Author Topic: Spamassassin and clamav dosn't work  (Read 543 times)

0 Members and 1 Guest are viewing this topic.

Offline
*
Spamassassin and clamav dosn't work
« on: May 12, 2022, 05:45:09 PM »
I have postfix running, spamassassin and clamav are supposed to be running but in the maillog logs there is nothing that they scan, the spammassassin test also shows nothing in the logs, the same clamav. Amavis is running normally.

I need to run the server productively but I'm afraid of spam. Why is it not working ? I have a CWP Pro license.

Code: [Select]
May 12 19:35:18 zeus postfix/smtpd[12450]: connect from unknown[104.248.112.172]
May 12 19:35:19 zeus postfix/smtpd[12450]: Anonymous TLS connection established from unknown[104.248.112.172]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
May 12 19:35:19 zeus postfix/smtpd[12450]: NOQUEUE: reject: RCPT from unknown[104.248.112.172]: 450 4.7.25 Client host rejected: cannot find your hostname, [104.248.112.172]; from= to= proto=ESMTP helo=
May 12 19:35:19 zeus postfix/smtpd[12450]: disconnect from unknown[104.248.112.172] ehlo=2 starttls=1 mail=1 rcpt=0/1 quit=1 commands=5/6
May 12 19:35:30 zeus postfix/smtpd[12450]: connect from localhost[127.0.0.1]
May 12 19:35:30 zeus postfix/smtpd[12450]: disconnect from localhost[127.0.0.1] ehlo=1 quit=1 commands=2
May 12 19:35:46 zeus postfix/smtpd[12565]: connect from vegas7.games[64.225.114.22]
May 12 19:35:47 zeus postfix/smtpd[12565]: Anonymous TLS connection established from vegas7.games[64.225.114.22]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
May 12 19:35:50 zeus postfix/smtpd[12565]: warning: vegas7.games[64.225.114.22]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 12 19:35:50 zeus postfix/smtpd[12565]: disconnect from vegas7.games[64.225.114.22] ehlo=1 auth=0/1 quit=1 commands=2/3
May 12 19:35:55 zeus postfix/smtpd[12450]: connect from smtpfarm6.allegro.pl[194.0.251.101]
May 12 19:35:56 zeus postfix/smtpd[12450]: Anonymous TLS connection established from smtpfarm6.allegro.pl[194.0.251.101]: TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)
May 12 19:35:56 zeus cbpolicyd[11103]: module=Quotas, mode=update, host=194.0.251.101, helo=smtpfarm6.allegro.pl, from=obserwowane@allegro.pl, to=allegro@autozawady.pl, reason=quota_update, policy=6, quota=3, limit=4, track=Sender:@allegro.pl, counter=MessageCount, quota=3.18/250 (1.3%)
May 12 19:35:56 zeus postfix/smtpd[12450]: 29D6A11BD54: client=smtpfarm6.allegro.pl[194.0.251.101]
May 12 19:35:56 zeus postfix/cleanup[12608]: 29D6A11BD54: message-id=
May 12 19:35:56 zeus postfix/qmgr[24945]: 29D6A11BD54: from=, size=36504, nrcpt=1 (queue active)
May 12 19:35:59 zeus postfix/smtpd[12621]: connect from unknown[127.0.0.1]
May 12 19:35:59 zeus postfix/smtpd[12621]: 561A911BD66: client=unknown[127.0.0.1]
May 12 19:35:59 zeus postfix/cleanup[12608]: 561A911BD66: message-id=
May 12 19:35:59 zeus postfix/qmgr[24945]: 561A911BD66: from=, size=36934, nrcpt=1 (queue active)
May 12 19:35:59 zeus postfix/smtpd[12621]: disconnect from unknown[127.0.0.1] ehlo=1 mail=1 rcpt=1 data=1 quit=1 commands=5
May 12 19:35:59 zeus postfix/smtp[12609]: 29D6A11BD54: to=, relay=127.0.0.1[127.0.0.1]:10024, delay=3.4, delays=0.24/0.02/0/3.1, dsn=2.0.0, status=sent (250 2.0.0 from MTA(smtp:[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 561A911BD66)
May 12 19:35:59 zeus postfix/qmgr[24945]: 29D6A11BD54: removed
May 12 19:35:59 zeus postfix/lmtp[12623]: 561A911BD66: to=, relay=zeus.gpanel.pl[private/dovecot-lmtp], delay=0.14, delays=0.08/0.02/0.01/0.03, dsn=2.0.0, status=sent (250 2.0.0 0G4yG39FfWJQMQAAXvzCfA Saved)
May 12 19:35:59 zeus postfix/qmgr[24945]: 561A911BD66: removed
May 12 19:36:01 zeus postfix/smtpd[12450]: disconnect from smtpfarm6.allegro.pl[194.0.251.101] ehlo=2 starttls=1 mail=1 rcpt=1 data=1 quit=1 commands=7
May 12 19:38:03 zeus postfix/smtpd[13122]: connect from unknown[62.197.136.199]
May 12 19:38:05 zeus postfix/smtpd[13122]: warning: unknown[62.197.136.199]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
May 12 19:38:05 zeus postfix/smtpd[13122]: lost connection after AUTH from unknown[62.197.136.199]
May 12 19:38:05 zeus postfix/smtpd[13122]: disconnect from unknown[62.197.136.199] ehlo=1 auth=0/1 commands=1/2

Processes:

Code: [Select]
root 8516 1 0 May11 ? 00:00:27 /usr/bin/spamd --pidfile /var/run/spamd.pid -d -c -m5 -H
root 8531 8516 0 May11 ? 00:00:00 spamd child
root 8532 8516 0 May11 ? 00:00:00 spamd child
amavis 8540 1 0 May11 ? 00:00:04 /usr/sbin/amavisd (master)
amavis 12618 1 0 Apr28 ? 00:17:12 /usr/sbin/clamd -c /etc/clamd.d/amavisd.conf --foreground=yes

Where is the issue ? HELP !!!

Offline
*
Re: Spamassassin and clamav dosn't work
« Reply #1 on: May 12, 2022, 07:33:13 PM »
try using test examples from the wiki as it works over amavis
http://wiki.centos-webpanel.com/test-spamassassin-and-clamav
VPS & Dedicated server provider with included FREE Managed support for CWP.
http://www.studio4host.com/

*** Don't allow that your server or website is down, choose hosting provider with included expert managed support for your CWP.

Offline
*
Re: Spamassassin and clamav dosn't work
« Reply #2 on: May 23, 2022, 08:14:52 PM »
Spamassassin seems to work, sending an email with content:

XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X

and mail ends up in the spam folder.
Clamav test does not pass, mail arrives normally in mailbox, As if content_filter amavis stopped working after adding content_filter. It physically works but does nothing.