Am 04.06.2008 um 11:27 schrieb Heiko Schlittermann:
>
> Moment - die Spam-Erkennung findet erst nach der condition statt.?
> Ich wäre mir da nicht sicher, daß in $spam_score_int etwas sinnvolles
> drin steht.
>
> Hast Du davor schon eine ACL, in der ebenfalls "spam =
> maildeliver:true"
> vorkommt, oder ist es die erste derartige ACL?
Hier der gesamte Abschnitt:
-----------------------------------------------------------------
acl_check_data:
# malware: causes the incoming message to be scanned for viruses.
# You can append /defer_ok to the malware condition to accept messages
# even if there is a problem with the virus scanner.
# spam: causes the incoming message to be scanned by SpamAssassin.
warn condition = ${if def:header_X-Virenscan: {1}}
malware = */defer_ok
set acl_m2 = Virus
message = X-Virus-Warn:Virenscan - Virus gefunden:
$malware_name\n\
X-Virus-Scan_name:$malware_name\n\
X-Virus-Scan_sender:$sender_address\n
warn condition = ${if and { {eq{$header_X-SA-Run:}{Yes}} \
{!eq {${lookup pgsql{WHITE_FROM}}}
{1}} \
{!eq {${lookup pgsql{WHITE_SUBJ}}}
{1}} \
} {yes}{no}}
spam = maildeliver:true/defer_ok
message = X-Spam_score: $spam_score\n
#spam_score_int darf nicht NULL sein!
warn condition = ${if and{ {>{$spam_score_int}{0}} \
{>{$spam_score_int}{$acl_m4}} \
} {1}{0}}
spam = maildeliver:true/defer_ok
message = X-Spam-Flag: YES\n\
X-Spam_score_int: $spam_score_int\n\
X-Spam_value: $acl_m4\n\
X-Spam_bar: $spam_bar\n\
X-Spam_subject: *****SPAM*****($spam_score)
$h_subject:\n\
X-Spam_report: $spam_report\n
accept
-----------------------------------------------------------------
Die Sache wird noch komplizierter. Ich habe gerade bei einem Vergleich
von spamd.log und mainlog vom exim gefunden, das andere Mails mit
negativen score NICHT (!!!) markiert werden.
NEGATIVE MARKIERUNG
===================
Tue Jun 3 17:42:20 2008 [27621] info: spamd: checking message <009301c8c590$42677ca0$606efea9@???
> for maildeliver:99
Tue Jun 3 17:42:39 2008 [27621] info: spamd: clean message (-4.4/5.5)
for maildeliver:99 in 19.7 seconds, 494671 bytes.
Tue Jun 3 17:42:39 2008 [27621] info: spamd: result: . -4 -
ALL_TRUSTED,BAYES_00
scantime
=
19.7
,size
=
494671
,user
=
maildeliver
,uid=99,required_score=5.5,rhost=localhost,raddr=127.0.0.1,rport=/var/
run/spamd/spamd.sock,m
id
=
<
009301c8c590
$42677ca0$606efea9@???>,bayes=0.000000,autolearn=ham
Message-ID: <009301c8c590$42677ca0$606efea9@???>
MIME-Version: 1.0
Content-Type: multipart/mixed;
boundary="----=_NextPart_000_0094_01C8C5A1.05F04CA0"
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2910.0)
Importance: Normal
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-OriginalArrivalTime: 03 Jun 2008 15:41:41.0349 (UTC)
FILETIME=[5181E950:01C8C590]
X-Spam-Flag: YES
X-Spam_score_int: -43
X-Spam_bar: ----
X-Spam_report: ...
---- ----------------------
--------------------------------------------------
-1.8 ALL_TRUSTED # Nachricht wurde nur über
vertrauenswürdige Rechner
weitergeleitet
-2.6 BAYES_00 BODY: Spamwahrscheinlichkeit nach
Bayes-Test: 0-1%
[score: 0.0000]
Subject: *****SPAM*****(-4.4) Freigabe_CEVA_V1.1
KEINE MARKIERUNG
================
Wed Jun 4 10:12:06 2008 [58345] info: spamd: checking message <74F0DCA4AA57A14285F25D259E7F316D01E53D4D@???
> for maildeliver:99
Wed Jun 4 10:12:14 2008 [58345] info: spamd: clean message (-4.4/5.5)
for maildeliver:99 in 7.8 seconds, 2686 bytes.
Wed Jun 4 10:12:14 2008 [58345] info: spamd: result: . -4 -
ALL_TRUSTED,BAYES_00
scantime
=
7.8
,size
=
2686
,user
=
maildeliver
,uid=99,required_score=5.5,rhost=localhost,raddr=127.0.0.1,rport=/var/
run/spamd/spamd.sock,mid=
<
74F0DCA4AA57A14285F25D259E7F316D01E53D4D
@s33mailbox2.opqrst.com>,bayes=0.000000,autolearn=ham
Subject: Gelesen: Angebot
Date: Wed, 4 Jun 2008 10:11:59 +0200
Importance: normal
Priority: normal
Message-ID: <74F0DCA4AA57A14285F25D259E7F316D01E53D4D@???
>
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
Thread-Topic: Angebot
Thread-Index: AcjGGjT7il/Datr0QWWmsZ1kELyVUAAAHSVj
X-OriginalArrivalTime: 04 Jun 2008 08:12:00.0576 (UTC)
FILETIME=[AA206C00:01C8C61A]
X-TM-AS-Product-Ver: SMEX-8.0.0.1181-5.500.1027-15704.003
X-TM-AS-Result: No--9.685700-4.000000-31
X-TM-AS-User-Approved-Sender: No
X-TM-AS-User-Blocked-Sender: No
X-Virenscan: Checked
X-Spam_score: -4.4
Grüße
Nicola
