spam connection failing

[Dino Edwards]

> On Thu Sep 15 2016 12:54:56 Dino Edwards
> 	<dino.edwards at mydirectmail.net> said:
> >
> > It looks to me that you don't have spamassassin installed.
> 
> Definitely have spam assassin installed.
> 
>  # which spamc
> /usr/local/bin/spamc
>  # which spamd
> /usr/local/bin/spamd
>  # portmaster -l | grep spama
> ===>>> spamassassin-3.4.1_7

The original log line you sent below:

Sep 14 15:40:45 mail spamc[59465]: connect to spamd on ::1 failed, retrying (#1 of 3): Connection refused
Sep 14 15:40:45 mail spamc[59465]: connect to spamd on 127.0.0.1 failed, retrying (#1 of 3): Connection refused

Clearly states that spamc (spamd client) is not able to connect to spamd which is spamassassin daemon which is why I said "it looks" like you don't have spamasassin installed so I stand corrected. So, your amavis integration with SA is messed up somehow. I guess the question is this. So, are you using spamc or amavis to call SA?


> 
> Sep 14 15:22:09 mail amavis[57355]: (57355-05) Passed SPAM
> {RelayedTaggedInbound,RelayedOpenRelay,Quarantined}, [127.0.0.1]
> [88.119.161.147] <return at williammullens.com> -> <*munged*@covisp.net>
> quarantine: spam-GqVw5K3dLb3h.gz, Message-ID:
> <7e6e003924de6534aba98a9a7019dd1e at williammullens.com>, mail_id:
> GqVw5K3dLb3h, Hits: 9.04, size: 3016, queued_as:
> 3sZDyT5vylz1GxHH/3sZDyT60S3z1H0Yr, 1278 ms
> 
> Where is that coming from if not SA?

Not sure, I'm guessing amavis. In your /etc/postfix/main.cf file do you have a content_filter setup similar to below?

content_filter = smtp-amavis:[127.0.0.1]:10024


> 
> > The log you shared looks like it's related to the recipient not being
> considered local to you amavis. What is @mynetworks set to in your amavis
> config?
> 
> @mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10
>                   10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 );
> 
> (which i believe is the default)
> 
> amavis and spamassassin and postfix are all on the same server.

Great, but where does the IP 88.119.161.147 come from in your logs? Also, what is you @local_domains_acl in your amavis config set to?


Thanks