You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Thomas Keil <tk...@meditconsult.de> on 2006/11/28 09:29:15 UTC

Spamassassin duplicates Spam!

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hello everbody,

I have a weird Problem with Spamassassin: it duplicates recognized Spams!

This works as following:
Ham is, as expected, tagged with the SA-Headers, everything is fine.
Spam is also tagged with the headers, also fine, but this Spam gets
delivered a second time, this time without any SA-Header.

I tried several versions of Spamassassin, and even changed from exim4
to postfix, but the problem remains :-(

I use SpamAssassin version 3.0.3 on Postfix 2.3.4

SpamAssassin is invoked exactly as recommended in the wiki, details
are on http://onetforum.com/fourm/viewtopic.php?p=27


Could someone please help me, my customer's customers are quite mad
already ;p

Cheers and thanks
Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFa/NaYpwab616zg4RAii9AJ4k6eQZI7EBA9tXA7FmjTWjpL4nGwCeK+qd
md1dBZg+aA+9cHjV6OQAPUM=
=eS6D
-----END PGP SIGNATURE-----

Re: Spamassassin duplicates Spam!

Posted by Thomas Keil <tk...@meditconsult.de>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Thomas Keil schrieb:
> Ham is, as expected, tagged with the SA-Headers, everything is
> fine. Spam is also tagged with the headers, also fine, but this
> Spam gets delivered a second time, this time without any
> SA-Header.Thomas
One addendum: when Postfix/Spamassassin is startet, everything is fine
(Spams tagged, delivered just once), and after a couple hours things
get wrong  :-(

Cheers
Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFa/fRYpwab616zg4RAkWbAJ9VXbJqVEvNjYc2HWGmRb2PasXBSQCeIoAO
OUAncf6cnxg4q0TXIm7IHvw=
=GEUH
-----END PGP SIGNATURE-----

Re: Spamassassin duplicates Spam!

Posted by Michael Schwartzkopff <mi...@multinet.de>.
Am Dienstag, 28. November 2006 10:27 schrieb Thomas Keil:
> That's what I thought, too, thus I replaced exim with postfix.
> exim invokes SA differently than postfix, I thought that this would
> fix the problem...
>
> I now deleted every ".spamassassin" directory and wait what happens ;)
>
> Thanks again
> Thomas

What is in the log files? Any reason why you get double spam? Did you try to 
invoke SA manually?

-- 
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Bretonischer Ring 7
85630 Grasbrunn

Tel: (+49 89) 456 911 - 0
Fax: (+49 89) 456 911 - 21
mob: (+49 174) 343 28 75

PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
Skype: misch42

Re: Spamassassin duplicates Spam!

Posted by Thomas Keil <tk...@meditconsult.de>.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,
> Well, I can't directly help, I'm no exim expert, but hopefully I
> can offer some advice that can help you track the problem down..
First of all, I really appreciate your help :-)


> Also, some things to think about while tracking this down. The
> spamassassin tools themselves can't duplicate mail. They're a
> message pipe, so they're strictly a one message in, one message out
> tool. They cannot delete nor duplicate messages, and most tools
> would recover if SA tried.
That's what I thought, too, thus I replaced exim with postfix.
exim invokes SA differently than postfix, I thought that this would
fix the problem...

I now deleted every ".spamassassin" directory and wait what happens ;)

Thanks again
Thomas
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFFbAEQYpwab616zg4RAkjyAKCFpesFOpgVUJ/h9Out+zvGW4GfXgCeLej4
25znx7tj/7kkZ6ogc0GzLH8=
=8/CX
-----END PGP SIGNATURE-----

Re: Spamassassin duplicates Spam!

Posted by Matt Kettler <mk...@verizon.net>.
Thomas Keil wrote:
> Hello everbody,
>
> I have a weird Problem with Spamassassin: it duplicates recognized Spams!
>
> This works as following:
> Ham is, as expected, tagged with the SA-Headers, everything is fine.
> Spam is also tagged with the headers, also fine, but this Spam gets
> delivered a second time, this time without any SA-Header.
>
> I tried several versions of Spamassassin, and even changed from exim4
> to postfix, but the problem remains :-(
>
> I use SpamAssassin version 3.0.3 on Postfix 2.3.4
>
> SpamAssassin is invoked exactly as recommended in the wiki, details
> are on http://onetforum.com/fourm/viewtopic.php?p=27
>
>
> Could someone please help me, my customer's customers are quite mad
> already ;p
Well, I can't directly help, I'm no exim expert, but hopefully I can
offer some advice that can help you track the problem down..

First, that's not exactly as in the spamassassin wiki.. That site added
the sendmail.postfix to the script file, the SA wiki has it in
master.cf.. I'm not sure if it is relveant, but it jumps out at me as a
glaring diffrence between the recommended method on the SpamAssassin
project site and the one on "onetforum".

You might want to look at the SA wiki:
http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix


Also, some things to think about while tracking this down. The
spamassassin tools themselves can't duplicate mail. They're a message
pipe, so they're strictly a one message in, one message out tool. They
cannot delete nor duplicate messages, and most tools would recover if SA
tried.

However, there are some possibilities I can think of:

1) some non-standard part of your mail chain is barfing on SA's
encapsulated messages, and duplicating them. You can test this by
setting "report_safe 0" in your local.cf and restart spamd.
2) The tool feeding SA thought SA errored, tried to recover, and would
up using both messages.

My guess is case 2 and that spamc completes and delivers the message to
sendmail, but the return codes from the "spamfilter" script are somehow
confusing postfix into deferring the message.


>
> Cheers and thanks
> Thomas