You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by John Urness <ju...@tomsawyer.com> on 2005/12/23 23:54:47 UTC
Bayes Scores Skipped/Not Applied
Hi,
I recently upgraded from spamassassin 3.0 to 3.1 and right away the amount
of false negatives increased. I thought at first that it was because of the
loss of dcc and razor (which surely is a factor), but on further
investigation it appears that it is more related to the Bayes system.
I have looked through the archives, but I am not finding what I need
although it seems like this question has been asked more than once in
different ways.
I get almost no BAYES_xx or AWL scores on headers. I got one BAYES_00 tag
betweem 18 December and 22 December and it is my understanding that I should
see them on almost all emails. When I run spamassassin manually on a piece
of spam, it applys a BAYES_xx score. Yet as far as I can tell the spamd
daemon skips BAYES_xx scoring. It seems like this implies a simple *cf file
issue. Spamassassin -D --lint shows no rules errors and the site directory
shows up as /etc/mail/spamassassin which is where the local.cf file is. This
is a sitewide installation.
Among other things, debug output is included for both spamd and
spamassassin- this may be a bit overkill, but I am trying to anticipate what
things the group will ask for based on previous posts so I have included
debugging as well a sample headers of a false negative that was clearly
spam, the local.cf file from /etc/mail/spamassassin, permissions on the
bayes db files, etc.
Vital stats:
Upgraded recently from spamassasin 3.0 to 3.1
mailscanner 4.48
Rules-de-jour *.cf files under /etc/mail/spamassassin
Used sitewide in conjunction with Mailscanner
perl 5.8.0
running on solaris 5.8
####Here is sa-learn --dump magic:
This shows that I have more than enough spam and ham
0.000 0 3 0 non-token data: bayes db version
0.000 0 3754 0 non-token data: nspam
0.000 0 220 0 non-token data: nham
0.000 0 312279 0 non-token data: ntokens
0.000 0 1051829432 0 non-token data: oldest atime
0.000 0 1135374012 0 non-token data: newest atime
0.000 0 0 0 non-token data: last journal sync
atime
0.000 0 1135373049 0 non-token data: last expiry atime
0.000 0 0 0 non-token data: last expire atime
delta
0.000 0 0 0 non-token data: last expire
reduction count
####spamd runs as such:
# ps -efa |grep spamd
root 22145 21420 0 13:42:37 ? 0:00 /usr/local/bin/perl -T
/usr/local/bin/spamd -d -x -l -c --syslog-socket=inet
####/etc/mail/spamassassin/local.cf
score ALL_TRUSTED 0 0 0 0
use_bayes 1
use_bayes_rules 1
use_auto_whitelist 1
bayes_auto_learn 1
bayes_auto_expire 1
bayes_expiry_max_db_size 200000
bayes_file_mode 0777
auto_whitelist_path /extra/system/spamassassin/autoDB/auto-whitelist
auto_whitelist_file_mode 0666
bayes_path /extra/system/spamassassin/autoDB/bayes
bayes_ignore_header X-MailScanner
bayes_ignore_header X-MailScanner-SpamCheck
bayes_ignore_header X-MailScanner-SpamScore
bayes_ignore_header X-MailScanner-Information
# ls -lsag /extra/system/spamassassin/autoDB/
total 65893
3 drwxr-xr-x 3 root root 3072 Dec 23 11:16 ./
1 drwxr-xr-x 6 root other 512 Nov 9 2004 ../
16 -rw-rw-rw- 1 root other 24576 Dec 23 13:42 auto-whitelist
1 -rw------- 1 root other 6 Dec 23 13:42
auto-whitelist.mutex
23 -rw------- 1 root other 22572 Dec 23 14:13 bayes.mutex
312 -rw-rw-rw- 1 root other 352256 Dec 23 14:13 bayes_seen
