Message quarantined as SPAM

[Patrick Ben Koetter]

* Scappatura Rocco <Rocco.Scappatura at infracom.it>:
> Hi,
> 
> I have Debian Lenny with postfix+amavisd-new+spamassassin+clamav.
> 
> I have detected that a message has been quarantined:
> 
> Jun 22 11:45:48 av8 amavis[22610]: (22610-11) Blocked SPAM {DiscardedOpenRelay,Quarantined}, [xxx.yyy.zzz.uuu]:50412 [xxx.yyy.zzz.uuu] <aaa at example.com> -> <bbb at mydomain>, quarantine: z/spam-zRJd9Wo5250M.gz, Queue-ID: 8647AD5DBA, Message-ID: <776AB7C587CC457C95FF35582FC9F0E1 at AutoRPZ.local>, mail_id: zRJd9Wo5250M, Hits: 6.793, size: 77514, 364 ms


DiscardedOpenRelay? Seems like you haven't configured @local_domains_maps and
@mynetworks and amavis has no idea which mails are in- or outbound.

If you need more details about these parameters try these links to google
translate: 

https://translate.google.com/translate?hl=de&sl=de&tl=en&u=https%3A%2F%2Fsys4.de%2Fde%2Fblog%2F2013%2F02%2F15%2Fe-mail-content-policies-mit-amavis%2F
https://translate.google.com/translate?hl=de&sl=de&tl=it&u=https%3A%2F%2Fsys4.de%2Fde%2Fblog%2F2013%2F02%2F15%2Fe-mail-content-policies-mit-amavis%2F

p at rick





> 
> But I have checked it against spamassassin:
> 
> gunzip -c z/spam-zRJd9Wo5250M.gz | spamassassin -t
> 
> and I get:
> 
> .
> .
> .
> 
> Content analysis details:   (4.1 points, 5.0 required)
> 
>  pts rule name              description
> ---- ---------------------- --------------------------------------------------
>  0.0 HTML_MESSAGE           BODY: HTML included in message
>  0.4 MIME_HTML_MOSTLY       BODY: Multipart message mostly text/html MIME
> -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
>                             [score: 0.0000]
>  0.8 MPART_ALT_DIFF         BODY: HTML and text parts are different
>  1.7 HTML_IMAGE_ONLY_08     BODY: HTML: images with 400-800 bytes of words
>  0.0 TVD_SPACE_RATIO        No description available.
>  1.4 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image
>  1.8 IMG_DIRECT_TO_MX       No description available.
> 
> So the total score is 4,2.
> 
> In amavisd configuraton file I have set:
> 
> $sa_spam_subject_tag = '[Spam] ';
> $sa_tag_level_deflt  = 2.0;  # add spam info headers if at, or above that level
> $sa_tag2_level_deflt = 6.31; # add 'spam detected' headers at that level
> $sa_kill_level_deflt = 6.31; # triggers spam evasive actions
> $sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
> 
> How the the score 6.793 of amavis is obtained?
> 
> Regards,
> 
> RS

-- 
[*] sys4 AG
 
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
 
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein