
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Mail::Header 1.77
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Mail::Internet 1.77
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Mail::SpamAssassin 3.000001
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Net::Cmd 2.26
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Net::SMTP 2.29
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Net::Server 0.96
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Time::HiRes 1.9707
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Module Unix::Syslog 0.99
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Amavis::DB code NOT loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Amavis::Cache code NOT loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Lookup::SQL code NOT loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Lookup::LDAP code NOT loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: AMCL-in protocol code loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: SMTP-in protocol code loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: ANTI-VIRUS code loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: ANTI-SPAM code loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Unpackers code loaded
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Found $file at /usr/bin/file
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $arc, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Found $gzip at /usr/bin/gzip
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Found $bzip2 at /usr/bin/bzip2
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $lzop, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $lha, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $unarj, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Found $uncompress at /usr/bin/uncompress
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $unfreeze, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $unrar, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $zoo, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Found $cpio at /usr/bin/cpio
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $ar, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $rpm2cpio, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $cabextract, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No $dspam, not using it
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: KasperskyLab AntiViral Toolkit Pro (AVP)
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: KasperskyLab AVPDaemonClient
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: H+BEDV AntiVir or CentralCommand Vexira Antivirus
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: Command AntiVirus for Linux
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: Symantec CarrierScan via Symantec CommandLineScanner
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: DrWeb Antivirus for Linux/FreeBSD/Solaris
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: F-Secure Antivirus
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: CAI InoculateIT
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: MkS_Vir for Linux (beta)
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: MkS_Vir daemon
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: ESET Software NOD32
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: ESET Software NOD32 - Client/Server Version
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: Norman Virus Control v5 / Linux
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: Panda Antivirus for Linux
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: NAI McAfee AntiVirus (uvscan)
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: VirusBuster (Client + Daemon)
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: CyberSoft VFind
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: Ikarus AntiVirus for Linux
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No primary av scanner: BitDefender
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: Found secondary av scanner Clam Antivirus - clamscan at /usr/bin/clamscan
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No secondary av scanner: FRISK F-Prot Antivirus
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: No secondary av scanner: Trend Micro FileScanner
    May 24 14:11:49 localhost /usr/bin/amavisd[44]: SpamControl: initializing Mail::SpamAssassin
    May 24 14:11:52 localhost /usr/bin/amavisd[44]: SpamControl: done
    But in fact there's still a problem :
    May 24 14:12:22 localhost /usr/bin/amavisd[219]: (00219-01) ESMTP::10024 /var/amavis/amavis-20070524T141222-00219: <p.estxxxx@xxxxxxx> -> <pacvolley@ xxxxxxx > Received: SIZE=5929 from xserve.xxxxx ([127.0.0.1]) by localhost (localhost [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 00219-01 for <pacvolley@ xxxxxxx>; Thu, 24 May 2007 14:12:22 +0200 (CEST)
    May 24 14:12:22 localhost /usr/bin/amavisd[219]: (00219-01) body hash: 05f429e5a692012d98323c55a540b730
    May 24 14:12:22 localhost /usr/bin/amavisd[219]: (00219-01) Checking: [82.241.222.174] <p.estxxx@xxxxx> -> <pacvolley@xxxxx>
    May 24 14:12:22 localhost /usr/bin/amavisd[219]: (00219-01) p003 1 Content-Type: multipart/alternative
    May 24 14:12:22 localhost /usr/bin/amavisd[219]: (00219-01) p001 1/1 Content-Type: text/plain, size: 394 B, name:
    May 24 14:12:22 localhost /usr/bin/amavisd[219]: (00219-01) p002 1/2 Content-Type: text/html, size: 3962 B, name:
    May 24 14:12:22 localhost /usr/bin/amavisd[302]: (00219-01) run_command: child process [302]: Can't close main::stdin: Bad file descriptor at /usr/bin/amavisd line 1589.\n
    May 24 14:12:22 localhost /usr/bin/amavisd[302]: (00219-01) SMTP shutdown: tempdir is being removed: /var/amavis/amavis-20070524T141222-00219
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) TROUBLE in check_mail: mime_decode-1 FAILED: parsing file(1) results - missing last 2 results at (eval 40) line 150.
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) PRESERVING EVIDENCE in /var/amavis/amavis-20070524T141222-00219
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) TIMING [total 284 ms] - SMTP EHLO: 21 (7%), SMTP pre-MAIL: 3 (1%), mkdir tempdir: 1 (0%), create email.txt: 2 (1%), SMTP pre-DATA-flush: 8 (3%), SMTP DATA: 5 (2%), body_hash: 2 (1%), mkdir parts: 3 (1%), mime_decode: 57 (20%), rundown: 181 (64%)
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) TROUBLE in process_request: Error writing a SMTP response to the socket: Broken pipe at (eval 36) line 760, <GEN3> line 208.
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) Requesting process rundown after fatal error
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) load: 100 %, total idle 0.001 s, busy 0.287 s
    May 24 14:12:23 localhost /usr/bin/amavisd[219]: (00219-01) SMTP shutdown: Error writing a SMTP response to the socket: Bad file descriptor at (eval 36) line 760.\n
    And in the mail log I get corresponding errors such as :
    May 24 14:30:20 xserve postfix/smtpd[626]: connect from xxxxxx.club-internet.fr[xxx.xxx.xxx.xxx]
    May 24 14:30:20 xserve postfix/smtpd[626]: 5580872531: client= xxxxxx.club-internet.fr[xxx.xxx.xxx.xxx]
    May 24 14:30:20 xserve postfix/cleanup[452]: 5580872531: message-id=<00e301c79dff$49859120$0100a8c0@pcservice>
    May 24 14:30:20 xserve postfix/smtpd[626]: disconnect from xxxxxx.club-internet.fr[xxx.xxx.xxx.xxx]
    May 24 14:30:20 xserve postfix/qmgr[64]: 5580872531: from=<[email protected]>, size=95594, nrcpt=1 (queue active)
    May 24 14:30:20 xserve postfix/smtp[464]: 5580872531: to=<sjoly@ xxxxxx.com>, relay=127.0.0.1[127.0.0.1], delay=0, status=deferred (host 127.0.0.1[127.0.0.1] said: 421 4.3.2 Service shutting down, closing channel (in reply to end of DATA command))
    I first thought mails were lost, and obviously as it won’t be so easy to fix alone without any help (and time is running loosing mails), I decided to come back to the old amavisd-new version, restoring /usr/bin/amavis and amavis.conf, and rebooting computer.
    Then, another problem with Perl modules that were updated so that old amavis seemed also not working. I decided to replace /Library/Perl and System/Library/Perl with new ones from a clean fresh install on my local server. Rebooted, and seems to be OK as before. Then looked for Postfix and understood than flushing will force deferred mails to be processed.
    Anyway, all is to be done again. If anybody here as an idea of what's going wrong, I'll be glad to learn ...
      Mac OS X (10.4.9)  

