irgendwie hab ich mein Amavis "verschlimmbessert" und bekomm's nicht sauber hin.
Ich meine eingerichtet zu haben:
* Bei egal welchem Score: Trage die Spam Info Header ein
* Ab einem Score von 5.00: Klassifiziere als SPAM
Nun kommt es ab und zu vor, dass ich eine Email bekomme die als "****SPAM****" im Betreff markiert ist, der Header aber so aussieht (Domain "geändert"):
Code: Alles auswählen
Return-Path: <bounce+2df593.237267-alex=meinedomain.de@fttxu.tjjij.com>
Delivered-To: alex@meinedomain.de
Received: from meinedomain.de ([127.0.0.1])
(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits))
by meinedomain.de with LMTPS
id jUZVIkTPr2MZSiQAzFwjog
(envelope-from <bounce+2df593.237267-alex=meinedomain.de@fttxu.tjjij.com>)
for <alex@meinedomain.de>; Sat, 31 Dec 2022 06:57:24 +0100
Received: from mail by meinedomain.de with spam-scanned (Exim 4.96)
(envelope-from <bounce+2df593.237267-alex=meinedomain.de@fttxu.tjjij.com>)
id 1pBUrx-009yfN-1s
for alex@meinedomain.de;
Sat, 31 Dec 2022 06:57:24 +0100
X-Spam-Checker-Version: SpamAssassin 4.0.0-rc4 (2022-12-06) on meinedomain.de
X-Spam-Level: ***
X-Spam-Status: No, score=3.6 required=5.0 tests=DKIM_INVALID,DKIM_SIGNED,
HEADER_FROM_DIFFERENT_DOMAINS,HTML_IMAGE_RATIO_04,HTML_MESSAGE,
MIME_HTML_ONLY,RCVD_IN_BARRA,RCVD_IN_DNSWL_HI,RCVD_IN_MSPIKE_H2,
SPF_HELO_NONE,SPF_PASS,UNPARSEABLE_RELAY,URI_HEX autolearn=no
autolearn_force=no version=4.0.0-rc4
Received: from [127.0.0.1] (helo=localhost)
by meinedomain.de with utf8esmtp (Exim 4.96)
(envelope-from <bounce+2df593.237267-alex=meinedomain.de@fttxu.tjjij.com>)
id 1pBUrx-009yfK-0b
for alex@meinedomain.de;
Sat, 31 Dec 2022 06:57:21 +0100
X-Virus-Scanned: Debian amavisd-new at meinedomain.de
Received: from meinedomain.de ([127.0.0.1])
by localhost (meinedomain.de [127.0.0.1]) (amavisd-new, port 10024)
with UTF8SMTP id zKTPfoFDPaZE for <alex@meinedomain.de>;
Sat, 31 Dec 2022 06:57:16 +0100 (CET)
Received: from m193-189.mailgun.net ([161.38.193.189])
by meinedomain.de with utf8esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256
(Exim 4.96)
(envelope-from <bounce+2df593.237267-alex=meinedomain.de@fttxu.tjjij.com>)
id 1pBUrr-009yMI-2X
for alex@meinedomain.de;
Sat, 31 Dec 2022 06:57:16 +0100
DKIM-Signature: a=rsa-sha256; v=1; c=relaxed/relaxed; d=fttxu.tjjij.com; q=dns/txt;
s=k1; t=1672466203; x=1672473403; h=Content-Transfer-Encoding:
Content-Type: Message-Id: Reply-To: To: To: From: From: Subject:
Subject: Mime-Version: Date: Sender: Sender;
bh=eE3LOF4zMqJCv4DmZaJPBDNBmkssSKmBmodWbcuBhyU=; b=TdSwI9gi8+L0CRQeVosVQgM1eg2CLZuMtH68OpsZGKuL8MDrjMx6/vYLmUWEdE9rZeqxKO67
tP1yDE0qTfYDdxazLjmQpajX/2CDwPIH75XI2r79pHiIX/UafLL+awycPie4W6Y4dgoDcvDw
vK2/0EjtYI5x1meU8AUJyiA2Kzk=
X-Mailgun-Sending-Ip: 161.38.193.189
X-Mailgun-Sid: WyIxYjdmZiIsImFsZXhAcm9vdDEuZGUiLCIyMzcyNjciXQ==
Received: from <unknown> (<unknown> []) by a9872ae74c59 with HTTP id
63afcf1baa9dbcf629c113e6; Sat, 31 Dec 2022 05:56:43 GMT
X-Mailgun-Batch-Id: 63afcf1b61ed3116c0f1b705
Sender: jay=seplos.com@fttxu.tjjij.com
Date: Sat, 31 Dec 2022 05:56:43 +0000
Mime-Version: 1.0
Subject: ****SPAM**** Seplos new products wish you a Happy New Year
From: Jay <jay@seplos.com>
To: Alex <alex@meinedomain.de>
Reply-To: jay@seplos.com
X-Mailgun-Variables: {"companyId": "365060", "emailId": "23290209",
"operatorId": "584457"}
Message-Id: <20221231055643.8842ff3f963be1dc@fttxu.tjjij.com>
Content-Type: text/html; charset="ascii"
Content-Transfer-Encoding: quoted-printableCode: Alles auswählen
X-Spam-Status: No, score=3.6 required=5.0
...
Subject: ****SPAM**** Seplos new products wish you a Happy New YearIn /etc/amavis/conf.d/20_debian_defaults habe ich folgendes stehen:
Code: Alles auswählen
....
$sa_spam_subject_tag = '****SPAM**** ';
....
$sa_tag_level_deflt = -999; # add spam info headers if at, or above that level
$sa_tag2_level_deflt = 5.00; # add 'spam detected' headers at that level
$sa_kill_level_deflt = 99; # triggers spam evasive actions --> Testweise auf 99 statt 6.31, bis ich einen guten Schwellwert gefunden habe
...
$sa_dsn_cutoff_level = 100; # spam level beyond which a DSN is not sent --> Testweise auf 100 statt 10, bis ich einen guten Schwellwert gefunden habe
....
Gruß und guten Rutsch
Alex