8224 -rw-rw-rw- 1 root other 10502144 Dec 23 14:13 bayes_toks
27792 -rw-rw-rw- 1 daemon mail 28430177 Dec 14 19:05
blacklist_mailspool
1 drwxrwxr-x 2 root users 512 Dec 23 11:09 delete/
0 -rw-rw-rw- 1 daemon mail 0 Dec 23 10:56
unwhitelist_mailspool
29520 -rw-rw-rw- 1 daemon mail 30198420 Dec 20 14:24
whitelist_mailspool
####Example e-mail header of false negative:
Received: from i219-164-20-154.s02.a001.ap.plala.or.jp
(i219-164-20-154.s02.a001.ap.plala.or.jp [219.164.20.154])
by [SNIP] (8.12.9/8.12.9) with SMTP id jBMCSafX001397
for <[SNIP] >; Thu, 22 Dec 2005 04:28:37 -0800 (PST)
Received: from [192.168.178.219] (port=29858 helo=smncs)
by i219-164-20-154.s02.a001.ap.plala.or.jp with esmtp
id 1EpPYF-0002uW-U5
for jurness@tomsawyer.com; Thu, 22 Dec 2005 09:28:07 -0300
Date: Thu, 22 Dec 2005 21:28:28 +0900
From: <zd...@atento.com.br>
X-Mailer: The Bat! (v3.5) Professional
Reply-To: <zd...@atento.com.br>
Organization: dyii
X-Priority: 3 (Normal)
Message-ID: <23...@i219-164-20-154.s02.a001.ap.plala.or.jp>
To: <[SNIP]>
Subject: press release
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="=_869389e472dcb8f140f1bfe43211303b"
X-Spam: Not detected
X-TSS-MailScanner-Information: See www.mailscanner.info for information
X-TSS-MailScanner: Appears to be free of infection
X-TSS-MailScanner-SpamCheck: not spam, SpamAssassin (score=0, required 4,
autolearn=not spam)
X-TSS-MailScanner-From: zdevcrlj@atento.com.br
####Sendmail syslog entries of same email showing it was autolearned as not
spam
Dec 22 04:28:36 [mailhost] sm-mta[1397]: [ID 801593 mail.info] NOQUEUE:
connect from i219-164-20-154.s02.a001.ap.
plala.or.jp [219.164.20.154]
Dec 22 04:28:36 [mailhost] sm-mta[1397]: [ID 801593 mail.info]
jBMCSafX001397: Milter: no active filter
Dec 22 04:28:38 [mailhost] sm-mta[1397]: [ID 801593 mail.info]
jBMCSafX001397: from=<zd...@atento.com.br>, siz
e=17205, class=0, nrcpts=1,
msgid=<23...@i219-164-20-154.s02.a001.ap.plala.or.jp>,
proto=SMTP,
daemon=MTA, relay=i219-164-20-154.s02.a001.ap.plala.or.jp [219.164.20.154]
Dec 22 04:28:41 [mailhost] MailScanner[29076]: New Batch: Scanning 1
messages, 17789 bytes
Dec 22 04:28:42 [mailhost] MailScanner[29076]: Spam Checks: Starting
Dec 22 04:28:52 [mailhost] MailScanner[29076]: Message jBMCSafX001397 from
219.164.20.154 (zdevcrlj@atento.com.br
) to tomsawyer.com is not spam, SpamAssassin (score=0, required 4,
autolearn=not spam)
Dec 22 04:28:52 [mailhost] MailScanner[29076]: Virus and Content Scanning:
Starting
Dec 22 04:28:57 [mailhost] MailScanner[29076]: HTML Img tag found in message
jBMCSafX001397 from zdevcrlj@atento.
com.br
Dec 22 04:28:58 [mailhost] MailScanner[29076]: Uninfected: Delivered 1
messages
Dec 22 04:28:58 [mailhost] sendmail[1413]: [ID 801593 mail.info]
jBMCSafX001397: alias <ju...@tomsawyer.com> => jurness@[mailhost]
Dec 22 04:28:58 [mailhost] sendmail[1413]: [ID 801593 mail.info]
jBMCSafX001397: to=<ju...@tomsawyer.com>, delay=00:00:21, xdelay=00:00:00,
mailer=local, pri=120626, dsn=2.0.0, stat=Sent
Dec 22 04:28:58 [mailhost] sendmail[1413]: [ID 801593 mail.info]
jBMCSafX001397: done; delay=00:00:21, ntries=1
##########Manually running spamassassin -D:
spamassassin -D < spam5.htm
[19915] dbg: logger: adding facilities: all
[19915] dbg: logger: logging level is DBG
[19915] dbg: generic: SpamAssassin version 3.1.0
[19915] dbg: config: score set 0 chosen.
