Hi,
I'm having trouble checking the reason why SpamAassassin virtual_user_filter is triggered on exim_mainlog.
The user filter set to below:
/var/log/exim_mainlog:
There is no Global Filter for the user/domain.
Any help is much appreciated.
Thank you.
I'm having trouble checking the reason why SpamAassassin virtual_user_filter is triggered on exim_mainlog.
The user filter set to below:
Code:
headers charset "UTF-8"
if not first_delivery and error_message then finish endif
#Spam Score Filter >9
if
($h_X-Spam-Score: matches \N^\d+$\N and $h_X-Spam-Score: is above "9")
then
deliver "[email protected]"
save "/dev/null" 660
endif
Code:
exigrep 1lSPcA-00Esup-Nk /var/log/exim_mainlog
2021-04-03 03:38:05.670 [3547932] cwd=/var/spool/exim 3 args: /usr/sbin/exim -Mc 1lSPcA-00Esup-Nk
2021-04-03 03:38:05.623 [3547691] 1lSPcA-00Esup-Nk H=le.domain.live [45.95.168.236]:56788 I=[HOST_IP]:25 Warning: "SpamAssassin as minteres detected message as NOT spam (1.5)"
2021-04-03 03:38:05.656 [3547691] 1lSPcA-00Esup-Nk H=le.domain.live [45.95.168.236]:56788 I=[HOST_IP]:25 Warning: Message has been scanned: no virus or other harmful content was found
2021-04-03 03:38:05.660 [3547691] 1lSPcA-00Esup-Nk <= [email protected] H=le.domain.live [45.95.168.236]:56788 I=[HOST_IP]:25 P=esmtps L- X=TLS1.2:ECDHE-RSA-AES256-GCM-SHA384:256 CV=no S=10399 M8S=0 RT=0.190s [email protected] T="Account authentication is required ( [email protected] )" from <[email protected]> for [email protected]
2021-04-03 03:38:05.714 [3547932] 1lSPcA-00Esup-Nk => /dev/null ([email protected]) <[email protected]> F=<[email protected]> R=virtual_user_filter T=**bypassed** S=0 QT=10s DT=0.000s
2021-04-03 03:38:05.748 [3547932] 1lSPcA-00Esup-Nk => recipient_if_filtered ([email protected], [email protected]) <[email protected]> F=<[email protected]> P=<[email protected]> R=virtual_user T=dovecot_virtual_delivery S=10746 C="250 2.0.0 <[email protected]> kHH2Kp1yZ2C1CTYAFCLH+Q Saved" QT=11s DT=0.032s
2021-04-03 03:38:05.757 [3547932] 1lSPcA-00Esup-Nk => recipient_if_filtered ([email protected], [email protected]) <[email protected]> F=<[email protected]> P=<[email protected]> R=archive_incoming_email_domain_method T=archiver_incoming_domain_method S=10592 QT=11s DT=0.008s
2021-04-03 03:38:05.766 [3547932] 1lSPcA-00Esup-Nk => sender <[email protected]> F=<[email protected]> P=<[email protected]> R=archive_incoming_email_domain_method T=archiver_incoming_domain_method S=10593 QT=11s DT=0.007s
2021-04-03 03:38:05.766 [3547932] 1lSPcA-00Esup-Nk Completed QT=11sAny help is much appreciated.
Thank you.
Last edited by a moderator:
