Re: [Qmail-scanner-general] crazy question qmail-scanner x SA scores
AV/content filter for Qmail
Brought to you by:
jhaar
From: Rejaine M. <re...@bh...> - 2017-03-14 22:21:17
|
The problem was the sa_quarantine_over parameter .. I think I was interpreting it incorrectly .. as in my case I want for everything that spam classifies above 5 in quarantine, then the value should be 0.1 and not 5, as was before. because this line: if ($sa_quarantine_over > 0 && ($sa_score - $sa_required_hits) >= $sa_quarantine_over) { &debug("SA: seriously spammy - quarantine and don't deliver"); thanks!! Em 14-03-2017 18:32, Rejaine Monteiro escreveu: > > > qmail-scanner seems crazy here... > > > Tue, 14 Mar 2017 17:40:00 BRT:3511: qmail-scanner: > Clear:RC:0(194.67.222.61):SA:1(7.7/5.0): 1.740696 9914 > tle...@pa... us...@my... > Instantly_erect,_instant_respect > <qyr1-q3qRwMXNPUJCgCOwtrdjcUswVS9bDzzxpXOejs.nsuEl60B9RNjQ0A-GTBbeE2CgXdDS2525pG > .... > > > Why "Clear" if SA score is 7.7 ?? Why not going to quaratine ( my > $sa_quarantine_over='5'; ) > > > qmail-queue.log is: > > > Tue, 14 Mar 2017 17:40:00 BRT:3511: SA: yup, this smells like SPAM > (score=7.7 required=5.0) > Tue, 14 Mar 2017 17:40:00 BRT:3511: spamassassin: finished scan of dir > "/var/spool/qscan/tmp/server14895239985893511" in 1.698798 secs > Tue, 14 Mar 2017 17:40:00 BRT:3511: scanloop: finished scan of > "/var/spool/qscan/tmp/server14895239985893511"... > Tue, 14 Mar 2017 17:40:00 BRT:3511: ini_sc: scanning message took > 1.735613 seconds > Tue, 14 Mar 2017 17:40:00 BRT:3511: q_r: fork off child into > /var/qmail/bin/qmail-queue... > Tue, 14 Mar 2017 17:40:00 BRT:3525: q_r: xstatus=0 > Tue, 14 Mar 2017 17:40:00 BRT:3511: qmail-scanner: > Clear:RC:0(194.67.222.61):SA:1(7.7/5.0): 1.740696 9914 > tle...@pa... us...@my... > Instantly_erect,_instant_respect > <qyr1-q3qRwMXNPUJCgCOwtrdjcUswVS9bDzzxpXOejs.nsuEl60B9RNjQ0A-GTBbeE2CgXdDS2525pG > 1489523999.3513-0.server:3508 1489523999.3513-1.server:5515 > Tue, 14 Mar 2017 17:40:00 BRT:3511: cleanup: /usr/bin/rm -rf > /var/spool/qscan/tmp/server14895239985893511/ > /var/spool/qscan/working/new/server14895239985893511 > Tue, 14 Mar 2017 17:40:00 BRT:3511: all finished. Total of 1.783561 secs > > I have several cases of messages with score by SA above 5 that should > be quarantined, but that are being delivered normally .. > > I'm going crazy here. Any idea? > > > ------------------------------------------------------------------------------ > Check out the vibrant tech community on one of the world's most > engaging tech sites, Slashdot.org! http://sdm.link/slashdot > > > _______________________________________________ > Qmail-scanner-general mailing list > Qma...@li... > https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general -- Rejaine da Silveira Monteiro Suporte-TI Tel: (31) 2102-8854 Jamef Encomendas Urgentes - Matriz - Belo Horizonte/MG www.jamef.com.br |