[19915] dbg: util: running in taint mode? yes
[19915] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[19915] dbg: util: PATH included '/usr/local/frame/bin', keeping
[19915] dbg: util: PATH included '/usr/local/adabas/bin', which doesn't
exist, dropping
[19915] dbg: util: PATH included '/usr/local/adabas/pgm', which doesn't
exist, dropping
[19915] dbg: util: PATH included '.', which is not absolute, dropping
[19915] dbg: util: PATH included '/usr/local/gcc/bin', keeping
[19915] dbg: util: PATH included '/usr/openwin/bin', keeping
[19915] dbg: util: PATH included '/usr/lib/nis', keeping
[19915] dbg: util: PATH included '/usr/bin', keeping
[19915] dbg: util: PATH included '/usr/sbin', keeping
[19915] dbg: util: PATH included '/opt/flexlm/lmgr/sun4/sunOS5', which
doesn't exist, dropping
[19915] dbg: util: PATH included '/opt/SUNWspro/bin', keeping
[19915] dbg: util: PATH included '/opt/SUNWppro/bin', keeping
[19915] dbg: util: PATH included '/usr/sadm/bin', keeping
[19915] dbg: util: PATH included '/usr/ucb', keeping
[19915] dbg: util: PATH included '/usr/local/bin', keeping
[19915] dbg: util: PATH included '/usr/ccs/bin', keeping
[19915] dbg: util: PATH included
'/usr/local/xemacs/bin/sparc-sun-solaris2.4', keeping
[19915] dbg: util: PATH included
'/usr/local/xemacs/lib/xemacs-19.11/sparc-sun-solaris2.4', which doesn't
exist, dropping
[19915] dbg: util: final PATH set to:
/usr/local/frame/bin:/usr/local/gcc/bin:/usr/openwin/bin:/usr/lib/nis:/usr/b
in:/usr/sbin:/opt/SUNWspro/bin:/opt/SUNWppro/bin:/usr/sadm/bin:/usr/ucb:/usr
/local/bin:/usr/ccs/bin:/usr/local/xemacs/bin/sparc-sun-solaris2.4
[19915] dbg: dns: is Net::DNS::Resolver available? yes
[19915] dbg: dns: Net::DNS version: 0.54
[19915] dbg: dns: name server: xxx.xxx.xxx.xxx, family: 2, ipv6: 0
[19915] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[19915] dbg: config: read file /etc/mail/spamassassin/init.pre
[19915] dbg: config: read file /etc/mail/spamassassin/v310.pre
[19915] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[19915] dbg: config: using "/usr/share/spamassassin" for default rules dir
[19915] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[19915] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[19915] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[19915] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[19915] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[19915] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[19915] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/70_sare_genlsubj_eng.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_header.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_html0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_specific.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_uri_eng.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sc_top200.cf
[19915] dbg: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/99_sare_fraud_post25x.cf
[19915] dbg: config: read file /etc/mail/spamassassin/local.cf
[19915] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[19915] dbg: config: read file /etc/mail/spamassassin/tripwire.cf
[19915] dbg: config: read file /etc/mail/spamassassin/user_prefs.cf
[19915] dbg: config: using "//.spamassassin" for user state dir
[19915] dbg: config: using "//.spamassassin/user_prefs" for user prefs file
[19915] dbg: config: read file //.spamassassin/user_prefs
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xbad918)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbcfd44)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[19915] dbg: pyzor: network tests on, attempting Pyzor
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x15ee690)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[19915] dbg: reporter: network tests on, attempting SpamCop
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0xd0d438)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AntiVirus from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd1d1dc)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0xcd494c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xcd59e4)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::TextCat from @INC
[19915] dbg: textcat: loading languages file...
