RE: [Exim] spam acl condition: cannot parse spamd output

Top Page
Delete this message
Reply to this message
Author: Smith, A.D.
Date:  
To: exiscanusers, exim-users
Subject: RE: [Exim] spam acl condition: cannot parse spamd output
Here's my exim spamd config:

spamd_address = 127.0.0.1 783
acl_smtp_data = acl_check_content

Here's my ACL:

acl_check_content:
  deny  message = This site does not accept attachments of this type \
        ($found_extension)
        demime = vb:vbse:ws:wsfh:jse?:exe:scr:pif:com:shs:bat:lnk
  deny message = This message contains malware ($malware_name)
        demime = *
        malware = *
  deny  message = This message contains a MIME error ($demime_reason)
        demime = *
        condition = ${if >{$demime_errorlevel}{2}{1}{0}}
  accept hosts = +host_accept_relay
  warn  message = X-Spam-Score: ($spam_bar) $spam_score
        spam = nobody:true
  warn  message = X-Spam-Report: $spam_report
        spam = nobody:true
  accept


-----Original Message-----
From: Asbjorn Hoiland Aarrestad [mailto:asbjorn@aarrestad.com]
Sent: Wednesday, October 08, 2003 4:21 PM
To: Smith, A.D.
Cc: exiscanusers@???; exim-users@???
Subject: Re: [Exim] spam acl condition: cannot parse spamd output


Smith, A.D. wrote:

>I have some logging information for a problem that seems to

have persisted on some new hardware ...
>
>2003-10-08 15:26:46 <message ID> spam acl condition: cannot

parse spamd output
>2003-10-08 15:26:46 <message ID> H=<external host name>

(<external host name>) [<external host IP>] Warning: ACL "warn"
statement skipped: condition test deferred:
>2003-10-08 15:40:22 <message ID> spam acl condition: cannot

parse spamd output
>2003-10-08 15:40:22 <message ID> <= <> H=<external host name>

(<external host name>) [<external host IP>] P=esmtp S=1512749
id=<external mail ID>@<external host name> T="Delivery Status
Notification (Failure)"
>2003-10-08 15:40:23 <message ID> => <local user>@<local mail

server> <<local user>@<local mail server>> F=<> R=deliver_smtp
T=smtp H=<local mail server name> [<local mail server ID>]
>2003-10-08 15:40:23 <message ID> Completed
>
>Does this look like and exim/exiscan/SpamAssassin problem?
>
>It has been suggested that I don't spam score larger messages,

but I'd like to spam score every inbound email ... and this one
isn't that big!!
>Not every email that develops this problem is a delivery

failure, but they all exhibit similar behaviour.
>The emails seem to be delivered okay, but I'm not happy with

these messages appearing in the panic log.
>
>Any help would be very much appreciated,
>
>


got a sample of your config file?

- asbjørn