    well, there you have it – a classical if then loop.
    seems i'm still stuck somewhere in the middle of the amavisd.conf nightmare. had amavisd-new 2.4.5 / spamassassin 3.1.8 up and running after a real nightmare (which had to do with daemonize=1).
    after i tried to get up-to-date with amavisd-new 2.5.1 and spamassassin 3.2.1 i saw the same problems (see below) again, while launchd tried to get amavisd started.
    Jun 15 05:14:11 mail launchd: org.amavis.amavisd: exited with exit code: 2
    Jun 15 05:14:11 mail launchd: org.amavis.amavisd: respawning too quickly! throttling
    Jun 15 05:14:11 mail launchd: org.amavis.amavisd: 9 more failures without living at least 60 seconds will cause job removal
    Jun 15 05:14:11 mail launchd: org.amavis.amavisd: will restart in 10 seconds
    remembering the previous troubles, i double checked all things, which could be set wrong (daemonize, etc.) and all was well. tried a second install and all to no success.
    later i had the idea, it might be the new amavisd.conf, which troubles (why ever) the startup. so i used the v2.4.5 one and lo and behold, it worked. but why? what is so strange/new/different in 2.5.1, that the startup of amavisd gets broken?
    now i read, that they changed a bunch of stuff and i certainly would be using the newer versions conf file, but it seems i don't get it right configured. i'm on the latest updated 10.4.9 server with all fixes installed. every service is working, mail gets in/out and gets even tagged.
    well, i didn't do the setup with the 2 users junkmail/nojunkmail yet. is it really necessary to set them up as local users? can't they be handled as every other user which has mail enabled via wgm?
    anyone can help me here? thx.
    Various   Mac OS X (10.4.9)   Mac OS X Server (10.4.9)