[19915] dbg: textcat: loaded 73 language models
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AccessDB from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AccessDB=HASH(0x12cba8c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x12cf010)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x12d4bf0)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x12dcf98)
[19915] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[19915] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[19915] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x12dcf98)
implements 'finish_parsing_end'
[19915] dbg: replacetags: replacing tags
[19915] dbg: replacetags: done replacing tags
[19915] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_toks
[19915] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_seen
[19915] dbg: bayes: found bayes db version 3
[19915] dbg: bayes: DB journal sync: last sync: 1105811470
[19915] dbg: config: score set 3 chosen.
[19915] dbg: dns: dns_available set to yes in config file, skipping test
[19915] dbg: metadata: X-Spam-Relays-Trusted:
[19915] dbg: metadata: X-Spam-Relays-Untrusted:
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xbad918)
implements 'extract_metadata'
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118)
implements 'extract_metadata'
[19915] dbg: metadata: X-Relay-Countries:
[19915] dbg: message: ---- MIME PARSER START ----
[19915] dbg: message: main message type: text/plain
[19915] dbg: message: parsing normal part
[19915] dbg: message: added part, type: text/plain
[19915] dbg: message: ---- MIME PARSER END ----
[19915] dbg: message: no encoding detected
[19915] dbg: textcat: message too short for language analysis
[19915] dbg: textcat: X-Languages: "", X-Languages-Length: 121
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
implements 'parsed_metadata'
[19915] dbg: uri: html uri found, cid:e3d102da0c66e512fcf101d6db912ec4
[19915] dbg: uri: cleaned html uri, cid:e3d102da0c66e512fcf101d6db912ec4
[19915] dbg: uri: parsed uri found, mailto:zdevcrlj@atento.com.br
[19915] dbg: uri: cleaned parsed uri, mailto:zdevcrlj@atento.com.br
[19915] dbg: uri: parsed domain, atento.com.br
[19915] dbg: uri: parsed uri found, mailto:jurness@tomsawyer.com
[19915] dbg: uri: cleaned parsed uri, mailto:jurness@tomsawyer.com
[19915] dbg: uri: parsed domain, tomsawyer.com
[19915] dbg: uridnsbl: domains to query:
[19915] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[19915] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[19915] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[19915] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[19915] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[19915] dbg: dns: checking RBL combined.njabl.org., set njabl
[19915] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois
[19915] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[19915] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[19915] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[19915] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois-notfirsthop
[19915] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[19915] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[19915] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[19915] dbg: check: running tests for priority: 0
[19915] dbg: rules: running header regexp tests; score so far=0
[19915] dbg: plugin: registering glue method for check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbcfd44))
[19915] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: message was delivered entirely via trusted relays, not
required
[19915] dbg: eval: all '*From' addrs:
[19915] dbg: plugin: registering glue method for check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x12cf010))
[19915] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbcfd44))
[19915] dbg: eval: all '*To' addrs:
[19915] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: message was delivered entirely via trusted relays, not
required
[19915] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[19915] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule MISSING_HB_SEP ======> got hit
[19915] dbg: plugin: registering glue method for check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
