You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Luis campo <lc...@hotmail.com> on 2009/09/23 19:22:54 UTC

Report in header of SPAM emails

Dear Sirs, 

As configure SA to emails that have been submitted to the QUARANTINE directory containing the report SA in the header.

 

Thanks

 

Luis Campo
 		 	   		  
_________________________________________________________________
News, entertainment and everything you care about at Live.com. Get it now!
http://www.live.com/getstarted.aspx

Re: Report in header of SPAM emails

Posted by Martin Gregorie <ma...@gregorie.org>.
On Fri, 2009-09-25 at 19:08 +0300, Jari Fredriksson wrote:

> Well. SpamAssassin does not have a Quarantine. Something in your
> system has, and that is what is calling the SpamAssassin.
> 
I already told him that simscan is doing the quarantining. Thats
definite.

I'm also 98% certain that simscan quarantines the original message and
discards the version returned by spamc. This is why the report_safe has
no effect.

Somebody might care to read the simscan code and confirm my analysis.
simscan is a single, fairly straight forward C source file. However, the
OP can easily prove this by inspecting or posting a quarantined message
to pastebin: if I'm right the quarantined message won't contain any SA
headers added by his host.


Martin



Re: Report in header of SPAM emails

Posted by Jari Fredriksson <ja...@iki.fi>.
> Hello
> 
> if I restarted the spamd
> 

You need more words when communicating ;)

Does this mean the report still does not show up, even if you restarted SA after the setting?

Well. SpamAssassin does not have a Quarantine. Something in your system has, and that is what is calling the SpamAssassin.

How do you call SpamAssassin?

1. Do you have spamd up and running?
2. Is it called by spamc?
3. Do you have amavisd-new?
4. Do you have simscan?
5. How does the mail get processed by SpamAssassin in your system?
6. Which software puts the spam into Quarantine folder? SpamAssassin it is not.

RE: Report in header of SPAM emails

Posted by Luis campo <lc...@hotmail.com>.
Hello 

if I restarted the spamd
 

greetings

 


 
> From: jarif@iki.fi
> To: users@spamassassin.apache.org
> Subject: Re: Report in header of SPAM emails
> Date: Thu, 24 Sep 2009 15:58:58 +0300
> 
> > dears Srs,
> > 
> > 
> > I have added the option report_safe 1, but the mail
> > deposited in the quarantine folder 
> > not have any attached and SA report
> > 
> > Do not use the amavis, if not the simscan
> > 
> 
> Did you restart Spamd after the change?
 		 	   		  
_________________________________________________________________
Explore the seven wonders of the world
http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE

Re: Report in header of SPAM emails

Posted by Jari Fredriksson <ja...@iki.fi>.
> dears Srs,
> 
> 
> I have added the option report_safe 1, but the mail
> deposited in the quarantine folder 
> not have any attached and SA report
> 
> Do not use the amavis, if not the simscan
> 

Did you restart Spamd after the change?

RE: Report in header of SPAM emails

Posted by Luis campo <lc...@hotmail.com>.
dears Srs,

 


I have added the option report_safe 1, but the mail deposited in the quarantine folder 

not have any attached and SA report

 

Do not use the amavis, if not the simscan

 

 

thanks

 

Luis Campo

Do not use the amavis, if not the simscan
> Subject: Re: Report in header of SPAM emails
> From: martin@gregorie.org
> To: users@spamassassin.apache.org
> Date: Wed, 23 Sep 2009 21:00:19 +0100
> 
> On Wed, 2009-09-23 at 22:19 +0300, Jari Fredriksson wrote:
> > > I was referring to the following:
> > > 
> > > I have found that emails that have been filtered by SPAM
> > > and have been placed in the Quarantine folder in the
> > > header are not report of SpamAssassin. 
> > > 
> > > I want to know about the rules and scores assigned by
> > > SpamAssassin to those e-mails filtered. 
> > > 
> Add this parameter to local.cf:
> 
> report_safe 1
> 
> and all quarantined messages will be converted to attachments to a mail
> message that contains a report of all rules that were hit and their
> scores. I think this is what you were asking for but this DOES NOT work
> with amavis. 
> 
> If the quarantining is done by amavis you should follow the advice given
> below by Jari and configure it, not spamasassin, to generate the report.
> 
> 
> Martin
> 
> > 
> > SpamAssassin itself does not place anything in any Quarantine folders, SA does not have such concept at all.
> > 
> > If you are using amavisd-new, which apparntly can do that, then I googled this for you
> > 
> > > When calling SA via amavisd-new, header editing is handled strictly by
> > > amavisd-new, not SA (see 
> > > http://www.ijs.si/software/amavisd/#faq-spam). You
> > > can get amavisd-new to add the SA report to the headers, which should
> > > include the autolearn header, by adding (or uncommenting) the 
> > > following in
> > > your amavisd.conf:
> > > 
> > > $sa_spam_report_header = 1; # insert X-Spam-Report header 
> > > field? default
> > > false
> > > 
> > > Beware, this will add lots of additional header lines to your 
> > > messages.
> > > 
> 
> 
 		 	   		  
