Missing X-Spam Flags in Message Headers!

[no1youknowz]

Hi All,

My problem is similar to the post outlined here: https://www.zimbra.com/forums/admini...n-missing.html

New user to Zimbra, but not linux

Installation was a breeze, got it all up and running in no time. However when it came to configuring the spamassassin rules to my own preferences, this is where I started getting problems.

Before I did any modifications to /opt/zimbra/conf/salocal.cf my X-Spam Flags were fine:

X-Spam-Status: No, score=-2.23 tagged_above=-10 required=6.6 tests=[ALL_TRUSTED=-1.8, AWL=-0.050, BAYES_00=-2.599, TVD_SPACE_RATIO=2.219]
X-Virus-Scanned: amavisd-new at foo.com
Recieved: from zimbra.foo.com ([127.0.0.1]) by localhost (zimbra.foo.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vKkBvkKlT3N1 for <test3@foo.com>; Tue, 21 Apr 2009 16:48:06 +0100 (BST)
Received: from zimbra.foo.com (zimbra.foo.com [192.168.1.37]) by zimbra.foo.com (Postfix) with ESMTP id B157057C213 for <test3@foo.com>; Tue, 21 Apr 2009 16:48:06 +0100 (BST)
X-Spam-Flag: NO
X-Spam-Score: -2.23
X-Originating-IP: [192.168.1.26]

Now when I change the salocal.cf and then REVERT it back to the original file and restore the permissions and restart Zimbra I only get.

X-Virus-Scanned: amavisd-new at foo.com
Recieved: from zimbra.foo.com ([127.0.0.1]) by localhost (zimbra.foo.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id vKkBvkKlT3N1 for <test3@foo.com>; Tue, 21 Apr 2009 16:48:06 +0100 (BST)
Received: from zimbra.foo.com (zimbra.foo.com [192.168.1.37]) by zimbra.foo.com (Postfix) with ESMTP id B157057C213 for <test3@foo.com>; Tue, 21 Apr 2009 16:48:06 +0100 (BST)

What the weird problem is, that if I restart Zimbra or amavisd services (several times I might add), it will revert back to the original X-Spam info, but after the 2nd or 3rd email... it goes back to no information.

EDIT:

Forgot to mention, I have run SpamAssassin in debug mode and looking at the results, I get this..

Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) header: X-Virus-Scanned: amavisd-new at foo.com\n
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) header: X-Spam-Flag: YES\n
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) header: X-Spam-Score: 6.784\n
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) header: X-Spam-Level: ******\n
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) header: X-Spam-Status: Yes, score=6.784 tagged_above=-10 required=6.6\n\ttests=[AWL=-4.516, BAYES_95=3, NO_RELAYS=-0.001, URIBL_BLACK=1.955,\n\tURIBL_JP_SURBL=1.501, URIBL_OB_SURBL=1.5, URIBL_PH_SURBL=1.787,\n\tURIBL_RED=0.001, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=0.474]\n
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) header: Received: from zimbra.foo.com ([127.0.0.1])\n\tby localhost (zimbra.foo.com [127.0.0.1]) (amavisd-new, port 10024)\n\twith ESMTP id BQCBXx1EZrPk for <admin@foo.com>;\n\tThu, 23 Apr 2009 15:24:27 +0100 (BST)\n
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) headers CLUSTERING: done all 1 recips in one go
Apr 23 15:24:29 zimbra.foo.com /opt/zimbra/amavisd/sbin/amavisd[25989]: (25989-01) SPAM-TAG, <zimbra@zimbra.foo.com> -> <admin@foo.com>, Yes, score=6.784 tagged_above=-10 required=6.6 tests=[AWL=-4.516, BAYES_95=3, NO_RELAYS=-0.001, URIBL_BLACK=1.955, URIBL_JP_SURBL=1.501, URIBL_OB_SURBL=1.5, URIBL_PH_SURBL=1.787, URIBL_RED=0.001, URIBL_RHS_DOB=1.083, URIBL_SC_SURBL=0.474]

But STILL the email has no X-SPAM headers! I cant figure this out!

I really need to see the X-Spam info consistently in every email. Can anyone help me troubleshoot this?

Can you also tell me which is the correct local file to put my own SpamAssassin rules?

/opt/zimbra/conf/salocal.cf
/opt/zimbra/conf/spamassassin/local.cf

I am running:

OS: CentOS 5.2
Installation File: zcs-5.0.11_GA_2695.RHEL5.20081117051306.tgz
If I do : /opt/zimbra/bin/zmprov getServer zimbra.foo.com | grep zimbraMtaMyNetworks
Result: zimbraMtaMyNetworks: 127.0.0.0/8

Any questions I'll be happy to answer. I just want this fixed!

Thanks

[phoenix]

Originally Posted by no1youknowz

If I do : /opt/zimbra/bin/zmprov getServer zimbra.foo.com | grep zimbraMtaMyNetworks
Result: zimbraMtaMyNetworks: 127.0.0.0/8

That's incorrect, you need the following settings: ZimbraMtaMyNetworks - Zimbra :: Wiki

[no1youknowz]

Thanks for replying, but I already tried this and it doesnt make any change...

mynetworks = 127.0.0.0/8 192.168.1.0/24

zmprov getServer zimbra.foo.com | grep zimbraMtaMyNetworks
zimbraMtaMyNetworks: 127.0.0.0/8 192.168.1.0/24

Can anyone please help?

[uxbod]

Would you please post the full headers from a email.

[no1youknowz]

From 1 local account to zimbra to another. The client is Thunderbird.

[no1youknowz]

Anyone have any ideas?

I may probably nuke the box and start again, even though its a test one for now.

What I dont want to be, is back at this point when I start modifying the salocal.cf, local.cf rules.

Thanks

[uxbod]

Instead of re-installing why not try just upgrading to 5.0.15 ?

[no1youknowz]

Would a small incremental upgrade from 5.0.11 to 5.0.15 really make that much of a difference??

[uxbod]

It can do ...

[no1youknowz]

I will be upgrading sometime today, does anyone know a fix if it doesnt work?