crazy question qmail-scanner x SA scores
Rejaine Monteiro <[email protected]> Tue, 14 Mar 2017 18:32:52 -0300
| Newsgroups | gmane.mail.qmail.scanner |
|---|---|
| Message-ID | <[email protected]> |
This is a multi-part message in MIME format. --===============8821185246614868356== Content-Type: multipart/alternative; boundary="------------B2EDA643330F56DC5017AC9C" This is a multi-part message in MIME format. --------------B2EDA643330F56DC5017AC9C Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit qmail-scanner seems crazy here... Tue, 14 Mar 2017 17:40:00 BRT:3511: qmail-scanner: Clear:RC:0(194.67.222.61):SA:1(7.7/5.0): 1.740696 9914 [email protected] [email protected] Instantly_erect,_instant_respect <qyr1-q3qRwMXNPUJCgCOwtrdjcUswVS9bDzzxpXOejs.nsuEl60B9RNjQ0A-GTBbeE2CgXdDS2525pG .... Why "Clear" if SA score is 7.7 ?? Why not going to quaratine ( my $sa_quarantine_over='5'; ) qmail-queue.log is: Tue, 14 Mar 2017 17:40:00 BRT:3511: SA: yup, this smells like SPAM (score=7.7 required=5.0) Tue, 14 Mar 2017 17:40:00 BRT:3511: spamassassin: finished scan of dir "/var/spool/qscan/tmp/server14895239985893511" in 1.698798 secs Tue, 14 Mar 2017 17:40:00 BRT:3511: scanloop: finished scan of "/var/spool/qscan/tmp/server14895239985893511"... Tue, 14 Mar 2017 17:40:00 BRT:3511: ini_sc: scanning message took 1.735613 seconds Tue, 14 Mar 2017 17:40:00 BRT:3511: q_r: fork off child into /var/qmail/bin/qmail-queue... Tue, 14 Mar 2017 17:40:00 BRT:3525: q_r: xstatus=0 Tue, 14 Mar 2017 17:40:00 BRT:3511: qmail-scanner: Clear:RC:0(194.67.222.61):SA:1(7.7/5.0): 1.740696 9914 [email protected] [email protected] Instantly_erect,_instant_respect <qyr1-q3qRwMXNPUJCgCOwtrdjcUswVS9bDzzxpXOejs.nsuEl60B9RNjQ0A-GTBbeE2CgXdDS2525pG 1489523999.3513-0.server:3508 1489523999.3513-1.server:5515 Tue, 14 Mar 2017 17:40:00 BRT:3511: cleanup: /usr/bin/rm -rf /var/spool/qscan/tmp/server14895239985893511/ /var/spool/qscan/working/new/server14895239985893511 Tue, 14 Mar 2017 17:40:00 BRT:3511: all finished. Total of 1.783561 secs I have several cases of messages with score by SA above 5 that should be quarantined, but that are being delivered normally .. I'm going crazy here. Any idea? --------------B2EDA643330F56DC5017AC9C Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit <html> <head> <meta http-equiv="content-type" content="text/html; charset=utf-8"> </head> <body bgcolor="#FFFFFF" text="#000000"> <br> <br> qmail-scanner seems crazy here... <br> <br> <br> Tue, 14 Mar 2017 17:40:00 BRT:3511: qmail-scanner: Clear:RC:0(194.67.222.61):SA:1(7.7/5.0): 1.740696 9914 <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> Instantly_erect,_instant_respect <qyr1-q3qRwMXNPUJCgCOwtrdjcUswVS9bDzzxpXOejs.nsuEl60B9RNjQ0A-GTBbeE2CgXdDS2525pG .... <br> <br> <br> Why "Clear" if SA score is 7.7 ?? Why not going to quaratine ( my $sa_quarantine_over='5'; )<br> <br> <br> qmail-queue.log is: <br> <br> <br> Tue, 14 Mar 2017 17:40:00 BRT:3511: SA: yup, this smells like SPAM (score=7.7 required=5.0)<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: spamassassin: finished scan of dir "/var/spool/qscan/tmp/server14895239985893511" in 1.698798 secs<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: scanloop: finished scan of "/var/spool/qscan/tmp/server14895239985893511"...<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: ini_sc: scanning message took 1.735613 seconds<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: q_r: fork off child into /var/qmail/bin/qmail-queue...<br> Tue, 14 Mar 2017 17:40:00 BRT:3525: q_r: xstatus=0<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: qmail-scanner: Clear:RC:0(194.67.222.61):SA:1(7.7/5.0): 1.740696 9914 <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> <a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a> Instantly_erect,_instant_respect <qyr1-q3qRwMXNPUJCgCOwtrdjcUswVS9bDzzxpXOejs.nsuEl60B9RNjQ0A-GTBbeE2CgXdDS2525pG 1489523999.3513-0.server:3508 1489523999.3513-1.server:5515<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: cleanup: /usr/bin/rm -rf /var/spool/qscan/tmp/server14895239985893511/ /var/spool/qscan/working/new/server14895239985893511<br> Tue, 14 Mar 2017 17:40:00 BRT:3511: all finished. Total of 1.783561 secs<br> <br> I have several cases of messages with score by SA above 5 that should be quarantined, but that are being delivered normally .. <br> <br> I'm going crazy here. Any idea?<br> </body> </html> --------------B2EDA643330F56DC5017AC9C-- --===============8821185246614868356== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, Slashdot.org! http://sdm.link/slashdot --===============8821185246614868356== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Qmail-scanner-general mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general --===============8821185246614868356==--