  • Always_bcc user gets all killed spam

    Interesting one that I just noticed. I don't think there is any way around it but mentioning just in case...
    If you have a 'user' in the 'Copy All Mail To:' box (in my case the 'mailarchive' user, then even if a piece of spam gets rejected due to being over the Kill level, it still gets sent to the mailarchive user.
    This appears counter-intuitive when tracking the message through the mail.log. The always_bcc account gets added at the very beginning, after the initial connection (evidenced by having nrcpt=2)...
    <pre class=command>postfix/smtpd[18899]: connect from mail5.onyx.net[194.176.73.196]
    postfix/smtpd[18899]: 56DAF4C7CE: client=mail5.onyx.net[194.176.73.196]
    postfix/cleanup[18902]: 56DAF4C7CE: message-id=<[email protected]>
    postfix/qmgr[18880]: 56DAF4C7CE: from=<[email protected]>, size=3041, nrcpt=2 (queue active)
    postfix/smtpd[18899]: disconnect from mail5.onyx.net[194.176.73.196]</pre>
    You then see the handover to amavisd...
    <pre class=command>postfix/smtpd[18908]: connect from localhost[127.0.0.1]
    postfix/smtpd[18908]: 69D7F4C7F1: client=localhost[127.0.0.1]
    postfix/cleanup[18902]: 69D7F4C7F1: message-id=<[email protected]>
    postfix/qmgr[18880]: 69D7F4C7F1: from=<[email protected]>, size=3658, nrcpt=2 (queue active)
    postfix/smtpd[18908]: disconnect from localhost[127.0.0.1]</pre>
    Where the spam is scored beyond the Kill level and sent to the spamquarantine account...
    <pre class=command>postfix/pipe[18914]: 69D7F4C7F1: to=<[email protected]>, relay=cyrus, delay=1,
        status=sent (mail.panoramicscotland.com)</pre>
    Then reject notices are seen for the two recipients, including the always_bcc = mailarchive user...
    <pre class=command>postfix/smtp[18903]: 56DAF4C7CE: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=26,
        status=bounced (host 127.0.0.1[127.0.0.1] said: 550 5.7.1 Message content rejected,
        UBE, id=18707-01 (in reply to end of DATA command))
    postfix/smtp[18903]: 56DAF4C7CE: to=<[email protected]>, relay=127.0.0.1[127.0.0.1], delay=26,
        status=bounced (host 127.0.0.1[127.0.0.1] said: 550 5.7.1 Message content rejected,
        UBE, id=18707-01 (in reply to end of DATA command))
    server postfix/qmgr[18880]: 56DAF4C7CE: removed</pre>
    A bounce message is sent to the sender...
    <pre class=command>server postfix/cleanup[18902]: 2EF134C7F8: message-id=<[email protected]>
    server postfix/qmgr[18880]: 2EF134C7F8: from=, size=5413, nrcpt=1 (queue active)
    server postfix/pipe[18914]: 2EF134C7F8: to=<[email protected]>, relay=cyrus, delay=0,
        status=sent (mail.panoramicscotland.com)
    server postfix/qmgr[18880]: 2EF134C7F8: removed</pre>
    However, the original message is still sent to the mailarchive...
    <pre class=command>server postfix/pipe[18911]: 69D7F4C7F1: to=<[email protected]>, relay=cyrus, delay=1,
        status=sent (mail.panoramicscotland.com)
    server postfix/qmgr[18880]: 69D7F4C7F1: removed</pre>
    It appears that the always_bcc option bypasses any intermediate rejection by amavisd - note that message id (69D7F4C7F1) references original message prior to handover to amavisd and rejection within this). Arguably, this is intentional but slightly annoying due to receiving unnecesary spam.
    Any ideas?
    -david
    Applicable amavisd.conf settings...
    $spamquarantineto = '[email protected]';
    $finalspamdestiny = D_REJECT;
    $sakill_leveldeflt = 5.0;
    Applicable postfix main.cf setting...
    always_bcc = [email protected]

