|
Hi
i give up searching... please help! missing x-spam on e-mail headers
# qmail-scanner settings QMAILSCANNERHOME="/usr/share/qmail-scanner" SPOOLDIR="/var/spool/qscan" #joaomatos09022011#SPAMDIR="/var/spool/qscan/quarantine/spam" SPAMDIR="spam"
QS_USER="qscand" # default is qscand QS_GROUP="qscand" # default is qscand NOTIFY="none" # [none|sender|recips|precips|admin|nmladm|nmlvadm|all] (defaults to "psender,nmlvadm") ARCHIVE="no" # [yes|no|regex] FIX_MIME="2" # [yes|no|num], try "1" if blocks occurring due to this setting IGNORE_EOL_CHECK="no" # [yes|no] ADD_DESC_HEADERS="yes" # [yes|no|all], old-fashion X-Qmail-Scanner, "all" adds rcpt to headers DEBUG="no" # [yes|no] MINIDEBUG="no" # [yes|no|1|2] SETTINGS_PER_DOMAIN="no" # [yes|no]
# ClamAV settings CLAMD_USER="qscand" # default is clamav
# Spamassassin settings SA_SETTINGS="-d -c -m5 -H" # Default settings for spamd SA_SQL="no" # [yes|no], runs spamassassin with the 'rcpt to' as option. Only use if mysql is enabled in SA SA_DELTA="1" # [num] SA_SUBJECT="****SPAM****" # <"some text"> SA_QUARANTINE="2" # [num], required_hits + sa_quarantine will go to SPAMDIR, 0 disables SA_DELETE="4" # [num], required_hits + sa_delete will be deleted, 0 disables SA_REJECT="no" # [yes|no], changes deletes to rejects SA_ALT="yes" # [yes|no], runs in *fast_spamassassin* mode and doesn't pass the '-u' optio SA_DEBUG="no" # [yes|no], requires sa-alt: yes SA_REPORT="no" # [yes|no], requires sa-alt: yes, sa-debug: yes SA_FORWARD="" # <username@domain>, User to redirect quarantined spam mails, unmodified for sa-learn (not used) SA_VERBOSE="no" # [yes|no], requires SA-FORWARD (not used)
local.cf:
# These values can be overridden by editing ~/.spamassassin/user_prefs.cf # (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting # without risking lost emails.
#required_hits 4 report_safe 0 rewrite_header Subject *****SPAM***** add_header all Status score=_SCORE_
required_score 4
e-mail headers:
Received: from cartman.amenworld.pt (62.193.234.27) by wpc0958.host7x24.com with (DHE-RSA-AES256-SHA encrypted) SMTP; 11 Feb 2011 15:17:47 +0000 Received: (qmail 8267 invoked by uid 48); 11 Feb 2011 15:17:56 +0000 Received: from a81-84-240-static.cpe.netcabo.pt (a81-84-240-static.cpe.netcabo.pt [81.84.240.56]) by webmail.amenworld.pt (Horde MIME library) with HTTP; Fri, 11 Feb 2011 16:17:56 +0100 Message-ID: <20110211161756.tm6rc835wk8800w0@webmail.amenworld.pt> Date: Fri, 11 Feb 2011 16:17:56 +0100 From: fax@amenworld.pt To: test@acminstalacoes.pt Subject: viagra cialis prozac virus buy sex download MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_55oculg17tog" Content-Transfer-Encoding: 7bit User-Agent: Internet Messaging Program (IMP) H3 (4.1.6)
This message is in MIME format.
--=_55oculg17tog Content-Type: text/plain; charset=ISO-8859-1; DelSp="Yes"; format="flowed" Content-Description: =?iso-8859-1?b?VmVyc8Ojbw==?= da Mensagem em Texto Puro Content-Disposition: inline Content-Transfer-Encoding: 7bit
version: 9.5.4 CentOS 5 95101209.08
installed with:
2 [2011-02-09 09:10:52] yum remove *drweb* 3 [2011-02-09 09:11:15] yum remove *spamassassin* 4 [2011-02-09 09:11:45] /usr/local/psa/admin/sbin/autoinstaller 5 [2011-02-09 09:12:24] yum remove *postgresql* 6 [2011-02-09 09:12:56] yum remove postgresql 7 [2011-02-09 09:13:10] yum remove *tomcat* 8 [2011-02-09 09:13:15] /usr/local/psa/admin/sbin/autoinstaller 9 [2011-02-09 09:29:32] wget -q -O - http://www.atomicorp.com/installers/atomic.sh | sh 10 [2011-02-09 09:29:58] yum update 11 [2011-02-09 09:37:38] yum install qmail-scanner clamd spamassassin
spamassassin-3.2.5-1.el5.art
clamav-0.96.5-1.el5.art clamav-db-0.96.5-1.el5.art clamd-0.96.5-1.el5.art
qmail-scanner-2.08-3.el5.art
tks! rgrds
|