You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Peter Tselios <s9...@yahoo.gr> on 2012/03/09 08:50:03 UTC

Trusted Networks and scoring

Good morning,

I noticed that for users originating from my networks, the X-Spam headers are not added to the messages. Is that due to the "trusted_networks" settings? If so, does that mean that spamassassin does not check them?
P.

Re: Trusted Networks and scoring

Posted by Benny Pedersen <me...@junc.org>.
Den 2012-03-09 08:50, Peter Tselios skrev:
> I noticed that for users originating from my networks, the X-Spam
> headers are not added to the messages.

how do you use spamassassin ?, i still not get that ball to see all 
here




Σχετ: Σχετ: Σχετ: Trusted Networks and scoring

Posted by Peter Tselios <s9...@yahoo.gr>.
I will check next Monday morning, but my feeling is that the @local_domains_acl is not set.

But according to what is in the NOTE, it is implied that the headers are added to incoming emails only. 

This it not what I want...


P.

Re: Σχετ: Σχετ: Trusted Networks and scoring

Posted by Benny Pedersen <me...@junc.org>.
Den 2012-03-09 18:33, Peter Tselios skrev:

> What do you mean to check at the local_domain? Should it have a
> specific value? 

headers would only be added to local_domains


# NOTE:
#   For backwards compatibility the variable names @local_domains (old) 
and
#   @local_domains_acl (new) are synonyms. For consistency with other 
lookups
#   the name @local_domains_acl is now preferred. It also makes it more
#   obviously distinct from the new %local_domains hash lookup table.
#
# local_domains* lookup tables are used in deciding whether a recipient
# is local or not, or in other words, if the message is outgoing or 
not.
# This affects inserting spam-related headers for local recipients,
# limiting recipient virus notifications (if enabled) to local 
recipients,
# in deciding if address extension may be appended, and in SQL lookups
# for non-fqdn addresses. Set it up correctly if you need features
# that rely on this setting (or just leave empty otherwise).
#
# With Postfix (2.0) a quick reminder on what local domains normally 
are:
# a union of domains specified in: $mydestination, 
$virtual_alias_domains,
# $virtual_mailbox_domains, and $relay_domains.
#
@local_domains_acl = ( ".$mydomain" );  # $mydomain and its subdomains
# @local_domains_acl = ( ".$mydomain", "my.other.domain" );
# @local_domains_acl = qw();  # default is empty, no recipient treated 
as local
# @local_domains_acl = qw( .example.com );
# @local_domains_acl = qw( .example.com !host.sub.example.net 
.sub.example.net );

# or alternatively(A), using a Perl hash lookup table, which may be 
assigned
# directly, or read from a file, one domain per line; comments and 
empty lines
# are ignored, a dot before a domain name implies its subdomains:
#
#read_hash(\%local_domains, '/etc/amavis/local_domains');

#or alternatively(B), using a list of regular expressions:
# $local_domains_re = new_RE( qr'[@.]example\.com$'i );
#
# see README.lookups for syntax and semantics



Σχετ: Σχετ: Trusted Networks and scoring

Posted by Peter Tselios <s9...@yahoo.gr>.
> check local_domain in amavisd.conf


What do you mean to check at the local_domain? Should it have a specific value? 

Re: Σχετ: Trusted Networks and scoring

Posted by Benny Pedersen <me...@junc.org>.
Den 2012-03-09 17:59, Peter Tselios skrev:

> Any ideas?

check local_domain in amavisd.conf

> (PS: Sorry to write on the top, but Yahoo! is not very helpful on 
> that

road to hell is made with bad excuses


Re: Σχετ: Trusted Networks and scoring

Posted by Jari Fredriksson <ja...@iki.fi>.
9.3.2012 18:59, Peter Tselios kirjoitti:
> Setup is:
> Stock Postfix of CentOS 6, Amavisd-new, SpamAssassin 3.3.1
> Network Flow is:
> (Incoming)
> Internet-->Antispam/Relay Server-->Antivirus Server-->Mailbox
> Outgoing:
> Webmail-->Antivirus-->Antispam-->Internet
> 
> Actually, the problem is more "intense" I believe.
> The issue is that not even the X-Spam headers added, althought I have
> set the $sa_tag_level_deflt is set to -150(!) and in the local.cf of
> spamassassin I have set the following rules:
> required_score 5
> ...
> ...
> add_header spam Flag _YESNOCAPS_
> add_header all Status _YESNO_, score=_SCORE_ 
> 
> Any ideas?
> 
> (PS: Sorry to write on the top, but Yahoo! is not very helpful on that :)
> 

OK, I can't help much, as I do not know Amavis. You are actually using
Amavis, and not SpamAssassin directly. SpamAssassin is just an add-on
livrary for Amavis in your setup.