    The only solution (hopefully) I see, would be to
    add:
    -o always_bcc=
    below:
    127.0.0.1:10025 inet n - n - - smtpd -v
    in master.cf
    That didn't do it, Alex (I thought it would, too, after you suggested it) but you put me onto the right track though...
    The solution appears to be 'receiveoverride_options=no_addressmappings' in same location. There is already an option there for the receiveoverrideoptions so the noaddressmappings just gets added to it...
    Pre-existing clause...
    <pre class=command>127.0.0.1:10025 inet n - y - - smtpd
    -o receiveoverride_options=no_header_bodychecks</pre>
    New clause...
    <pre class=command>127.0.0.1:10025 inet n - y - - smtpd
    -o receiveoverride_options=no_header_body_checks,no_addressmappings</pre>
    Only killed mail being forwarded to spamquarantine account gets NOT copied. tagged spam and clean mail (incoming & outgoing) all get bcc'd as normal. Also works for the virusquarantine account if this is configured for a mail account (in amavisd.conf).
    Thanks,
    -david
    Links...
    http://www.postfix.org/ADDRESSREWRITING_README.html#autobcc
    http://www.postfix.org/postconf.5.html#receiveoverrideoptions

  • 'Undeliverable Mail Return To Sender' spam?

    As of late, we have been getting 'undeliverable mail' which appears to be spam. The long headers appear to indicate that it is indeed coming from our mail server and the body of the message goes something like this:
    This is the Postfix program at host nopali.com.
    I'm sorry to have to inform you that your message could not be
    be delivered to one or more recipients. It's attached below.
    For further assistance, please send mail to <postmaster>
    If you do so, please include this problem report. You can
    delete your own text from the attached returned message.
    The Postfix program
    <[email protected]>: host 127.0.0.1[127.0.0.1] said: 550 5.7.1 Message
    content rejected, UBE, id=21361-04 (in reply to end of DATA command)
    Reporting-MTA: dns; nopali.com
    X-Postfix-Queue-ID: 7260D27DAB9
    X-Postfix-Sender: rfc822; [email protected]
    Arrival-Date: Sat, 23 Dec 2006 04:10:46 -0500 (EST)
    Final-Recipient: rfc822; [email protected]
    Action: failed
    Status: 5.0.0
    Diagnostic-Code: X-Postfix; host 127.0.0.1[127.0.0.1] said: 550 5.7.1 Message
    content rejected, UBE, id=21361-04 (in reply to end of DATA command)
    From: "Ronald Myers" <[email protected]>
    Date: December 23, 2006 4:11:11 AM EST (CA)
    To: [email protected]
    Subject: Because that is curious girdle, and Hormah, and some therefore,
    ...and there is generally a spamish content underneath.
    Has anyone encountered this?
    I thought perhaps that somehow others were able to use my mail cue, but I closed the firewall for SMTP mail to only favourable IPs. However, when I look at my mail cue, I see a bunch of things waiting to be sent out. They appear to be a bunch of spam that the server trying to return. The cue would typically have this message:
    Message ID: 266692764C8
    Date: Thu Dec 21 13:31:52
    Size: 6742
    Sender: MAILER-DAEMON
    Recipient(s) & Status:
    [email protected]:
    connect to wc.wachovia.com[169.200.182.108]: Operation timed out
    It appears that the server is trying to return spammed mail to sender and it is timing out. I am not sure, though. This would not make sense since I have spam being redirected to a separate spam_depot account.
    Any ideas on how to figure this one out?

