Hi,
I am using spamassassin and exiscan integration with the following
ACL:
| accept
| condition = ${if eq{acl_m_spam_no_filter}{1}}
|
| deny
| demime = com:vbs:bat:pif:scr:exe
| message = no Windows executeables accepted here
| log_message = reject, $found_extension file
|
| accept
| condition = ${if >{$message_size}{SPAM_SCAN_THRESHOLD}}
|
| # the following stanzas are only executed for messages that do not
| # exceed the size of SPAM_SCAN_THRESHOLD
|
| discard
| spam = exiscan:true
| log_message = drop, spam_score $spam_score, but delivered from whitelisted sender $sender_address
| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
| senders = ${if exists{CONFDIR/sa_mailinglist_senders}\
| {CONFDIR/sa_mailinglist_senders}\
| {}}
|
| discard
| spam = exiscan:true
| log_message = drop, spam_score $spam_score, but delivered from whitelisted host $host_address
| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
| hosts = ${if exists{CONFDIR/sa_noreject_hosts}\
| {CONFDIR/sa_noreject_hosts}\
| {}}
|
| deny
| spam = exiscan:true
| message = Message spam score is beyond reject threshold
| log_message = reject, spam_score $spam_score
| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
|
|
| deny
| spam = exiscan:true
| message = Message spam score is beyond reject threshold for heavily filtered recipients, try making your message look less spammy or re-send to mh+lightlyfiltered200509@???
| log_message = reject (heavy), spam_score $spam_score
| condition = ${if eq{acl_m_spam_heavy_filter}{1}}
| condition = ${if >{$spam_score_int}{30}}
|
| warn
| spam = exiscan:true
| set acl_m_spam_score = ($spam_bar) $spam_score
| set acl_m_spam_report = $spam_report
The score and report are then inserted into the message by the
following system filter:
|# Exim Filter
|
|headers add "${if !eq {$h_x-malware-found:}{}\
| {X-Old-Malware-Found: $h_x-malware-found:\n}{}}\
| ${if !eq {$h_x-spam-score:}{}\
| {X-Old-Spam-Score: $h_x-spam-score:\n}{}}\
| ${if !eq {$h_x-spam-report:}{}\
| {X-Old-Spam-Report: $h_x-spam-report:\n}{}}\
| ${if !eq {$h_x-spam-checker-version:}{}\
| {X-Old-Spam-Checker-Version: $h_x-spam-checker-version:\n}{}}\
| ${if !eq {$h_x-spam-status:}{}\
| {X-Old-Spam-Status: $h_x-spam-status:\n}{}}\
| ${if !eq {$h_x-spam-level:}{}\
| {X-Old-Spam-Level: $h_x-spam-level:\n}{}}\
| "
|headers remove X-Malware-Found:X-Spam-Score:X-Spam-Report:X-Spam-Checker-Version:X-Spam-Status:X-Spam-Level
|
|headers add "${if !eq {$acl_m_malware_name}{}\
| {X-Malware-Found: $acl_m_malware_name\n}{}}\
| ${if !eq {$acl_m_spam_score}{}\
| {X-Spam-Score: $acl_m_spam_score\n}{}}\
| ${if !eq {$acl_m_spam_report}{}\
| {X-Spam-Report: $acl_m_spam_report\n}{}}\
| "
This works, usually.
But occasionally, a message comes through with no Spamassassin Headers
inserted. When I inspect the logs for this message, I find out that
spamassassin has actually been running on the message (and has found
an exceptionally high score for the message), so it has not been found
to be too large to be scanned.
There are no other calls to the ACL spam = condition than listed
above, so I can be reasonably sure that the ACL is actually executed,
What might be going wrong here, and how can I debug and/or fix it?
Greetings
Marc
--
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber | " Questions are the | Mailadresse im Header
Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834
