MailScanner spam check not working

Tue Jul 10 14:48:51 UTC 2018

What does a MailScanner --lint show?

I don't see spamassassin being invoked on your new setup...did it install?

On Tue, Jul 10, 2018 at 10:04 AM, DobriL Dobrilov <dobril at stanga.net> wrote:

> Hello guy,
>
>
>
> I decide to start new mail server and use MailScanner v5 . The previous
> running v4 and all is perfect more than 6y.
>
> What is my exact issue. I think MailScanner not checking messages  for
> spam , because I tried to send multiple spam messages and all they were
> delivered without mark or stop it.
>
> This what I can see in the logs
>
>
>
> Jul 10 16:59:16 mail postfix/smtpd[13610]: warning: hostname
> mail.stanga.net does not resolve to address 195.34.122.2
>
> Jul 10 16:59:16 mail postfix/smtpd[13610]: connect from
> unknown[195.34.122.2]
>
> Jul 10 16:59:16 mail postfix/smtpd[13610]: Anonymous TLS connection
> established from unknown[195.34.122.2]: TLSv1 with cipher ADH-AES256-SHA
> (256/256 bits)
>
> Jul 10 16:59:16 mail postfix/smtpd[13610]: C508963590:
> client=unknown[195.34.122.2]
>
> Jul 10 16:59:16 mail postfix/cleanup[13613]: C508963590: hold: header
> Received: from mail.stanga.net (unknown [195.34.122.2])??(using TLSv1
> with cipher ADH-AES256-SHA (256/256 bits))??(No client certificate
> requested)??by mail.snowthunder.org (Postfix) with ESMTPS id C5 from
> unknown[195.34.122.2]; from=<dobril at stanga.net> to=<dobril at snowthunder.org>
> proto=ESMTP helo=<mail.stanga.net>
>
> Jul 10 16:59:16 mail postfix/cleanup[13613]: C508963590:
> message-id=<006f01d41856$35f1cc40$a1d564c0$@stanga.net>
>
> Jul 10 16:59:16 mail opendkim[694]: C508963590: DKIM-Signature field added
> (s=mail, d=stanga.net)
>
> Jul 10 16:59:16 mail postfix/smtpd[13610]: disconnect from
> unknown[195.34.122.2] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1
> commands=7
>
> Jul 10 16:59:17 mail MailScanner[13597]: New Batch: Scanning 1 messages,
> 5040 bytes
>
> Jul 10 16:59:17 mail MailScanner[13597]: Saved archive copies of
> C508963590.A362E
>
> Jul 10 16:59:17 mail MailScanner[13597]: Filename Checks: Allowing
> C508963590.A362E msg-13597-1.txt
>
> Jul 10 16:59:17 mail MailScanner[13597]: Filename Checks: Allowing
> C508963590.A362E msg-13597-2.html
>
> Jul 10 16:59:17 mail MailScanner[13597]: Virus and Content Scanning:
> Starting
>
> Jul 10 16:59:17 mail MailScanner[13597]: Virus Scanning completed at
> 454139 bytes per second
>
> Jul 10 16:59:17 mail MailScanner[13597]: Spam Checks: Starting
>
> Jul 10 16:59:17 mail MailScanner[13597]: Delivery of nonspam: message
> C508963590.A362E from dobril at stanga.net to  with subject Test
>
> Jul 10 16:59:17 mail MailScanner[13597]: Requeue: C508963590.A362E to
> 37A5B63597
>
> Jul 10 16:59:17 mail MailScanner[13597]: Uninfected: Delivered 1 messages
>
> Jul 10 16:59:17 mail postfix/qmgr[6326]: 37A5B63597: from=<
> dobril at stanga.net>, size=3770, nrcpt=1 (queue active)
>
> Jul 10 16:59:17 mail MailScanner[13597]: Deleted 1 messages from
> processing-database
>
> Jul 10 16:59:17 mail MailScanner[13597]: Batch completed at 279317 bytes
> per second (5040 / 0)
>
> Jul 10 16:59:17 mail MailScanner[13597]: Batch (1 message) processed in
> 0.02 seconds
>
> Jul 10 16:59:17 mail postfix/pipe[13614]: 37A5B63597: to=<
> dobril at snowthunder.org>, relay=procmail, delay=0.62,
> delays=0.61/0.01/0/0, dsn=2.0.0, status=sent (delivered via procmail
> service)
>
> Jul 10 16:59:17 mail postfix/qmgr[6326]: 37A5B63597: removed
>
>
>
> This is how looks like the logs on the OLD server where all working fine
>
>
>
> Jul 10 16:59:09 mail MailScanner[9639]: Batch (1 message) processed in
> 0.71 seconds
>
> Jul 10 16:59:15 mail MailScanner[32628]: New Batch: Scanning 1 messages,
> 3633 bytes
>
> Jul 10 16:59:15 mail MailScanner[32628]: Saved archive copies of
> 7975A30A041D.A83C7
>
> Jul 10 16:59:15 mail MailScanner[32628]: Filename Checks: Allowing
> 7975A30A041D.A83C7 msg-32628-174.html
>
> Jul 10 16:59:15 mail MailScanner[32628]: Filename Checks: Allowing
> 7975A30A041D.A83C7 msg-32628-173.txt
>
> Jul 10 16:59:15 mail MailScanner[32628]: Virus and Content Scanning:
> Starting
>
> Jul 10 16:59:15 mail MailScanner[32628]: Virus Scanning completed at
> 538308 bytes per second
>
> Jul 10 16:59:15 mail MailScanner[32628]: Spam Checks: Starting
>
> Jul 10 16:59:15 mail MailScanner[32628]: Message 7975A30A041D.A83C7 from
> 192.168.0.222 (dobril at stanga.net) is whitelisted
>
> Jul 10 16:59:15 mail MailScanner[32628]: Message 7975A30A041D.A83C7 from
> 192.168.0.222 (dobril at stanga.net) to snowthunder.org is not spam
> (whitelisted), SpamAssassin (not cached, score=-99.785, required 5,
> autolearn=disabled, ALL_TRUSTED -1.00, HTML_MESSAGE 0.00, MIME_HTML_MOSTLY
> 0.00, TVD_RCVD_SINGLE 1.21, USER_IN_WHITELIST -100.00)
>
> Jul 10 16:59:15 mail MailScanner[32628]: Delivery of nonspam: message
> 7975A30A041D.A83C7 from dobril at stanga.net to dobril at snowthunder.org with
> subject Test
>
> Jul 10 16:59:15 mail MailScanner[32628]: Spam Checks completed at 5941
> bytes per second
>
> Jul 10 16:59:16 mail MailScanner[32628]: Requeue: 7975A30A041D.A83C7 to
> 321F930A0422
>
> Jul 10 16:59:16 mail MailScanner[32628]: Uninfected: Delivered 1 messages
>
> Jul 10 16:59:16 mail MailScanner[32628]: Deleted 1 messages from
> processing-database
>
> Jul 10 16:59:16 mail MailScanner[32628]: Batch completed at 2496 bytes per
> second (3633 / 1)
>
> Jul 10 16:59:16 mail MailScanner[32628]: Batch (1 message) processed in
> 1.46 seconds
>
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>
>

-- 
Shawn Iverson, CETL
Director of Technology
Rush County Schools
765-932-3901 x1171
iversons at rushville.k12.in.us
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.mailscanner.info/pipermail/mailscanner/attachments/20180710/bb72b7b2/attachment.html>