    I can't tell you if this is a wise decision for your setup, you need to make that call.
    You are getting into settings which stray far from the GUI and the support of Apple, venture forward carefully..
    The comments within the amavisd.conf file and threads in this forum contain most/all of what you may require. Spend time reviewing the config file. all of it's options, the flow of amavis (well documented) and how amavis links to postfix...... then out of thousands of possible configurations you can make the decision of what is best for your server.
    Some hints... (which were documented in an earlier thread)
    The GUI sets tag2 and sakill_leveldflt the same:
    $sakill_leveldeflt = $satag2_leveldeflt;
    You can change this so that one set of actions is performed at tag2 and a more extreme action at the kill level. something like this works well for a well trained server:
    $satag2_leveldeflt = 3.0
    $sakill_leveldeflt = 6.0;
    When the kill level is reached, the finalspamdestiny action is performed. If you bounce or reject, you will generate bounces in your queue. If you discard, the no bounce is generated. Even if you discard, you still have a quarantine.
    The default is to quarantine the spam as files in /var/virusmails Many people never look in this folder, and it can easily fill-up. Look in your settings for something like this:
    $QUARANTINEDIR = '/var/virusmails';
    you can comment this to:
    #$QUARANTINEDIR = '/var/virusmails';
    to disable the quarantining to a directory.
    You can quarantine to an email address, read the file, it's pretty clear.
    Take the time to read through the file. Make changes one at a time and allow plenty of testing between changes. Make any files you change. Be sure to stop/start mail service to activate changes.
    Jeff

  • Status=deferred (delivery temporarily suspended) - Urgent help please

    I have a Intel 10.4.10 machine
    I have upgraded amavis-new, spamassassin and clamav
    After the upgrades I could not send mail with PDF attachments.
    I was getting
    FAILED: Can't locate object method "binmode" via package "IO::File" at /Library/Perl/5.8.6/MIME/Body.pm line 437. (in reply to end of DATA command
    I thought I had missed something so I went through "Updating amavis-new From Alex's Tutorial" (http://osx.topicdesk.com/) again.
    Now I am getting status=deferred (delivery temporarily suspended) on all mails
    server:/var/log root# amavisd -V
    amavisd-new-2.5.2 (20070627)
    clamav
    Software version from DNS: 0.91.2
    WARNING: Your ClamAV installation is OUTDATED!
    WARNING: Local version: 0.91.1 Recommended version: 0.91.2
    server:/var/log root# spamassassin -V
    SpamAssassin version 3.2.3
    running on Perl version 5.8.6
    Can someone help me to get mails to be delivered again

    I have a Intel 10.4.10 machine
    I have upgraded amavis-new, spamassassin and clamav
    After the upgrades I could not send mail with PDF attachments.
    I was getting
    FAILED: Can't locate object method "binmode" via package "IO::File" at >>/Library/Perl/5.8.6/MIME/Body.pm line 437. (in reply to end of DATA command
    Sorry should have said that at this point after tryiing to reinstall amavis-new I went back to previous saved versions of amavisd and amavisd.conf.
    Now I am getting status=deferred (delivery temporarily suspended) on all mails
    I have gone through the whole upgrade of amavis-new once again
    I now have mail being sent and received, except for PDF attachments where the logs show
    FAILED: Can't locate object method "binmode" via package "IO::File" at /Library/Perl/5.8.6/MIME/Body.pm line 437. (in reply to end of DATA command
    I seem to be stuck between the old versions were I cannot send mail and the new where I can but with no attachments.

