On 27/05/2019 02.12, David C. Rankin wrote:
On 05/26/2019 06:29 AM, Carlos E. R. wrote: <snip>
The mail passed with a warning in the subject line added, was not quarantined. And it came from my gmail account, who are rather suspicious folk when looking at spam or attachments.
I was surprised with the line:
[127.0.0.1]:10025): 250 2.0.0 Ok: queued as 2D05C320ADE <2.5> 2019-05-25 15:29:59 Telcontar amavis 28714 - - (28714-15) Passed UNCHECKED {RelayedTaggedInternal}, MYNETS
if it was actually doing what it ways it was doing (as well as the line above that skipped virus checking the last 4096 bytes when the message exceeded quota.
Seems like there may be a couple of issues to investigate.
Yes. But it was not marked as virus, rather as an error. Normally in my configuration a virus is marked but passed; later procmail sees the mark and moves it to a different folder. I do not allow amavis to quarantine himself. This is a different case and has taken me by surprise. Amavis changed the subject line instead (or as well as) adding a mark to the headers. But amavis has no reason to suspect it is a virus, either. Amavis has a rule to block executables, but this one is not. I have to confirm that it was amavis who changed the subject line, though. -- Cheers / Saludos, Carlos E. R. (from 15.0 x86_64 at Telcontar)