_________________________________________________________________
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

Re: Report in header of SPAM emails

Posted by Martin Gregorie <ma...@gregorie.org>.
On Wed, 2009-09-23 at 22:19 +0300, Jari Fredriksson wrote:
> > I was referring to the following:
> > 
> > I have found that emails that have been filtered by SPAM
> > and have been placed in the Quarantine folder in the
> > header are not report of SpamAssassin.  
> > 
> > I want to know about the rules and scores assigned by
> > SpamAssassin to those e-mails filtered. 
> > 
Add this parameter to local.cf:

report_safe 1

and all quarantined messages will be converted to attachments to a mail
message that contains a report of all rules that were hit and their
scores. I think this is what you were asking for but this DOES NOT work
with amavis. 

If the quarantining is done by amavis you should follow the advice given
below by Jari and configure it, not spamasassin, to generate the report.


Martin

> 
> SpamAssassin itself does not place anything in any Quarantine folders, SA does not have such concept at all.
> 
> If you are using amavisd-new, which apparntly can do that, then I googled this for you
> 
> > When calling SA via amavisd-new, header editing is handled strictly by
> > amavisd-new, not SA (see 
> > http://www.ijs.si/software/amavisd/#faq-spam).  You
> > can get amavisd-new to add the SA report to the headers, which should
> > include the autolearn header, by adding (or uncommenting) the 
> > following in
> > your amavisd.conf:
> > 
> > $sa_spam_report_header = 1; # insert X-Spam-Report header 
> > field? default
> > false
> > 
> > Beware, this will add lots of additional header lines to your 
> > messages.
> > 



Re: Report in header of SPAM emails

Posted by Jari Fredriksson <ja...@iki.fi>.
> I was referring to the following:
> 
> I have found that emails that have been filtered by SPAM
> and have been placed in the Quarantine folder in the
> header are not report of SpamAssassin.  
> 
> I want to know about the rules and scores assigned by
> SpamAssassin to those e-mails filtered. 
> 

SpamAssassin itself does not place anything in any Quarantine folders, SA does not have such concept at all.

If you are using amavisd-new, which apparntly can do that, then I googled this for you

> When calling SA via amavisd-new, header editing is handled strictly by
> amavisd-new, not SA (see 
> http://www.ijs.si/software/amavisd/#faq-spam).  You
> can get amavisd-new to add the SA report to the headers, which should
> include the autolearn header, by adding (or uncommenting) the 
> following in
> your amavisd.conf:
> 
> $sa_spam_report_header = 1; # insert X-Spam-Report header 
> field? default
> false
> 
> Beware, this will add lots of additional header lines to your 
> messages.
> 

RE: Report in header of SPAM emails

Posted by Luis campo <lc...@hotmail.com>.
I was referring to the following: 

I have found that emails that have been filtered by SPAM and have been placed in the Quarantine folder in the header are not report of SpamAssassin. 

I want to know about the rules and scores assigned by SpamAssassin to those e-mails filtered.
 
Thanks
 
Luis

 
> From: jarif@iki.fi
> To: users@spamassassin.apache.org
> Subject: Re: Report in header of SPAM emails
> Date: Wed, 23 Sep 2009 21:54:11 +0300
> 
> 
> > As configure SA to emails that have been submitted to the
> > QUARANTINE directory containing the report SA in the
> > header. 
> > 
> > Huh?
> 
> Language barrier.
> 
> Maybe he sees now the spam going to quarantine folder by amavisd-new or similar (do they do that to spam too, I don't know), and wants that changed to a report in the headers.
> 
> Or the other way around?
> 
> Or maybe they do not need/use words in the planet he came from. We need a picture.
 		 	   		  
_________________________________________________________________
Connect to the next generation of MSN Messenger 
http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-us&source=wlmailtagline

Re: Report in header of SPAM emails

Posted by Jari Fredriksson <ja...@iki.fi>.
> As configure SA to emails that have been submitted to the
> QUARANTINE directory containing the report SA in the
> header.  
> 
> Huh?

Language barrier.

Maybe he sees now the spam going to quarantine folder by amavisd-new or similar (do they do that to spam too, I don't know), and wants that changed to a report in the headers.

Or the other way around?

Or maybe they do not need/use words in the planet he came from. We need a picture.

Re: Report in header of SPAM emails

Posted by Dan Schaefer <da...@performanceadmin.com>.
> As configure SA to emails that have been submitted to the QUARANTINE 
> directory containing the report SA in the header.
Huh?

-- 
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.