Help
Is it possible to allow Exim to return $spam_report in the MTA failure message to the user sending the email, but only for outgoing email? I recently set up the server to use this spam filtering, and have had complaints from a user that he is not able to send out legitimate email. I tested the filters myself and have not had any problems sending email. I would like to be able to have the users be given the list of filters that they hit so that that information can be sent to me for tweaking. (Also, if someone could show where this information is in logs/how to get Exiscan to write it in logs, that would be very useful information. I see where in the configuration file the spam score is written, but it does so using $1. Will $2 write out $spam_report?)
I appreciate any assistance you can provide.
Page 1 of 1
Printing $spam_report in failure Only for outgoing emails, though.
#2
pairote 
- Administrator
-
- Group: Admin
- Posts: 4,345
- Joined: 13-June 03
Posted 18 December 2004 - 08:19 PM
Is it possible to allow Exim to return $spam_report in the MTA failure message to the user sending the email, but only for outgoing email?
No. The length of the failure message is limited.
The fastest way to check the spam report without to modify any configuration is checking the /var/log/maillog.
1. Search for the sender's domain name (not email address) in /var/log/maillog. You will find the spamd[processid]
2. Search for spamd[processid] in /var/log/maillog, you will find score report.
Example is here:
Dec 18 20:01:50 taksin spamd[21974]: info: setuid to xxxxx succeeded
Dec 18 20:01:50 taksin spamd[21974]: processing message <ADE7F023.F5FE963@warga.riau.go.id> for xxxx:32234.
Dec 18 20:01:55 taksin spamd[21974]: identified spam (23.0/6.0) for xxxx:32234 in 4.7 seconds, 3210 bytes.
Dec 18 20:01:55 taksin spamd[21974]: result: Y 23 - BAYES_99,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL
RCVD_IN_XBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=13.0,size=409,mid=(unknown),bayes=0.999999938605951,autolearn=spam
No. The length of the failure message is limited.
The fastest way to check the spam report without to modify any configuration is checking the /var/log/maillog.
1. Search for the sender's domain name (not email address) in /var/log/maillog. You will find the spamd[processid]
2. Search for spamd[processid] in /var/log/maillog, you will find score report.
Example is here:
Dec 18 20:01:50 taksin spamd[21974]: info: setuid to xxxxx succeeded
Dec 18 20:01:50 taksin spamd[21974]: processing message <ADE7F023.F5FE963@warga.riau.go.id> for xxxx:32234.
Dec 18 20:01:55 taksin spamd[21974]: identified spam (23.0/6.0) for xxxx:32234 in 4.7 seconds, 3210 bytes.
Dec 18 20:01:55 taksin spamd[21974]: result: Y 23 - BAYES_99,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL
RCVD_IN_XBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=13.0,size=409,mid=(unknown),bayes=0.999999938605951,autolearn=spam
#3 Guest_Snover_*
Posted 19 December 2004 - 06:30 AM
Thank you very much for that info; I've found the line and made the appropriate adjustments to the filters.
Is there a way to apply certain filters only to incoming email? (If you tell me to RTFM at this point I'll understand
)
Is there a way to apply certain filters only to incoming email? (If you tell me to RTFM at this point I'll understand
)
#5 Guest_Snover_*
Posted 20 December 2004 - 05:05 AM
OK; hopefully I'll find some time to do some research and find the answer. If I do, I'll let you know.
Thanks for all your help!
Thanks for all your help!
Share this topic:
Page 1 of 1