Exchange <-> Postfix Gateway mit MailScanner und Spamassassin - Mail als Spam tagged

[repa]

Hi,

ich habe folgende Umgebung:

Exchange Servers <-> Postfix Mailgateway mit MailScanner und Spamassassin <-> Internet

Incoming funktioniert soweit gut.

Alle ausgehenden Mails werden aber von MailScanner als Spam getagged, obwohl es normale Mails sind, ohne Spamverdächtige Inhalte.

Log vom postfix:


Jan 16 18:41:25 mx01 postfix/smtpd[4026]: connect from unknown[172.19.xx.xx]
Jan 16 18:41:25 mx01 postfix/smtpd[4026]: F27B38A3D9: client=unknown[172.19.xx.xx]
Jan 16 18:41:25 mx01 postfix/cleanup[4279]: F27B38A3D9: hold: header Received: from excas01.domainnet (unknown [172.19.xx.xx])??by mx02.domain.net (Postfix) with ESMTPS id F27B38A3D9??for <user@example.com>; Sat, 16 Jan 2010 18:41:25 +0100 (CET) from unknown[172.19.xx.xx]; from=<user@domain.net> to=<user@example.com> proto=ESMTP helo=<excas01.domain.net>
Jan 16 18:41:25 mx01 postfix/cleanup[4279]: F27B38A3D9: message-id=<C75A28E7F21EB141ABAEA4652B2C72653560B4C2@exmbs01.d omain.net>
Jan 16 18:41:26 mx01 postfix/smtpd[4026]: disconnect from unknown[172.19.xx.xx]
Jan 16 18:41:28 mx01 MailScanner[3529]: New Batch: Scanning 1 messages, 3485 bytes
Jan 16 18:41:30 mx01 MailScanner[3529]: Spam Checks: Found 1 spam messages
Jan 16 18:41:30 mx01 MailScanner[3529]: Virus and Content Scanning: Starting
Jan 16 18:41:32 mx01 MailScanner[3529]: Requeue: F27B38A3D9.9123E to 0B9DE8A3DA
Jan 16 18:41:32 mx01 postfix/qmgr[18829]: 0B9DE8A3DA: from=<user@domain.net>, size=2926, nrcpt=1 (queue active)
Jan 16 18:41:32 mx01 MailScanner[3529]: Uninfected: Delivered 1 messages
Jan 16 18:41:32 mx01 MailScanner[3529]: Logging message F27B38A3D9.9123E to SQL
Jan 16 18:41:33 mx01 postfix/smtp[4292]: 0B9DE8A3DA: to=<user@example.com>, relay=mail.example.com[x.x.x.x]:25, delay=7.3, delays=6.8/0.01/0.22/0.32, dsn=2.6.0, status=sent (250 2.6.0 <C75A28E7F21EB141ABAEA4652B2C72653560B4C2@exmbs01.d omain.net> Queued mail for delivery)
Jan 16 18:41:33 mx01 postfix/qmgr[18829]: 0B9DE8A3DA: removed


irgendeine Idee warum das sein könnte?

[repa]

Hier noch der Header vom Mail:

X-company-MailScanner-ID: 135378A3D9.8C9D7
X-company-MailScanner: Found to be clean
X-company-MailScanner-SpamCheck: spam,SpamAssassin (nicht zwischen gespeichert, Wertung=10.482,benoetigt 6, AWL -0.91,
BAYES_50 0.00, DCC_CHECK 2.17,DIGEST_MULTIPLE 0.00, EMPTY_MESSAGE 1.44, HTML_MESSAGE
0.00,MIME_HTML_MOSTLY 0.00, MISSING_SUBJECT 1.76, PYZOR_CHECK 3.70,RDNS_NONE 0.10, TVD_SPACE_RATIO 2.22)
X-company-MailScanner-SpamScore: ssssssssss


seh ich das richtig, das mir der PYZOR_CHECK 3.7 Punkte gibt, für ne normale Mail mit einer Zeile ???

[repa]

Warum werden eingehende Mails nicht gescanned?

X-company-MailScanner-ID: 042748A3DA.11BFE
X-company-MailScanner: Found to be clean
X-company-MailScanner-From: deralleswisser@gmx.net

nichst mit X-company-MailScanner-SpamCheck:

[stefan.becker]

Ich würde mal sagen: Ohne genaue Infos kann da niemand was zu sagen.

[repa]

hier noch die postfix conf:


append_dot_mydomain = no
biff = no
config_directory = /etc/postfix
header_checks = regexp:/etc/postfix/header_checks
inet_interfaces = all
local_recipient_maps =
local_transport = error:No local mail delivery
message_size_limit = 104857600
mydestination =
myhostname = mx02.domain.net
mynetworks = 172.19.xx.xx
myorigin = domain.net
readme_directory = no
relay_domains = hash:/etc/postfix/relay_domains
relay_recipient_maps = hash:/etc/postfix/relay_recipients
relayhost =
smtp_tls_session_cache_database = btree:${data_directory}/smtp_scache
smtpd_banner = $myhostname ESMTP $mail_name (Debian/GNU)
smtpd_data_restrictions = reject_unauth_pipelining
smtpd_helo_required = yes
smtpd_recipient_restrictions = reject_non_fqdn_sender, reject_unknown_sender_domain, reject_non_fqdn_recipient, reject_unknown_recipient_domain, permit_mynetworks, reject_unauth_destination, reject_unauth_pipelining, reject_invalid_helo_hostname, reject_non_fqdn_helo_hostname, reject_rbl_client zen.spamhaus.org
smtpd_sender_restrictions = permit_mynetworks, reject_non_fqdn_sender, reject_unknown_sender_domain
smtpd_tls_cert_file = /etc/ssl/certs/ssl-cert-snakeoil.pem
smtpd_tls_key_file = /etc/ssl/private/ssl-cert-snakeoil.key
smtpd_tls_session_cache_database = btree:${data_directory}/smtpd_scache
smtpd_use_tls = yes
transport_maps = hash:/etc/postfix/transport
virtual_alias_maps = hash:/etc/postfix/virtual

[TMOS]

Lass doch den Exchange auf einen anderen Port einliefern beim Postfix.
10026 oder sowas. Und diesen konfst halt ohne Amavis als Filter.