Topic: spam checking is not functioning?
hi there, following my previous post, i still have some problems with the spam filtering .
testing process:
using a testing sender, test@gmail.com, with outlook express,
and smtp server pointing to my isp, sending a testing message of GTUBE test text,
here is the mail contents in my maildir.
========================================================================================================
Return-Path: <test@gmail.com>
Delivered-To: rcpt@example.com
Received: from localhost (localhost.localdomain [127.0.0.1])
by mailserver.example.com (Postfix) with ESMTP id 6B5B06047B
for <rcpt@example.com>; Thu, 7 Jul 2011 19:49:02 +0800 (HKT)
X-Virus-Scanned: amavisd-new at mailserver.example.com <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
Received: from mailserver.example.com ([127.0.0.1])
by localhost (mailserver.example.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id IP+tx21tYWR7 for <rcpt@example.com>;
Thu, 7 Jul 2011 19:49:01 +0800 (HKT)
X-Original-Helo: smtp.wh.com (iRedMail: http://www.iredmail.org/)
Received: from smtp.wh.com (unknown [202.130.xxx.xxx])
by mailserver.example.com (Postfix) with ESMTP id 86FAF603F4
for <rcpt@example.com>; Thu, 7 Jul 2011 19:49:01 +0800 (HKT)
Received: (qmail 24644 invoked from network); 7 Jul 2011 11:49:00 -0000
Received: from unknown (HELO wkstation2) ([210.5.xxx.xxx])
(envelope-sender <test@gmail.com>)
by smtp.wh.com (qmail-ldap-1.03) with SMTP
for <rcpt@example.com>; 7 Jul 2011 11:49:00 -0000
Message-ID: <88EFA10A71EC4412B0080C6C9AC66F65@xxx.com>
From: "test" <test@gmail.com>
To: <rcpt@example.com>
Subject: testing spam
Date: Thu, 7 Jul 2011 19:49:01 +0800
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0014_01CC3CDE.EB132B10"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5931
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.6109
This is a multi-part message in MIME format.
------=_NextPart_000_0014_01CC3CDE.EB132B10
Content-Type: text/plain;
charset="big5"
Content-Transfer-Encoding: quoted-printable
----- Original Message -----=20
From: test=20
To: rcpt@example.com=20
Sent: Monday, July 04, 2011 10:50 AM
Subject: testing spam
XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X
------=_NextPart_000_0014_01CC3CDE.EB132B10
Content-Type: text/html;
charset="big5"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content=3D"text/html; charset=3Dbig5" http-equiv=3DContent-Type>
<META name=3DGENERATOR content=3D"MSHTML 8.00.6001.19088">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV> </DIV>
<DIV style=3D"FONT: 10pt =B7s=B2=D3=A9=FA=C5=E9">----- Original Message =
-----=20
<DIV style=3D"BACKGROUND: #e4e4e4; font-color: black"><B>From:</B> <A=20
title=3Dtest@gmail.com href=3D"mailto:test@gmail.com">test</A> </DIV>
<DIV><B>To:</B> <A title=3Drcpt@example.com=20
href=3D"mailto:rcpt@example.com">rcpt@example.com</A> </DIV>
<DIV><B>Sent:</B> Monday, July 04, 2011 10:50 AM</DIV>
<DIV><B>Subject:</B> testing spam</DIV></DIV>
<DIV><BR></DIV>
<DIV><PRE>XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*=
C.34X</PRE></DIV></BODY></HTML>
------=_NextPart_000_0014_01CC3CDE.EB132B10--
========================================================================================================
i can see the avavisd was run and checked that message, as indicated by <<<<<<<<<<<<<<<<<<<<<<<<<<
however, what i expected is something like this: (http://workaround.org/ispmail/lenny/ama … nd-viruses)
X-Spam-Status: Yes, hits=16.0 tagged_above=-9999.0 required=6.31
tests=BAYES_99, FORGED_MUA_OUTLOOK, MSGID_FROM_MTA_ID,
RCVD_IN_BL_SPAMCOP_NET, UNDISC_RECIPS, URIBL_OB_SURBL, WORK_AT_HOME
X-Spam-Level: ***************
X-Spam-Flag: YES
but, there is no X-Spam-Status flag in the header.
the maillog showed:
Jul 7 19:47:40 mail1 amavis[2732]: (02732-12) Passed SPAM, LOCAL [202.130.xxx.xxx] [210.5.xxx.xxx] <test@gmail.com> -> <rcpt@example.com>, quarantine: spam-qMa+t3jZEL1O.gz, Message-ID: <406E8409282D4ABC93AE82040CE2ACF3@cechk.com>, mail_id: qMa+t3jZEL1O, Hits: 1002.278, size: 2463, queued_as: 8140A6047A, 736 ms
so, it is detected as a SPAM, but why the mail header was not modified according?
i made no change to the /etc/amavisd.conf
anything missed? or someone else has made the same test?
Thanks for advice.
miles_hc
----
Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.
