About "Passed CLEAN {RelayedOpenRelay}"

[sergio.belkin]

Hi,

What does mean "Passed CLEAN {RelayedOpenRelay}", I see  such a messages
log on a system with Postfix+Amavis+SpamAssassin

This postfix does not perform (or at least should not) mail relaying,
only receiving. But I see that messages.

I've tested and is not as open relay. So why such a messages, is that an
error/warning, something misconfigured?

This is part of my amavisd.conf:

use strict;
@bypass_virus_checks_maps = (1);  # controls running of anti-virus code
$max_servers = 2;            # num of pre-forked children (2..30 is
common), -m
$daemon_user  = 'amavis';    # (no default;  customary: vscan or amavis), -u
$daemon_group = 'amavis';    # (no default;  customary: vscan or amavis), -g
$mydomain = 'example.com';   # a convenient default for other settings
$MYHOME = '/var/spool/amavisd';   # a convenient default for other
settings, -H
$TEMPBASE = "$MYHOME/tmp";   # working directory, needs to exist, -T
$ENV{TMPDIR} = $TEMPBASE;    # environment variable TMPDIR, used by SA, etc.
$QUARANTINEDIR = undef;      # -Q
$db_home   = "$MYHOME/db";        # dir for bdb nanny/cache/snmp
databases, -D
$lock_file = "/var/run/amavisd/amavisd.lock";  # -L
$pid_file  = "/var/run/amavisd/amavisd.pid";   # -P
$log_level = 4;              # verbosity 0..5, -d
$log_recip_templ = undef;    # disable by-recipient level-0 log entries
$do_syslog = 1;              # log via syslogd (preferred)
$syslog_facility = 'mail';   # Syslog facility as a string
$enable_db = 1;              # enable use of BerkeleyDB/libdb (SNMP and
nanny)
$nanny_details_level = 2;    # nanny verbosity: 1: traditional, 2: detailed
$enable_dkim_verification = 1;  # enable DKIM signatures verification
$enable_dkim_signing = 1;    # load DKIM signing code, keys defined by
dkim_key
@local_domains_maps = ( [".$mydomain"] );  # list of all local domains
@mynetworks = qw( 127.0.0.0/8 [::1] [FE80::]/10 [FEC0::]/10 );
$unix_socketname = "/var/run/amavisd/amavisd.sock";  # amavisd-release
or amavis-milter
$inet_socket_port = 10024;   # listen on this local TCP port(s)
$policy_bank{'MYNETS'} = {   # mail originating from @mynetworks

Thanks in advance


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 488 bytes
Desc: OpenPGP digital signature
URL: <https://lists.amavis.org/pipermail/amavis-users/attachments/20181219/cd313298/attachment.sig>