False Positive

Just a personal reminder to keep in the memory bank.
When running OS X Server and SpamAssassin, if you have spam set up to be quarantined it gets stored in /var/virusmails. A method of viewing and releasing quarantined mail mostly from the command line follows.
First, to do anything with the quarantined message you need to know it’s mail-file. That’s usually something like spam-kFLGPbnGHO3a.gz.
Using TextExpander’s snippets and the clipboard I have the following snippets.
To view the quarantined message I copy the quarantined file to /Users/Shared/ and then unzip it, read it into a new mail message to me. If it looks OK then I release it. I delete the file from /Users/Shared/ when I’m done.
To send it myself I have the following snippet. The snippet begins by copying the mail-file to the clipboard. If you don’t have TextExpander just replace all instances of %clipboard with the mail-file.

<br />
sudo cp /var/virusmails/%clipboard /Users/Shared/;gunzip /Users/Shared/%clipboard;/usr/bin/mail -s &quot;%clipboard&quot; me@example.com &lt; /Users/Shared/`echo %clipboard | sed &#039;s/.gz//g&#039;`;rm /Users/Shared/`echo %clipboard | sed &#039;s/.gz//g&#039;`<br />

If I want to release the file from quarantine and send it to notjunkmail.
<br />
sudo amavisd-release %clipboard ; sudo amavisd-release %clipboard &quot;&quot; notjunkmail<br />

I did have to do a few things to get amavisd-release working. First, it was looking for amavisd.sock in the /var/amavis/home directory and it’s really located in the /var/amavis directory. It was simple to create a new directory and then create a symlink to the amavisd.sock file.
<br />
sudo mkdir /var/amavis/home; sudo ln -s /var/amavis/amavisd.sock /var/amavis/home<br />

Now, using only the command line and a mail app, I can check on quarantined email and release it. All this just so I can make sure that I can do this task from an iPhone or iPad. 😉
FWIW, I have amavis-blocked (by Uwe S. Fuerst)
a log file parser for amavisd-new 2.x, written in Perl
set up to send me logs each night at 23:59. That’s where I get the mail-file from.

Filed under: osx-serverTagged with: , , ,