Unable to release amavisd blocked SPAM

[abraxas1894]

Hi,

I have enabled the AS/AV in Zimbra with a very low kill rate. From that point forwards, all emails did not go through. by checking the logs I can see that amavisd-new is responsible for this blockage.

I have read the forums and found that amavisd-release can help to assist here, but it does not work for me.

Is there any way to release those emails? I cannot find any way to locate them in the system and send them again...

note they are not in /opt/zimbra/data/amavisd/quarantine

Those are relevant lines that show what's happening.

Any help would be GREATLY appreciated..

/var/log/zimbra.log:

amavis[21398]: (21398-01) ESMTP::10024 /opt/zimbra/data/amavisd/tmp/amavis-20100331T124401-21398: <sample@external.com> -> <sample@mydomain.com> SIZE=33396 Received: from mydomain.com ([127.0.0.1]) by localhost (mydomain.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP for <sample@mydomain.com>; Wed, 31 Mar 2010 12:44:01 +1100 (EST)
amavis[21398]: (21398-01) Checking: bVYLZLsxEQGR [150.101.137.143] <sample@external.com> -> <sample@mydomain.com>
amavis[21398]: (21398-01) Blocked SPAM, [150.101.137.143] [203.122.220.11] <sample@external.com> -> <sample@mydomain.com>, Message-ID: <A2093A02C38FBB43A5442B7DFA0263F38FAB58@SERVER.eia .local>, mail_id: bVYLZLsxEQGR, Hits: 5.32, size: 33396, 4068 ms
postfix/smtp[31660]: 3B193156A0C: to=<sample@mydomain.com>, relay=127.0.0.1[127.0.0.1]:10024, delay=4.1, delays=0.03/0/0.02/4.1, dsn=2.7.0, status=sent (250 2.7.0 Ok, discarded, id=21398-01 - SPAM)
postfix/qmgr[14692]: 3B193156A0C: removed

[uxbod]

What do you have your tag and kill values set to ?

[llopart]

I had them at tag 30 and kill 30 when this happened. Now they are set to 100.

[uxbod]

Well if you had tag/kill at the same level then those emails have probably been killed off completely then.

Why are you posting under a different name now ?

[phoenix]

Originally Posted by llopart

I had them at tag 30 and kill 30 when this happened. Now they are set to 100.

Why have you made those two changes? What are you trying to achieve by doing that? Please read the following passage from the Admin UI help file so you have an understanding of what they do:

Anti-Spam Protection

Mass unsolicited emails are referred to as spam or junk email. The Zimbra Collaboration Suite installs the SpamAssassin anti-spam software as the mail filter to identify spam mail. When you installed the Zimbra Collaboration Suite, the anti-spam software is automatically enabled.

You can set rules for handling spam from the Global Settings>Anti-Spam tab. How these rules are configured determine how aggressively spam is filtered. The following options can be changed:

* Kill percent at 75%. Mail that is scored at 75% is considered spam and is not delivered.

* Tag percent at 33%. Mail that is scored at 33% is considered spam and is delivered to the Junk folder.

* Subject prefix field is blank. The prefix entered in this field is added to the subject line for messages tagged as spam.

When ZCS was installed, an automated spam training filter was enabled.

Two mail accounts were created.

* The Spam Training User address receives mail notification about mail that was not marked as junk, but should have been.

* The Non-Spam (HAM) Training User address receives mail notification about mail that was marked as junk but should not have been.

For these training accounts, the mailbox quota is disabled (i.e. set to 0). Disabling quotas prevents bouncing messages when the mailbox is full. Attachment indexing is also disabled.

Junk email messages are indexed, but you can disable indexing of junk email messages from the COS Preferences tab.

When a message is tagged as spam, the message is delivered to the recipient’s Junk folder. Users can view the number of unread messages and can open the Junk folder to review the messages marked as spam.