[19915] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: cannot get Envelope-From, cannot use SPF
[19915] dbg: spf: def_spf_whitelist_from: could not find useable envelope
sender
[19915] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[19915] dbg: plugin: registering glue method for check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x12cf010))
[19915] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[19915] dbg: rules: running body-text per-line regexp tests; score so
far=2.499
[19915] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "F"
[19915] dbg: uri: running uri tests; score so far=2.499
[19915] dbg: rules: ran uri rule __SARE_URI_ANY ======> got hit: "m"
[19915] dbg: rules: ran eval rule __HTML_LENGTH_512 ======> got hit
[19915] dbg: bayes: DB journal sync: last sync: 1105811470
[19915] dbg: bayes: corpus size: nspam = 153968, nham = 40588
[19915] dbg: bayes: score = 4.91619356335349e-10
[19915] dbg: bayes: DB expiry: tokens in DB: 1984629, Expiry max size:
150000, Oldest atime: 1084312293, Newest atime: 0, Last expire: 1098687948,
Current time: 1135280002
[19915] dbg: bayes: DB journal sync: last sync: 1105811470
[19915] dbg: bayes: untie-ing
[19915] dbg: bayes: untie-ing db_toks
[19915] dbg: bayes: untie-ing db_seen
[19915] dbg: plugin: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c))
[19915] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit
[19915] dbg: plugin: registering glue method for check_language
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118))
[19915] dbg: rules: ran eval rule __HTML_LENGTH_0000_1024 ======> got hit
[19915] dbg: plugin: registering glue method for check_microsoft_executable
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd1d1dc))
[19915] dbg: rules: ran eval rule BAYES_00 ======> got hit
[19915] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit
[19915] dbg: rules: ran eval rule __HTML_LENGTH_384 ======> got hit
[19915] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit
[19915] dbg: rules: ran eval rule HTML_IMAGE_ONLY_04 ======> got hit
[19915] dbg: plugin: registering glue method for check_body_8bits
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118))
[19915] dbg: plugin: registering glue method for check_suspect_name
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd1d1dc))
[19915] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit
[19915] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit
[19915] dbg: rules: running raw-body-text per-line regexp tests; score so
far=3.501
[19915] dbg: rules: ran eval rule __SARE_HTML_HAS_BR ======> got hit
[19915] dbg: rules: ran eval rule __SARE_HTML_HAS_IMG ======> got hit
[19915] dbg: rules: running full-text regexp tests; score so far=3.501
[19915] dbg: plugin: registering glue method for check_pyzor
(Mail::SpamAssassin::Plugin::Pyzor=HASH(0x15ee690))
[19915] dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
[19915] dbg: info: entering helper-app run mode
[19915] dbg: pyzor: opening pipe: /usr/local/bin/pyzor check <
/tmp/.spamassassin19915vuN3S9tmp
[19921] dbg: util: setuid: ruid=0 euid=0
[19915] dbg: pyzor: killed stale helper [19921]
[19915] dbg: pyzor: [19921] terminated: exit=0x000f
[19915] dbg: info: leaving helper-app run mode
[19915] dbg: pyzor: check timed out after 10 seconds
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
implements 'check_tick'
[19915] dbg: check: running tests for priority: 500
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
implements 'check_post_dnsbl'
[19915] dbg: rules: running meta tests; score so far=3.501
[19915] dbg: rules: running header regexp tests; score so far=7.965
[19915] dbg: rules: running body-text per-line regexp tests; score so
far=7.965
[19915] dbg: uri: running uri tests; score so far=7.965
[19915] dbg: rules: running raw-body-text per-line regexp tests; score so
far=7.965
[19915] dbg: rules: running full-text regexp tests; score so far=7.965
[19915] dbg: check: running tests for priority: 1000
[19915] dbg: rules: running meta tests; score so far=7.965
[19915] dbg: rules: running header regexp tests; score so far=7.965
[19915] dbg: plugin: registering glue method for
