Re: Emails getting delivered
Salvatore Toribio <[email protected]> Tue, 14 May 2013 13:30:13 +0200
| Newsgroups | gmane.mail.qmail.scanner |
|---|---|
| Message-ID | <a06240806cdb7d0852e27@[10.10.82.254]> |
--===============1251704711152156299==
Content-Type: multipart/alternative;
boundary="============_-843591479==_ma============"
--============_-843591479==_ma============
Content-Type: text/plain; charset="us-ascii" ; format="flowed"
At 16:41 +0530 14-05-2013, Kunal Soni wrote:
>Hi ST,
>
>We have already enabled sa_quarantine and sa_delete to blocks spam mails.
>
>qmail-queue.log is big file.
>
>1. How to use qmail-queue.log with MINIDEBUG
Edit qmail-scanner-queue.pl (usually
/var/qmail/bin/qmail-scanner-queue.pl) then search for DEBUG and
change:
my $DEBUG='0';
my $MINIDEBUG='1';
>2. How to rotate qmail-queue.log file.
Just to be quick you can rename the file: mv qmail-queue.log qmail-queue.log.1
I usually use logrotate, it is very easy, you only need to create a
file like this one (assuming your system has logrotate on it...)
[root@hedwig-1 ~]# more /etc/logrotate.d/qmail-scanner
/var/spool/qscan/qmail-queue.log {
weekly
rotate 5
copytruncate
#compress
notifempty
missingok
}
/var/spool/qscan/quarantine.log {
weekly
rotate 5
copytruncate
#compress
notifempty
missingok
}
Regards
ST
>
>Thanks in advance.
>
>
>
>
>On Tue, May 14, 2013 at 4:08 PM, Salvatore Toribio
><<mailto:[email protected]>[email protected]> wrote:
>
>Hi Kunal
>
>Please check qmail-queue.log, at least with MINIDEBUG enabled. There
>you should find what qmail-scanner does with the spam messages.
>
>Remember you need to enable sa_quarantine or sa_delete to block spam mails.
>
>Regards
>
>ST
>
>PS: versio 1.25st is really old.
>
>
>
>
>At 13:42 +0530 14-05-2013, Kunal Soni wrote:
>
>>Dear Mailing List,
>>
>
>We have been using qmailscanner 1.25 st with Qmail.
>
>
>Few of the emails which are marked SPAM in Maillogs are getting
>delivered to the Receipients. Please find attached are the email
>maillogs and email which was delivered to user.
>
>
>Please do the needful.
>
>
>Logs ----
>
>
>May 14 12:49:15 bismail spamd[6598]: spamd: identified spam
>(24.3/5.0) for qscand:510 in 4.1 seconds, 1097 bytes.
>
>May 14 12:49:15 bismail spamd[6598]: spamd: result: Y 24 -
>BAYES_99,FSL_HELO_BARE_IP_1,FSL_HELO_BARE_IP_2,MISSING_DATE,MISSING_MID,RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT,RCVD_IN_PBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RCVD_NUMERIC_HELO,RDNS_NONE,SUBJ_ALL_CAPS
>scantime=4.1,size=1097,user=qscand,uid=510,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=34171,mid=(unknown),bayes=1.000000,autolearn=spam
>
>May 14 12:49:15 bismail spamd[6597]: prefork: child states: II
>
>May 14 12:49:16
>bismail <http://qmail-scanner-queue.pl/>qmail-scanner-queue.pl:
>qmail-scanner[4267]:
>SA:SPAM-QUARANTINE:RC:0(178.123.185.86):SA:1(24.3/5.0): 5.386898
>1097
><> <mailto:[email protected]>[email protected]_NEED_TO_READ_THIS
><<mailto:[email protected]>[email protected]>
>bismail.mpgbis.com13685159507754267-unpacked:1097
>
>
>In the Attached email, when we check the email source, it doesnt
>yield the SPAM Score.
