Hi!
How can I check if qmail-scanner is calling SA and if not how
to force it?
tks
Oscar
----- Original Message -----
From: "Carl R. Friend" <crfriend@rcn.com>
To: "Óscar Girão" <oscar@igofast.com>
Cc: <spamassassin-users@incubator.apache.org>
Sent: Saturday, February 07, 2004 5:48 PM
Subject: Re: HELP! My spam filters don't work
On Sat, 7 Feb 2004, Óscar Girão wrote:
> The problem is that I receive lots of spam!!! I don't understand why.
We all do. That's why we use SpamAssassin.
> Please check this email header:
>
> Return-Path: <c.bingham_ce@atkingroup.co.uk>
> Delivered-To: brithol.com-brithol@brithol.com
> Received: (qmail 28409 invoked by uid 500); 7 Feb 2004 08:32:36 -0000
> Received: from c.bingham_ce@atkingroup.co.uk by brithol by uid 92 with
> qmail-scanner-1.20
> (spamassassin: 2.63. Clear:RC:1(127.0.0.1):.
> Processed in 0.024219 secs); 07 Feb 2004 08:32:36 -0000
Unless you've got a *beast* of a scanning box, 0.024 seconds
seems a bit on the quick side for a SpamAssassin check (the DNS
checks alone would require that much). It looks like SA isn't
getting called.
> X-Qmail-Scanner-Mail-From: c.bingham_ce@atkingroup.co.uk via brithol
> X-Qmail-Scanner: 1.20 (Clear:RC:1(127.0.0.1):. Processed in 0.024219 secs)
> Received: from localhost (HELO brithol) (127.0.0.1)
> by localhost with SMTP; 7 Feb 2004 08:32:36 -0000
> Received: from bcs.cl (d57-244-213.home.cgocable.net [24.57.244.213])
> by localhost (VaMailArmor-2.0.1.16) id 28398-488F727D;
> Sat, 07 Feb 2004 10:32:35 +0200
That's a zombie-relay. Some poor bloke on a cable-modem had his
machine compromised by a worm that allows spammers to relay through
his system.
> Message-ID: <PKMEFECMKOILGKODBNPFODHBLFAA.c.bingham_ce@atkingroup.co.uk>
> From: "Cecelia Bingham" <c.bingham_ce@atkingroup.co.uk>
> To: brithol@brithol.com
> Subject: Buy Codeine Tylenol3, Codeine Tylenol3, Viaga cheap
> Date: Sat, 07 Feb 2004 21:44:34 +0000
> MIME-Version: 1.0
> Content-Type: text/html
> Content-Transfer-Encoding: base64
> X-AntiVirus: checked by Vexira MailArmor (version: 2.0.1.16; VAE:
6.23.0.3;
> VDF: 6.23.0.60; host: brithol
I notice that SpamAssassin didn't inject any of its headers into
the mix. Double-check to make sure that SA is, in fact, getting
called.
+------------------------------------------------+---------------------+
| Carl Richard Friend (UNIX Sysadmin) | West Boylston |
| Minicomputer Collector / Enthusiast | Massachusetts, USA |
| mailto:crfriend@rcn.com +---------------------+
| http://users.rcn.com/crfriend/museum | ICBM: 42:22N 71:47W |
+------------------------------------------------+---------------------+