check_from_in_auto_whitelist
(Mail::SpamAssassin::Plugin::AWL=HASH(0xcd494c))
[19915] dbg: rules: running body-text per-line regexp tests; score so
far=7.965
[19915] dbg: uri: running uri tests; score so far=7.965
[19915] dbg: rules: running raw-body-text per-line regexp tests; score so
far=7.965
[19915] dbg: rules: running full-text regexp tests; score so far=7.965
[19915] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xcd59e4) implements
'autolearn_discriminator'
[19915] dbg: learn: auto-learn: currently using scoreset 3, recomputing
score based on scoreset 1
[19915] dbg: learn: auto-learn: message score: 7.965, computed score for
autolearn: 8.87
[19915] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=2.881,
head-points=2.5, learned-points=-2.599
[19915] dbg: learn: auto-learn? no: inside auto-learn thresholds, not
considered ham or spam
[19915] dbg: check: is spam? score=7.965 required=5
[19915] dbg: check:
tests=BAYES_00,HTML_IMAGE_ONLY_04,HTML_MESSAGE,HTML_MISSING_CTYPE,MISSING_HB
_SEP,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
[19915] dbg: check:
subtests=__ENV_AND_HDR_FROM_MATCH,__HTML_LENGTH_0000_1024,__HTML_LENGTH_384,
__HTML_LENGTH_512,__NONEMPTY_BODY,__SARE_HTML_HAS_BR,__SARE_HTML_HAS_IMG,__S
ARE_URI_ANY,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXIS
TS_META,__UNUSABLE_MSGID
Received: from localhost by [mailhost].tomsawyer.com
with SpamAssassin (version 3.1.0);
Thu, 22 Dec 2005 11:33:33 -0800
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
[mailhost].tomsawyer.com
X-Spam-Level: *******
X-Spam-Status: Yes, score=8.0 required=5.0
tests=BAYES_00,HTML_IMAGE_ONLY_04,
HTML_MESSAGE,HTML_MISSING_CTYPE,MISSING_HB_SEP,MISSING_SUBJECT,
NO_RECEIVED,NO_RELAYS,TO_CC_NONE autolearn=no version=3.1.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_43AAFF8D.25EC0138"
This is a multi-part message in MIME format.
------------=_43AAFF8D.25EC0138
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "[mailhost].tomsawyer.com",
has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
[] for details.
Content preview: [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
2.5 MISSING_HB_SEP Missing blank line between message header and
body
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
3.6 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
1.8 MISSING_SUBJECT Missing Subject: header
2.5 HTML_MISSING_CTYPE Message is HTML without HTML Content-Type
0.1 TO_CC_NONE No To: or Cc: header
-0.0 NO_RECEIVED Informational: message has no Received headers
------------=_43AAFF8D.25EC0138
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR></HEAD>
<BODY><B>From:</B> zdevcrlj@atento.com.br<BR><B>Sent:</B> Thursday, December
22,
2005 4:28 AM<BR><B>To:</B> jurness@tomsawyer.com<BR><B>Subject:</B> press
release<BR><IMG src="cid:e3d102da0c66e512fcf101d6db912ec4"> </BODY></HTML>
------------=_43AAFF8D.25EC0138--
##########spamd debug:
242 [mailhost]:#/TSS/Sources/tmp# spamd -D -l -p 10000 > /tmp/spamd-debug
[19678] dbg: logger: adding facilities: all
[19678] dbg: logger: logging level is DBG
[19678] dbg: logger: trying to connect to syslog/unix...
[19678] warn: unix passed to setlogsock, but path not available at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76
[19678] error: logger: at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76.
[19678] dbg: logger: connection to syslog/unix failed: logger: at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76.
[19678] dbg: logger: trying to connect to syslog/inet...
[19678] dbg: logger: failed to setlogsock(unix): logger: at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76.
[19678] dbg: logger: opening syslog using inet socket
[19678] dbg: logger: successfully connected to syslog/unix
[19678] dbg: logger: successfully added syslog method
[19678] dbg: spamd: creating INET socket:
[19678] dbg: spamd: Listen: 5
[19678] dbg: spamd: LocalAddr: 127.0.0.1
[19678] dbg: spamd: LocalPort: 10000
[19678] dbg: spamd: Proto: 6
[19678] dbg: spamd: ReuseAddr: 1
[19678] dbg: spamd: Type: 2
[19678] dbg: logger: adding facilities: all
[19678] dbg: logger: logging level is DBG
[19678] dbg: generic: SpamAssassin version 3.1.0
[19678] dbg: config: score set 0 chosen.
