spam connection failing

[Dino Edwards]

It looks to me that you don't have spamassassin installed. Amavis doesn't handle spam on its own. It calls spamassassin to process the email and then spamassassin reports to amavis the results. The log you shared looks like it's related to the recipient not being considered local to you amavis. What is @mynetworks set to in your amavis config?

Dino
--

Hermes Secure Email Gateway
Hermes Secure Email Gateway combines Open Source technologies such as Postfix, Apache SpamAssassin, ClamAV, Amavisd-new, MySQL and CipherMail under one unified web based Web GUI for easy administration and management of your incoming and ougoing email for your organization. Anti-spam, anti-virus and anti-malware protection, encrypted S/MIME, encrypted PDF and SMTP TLS support, built-in email archiving, end-user self-service web gui.

Download the free open-source appliance at:
http://www.deeztek.com/hermes-secure-email-gateway/


> -----Original Message-----
> From: amavis-users [mailto:amavis-users-
> bounces+dino.edwards=mydirectmail.net at amavis.org] On Behalf Of @lbutlr
> Sent: Wednesday, September 14, 2016 5:59 PM
> To: amavis-users at amavis.org
> Subject: spam connection failing
> 
> I’m not exactly sure what is happening here as I though amavisd handled
> spam on its own, but I am getting these errors in maillog:
> 
> Sep 14 15:40:45 mail spamc[59465]: connect to spamd on ::1 failed, retrying
> (#1 of 3): Connection refused Sep 14 15:40:45 mail spamc[59465]: connect to
> spamd on 127.0.0.1 failed, retrying (#1 of 3): Connection refused
> 
> but then I also see message like:
> 
> Sep 14 15:22:09 mail amavis[57355]: (57355-05) Passed SPAM
> {RelayedTaggedInbound,RelayedOpenRelay,Quarantined}, [127.0.0.1]
> [88.119.161.147] <return at williammullens.com> -> <*munged*@covisp.net>
> quarantine: spam-GqVw5K3dLb3h.gz, Message-ID:
> <7e6e003924de6534aba98a9a7019dd1e at williammullens.com>, mail_id:
> GqVw5K3dLb3h, Hits: 9.04, size: 3016, queued_as:
> 3sZDyT5vylz1GxHH/3sZDyT60S3z1H0Yr, 1278 ms Sep 14 15:43:09 mail
> amavis[57355]: (57355-18) Passed BAD-HEADER-8
> {RelayedInbound,RelayedOpenRelay,Quarantined}, [127.0.0.1]
> [208.127.104.77] <users-return-114257-
> kremels=kreme.com at httpd.apache.org> -> <kremels at covisp.net>
> quarantine: badh-9xon-ig-OgSQ, Message-ID:
> <f618e0160c0147bc94c32461c7b0cc6c at k6ccc.org>, mail_id: 9xon-ig-OgSQ,
> Hits: -9.965, size: 7357, queued_as: 3sZFQj0MlGz1GxHH, 1430 ms
> 
> So, amavisd is doing its thing, but I keep getting these errors in maillog.
> 
> Also, I have $sa_tag_level_deflt  = 2.0; but X-Spam headers are not getting
> added to any emails that I can find.
> 
> I don’t have a spamassassin getting called from postfix:
> 
>  # postconf -M | grep -i spam
>  # postconf -nf | grep -i spam
>     dnsbl.sorbs.net=127.0.0.14*9 zen.spamhaus.org=127.0.0.[10;11]*8
>     dnsbl.sorbs.net=127.0.0.5*7 zen.spamhaus.org=127.0.0.[4..7]*7
>     b.barracudacentral.org=127.0.0.2*7 zen.spamhaus.org=127.0.0.3*7
>     hostkarma.junkemailfilter.com=127.0.0.2*4 bl.spamcop.net=127.0.0.2*4
>     bl.spameatingmonkey.net=127.0.0.[2;3]*4 dnsrbl.swinog.ch=127.0.0.3*4
>     zen.spamhaus.org=127.0.0.2*3 score.senderscore.com=127.0.4.[0..20]*3
>     dnsbl-1.uceprotect.net=127.0.0.2*2 all.spamrats.com=127.0.0.38*2