I think /etc/spamassassin/* are NOT used by your setup.

Double check your postfix master.cf and verify that amavis is really
called with outgoing mail.

> 
> ------------------------------------------------------------------------
> *Απο:* Benny Pedersen <me...@junc.org>
> *Προς:* users@spamassassin.apache.org
> *Στάλθηκε:* 4:34 μ.μ. Παρασκευή, 9 Μαρτίου 2012
> *Θεμα:* Re: Trusted Networks and scoring
> 
> Den 2012-03-09 09:11, Jari Fredriksson skrev:
> 
>> No, SA will scan messages even if they originate from trusted_networks,
>> and X-Spam headers will be added.
> 
> most sites bypass scanning of there own mails since its just ham
> (permit_mynetworks) in postfix, my point is why not learn ham in bayes ?
> 
>> There is something else in your system deciding that the messages are
>> not passed to SpamAssassin.
> 
> here i have removed all signs of permit_mynetworks in postfix main.cf,
> only keeping permit_sasl_autienticated
> 
> there is other route in mailflows that could be the problem in not seen
> x-spam headers if using amavisd-new recipient domain must be local and
> spam score should be highter then spam_tag level, but that said i dont
> know if OP do use amavisd-new
> 
> 
> 
> 
> 



Σχετ: Trusted Networks and scoring

Posted by Peter Tselios <s9...@yahoo.gr>.
Setup is:

Stock Postfix of CentOS 6, Amavisd-new, SpamAssassin 3.3.1

Network Flow is:

(Incoming)

Internet-->Antispam/Relay Server-->Antivirus Server-->Mailbox

Outgoing:

Webmail-->Antivirus-->Antispam-->Internet


Actually, the problem is more "intense" I believe.

The issue is that not even the X-Spam headers added, althought I have set the $sa_tag_level_deflt is set to -150(!) and in the local.cf of spamassassin I have set the following rules:

required_score 5

...

...

add_header spam Flag _YESNOCAPS_

add_header all Status _YESNO_, score=_SCORE_ 


Any ideas?


(PS: Sorry to write on the top, but Yahoo! is not very helpful on that :)




________________________________
 Απο: Benny Pedersen <me...@junc.org>
Προς: users@spamassassin.apache.org 
Στάλθηκε: 4:34 μ.μ. Παρασκευή, 9 Μαρτίου 2012
Θεμα: Re: Trusted Networks and scoring
 
Den 2012-03-09 09:11, Jari Fredriksson skrev:

> No, SA will scan messages even if they originate from trusted_networks,
> and X-Spam headers will be added.

most sites bypass scanning of there own mails since its just ham (permit_mynetworks) in postfix, my point is why not learn ham in bayes ?

> There is something else in your system deciding that the messages are
> not passed to SpamAssassin.

here i have removed all signs of permit_mynetworks in postfix main.cf, only keeping permit_sasl_autienticated

there is other route in mailflows that could be the problem in not seen x-spam headers if using amavisd-new recipient domain must be local and spam score should be highter then spam_tag level, but that said i dont know if OP do use amavisd-new

Re: Trusted Networks and scoring

Posted by Benny Pedersen <me...@junc.org>.
Den 2012-03-09 09:11, Jari Fredriksson skrev:

> No, SA will scan messages even if they originate from 
> trusted_networks,
> and X-Spam headers will be added.

most sites bypass scanning of there own mails since its just ham 
(permit_mynetworks) in postfix, my point is why not learn ham in bayes ?

> There is something else in your system deciding that the messages are
> not passed to SpamAssassin.

here i have removed all signs of permit_mynetworks in postfix main.cf, 
only keeping permit_sasl_autienticated

there is other route in mailflows that could be the problem in not seen 
x-spam headers if using amavisd-new recipient domain must be local and 
spam score should be highter then spam_tag level, but that said i dont 
know if OP do use amavisd-new




Re: Trusted Networks and scoring

Posted by Jari Fredriksson <ja...@iki.fi>.
9.3.2012 9:50, Peter Tselios kirjoitti:
> Good morning,
> I noticed that for users originating from my networks, the X-Spam
> headers are not added to the messages. Is that due to the
> "trusted_networks" settings? If so, does that mean that spamassassin
> does not check them?
> P.

No, SA will scan messages even if they originate from trusted_networks,
and X-Spam headers will be added.

There is something else in your system deciding that the messages are
not passed to SpamAssassin.