does amavis by default let spamassassin filter outgoing mails for spam, or just incoming mails. (I see that clamAV scans both) As in the log: Code: Oct 22 22:21:31 fmail amavis[3604]: (03604-05)[B] Passed SPAMMY, LOCAL[/B] [127.0.0.1] [127.0.0.1] [B]<[email protected]> -> <[email protected]>[/B], Message-ID: <d708fbc3129e0df7081d978b14aa4259@localhost>, mail_id: mm2Ve96Z8tD7, [B]Hits: -1.44[/B], size: 777, queued_as: 1832A86D5B, 931 ms Oct 22 22:21:31 fmail postfix/smtp[4890]: 56D1686CFE: to=<[email protected]>, relay=127.0.0.1[127.0.0.1]:10024, delay=1, delays=0.03/0.02/0.02/0.93, dsn=2.0.0, status=sent (250 2.0.0 Ok, id=03604-05, from MTA([127.0.0.1]:10025): 250 2.0.0 Ok: queued as 1832A86D5B) Oct 22 22:21:31 fmail postfix/qmgr[4777]: 56D1686CFE: removed Oct 22 22:21:31 fmail imapd-ssl: LOGOUT, [email protected], ip=[::ffff:127.0.0.1], headers=2705, body=0, rcvd=328, sent=5767, time=0, starttls=1 Oct 22 22:21:32 fmail imapd-ssl: Connection, ip=[::ffff:127.0.0.1] Oct 22 22:21:32 fmail imapd-ssl: LOGIN, [email protected], ip=[::ffff:127.0.0.1], port=[37076], protocol=IMAP Oct 22 22:21:32 fmail imapd-ssl: LOGOUT, [email protected], ip=[::ffff:127.0.0.1], headers=0, body=0, rcvd=10, sent=83, time=0, starttls=1 Oct 22 22:22:01 fmail postfix/smtp[4865]: 1832A86D5B: to=<[email protected]>, relay=qmail.fitta.vn[1.1.1.2]:25, delay=30, delays=0.19/0.01/30/0.01, dsn=2.0.0, status=sent (250 ok 1256224919 qp 4770) Oct 22 22:22:01 fmail postfix/qmgr[4777]: 1832A86D5B: removed Even worse, SA doesn't give X-header tag to incoming spam message unless i manually set value for @local_domains_acl. the log only says something about Passed SPAMMY, even with a 4.475-scored incoming mail Code: Oct 22 23:54:21 fmail amavis[5497]: (05497-01) [B]Passed SPAMMY[/B], [1.1.1.2] [1.1.1.2] [B]<[email protected]> -> <[email protected]>[/B], Message-ID: <[email protected]>, mail_id: 7M76JsPSAMnS, Hits: 4.745, size: 1088, queued_as: D0A2D86D5C, 468 ms Oct 22 23:54:21 fmail postfix/virtual[5525]: D0A2D86D5C: to=<[email protected]>, relay=virtual, delay=0.09, delays=0.02/0.02/0/0.05, dsn=2.0.0, status=sent (delivered to maildir) @fitta.vn is the external mail server while @myfit.org is the local domain. and it appears that SA did score the message but gave no sign on it. I set the threshold down to -5, so SA should consider everything spam, but i doesn't.
amavis-new tries to differentiate between incoming and outgoing mail based on @local_domains_maps and the recipient address. If you set your @local_domains_maps = ( ["."] ), you easily scan mail for all domains that your mta receives mail for but it will also scan mail for domains other than your own (i.e. outgoing mail) To fix, set your @local_domains_maps = ( [".yourdomain.com"] ); Now it will only scan mail for recipients @yourdomain.com (i.e. incoming mail only). I know this is late but I hope it helps since I came across this unanswered question via google.
thanks, mate. actually i've moved to iRedmail a long while after that. your answer is still helpful in getting to understand the case.
