outgoing message processing?

[Ugo Bellavance]

> >
> >I don't think spamassassin is called if MailScanner has it 
> in its whitelist.
> 
> it sure seems to be. i added my email address to the 
> whitelist file in the
> rules
> directory and sent myself a test mail.  here's what i saw:
> 
> Oct 19 22:21:02 sphinx postfix/smtpd[23818]: connect from
> manticore.druber.com[10.0.0.18]
> Oct 19 22:21:02 sphinx postfix/smtpd[23818]: 4BE9BBB6C1:
> client=manticore.druber.com[10.0.0.18]
> Oct 19 22:21:02 sphinx postfix/cleanup[23819]: 4BE9BBB6C1:
> message-id=<5.2.1.1.0.20031019222004.021a77e0 at 10.0.0.2>
> Oct 19 22:21:02 sphinx postfix/smtpd[23818]: disconnect from
> manticore.druber.com[10.0.0.18]
> Oct 19 22:21:02 sphinx postfix/nqmgr[21527]: 4BE9BBB6C1:
> from=<dswartz at druber.com>, size=540, nrcpt=1 (queue active)
> Oct 19 22:21:02 sphinx postfix/nqmgr[21527]: 4BE9BBB6C1:
> to=<dswartz at druber.com>, relay=none, delay=0, status=deferred 
> (deferred
> transport)
> Oct 19 22:21:04 sphinx MailScanner[21705]: New Batch: 
> Scanning 1 messages,
> 865 bytes
> Oct 19 22:21:04 sphinx MailScanner[21705]: Spam Checks: Starting
> Oct 19 22:21:09 sphinx MailScanner[21705]: Virus and Content Scanning:
> Starting
> Oct 19 22:21:09 sphinx MailScanner[21705]: Uninfected: 
> Delivered 1 messages
> Oct 19 22:21:09 sphinx postfix/nqmgr[21589]: 071AC77D0A:
> from=<dswartz at druber.com>, size=648, nrcpt=1 (queue active)
> Oct 19 22:21:10 sphinx postfix/local[23922]: 071AC77D0A:
> to=<dswartz at druber.com>, relay=local, delay=8, status=sent
> ("|/usr/bin/procmail")
> 
> Note the 5-second lag between the spam checks message and the 
> virus and
> content scanning message...
> 

Well, my machine gets a 15 seconds delay, even for an address that is whitelisted.  However, I can tell you spamassassin doesn't kick in, because if I send myself the Spam test (see anthony stone's post on oct 17th) from my home account (whitelisted), it doesn't get tagged as spam.  However, if I send it from my hotmail account (not whitelisted), it gets a 1000+ score.  

Another way to tell that spamassassin is working, if you have DCC or Razor or Pyzor installed is to use a packet sniffer like iptraf to see if you have outgoing connections to the ports associated with them.

hth

Ugo