Re: [Exim] Spam detection

Top Page
Delete this message
Reply to this message
Author: Eric Renfro
Date:  
To: exim-users
Subject: Re: [Exim] Spam detection
On Monday 21 October 2002 09:37 am, Tom Kistner wrote:
> Eric Renfro wrote:
> > I had a problem with how exiscan runs through SpamAssassin. It doesn't
> > fit my needs, especially with how I use spamd with PostgreSQL for
> > userprefs. That's why I didn't choose to use that method.
>
> Ah I was only referring to this:
> >>>exiscan scans the email for viruses twice as a result,too.it's almost
> >>>double logging it also.
>
> I thought you were using exiscan for av purposes only, and wanted to get
> rid of the double scanning.


Well... I am using exiscan for AV purposes only. I disabled it's SA stuff, but
I get double-scans like illustrated from email headers and logs:

email headers---
Content-Transfer-Encoding: 7bit
X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/)
*183dgW-0002RX-00*uJ.jC1eT95o*
X-Spam-Status: No, hits=-2.9 required=5.0
    tests=EMAIL_ATTRIBUTION,REFERENCES,SIGNATURE_SHORT_DENSE,
          SPAM_PHRASE_00_01,USER_AGENT,USER_AGENT_MOZILLA_UA,
          X_ACCEPT_LANG
    version=2.43
X-Spam-Level:
X-Scanner: exiscan for exim4 (http://duncanthrax.net/exiscan/)
*183dgX-0002Rc-00*EM/tML.Mhaw*
Status: R
X-Status: N


logs---
Oct 21 09:55:23 ginseng.myrddincd.com exim[9707]: 2002-10-21 09:55:23
183dxj-0002WZ-00 <= exim-users-admin@???
H=exim-colo-01.whoc.theplanet.co.uk [195.92.249.251] P=esmtp
X=TLSv1:EDH-RSA-DES-CBC3-SHA:168 S=3198
id=200210210949.38576.psi-jack@???
Oct 21 09:55:23 ginseng.myrddincd.com spamd[19245]: connection from
localhost.localdomain [127.0.0.1] at port 43168
Oct 21 09:55:23 ginseng.myrddincd.com spamd[9716]: processing message
<200210210949.38576.psi-jack@???> for psi-jack:211, expecting 3198
bytes.
Oct 21 09:55:24 ginseng.myrddincd.com spamd[9716]: clean message (-2.9/5.0)
for psi-jack:211 in 0.8 seconds, 3198 bytes.
Oct 21 09:55:25 ginseng.myrddincd.com exim[9712]: 2002-10-21 09:55:25
183dxj-0002We-00 exiscan: mail already scanned (previous ID was
183dsB-0002VC-00)
Oct 21 09:55:25 ginseng.myrddincd.com exim[9712]: 2002-10-21 09:55:25
183dxj-0002We-00 <= exim-users-admin@??? U=mail P=spam-scanned S=3603
id=200210210949.38576.psi-jack@???
Oct 21 09:55:25 ginseng.myrddincd.com dbmail/smtp[9722]: insert_messages():
message id=2795, size=3727 is inserted
Oct 21 09:55:25 ginseng.myrddincd.com exim[9718]: 2002-10-21 09:55:25
183dxj-0002We-00 => psi-jack <psi-jack@???> R=dbmail_user
T=dbmail_delivery
Oct 21 09:55:25 ginseng.myrddincd.com exim[9718]: 2002-10-21 09:55:25
183dxj-0002We-00 Completed
Oct 21 09:55:25 ginseng.myrddincd.com exim[9709]: 2002-10-21 09:55:25
183dxj-0002WZ-00 => psi-jack <psi-jack@???> R=spamcheck_router
T=spamcheck
Oct 21 09:55:25 ginseng.myrddincd.com exim[9709]: 2002-10-21 09:55:25
183dxj-0002WZ-00 Completed

--
Eric Renfro
Myrddin Computers & Designs - CEO/President