  • Junk Mail Sreening dosn't flag spam

    Hello,
    I'm trying to get "Junk Mail Sreening" (as they call it in the manual) to work but having little or no success.
    We're running on a 10.4.6 Server and configuration chnages have been made with "Server Admin".
    First thing I did was enabling virus scanning which worked right out of the box, wih one single exception:
    Infected mails won't get deleted as configered in SA but rather will be quarantined in /var/virusmails.
    However what doesn't seen to work is junk mail screening.
    Here are the relevant settings from within Server Admin in SA's plist format:
    <key>required_hits</key>
    <integer>5</integer>
    <key>spam_action</key>
    <string>deliver</string>
    <key>spam_enabled</key>
    <true/>
    <key>spamloglevel</key>
    <string>warn</string>
    <key>spamnotifyadmin</key>
    <false/>
    <key>spamnotify_adminemail</key>
    <string>[email protected]</string>
    <key>spamoklanguages</key>
    <string>en fr de</string>
    <key>spamoklocales</key>
    <string>en</string>
    <key>spam_quarantine</key>
    <string>[email protected]</string>
    <key>spamrewritesubject</key>
    <true/>
    <key>spamscanenabled</key>
    <true/>
    <key>spamsubjecttag</key>
    <string>* JUNK MAIL *</string>
    which result in the folling settings within /etc/amavisd.conf
    $satag_leveldeflt = -999;
    $satag2_leveldeflt = 5.0;
    $sakill_leveldeflt = 22.0;
    $saspam_subjecttag = '* JUNK MAIL *';
    $saspam_modifiessubj = 1;
    I then sent myself ([email protected] in the following log) a GTUBE junk mail (see http://spamassassin.apache.org/gtube/) from a mail account in a different domain (here: mail.sender.org) which should trigger the recognition of that particular mail being spam and to take the appropriate action as defined in SA.
    Here's what's in /var/log/amavisd.log:
    Jun 16 12:10:58 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) ESMTP::10024 /var/amavis/amavis-20060616T121058-21817: <[email protected]> -> <[email protected]> Received: SIZE=1660 from mail.receiver.com ([127.0.0.1]) by localhost (mail.receiver.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id 21817-01 for <[email protected]>; Fri, 16 Jun 2006 12:10:58 +0200 (CEST)
    Jun 16 12:10:58 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) Checking: [IP_of_sender] <[email protected]> -> <[email protected]>
    Jun 16 12:10:59 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) p001 1 Content-Type: text/plain, size: 504 B, name:
    Jun 16 12:10:59 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) WARN: all primary virus scanners failed, considering backups
    Jun 16 12:11:02 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) local delivery: <[email protected]> -> <spam-quarantine>, mbx=/var/virusmails/spam-a2740fd1baff60a1aa0bfb88a79036d6-20060616-121058-21817 -01.gz
    Jun 16 12:11:02 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) SPAM, <[email protected]> -> <[email protected]>, Yes, hits=1000.124 tag=-999 tag2=5 kill=22 tests=GTUBE, NOREALNAME, quarantine spam-a2740fd1baff60a1aa0bfb88a79036d6-20060616-121058-21817-01 (spam-quarantine)
    Jun 16 12:11:02 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) FWD via SMTP: [127.0.0.1]:10025 <[email protected]> -> <[email protected]>
    Jun 16 12:11:02 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) Passed, <[email protected]> -> <[email protected]>, quarantine spam-a2740fd1baff60a1aa0bfb88a79036d6-20060616-121058-21817-01, Message-ID: <20060616101057.8DB8556A84@web2>, Hits: 1000.124
    Jun 16 12:11:02 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) Passed SPAM, <[email protected]> -> <[email protected]>, Hits: 1000.124, tag=-999, tag2=5, kill=22, 0/Y/Y/Y
    Jun 16 12:11:02 mail.receiver.com /usr/bin/amavisd[21817]: (21817-01) TIMING [total 3276 ms] - SMTP EHLO: 15 (0%), SMTP pre-MAIL: 2 (0%), mkdir tempdir: 1 (0%), create email.txt: 1 (0%), SMTP pre-DATA-flush: 6 (0%), SMTP DATA: 1 (0%), body_hash: 2 (0%), mkdir parts: 2 (0%), mime_decode: 23 (1%), get-file-type1: 20 (1%), decompose_part: 2 (0%), parts_decode: 0 (0%), AV-scan-1: 2830 (86%), spam-wb-list: 4 (0%), SA msg read: 1 (0%), SA parse: 5 (0%), SA check: 211 (6%), update_cache: 1 (0%), write-header: 23 (1%), save-to-local-mailbox: 76 (2%), post-do_spam: 3 (0%), fwd-connect: 16 (0%), fwd-mail-from: 2 (0%), fwd-rcpt-to: 3 (0%), write-header: 5 (0%), fwd-data: 0 (0%), fwd-data-end: 3 (0%), fwd-rundown: 2 (0%), mainlogentry: 13 (0%), update_snmp: 0 (0%), unlink-1-files: 2 (0%), rundown: 1 (0%)
    As ar as I see, SpamAssassin gets called and rates the mail as spam with a hit-rate of 1000.124 using its buil-in rule GTUBE (see line 6 of the log)
    Since the hit rate is far above $sakill_leveldeflt, I would expect both addition of X-Spam-Deteced headers and modification of the mail's subject line, but not even spam-info-headers are added to the mail. The only header that gets added (and the only proof that makes me believe the mail really has gone through amavisd screening) is
    X-Virus-Scanned: by amavisd-new at mail.receiver.com
    Curently this looks like a major problem in amavisd but I have no clue what to do now.
    horst

