MailScanner & SA results

[Dudi Goldenberg]

Hi Martin,

 

Setup was as easy as placing clamav.cf and clamav.pm in
/etc/mail/spamassassin and the milter was happy:

 

Jan 15 21:52:44 puppy spamd[32447]: spamd: identified spam (12.4/5.0)
for dudi:502 in 4.6 seconds, 336 bytes. 

Jan 15 21:52:44 puppy spamd[32447]: spamd: result: Y 12 -
CLAMAV,CLAMAV_VIRUS,MISSING_DATE,MISSING_HEADERS,MISSING_MID,MISSING_SUB
JE

CT,RCVD_IN_SORBS_WEB,SPF_PASS,TVD_SPACE_RATIO
scantime=4.6,size=336,user=dudi,uid=502,required_score=5.0,rhost=localho
st,raddr=127.0

.0.1,rport=36275,mid=(unknown),autolearn=failed

 

Regards,

 

Dudi

 

________________________________

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Martin
Hepworth
Sent: Saturday, January 16, 2010 20:11
To: MailScanner discussion
Subject: Re: MailScanner & SA results

 

Question then becomes 'how' have you setup SA to use the clamav
plugin....

Martin

2010/1/16 Alex Neuman van der Hans <alex at rtpty.com>

Then perhaps it's time to try it. I don't condone it, but if rape has
worked for you in the past...

------Original Message------
From: Dudi Goldenberg
Sender: mailscanner-bounces at lists.mailscanner.info
To: MailScanner discussion
ReplyTo: MailScanner discussion
Subject: RE: MailScanner & SA results
Sent: Jan 16, 2010 12:05 PM

Hello Kai,

>The mail server adds required headers, thus the rules firing on the
>missing required headers cannot fire in MS anymore. The milter runs
before
>MTA acceptance, MS runs after MTA acceptance and processing.
>The only thing that isn't explained by that are the missing clamav
>results. That's obviously because you are using it with different
>configurations. You should also be aware that MS can probably make much

>better use of clamav directly.

Well,

My goal is to reject as much as possible at the gate, so far, SA +
ClamAV plugin is proving very effective.

Without digging into MS code, I assume it calls spamd and collects the
results.

If this is true, I don't see how different configs are being used.

On top of that, I have another identical server, running the same
config, just with a very old MS version.

The above system does see all SA test & scores, I've tried everything
but rape and still could not find why this system behaves differently.

Regards,

Dudi

--

MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!



--

Alex Neuman van der Hans
Reliant Technologies

+507 6781-9505
+507 832-6725
BB PIN: 20EA17C5

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website!




-- 
Martin Hepworth
Oxford, UK

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100116/53f274ab/attachment.html