Amavis-new und/oder spamassassin

[Frank Fiene]

Moin!

Mal wieder etwas was ich nicht verstehe:

Amavis-new lädt seinen internen SpamAssassin code:

==snip==
Nov  3 10:17:42 smtp2 amavis[12513]: Module Mail::SpamAssassin  3.004001
==snip==


Eine Spam-Mail kommt durch. Wenn ich dann die komplette Mail durch spamc schiebe, erscheint (hier ist der Level auf 5.0):

==snip==
11.9/5.0
Spam detection software, running on the system "smtp2.veka.com",
has identified this incoming email as possible spam.  The original
message has been attached to this so you can view it or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  Your email client cannot read this email. To view it online,
   please go here: http://propertydunia.com/display.php?M=7367604&C=be6308027d831c5e198ca256ed1f0e9e&S=410&L=52&N=34
   To stop receiving these emails:http://propertydunia.com/unsubscribe.php?M=7367604&C=be6308027d831c5e198ca256ed1f0e9e&L=52&N=410
   [...]

Content analysis details:   (11.9 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 1.9 URIBL_ABUSE_SURBL      Contains an URL listed in the ABUSE SURBL blocklist
                            [URIs: propertydunia.com]
 1.1 DKIM_ADSP_ALL          No valid author signature, domain signs all mail
-0.0 RP_MATCHES_RCVD        Envelope sender domain matches handover relay domain
 2.4 URI_NO_WWW_BIZ_CGI     URI: CGI in .biz TLD other than third-level "www"
 0.7 MPART_ALT_DIFF         BODY: HTML and text parts are different
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
 1.1 DCC_CHECK              Detected as bulk mail by DCC (dcc-servers.net)
 1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.0 DIGEST_MULTIPLE        Message hits more than one network digest check
 0.0 T_DKIM_INVALID         DKIM-Signature header exists but is not valid
==snip==


Ich weise SPAM in amavis ab mit

==snip==
$sa_spam_subject_tag = '***SPAM*** ';
$sa_tag_level_deflt  = 0.0;  # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 6.31; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 6.31; # triggers spam evasive actions
$sa_dsn_cutoff_level = 10;   # spam level beyond which a DSN is not sent
==snip==

Und
==snip==
$final_spam_destiny       = D_REJECT;
==snip==


Warum verhält sich amavis nicht wie gewünscht und verweigert die Annahme der Mail?


Viele Grüße!
Frank
--
Frank Fiene
IT-Security Manager VEKA Group

Fon: +49 2526 29-6200
Fax: +49 2526 29-16-6200
mailto: ffiene at veka.com
http://www.veka.com

PGP-ID: 62112A51
PGP-Fingerprint: 7E12 D61B 40F0 212D 5A55 765D 2A3B B29B 6211 2A51
Threema: VZK5NDWW

VEKA AG
Dieselstr. 8
48324 Sendenhorst
Deutschland/Germany

Vorstand/Executive Board: Andreas Hartleif (Vorsitzender/CEO),
Dr. Andreas W. Hillebrand, Bonifatius Eichwald, Elke Hartleif, Dr. Werner Schuler,
Vorsitzender des Aufsichtsrates/Chairman of Supervisory Board: Ulrich Weimer
HRB 8282 AG Münster/District Court of Münster

-------------- nächster Teil --------------
Ein Dateianhang mit Binärdaten wurde abgetrennt...
Dateiname   : signature.asc
Dateityp    : application/pgp-signature
Dateigröße  : 833 bytes
Beschreibung: Message signed with OpenPGP
URL         : <https://listi.jpberlin.de/pipermail/postfixbuch-users/attachments/20171103/94c88b5e/attachment.asc>