    Does it help if you have this?
    dfwserver1:~ root# postconf -n
    always_bcc =
    command_directory = /usr/sbin
    config_directory = /etc/postfix
    content_filter = smtp-amavis:[127.0.0.1]:10024
    daemon_directory = /usr/libexec/postfix
    debugpeerlevel = 2
    enableserveroptions = yes
    html_directory = no
    inet_interfaces = all
    localrecipientmaps =
    luser_relay = keith
    mail_owner = postfix
    mailboxsizelimit = 0
    mailbox_transport = cyrus
    mailq_path = /usr/bin/mailq
    manpage_directory = /usr/share/man
    mapsrbldomains =
    messagesizelimit = 12582912
    mydestination = $myhostname,localhost.$mydomain,localhost,mail.dfwdesignsource.com,dfwdesignsou rce.com
    mydomain = dfwdesignsource.com
    mydomain_fallback = localhost
    myhostname = mail.dfwdesignsource.com
    mynetworks = 127.0.0.1/32,71.154.29.157/32,192.168.31.8/32,mail.allarycorp.com,allarycorp.co m,12.226.175.43,66.106.197.244,67.155.157.2,66.106.197.242,dfwdesignsource.com,m ail.dfwdesignsource.com,67.155.157.3,66.106.197.245
    mynetworks_style = host
    newaliases_path = /usr/bin/newaliases
    queue_directory = /private/var/spool/postfix
    readme_directory = /usr/share/doc/postfix
    sample_directory = /usr/share/doc/postfix/examples
    sendmail_path = /usr/sbin/sendmail
    setgid_group = postdrop
    smtpdclientrestrictions = permit_mynetworks rejectrblclient sbl-xbl.spamhaus.org rejectrblclient relays.ordb.org permit
    smtpdpw_server_securityoptions = login,plain,cram-md5
    smtpdrecipientrestrictions = permitsasl_authenticated,permit_mynetworks,reject_unauthdestination,permit
    smtpdsasl_authenable = yes
    smtpdtls_keyfile =
    smtpduse_pwserver = yes
    unknownlocal_recipient_rejectcode = 550
    virtualmailboxdomains = hash:/etc/postfix/virtual_domains
    virtual_transport = lmtp:unix:/var/imap/socket/lmtp

Maybe you are looking for

  • Quick Font Sampling Not Working in Illustrator CC 2014 18.1.0

    I just updated Illustrator CC 2014 to version 18.1.0 and have lost a feature I've come to depend upon to try out different fonts. I don't know what to call the feature, but this is how it worked: With a type box selected or type highlighted, I would

  • GetTypeMap() of OracleConnection doesn't work

    Hi, When i am trying to get the type map of the oracle connection i get Abstract method error. According to oracle documentation OracleConnection is not an abstract class and the method is fully implemented. If you have used this function,i would be

  • Which way - Streams or Logical Standby?

    Hi, I'm having a requirement to replicate a schema between two databases. The scenario is that we've got an Interactive Voice Recorder system for tracking voice calls to a call center contact. The system will be hosted in two sites, with kind of load

  • Upgrading to new iCal?

    Every time I start up either my MBAir or MBP I get the message to upgrade iCal to the new app. However, when I go to mobile me and attempt to upgrade I also get a warning that if I upgrade I will lose all my groups. Can anyone tell me what exactly I

  • Adobe Captivate 5 hangs when launched...

    I downloaded the trial of Captivate 5, and when I double click the icon to launch it, it just hangs and says "Loading..." but never loads, eventually I click on the Captivate logo, and an error box comes up stating the program must close.   I am usin