spam_kill_level also delivered

Almar van Pel mailinglist at almarvanpel.nl
Fri Jun 7 11:06:49 CEST 2013


 

Hello, 

I have a setup with the following:


20-debian_defaults:$sa_kill_level_deflt = undef; # triggers spam
evasive actions
50-user:@spam_kill_level_maps =
read_hash('/etc/postfix/sa_kill_level'); 

I would expect that mail that
passes level X (example 10.0) would end up in quarantaine and doesn't go
any further. However, the e-mail gets quarantained and also deliverd.
Does anyone know why? 

Below is the log, where you can see the
quarantain and after that a new SMTP session to still deliver the
message. 

Jun 7 10:47:38 setuptst amavis[11586]: (11586-01) lookup
[spam_tag_level] => true, "test at mydomain.nu" matches, result="-200",
matching_key="(constant:-200)"
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) lookup: (scalar) matches, result="6.31"
Jun 7 10:47:38
setuptst amavis[11586]: (11586-01) lookup [spam_tag2_level] => true,
"test at mydomain.nu" matches, result="6.31",
matching_key="(constant:6.31)"
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) query_keys: test at mydomain.nu, testspare@, mydomain.nu,
.mydomain.nu, .eu, .
Jun 7 10:47:38 setuptst amavis[11586]: (11586-01)
lookup_hash(test at mydomain.nu) matches key "testspare@", result=10.0
Jun
7 10:47:38 setuptst amavis[11586]: (11586-01) lookup [spam_kill_level]
=> true, "test at mydomain.nu" matches, result="10.0",
matching_key="testspare@"
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) lookup: (scalar) matches, result="spam-quarantine"
Jun 7
10:47:38 setuptst amavis[11586]: (11586-01) lookup [spam_quarantine_to]
=> true, "test at mydomain.nu" matches, result="spam-quarantine",
matching_key="(constant:spam-quarantine)"
Jun 7 10:47:38 setuptst
amavis[11586]: (11586-01) lookup [spam_quarantine_cutoff_level] =>
undef, "test at mydomain.nu" does not match
Jun 7 10:47:38 setuptst
amavis[11586]: (11586-01) query_keys: test at mydomain.nu, testspare@,
mydomain.nu, .mydomain.nu, .eu, .
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) lookup_hash(test at mydomain.nu), no matches
Jun 7 10:47:38
setuptst amavis[11586]: (11586-01) lookup [spam_admin] => undef,
"test at mydomain.nu" does not match
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) lookup [spam_quarantine_bysender_to] => undef,
"sender at mydomain.nl" does not match
Jun 7 10:47:38 setuptst
amavis[11586]: (11586-01) header: X-Spam-Level:
****************************************************************n
Jun 7
10:47:38 setuptst amavis[11586]: (11586-01) header: X-Spam-Status: Yes,
score=1000.001 tag=-200 tag2=6.31 kill=10nttests=[GTUBE=1000,
HTML_MESSAGE=0.001] autolearn=non
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) header: X-Quarantine-ID: <5xBBDEu2oXbx>n
Jun 7 10:47:38
setuptst amavis[11586]: (11586-01) header: X-Envelope-To-Blocked: n
Jun
7 10:47:38 setuptst amavis[11586]: (11586-01) header: X-Envelope-To:
<test at mydomain.nu>n
Jun 7 10:47:38 setuptst amavis[11586]: (11586-01)
header: X-Envelope-From: <sender at mydomain.nl>n
Jun 7 10:47:38 setuptst
amavis[11586]: (11586-01) header: Received: from test.localtest.nl
([127.0.0.1])ntby localhost (test.localtest.nl [127.0.0.1])
(amavisd-new, port 10024)ntwith ESMTP id 5xBBDEu2oXbx for
<test at mydomain.nu>;ntFri, 7 Jun 2013 10:47:35 +0200 (CEST)n
Jun 7
10:47:38 setuptst amavis[11586]: (11586-01) DO_QUARANTINE,
local:spam-%m.gz, <sender at mydomain.nl> -> spam-quarantine
Jun 7 10:47:38
setuptst amavis[11586]: (11586-01) local delivery: <sender at mydomain.nl>
-> spam-quarantine,
mbx=/var/lib/amavis/virusmails/5/spam-5xBBDEu2oXbx.gz
Jun 7 10:47:38
setuptst amavis[11586]: (11586-01) header: Delivered-To:
spam-quarantinen
Jun 7 10:47:38 setuptst amavis[11586]: (11586-01)
header: Return-Path: <sender at mydomain.nl>n
Jun 7 10:47:38 setuptst
amavis[11586]: (11586-01) write_header: 0,
Amavis::IO::Zlib=HASH(0x688ede8)
Jun 7 10:47:38 setuptst amavis[11586]:
(11586-01) one_response_for_all <sender at mydomain.nl>: success,
r=0,b=0,d=0, ndn_needed=0, '250 2.6.0 Ok, delivered to
/var/lib/amavis/virusmails/5/spam-5xBBDEu2oXbx.gz, id=11586-01'
Jun 7
10:47:38 setuptst amavis[11586]: (11586-01) DO_QUARANTINE done
- not
relevant-
Jun 7 10:47:38 setuptst amavis[11586]: (11586-01) header:
Received: from test.localtest.nl ([127.0.0.1])ntby localhost
(test.localtest.nl [127.0.0.1]) (amavisd-new, port 10024)ntwith ESMTP id
5xBBDEu2oXbx for <test at mydomain.nu>;ntFri, 7 Jun 2013 10:47:35 +0200
(CEST)n
Jun 7 10:47:38 setuptst amavis[11586]: (11586-01) headers
CLUSTERING: done all 1 recips in one go
Jun 7 10:47:38 setuptst
amavis[11586]: (11586-01) SPAM-TAG, <sender at mydomain.nl> ->
<test at mydomain.nu>, Yes, score=1000.001 tagged_above=-200 required=6.31
tests=[GTUBE=1000, HTML_MESSAGE=0.001] autolearn=no
Jun 7 10:47:38
setuptst amavis[11586]: (11586-01) (about to connect to
[127.0.0.1]:10025) FWD via SMTP: <sender at mydomain.nl> ->
<test at mydomain.nu>
Jun 7 10:47:38 setuptstamavis[11586]: (11586-01) smtp
session: setting up a new session
Jun 7 10:47:38 setuptstamavis[11586]:
(11586-01) establish_or_refresh, state: down
Jun 7 10:47:38
setuptstamavis[11586]: (11586-01) smtp creating socket by
IO::Socket::INET to [127.0.0.1]:10025

Thanks for any help offered!


Best regards, 

Almar 
 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.amavis.org/pipermail/amavis-users/attachments/20130607/6ab60024/attachment.html>


More information about the amavis-users mailing list