[19678] dbg: dns: is Net::DNS::Resolver available? yes
[19678] dbg: dns: Net::DNS version: 0.54
[19678] dbg: dns: name server: xxx.xxx.xxx.xxx, family: 2, ipv6: 0
[19678] dbg: spamd: Preloading modules with HOME=/tmp/spamd-19678-init
[19678] dbg: ignore: test message to precompile patterns and load modules
[19678] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[19678] dbg: config: read file /etc/mail/spamassassin/init.pre
[19678] dbg: config: read file /etc/mail/spamassassin/v310.pre
[19678] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[19678] dbg: config: using "/usr/share/spamassassin" for default rules dir
[19678] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[19678] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[19678] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[19678] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[19678] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[19678] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[19678] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/70_sare_genlsubj_eng.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_header.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_html0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_specific.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_uri_eng.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sc_top200.cf
[19678] dbg: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/99_sare_fraud_post25x.cf
[19678] dbg: config: read file /etc/mail/spamassassin/local.cf
[19678] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[19678] dbg: config: read file /etc/mail/spamassassin/tripwire.cf
[19678] dbg: config: read file /etc/mail/spamassassin/user_prefs.cf
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xc4fcd4)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0xc7daa8)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[19678] dbg: pyzor: network tests on, attempting Pyzor
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0xd631d4)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[19678] dbg: reporter: network tests on, attempting SpamCop
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0xc95a68)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AntiVirus from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd7f684)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0xde309c)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xde4224)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::TextCat from @INC
[19678] dbg: textcat: loading languages file...
[19678] dbg: textcat: loaded 73 language models
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AccessDB from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AccessDB=HASH(0x137e1e8)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x138176c)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x13c2c64)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x13cc420)
[19678] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[19678] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[19678] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x13cc420)
implements 'finish_parsing_end'
[19678] dbg: replacetags: replacing tags
[19678] dbg: replacetags: done replacing tags
[19678] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_toks
[19678] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_seen
[19678] dbg: bayes: found bayes db version 3
[19678] dbg: bayes: DB journal sync: last sync: 1105811470
[19678] dbg: config: score set 3 chosen.
[19678] dbg: message: ---- MIME PARSER START ----
[19678] dbg: message: main message type: text/plain
[19678] dbg: message: parsing normal part
[19678] dbg: message: added part, type: text/plain
[19678] dbg: message: ---- MIME PARSER END ----
[19678] dbg: dns: dns_available set to yes in config file, skipping test
[19678] dbg: metadata: X-Spam-Relays-Trusted:
[19678] dbg: metadata: X-Spam-Relays-Untrusted:
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xc4fcd4)
implements 'extract_metadata'
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958)
implements 'extract_metadata'
[19678] dbg: metadata: X-Relay-Countries:
[19678] dbg: message: no encoding detected
[19678] dbg: textcat: classifying, skipping: et yi rm sco cy fy eo lv is bs
sl ga gd la lt eu sa
[19678] dbg: textcat: language possibly: en
[19678] dbg: textcat: X-Languages: "en", X-Languages-Length: 1340
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
implements 'parsed_metadata'
[19678] dbg: uridnsbl: domains to query:
[19678] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[19678] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[19678] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[19678] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[19678] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[19678] dbg: dns: checking RBL combined.njabl.org., set njabl
[19678] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois
[19678] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[19678] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[19678] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[19678] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois-notfirsthop
[19678] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[19678] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[19678] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[19678] dbg: check: running tests for priority: 0
[19678] dbg: rules: running header regexp tests; score so far=0
