MailScanner spam check not working

DobriL Dobrilov dobril at stanga.net
Tue Jul 10 14:04:42 UTC 2018


Hello guy,

 

I decide to start new mail server and use MailScanner v5 . The previous
running v4 and all is perfect more than 6y.

What is my exact issue. I think MailScanner not checking messages  for spam
, because I tried to send multiple spam messages and all they were delivered
without mark or stop it.

This what I can see in the logs

 

Jul 10 16:59:16 mail postfix/smtpd[13610]: warning: hostname mail.stanga.net
does not resolve to address 195.34.122.2

Jul 10 16:59:16 mail postfix/smtpd[13610]: connect from
unknown[195.34.122.2]

Jul 10 16:59:16 mail postfix/smtpd[13610]: Anonymous TLS connection
established from unknown[195.34.122.2]: TLSv1 with cipher ADH-AES256-SHA
(256/256 bits)

Jul 10 16:59:16 mail postfix/smtpd[13610]: C508963590:
client=unknown[195.34.122.2]

Jul 10 16:59:16 mail postfix/cleanup[13613]: C508963590: hold: header
Received: from mail.stanga.net (unknown [195.34.122.2])??(using TLSv1 with
cipher ADH-AES256-SHA (256/256 bits))??(No client certificate requested)??by
mail.snowthunder.org (Postfix) with ESMTPS id C5 from unknown[195.34.122.2];
from=<dobril at stanga.net> to=<dobril at snowthunder.org> proto=ESMTP
helo=<mail.stanga.net>

Jul 10 16:59:16 mail postfix/cleanup[13613]: C508963590:
message-id=<006f01d41856$35f1cc40$a1d564c0$@stanga.net>

Jul 10 16:59:16 mail opendkim[694]: C508963590: DKIM-Signature field added
(s=mail, d=stanga.net)

Jul 10 16:59:16 mail postfix/smtpd[13610]: disconnect from
unknown[195.34.122.2] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1
commands=7

Jul 10 16:59:17 mail MailScanner[13597]: New Batch: Scanning 1 messages,
5040 bytes

Jul 10 16:59:17 mail MailScanner[13597]: Saved archive copies of
C508963590.A362E

Jul 10 16:59:17 mail MailScanner[13597]: Filename Checks: Allowing
C508963590.A362E msg-13597-1.txt

Jul 10 16:59:17 mail MailScanner[13597]: Filename Checks: Allowing
C508963590.A362E msg-13597-2.html

Jul 10 16:59:17 mail MailScanner[13597]: Virus and Content Scanning:
Starting

Jul 10 16:59:17 mail MailScanner[13597]: Virus Scanning completed at 454139
bytes per second

Jul 10 16:59:17 mail MailScanner[13597]: Spam Checks: Starting

Jul 10 16:59:17 mail MailScanner[13597]: Delivery of nonspam: message
C508963590.A362E from dobril at stanga.net to  with subject Test

Jul 10 16:59:17 mail MailScanner[13597]: Requeue: C508963590.A362E to
37A5B63597

Jul 10 16:59:17 mail MailScanner[13597]: Uninfected: Delivered 1 messages

Jul 10 16:59:17 mail postfix/qmgr[6326]: 37A5B63597:
from=<dobril at stanga.net>, size=3770, nrcpt=1 (queue active)

Jul 10 16:59:17 mail MailScanner[13597]: Deleted 1 messages from
processing-database

Jul 10 16:59:17 mail MailScanner[13597]: Batch completed at 279317 bytes per
second (5040 / 0)

Jul 10 16:59:17 mail MailScanner[13597]: Batch (1 message) processed in 0.02
seconds

Jul 10 16:59:17 mail postfix/pipe[13614]: 37A5B63597:
to=<dobril at snowthunder.org>, relay=procmail, delay=0.62,
delays=0.61/0.01/0/0, dsn=2.0.0, status=sent (delivered via procmail
service)

Jul 10 16:59:17 mail postfix/qmgr[6326]: 37A5B63597: removed 

 

This is how looks like the logs on the OLD server where all working fine

 

Jul 10 16:59:09 mail MailScanner[9639]: Batch (1 message) processed in 0.71
seconds

Jul 10 16:59:15 mail MailScanner[32628]: New Batch: Scanning 1 messages,
3633 bytes

Jul 10 16:59:15 mail MailScanner[32628]: Saved archive copies of
7975A30A041D.A83C7

Jul 10 16:59:15 mail MailScanner[32628]: Filename Checks: Allowing
7975A30A041D.A83C7 msg-32628-174.html

Jul 10 16:59:15 mail MailScanner[32628]: Filename Checks: Allowing
7975A30A041D.A83C7 msg-32628-173.txt

Jul 10 16:59:15 mail MailScanner[32628]: Virus and Content Scanning:
Starting

Jul 10 16:59:15 mail MailScanner[32628]: Virus Scanning completed at 538308
bytes per second

Jul 10 16:59:15 mail MailScanner[32628]: Spam Checks: Starting

Jul 10 16:59:15 mail MailScanner[32628]: Message 7975A30A041D.A83C7 from
192.168.0.222 (dobril at stanga.net) is whitelisted

Jul 10 16:59:15 mail MailScanner[32628]: Message 7975A30A041D.A83C7 from
192.168.0.222 (dobril at stanga.net) to snowthunder.org is not spam
(whitelisted), SpamAssassin (not cached, score=-99.785, required 5,
autolearn=disabled, ALL_TRUSTED -1.00, HTML_MESSAGE 0.00, MIME_HTML_MOSTLY
0.00, TVD_RCVD_SINGLE 1.21, USER_IN_WHITELIST -100.00)

Jul 10 16:59:15 mail MailScanner[32628]: Delivery of nonspam: message
7975A30A041D.A83C7 from dobril at stanga.net to dobril at snowthunder.org with
subject Test

Jul 10 16:59:15 mail MailScanner[32628]: Spam Checks completed at 5941 bytes
per second

Jul 10 16:59:16 mail MailScanner[32628]: Requeue: 7975A30A041D.A83C7 to
321F930A0422

Jul 10 16:59:16 mail MailScanner[32628]: Uninfected: Delivered 1 messages

Jul 10 16:59:16 mail MailScanner[32628]: Deleted 1 messages from
processing-database

Jul 10 16:59:16 mail MailScanner[32628]: Batch completed at 2496 bytes per
second (3633 / 1)

Jul 10 16:59:16 mail MailScanner[32628]: Batch (1 message) processed in 1.46
seconds

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180710/42e2b998/attachment.html>


More information about the MailScanner mailing list