https://bugs.exim.org/show_bug.cgi?id=2234
Bug ID: 2234
Summary: No Reject Rule?
Product: Exim
Version: N/A
Hardware: x86
OS: Linux
Status: NEW
Severity: bug
Priority: medium
Component: Filters
Assignee: nigel@???
Reporter: tlswn128@???
CC: exim-dev@???
Created attachment 1067
-->
https://bugs.exim.org/attachment.cgi?id=1067&action=edit
whm config file
I don't have any rejection rules in EXIM,
But My test EICAR email is blocked from EXIM
My setting : Apache SpamAssassin⢠reject spam score threshold = No reject
rule.
under is EXIM reject log.
I attached exim config file.
Any one who know the reason, please help me.
I want "Not Blocking but Filtering"
Do you know any reason about this?
2018-02-06 20:54:00 1ejEvv-0000tr-PL H=andymillar.co.uk
(caffeine.andymillar.co.uk) [91.233.83.200]:60211
F=<www@???> rejected after DATA: This message contains a
virus or other harmful content (Eicar-Test-Signature)
Envelope-from: <www@???>
Envelope-to: <sjy@???>
P Received: from andymillar.co.uk ([91.233.83.200]:60211
helo=caffeine.andymillar.co.uk)
by wee.cycodes.com with esmtp (Exim 4.90)
(envelope-from <www@???>)
id 1ejEvv-0000tr-PL
for sjy@???; Tue, 06 Feb 2018 20:53:59 -0500
P Received: by caffeine.andymillar.co.uk (Postfix, from userid 80)
id 48993B907; Wed, 7 Feb 2018 01:53:19 +0000 (GMT)
T To: sjy@???
Subject: EICAR Virus Test Email
F From: "Apache, andymillar.co.uk" <andy@???>
Content-Type: MULTIPART/MIXED;
BOUNDARY="-1420698744-674753776-1196899172=:27646"
I Message-Id: <20180207015319.48993B907@???>
Date: Wed, 7 Feb 2018 01:53:19 +0000 (GMT)
X-Spam-Subject: ***SPAM*** EICAR Virus Test Email
X-Spam-Status: Yes, score=14.1
X-Spam-Score: 141
X-Spam-Bar: ++++++++++++++
X-Spam-Report: Spam detection software, running on the system
"wee.cycodes.com",
has identified this incoming email as possible spam. The original
message has been attached to this so you can view it or label
similar future email. If you have any questions, see
root\@localhost for details.
Content preview: Thank you for using Andy Millar's EICAR Test Virus sending
script. This script was called from http://www.andymillar.co.uk/ using the
IP 115.178.87.112. If you have any questions, please visit http://
Content analysis details: (14.1 points, 8.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.1 KAM_COUK Scoring .co.uk emails higher due to poor registry
security.
-0.0 T_RP_MATCHES_RCVD Envelope sender domain matches handover relay
domain
10 CLAMAV Clam AntiVirus detected a virus
[Eicar-Test-Signature]
1.0 KAM_LAZY_DOMAIN_SECURITY Sending domain does not have any
anti-forgery methods
2.0 MIME_HEADER_CTYPE_ONLY 'Content-Type' found without required MIME
headers
X-Spam-Flag: YES
--
You are receiving this mail because:
You are on the CC list for the bug.
