Page 1 of 1

No Quarantine Email Alert

Posted: 10 Nov 2015 15:29
by sharktech
Afternoon

Just noticed all my users arent getting the alert emails for each email blocked anymore.

tried searching the forum but it kept erroring saying Quarantine report was to common a word grr

any chance someone can point me in the right direction

Thanks

Re: No Quarantine Email Alert

Posted: 10 Nov 2015 23:01
by shawniverson
What is your Spam Actions = line show in /etc/MailScanner/MailScanner.conf ?

Re: No Quarantine Email Alert

Posted: 16 Nov 2015 10:01
by sharktech
Spam Actions = store custom(spam)

in the customFunctions dir i have

CustomAction.pm
GenericSpamScanner.pm
MailWatch.pm
MyExample.pm
Ruleset-from-Function.pm
SQLBlackWhiteList.pm
SQLSpamSettings.pm
ZMRouterDirHash.pm

Thanks

Re: No Quarantine Email Alert

Posted: 16 Nov 2015 10:21
by sharktech
this is my customaction file

had to change the file extension as the forum wont allow me to upload txt files or pm files

Re: No Quarantine Email Alert

Posted: 18 Nov 2015 15:47
by shawniverson
Have you checked /var/log/maillog to see if postfix is trying to send any notifications? (Maybe they are failing for some reason...)

Re: No Quarantine Email Alert

Posted: 19 Nov 2015 15:57
by sharktech
Shawn

Think i found it

Message A1A2FE004C.AEC25 from 81.92.112.218 (abi@com.planet4deal.co.uk) to domain.co.uk is spam, SpamAssassin (not cached, score=8.23, required 7, BAYES_50 0.80, DKIM_SIGNED 0.10, DKIM_VALID -0.10, DKIM_VALID_AU -0.10, HTML_IMAGE_RATIO_08 0.00, HTML_MESSAGE 0.00, KAM_BODY_URIBL_PCCC 5.00, KAM_COUK 1.10, RCVD_IN_BRBL_LASTEXT 1.45, RCVD_IN_MSPIKE_H4 -0.01, RCVD_IN_MSPIKE_WL -0.01, SPF_HELO_PASS -0.00, SPF_PASS -0.00, URIBL_BLOCKED 0.00)
Spam Actions: message A1A2FE004C.AEC25 actions are store
Logging message A1A2FE004C.AEC25 to SQL
A1A2FE004C.AEC25: Logged to MailWatch SQL

Thats the only lines for that message

Re: No Quarantine Email Alert

Posted: 20 Nov 2015 22:14
by shawniverson
Odd, the entry you have here says the only action is "store"

What does your "high spam actions" setting in /etc/MailScanner/MailScanner.conf also say?

Re: No Quarantine Email Alert

Posted: 23 Nov 2015 13:01
by sharktech
you mean

High Scoring Spam Actions = store

Thanks

Re: No Quarantine Email Alert

Posted: 23 Nov 2015 13:45
by shawniverson
Based on your log entry, the "High Scoring Spam Actions" setting, and the fact that the spam score was greater than 7, I would expect you not to get an alert. High spam is set to store only.