Zimbra

hongatchi · #1 (**permalink**) 02-21-2009, 11:19 AM

I'm running zcs-5.0.13 on centos 4. I've noticed since a couple of upgrades ago that I've been getting a lot of spam. After digging into the cause of the problem, I see that I'm not getting any X-DSPAM or X-Spam headers in my incoming messages like I used to, only seeing X-Virus-Scanned headers from amavisd. The anti-spam service is running, but it seems like I'm missing the spamassassin binaries. Any suggestions on what I could check for that may be causing the problem?

phoenix · #2 (**permalink**) 02-21-2009, 11:29 AM

Have you modified anything in Zimbra that would affect spam checking? What are your tag/kill percentages? Could you post some headers from a 'show original' from a recent message? What does 'zmcontrol status' show?

hongatchi · #3 (**permalink**) 02-21-2009, 11:55 AM

I haven't changed any of the settings. From what I can tell this started when I upgraded from 5.0.2 to 5.0.11 about 3 months ago (I'm on 5.0.13 now). Tag is set at 33 and Kill at 75.

zmcontrol status shows:
antispam Running
antivirus Running
ldap Running
logger Running
mailbox Running
mta Running
snmp Running
spell Running
stats Running

I've attached the header from the forum response notice as an attachment.

uxbod · #4 (**permalink**) 02-21-2009, 11:45 PM

Update log_level=2 in /opt/zimbra/conf/amavisd.conf.in and restart ZCS. Then check /var/log/zimbra.log to see whether Amavis is passing the email through SA.

hongatchi · #5 (**permalink**) 02-22-2009, 04:42 PM

I've changed the logging level to 2 and restarted the server. I've attached a file with all the amavis log entries on startup.

I've also noticed periodic amavis errors in the log, not with every incoming message, but several times per day. I've attached a copy of the error that I'm getting.

Any suggestions?

uxbod · #6 (**permalink**) 02-23-2009, 01:09 AM

Can we see a entry from the logfile for when a email is processed please.

hongatchi · #7 (**permalink**) 02-23-2009, 07:35 AM

Here's an example log entry from an email being processed.

brian · #8 (**permalink**) 02-23-2009, 05:42 PM

what is your zimbraMtaMyNetworks attribute set to? If you are only seeing the virus scan headers and anti-spam is enabled it's possible amavis thinks everything is a local network and not adding the X-Spam headers.