>
>
>--
>Kunal Soni
>
>(9810019739)
>
>
>
>
>--
>Kunal Soni
>(9810019739)
--============_-843591479==_ma============
Content-Type: text/html; charset="us-ascii"
<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type="text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
--></style><title>Re: [Qmail-scanner-general] Emails getting
delivered</title></head><body>
<div>At 16:41 +0530 14-05-2013, Kunal Soni wrote:</div>
<blockquote type="cite" cite>Hi ST,</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>We have already enabled sa_quarantine and
sa_delete to blocks spam mails.</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>qmail-queue.log is big file.</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>1. How to use qmail-queue.log with
MINIDEBUG</blockquote>
<div><br></div>
<div>Edit qmail-scanner-queue.pl (usually
/var/qmail/bin/qmail-scanner-queue.pl) then search for DEBUG and
change:</div>
<div><br></div>
<div>my $DEBUG='0';</div>
<div>my $MINIDEBUG='1';</div>
<div><br></div>
<blockquote type="cite" cite>2. How to rotate qmail-queue.log
file.</blockquote>
<div><br></div>
<div>Just to be quick you can rename the file: mv qmail-queue.log
qmail-queue.log.1</div>
<div><br></div>
<div>I usually use logrotate, it is very easy, you only need to create
a file like this one (assuming your system has logrotate on
it...)</div>
<div><br></div>
<div>[root@hedwig-1 ~]# more /etc/logrotate.d/qmail-scanner</div>
<div>/var/spool/qscan/qmail-queue.log {</div>
<div> weekly</div>
<div> rotate 5</div>
<div> copytruncate<br>
#compress<br>
notifempty<br>
missingok<br>
}<br>
/var/spool/qscan/quarantine.log {<br>
weekly</div>
<div> rotate 5</div>
<div> copytruncate<br>
#compress<br>
notifempty<br>
missingok<br>
}<br>
</div>
<div>Regards</div>
<div><br></div>
<div>ST</div>
<div><br></div>
<div><br></div>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>Thanks in advance.</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite><br>
<br>
</blockquote>
<blockquote type="cite" cite>On Tue, May 14, 2013 at 4:08 PM,
Salvatore Toribio <<a
href="mailto:[email protected]">[email protected]</a>> wrote:<br>
<blockquote>Hi Kunal</blockquote>
<blockquote><br></blockquote>
<blockquote>Please check qmail-queue.log, at least with MINIDEBUG
enabled. There you should find what qmail-scanner does with the spam
messages.</blockquote>
<blockquote><br></blockquote>
<blockquote>Remember you need to enable sa_quarantine or sa_delete to
block spam mails.</blockquote>
<blockquote><br></blockquote>
<blockquote>Regards</blockquote>
<blockquote><font color="#888888"><br></font></blockquote>
<blockquote><font color="#888888">ST</font></blockquote>
<blockquote><br></blockquote>
<blockquote>PS: versio 1.25st is really old.</blockquote>
<blockquote><br></blockquote>
<blockquote><br></blockquote>
<blockquote><br></blockquote>
<blockquote><br></blockquote>
<blockquote>At 13:42 +0530 14-05-2013, Kunal Soni wrote:<br>
<blockquote type="cite" cite>Dear Mailing List,<br>
</blockquote>
</blockquote>
<blockquote>
<blockquote><br></blockquote>
<blockquote>We have been using qmailscanner 1.25 st with Qmail.<br>
</blockquote>
<blockquote><br></blockquote>
<blockquote>Few of the emails which are marked SPAM in Maillogs are
getting delivered to the Receipients. Please find attached are the
email maillogs and email which was delivered to user.<br>
</blockquote>
<blockquote><br></blockquote>
<blockquote>Please do the needful.<br>
</blockquote>
<blockquote><br></blockquote>
<blockquote>Logs ----<br>
</blockquote>
<blockquote><br></blockquote>
<blockquote>May 14 12:49:15 bismail spamd[6598]: spamd: identified
spam (24.3/5.0) for qscand:510 in 4.1 seconds, 1097 bytes.<br>
</blockquote>
<blockquote>May 14 12:49:15 bismail spamd[6598]: spamd: result: Y 24 -
BAYES_99,FSL_HELO_BARE_IP_1,FSL_HELO_BARE_IP_2,MISSING_DATE,MISSING_M<span
></span
>ID,RCVD_HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_BRBL_LASTEXT<span
></span
>,RCVD_IN_PBL,RCVD_IN_RP_RNBL,RCVD_IN_SORBS_WEB,RCVD_IN_XBL,RCVD_NUME<span
></span>RIC_HELO,RDNS_NONE,SUBJ_ALL_CAPS
scantime=4.1,size=1097,user=qscand,uid=510,required_score=5.0,rhost=l<span
></span
>ocalhost,raddr=127.0.0.1,rport=34171,mid=(unknown),bayes=1.000000,au<span
></span>tolearn=spam<br>
</blockquote>
<blockquote>May 14 12:49:15 bismail spamd[6597]: prefork: child
states: II<br>
</blockquote>
<blockquote>May 14 12:49:16 bismail <a
href="http://qmail-scanner-queue.pl/">qmail-scanner-queue.pl</a>:
qmail-scanner[4267]:
SA:SPAM-QUARANTINE:RC:0(178.123.185.86):SA:1(24.3/5.0): 5.386898 1097
<> <a
href="mailto:[email protected]">[email protected]</a
>YOU_NEED_TO_READ_THIS <<a
href="mailto:[email protected]"
>[email protected]</a>>
bismail.mpgbis.com13685159507754267-unpacked:1097<br>
</blockquote>
<blockquote><br></blockquote>
<blockquote>In the Attached email, when we check the email source, it
doesnt yield the SPAM Score.<br>
</blockquote>
<blockquote><br></blockquote>
<blockquote>--<br>
Kunal Soni<br>
</blockquote>
<blockquote>(9810019739)<br>
</blockquote>
</blockquote>
</blockquote>
<blockquote type="cite" cite><br>
<br>
</blockquote>
<blockquote type="cite" cite><br></blockquote>
<blockquote type="cite" cite>--<br>
Kunal Soni<br>
(9810019739)</blockquote>
<div><br></div>
</body>
</html>
--============_-843591479==_ma============--
--===============1251704711152156299==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
------------------------------------------------------------------------------
AlienVault Unified Security Management (USM) platform delivers complete
security visibility with the essential security capabilities. Easily and
efficiently configure, manage, and operate all of your security controls
from a single console and one unified framework. Download a free trial.
http://p.sf.net/sfu/alienvault_d2d
--===============1251704711152156299==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline
_______________________________________________
Qmail-scanner-general mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
--===============1251704711152156299==--