Headers are not inserted.

Michael Scheidell michael.scheidell at secnap.com
Thu Dec 1 13:10:18 CET 2011

On 12/1/11 7:02 AM, Andreas Neustifter wrote:
> Hi List!
> Sometimes a email gets forwarded from our spam filter (single machine,
> amavis+postfix+spamassassin+clamav, pretty simple setup) to the
> exchange server that have no spam headers (although
> '$sa_tag_level_deflt  = -999') and even have no received headers.
> Those mails do not appear in mail.log, but they do appear in the
> exchange logs as received from the spam filter.
> It seems as if those mails are materializing from thin air on the spam filter.
> Any ideas what could be the problem in this case? (I have checked the
> access logs, nothing out of the ordinary...)
submit port, 587?  someone sending directly to port 10025?  using 
imap(s) to send emails?

other things, make sure that the 'sending' domain isn't your local 
domain? (marked 'local=y' in db?  )
make sure receivng domain IS?

run tcpdump? tcpflow and see if you can catch it?

being actually BOUNCED to/from the exchange server?

are they spam or legit?

> Thanks, Andi

Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
 >*| *SECNAP Network Security Corporation

    * Best Mobile Solutions Product of 2011
    * Best Intrusion Prevention Product
    * Hot Company Finalist 2011
    * Best Email Security Product
    * Certified SNORT Integrator

This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.spammertrap.com/
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20111201/fad0bef1/attachment.html>

More information about the amavis-users mailing list