Hi,
any more ideas what might be causing this?
Greetings
Marc
On Thu, 07 Apr 2011 08:42:28 +0200, Marc Haber
<mh+exim-users@???> wrote:
>Hi,
>
>I am using spamassassin and exiscan integration with the following
>ACL:
>
>| accept
>| condition = ${if eq{acl_m_spam_no_filter}{1}}
>|
>| deny
>| demime = com:vbs:bat:pif:scr:exe
>| message = no Windows executeables accepted here
>| log_message = reject, $found_extension file
>|
>| accept
>| condition = ${if >{$message_size}{SPAM_SCAN_THRESHOLD}}
>|
>| # the following stanzas are only executed for messages that do not
>| # exceed the size of SPAM_SCAN_THRESHOLD
>|
>| discard
>| spam = exiscan:true
>| log_message = drop, spam_score $spam_score, but delivered from whitelisted sender $sender_address
>| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
>| senders = ${if exists{CONFDIR/sa_mailinglist_senders}\
>| {CONFDIR/sa_mailinglist_senders}\
>| {}}
>|
>| discard
>| spam = exiscan:true
>| log_message = drop, spam_score $spam_score, but delivered from whitelisted host $host_address
>| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
>| hosts = ${if exists{CONFDIR/sa_noreject_hosts}\
>| {CONFDIR/sa_noreject_hosts}\
>| {}}
>|
>| deny
>| spam = exiscan:true
>| message = Message spam score is beyond reject threshold
>| log_message = reject, spam_score $spam_score
>| condition = ${if >{$spam_score_int}{SPAM_REJECT_THRESHOLD}}
>|
>|
>| deny
>| spam = exiscan:true
>| message = Message spam score is beyond reject threshold for heavily filtered recipients, try making your message look less spammy or re-send to mh+lightlyfiltered200509@???
>| log_message = reject (heavy), spam_score $spam_score
>| condition = ${if eq{acl_m_spam_heavy_filter}{1}}
>| condition = ${if >{$spam_score_int}{30}}
>|
>| warn
>| spam = exiscan:true
>| set acl_m_spam_score = ($spam_bar) $spam_score
>| set acl_m_spam_report = $spam_report
>
>The score and report are then inserted into the message by the
>following system filter:
>
>|# Exim Filter
>|
>|headers add "${if !eq {$h_x-malware-found:}{}\
>| {X-Old-Malware-Found: $h_x-malware-found:\n}{}}\
>| ${if !eq {$h_x-spam-score:}{}\
>| {X-Old-Spam-Score: $h_x-spam-score:\n}{}}\
>| ${if !eq {$h_x-spam-report:}{}\
>| {X-Old-Spam-Report: $h_x-spam-report:\n}{}}\
>| ${if !eq {$h_x-spam-checker-version:}{}\
>| {X-Old-Spam-Checker-Version: $h_x-spam-checker-version:\n}{}}\
>| ${if !eq {$h_x-spam-status:}{}\
>| {X-Old-Spam-Status: $h_x-spam-status:\n}{}}\
>| ${if !eq {$h_x-spam-level:}{}\
>| {X-Old-Spam-Level: $h_x-spam-level:\n}{}}\
>| "
>|headers remove X-Malware-Found:X-Spam-Score:X-Spam-Report:X-Spam-Checker-Version:X-Spam-Status:X-Spam-Level
>|
>|headers add "${if !eq {$acl_m_malware_name}{}\
>| {X-Malware-Found: $acl_m_malware_name\n}{}}\
>| ${if !eq {$acl_m_spam_score}{}\
>| {X-Spam-Score: $acl_m_spam_score\n}{}}\
>| ${if !eq {$acl_m_spam_report}{}\
>| {X-Spam-Report: $acl_m_spam_report\n}{}}\
>| "
>
>This works, usually.
>
>But occasionally, a message comes through with no Spamassassin Headers
>inserted. When I inspect the logs for this message, I find out that
>spamassassin has actually been running on the message (and has found
>an exceptionally high score for the message), so it has not been found
>to be too large to be scanned.
>
>There are no other calls to the ACL spam = condition than listed
>above, so I can be reasonably sure that the ACL is actually executed,
>
>What might be going wrong here, and how can I debug and/or fix it?
>
>Greetings
>Marc
>--
>-------------------------------------- !! No courtesy copies, please !! -----
>Marc Haber | " Questions are the | Mailadresse im Header
>Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/
>Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834
--
-------------------------------------- !! No courtesy copies, please !! -----
Marc Haber | " Questions are the | Mailadresse im Header
Mannheim, Germany | Beginning of Wisdom " | http://www.zugschlus.de/
Nordisch by Nature | Lt. Worf, TNG "Rightful Heir" | Fon: *49 621 72739834