[19678] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[19678] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<11...@spamassassin_spamd_init>
[19678] dbg: rules: "
[19678] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@spamassassin_spamd_init>"
[19678] dbg: rules: ran header rule NO_REAL_NAME ======> got hit:
"ignore@compiling.spamassassin.taint.org
[19678] dbg: rules: "
[19678] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"1135274536"
[19678] dbg: plugin: registering glue method for check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xc7daa8))
[19678] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: message was delivered entirely via trusted relays, not
required
[19678] dbg: eval: all '*From' addrs:
ignore@compiling.spamassassin.taint.org
[19678] dbg: plugin: registering glue method for check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x138176c))
[19678] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xc7daa8))
[19678] dbg: eval: all '*To' addrs:
[19678] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: message was delivered entirely via trusted relays, not
required
[19678] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[19678] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: plugin: registering glue method for check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: cannot get Envelope-From, cannot use SPF
[19678] dbg: spf: def_spf_whitelist_from: could not find useable envelope
sender
[19678] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[19678] dbg: plugin: registering glue method for check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x138176c))
[19678] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[19678] dbg: rules: running body-text per-line regexp tests; score so
far=0.96
[19678] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I"
[19678] dbg: uri: running uri tests; score so far=0.96
[19678] dbg: plugin: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0))
[19678] dbg: plugin: registering glue method for check_language
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958))
[19678] dbg: plugin: registering glue method for check_microsoft_executable
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd7f684))
[19678] dbg: plugin: registering glue method for check_body_8bits
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958))
[19678] dbg: plugin: registering glue method for check_suspect_name
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd7f684))
[19678] dbg: rules: running raw-body-text per-line regexp tests; score so
far=0.96
[19678] dbg: rules: running full-text regexp tests; score so far=0.96
[19678] dbg: plugin: registering glue method for check_pyzor
(Mail::SpamAssassin::Plugin::Pyzor=HASH(0xd631d4))
[19678] dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
[19678] dbg: info: entering helper-app run mode
[19678] dbg: pyzor: opening pipe: /usr/local/bin/pyzor check <
/tmp/.spamassassin19678kkkWvgtmp
[19703] dbg: util: setuid: ruid=0 euid=0
[19678] dbg: pyzor: [19703] finished: exit=0x0100
[19678] dbg: pyzor: got response: 66.92.49.157:24441_TimeoutError:
[19678] dbg: info: leaving helper-app run mode
[19678] dbg: pyzor: failure to parse response
"66.92.49.157:24441_TimeoutError: "
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
implements 'check_tick'
[19678] dbg: check: running tests for priority: 500
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
implements 'check_post_dnsbl'
[19678] dbg: rules: running meta tests; score so far=0.96
[19678] dbg: rules: running header regexp tests; score so far=2.906
[19678] dbg: rules: running body-text per-line regexp tests; score so
far=2.906
[19678] dbg: uri: running uri tests; score so far=2.906
[19678] dbg: rules: running raw-body-text per-line regexp tests; score so
far=2.906
[19678] dbg: rules: running full-text regexp tests; score so far=2.906
[19678] dbg: check: running tests for priority: 1000
[19678] dbg: rules: running meta tests; score so far=2.906
[19678] dbg: rules: running header regexp tests; score so far=2.906
[19678] dbg: plugin: registering glue method for
check_from_in_auto_whitelist
(Mail::SpamAssassin::Plugin::AWL=HASH(0xde309c))
[19678] dbg: rules: running body-text per-line regexp tests; score so
far=2.906
[19678] dbg: uri: running uri tests; score so far=2.906
[19678] dbg: rules: running raw-body-text per-line regexp tests; score so
far=2.906
[19678] dbg: rules: running full-text regexp tests; score so far=2.906
[19678] dbg: check: is spam? score=2.906 required=5
[19678] dbg: check:
tests=MISSING_SUBJECT,NO_REAL_NAME,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
[19678] dbg: check:
subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SAN
E_MSGID,__UNUSABLE_MSGID
[19678] dbg: bayes: untie-ing
[19678] dbg: bayes: untie-ing db_toks
[19678] dbg: bayes: untie-ing db_seen
[19678] dbg: config: copying current conf to backup
[19678] info: spamd: server started on port 10000/tcp (running version
3.1.0)
[19678] info: spamd: server pid: 19678
[19678] info: spamd: server successfully spawned child process, pid 19705
[19678] dbg: prefork: child 19705: entering state 0
[19678] dbg: prefork: new lowest idle kid: none
[19705] dbg: prefork: sysread(10) not ready, wait max 300 secs
[19678] info: spamd: server successfully spawned child process, pid 19706
[19678] dbg: prefork: child 19706: entering state 0
[19678] dbg: prefork: new lowest idle kid: none
[19678] dbg: prefork: child 19705: entering state 1
[19678] dbg: prefork: new lowest idle kid: 19705
[19678] dbg: prefork: child reports idle
[19678] info: prefork: child states: IS
[19678] dbg: prefork: child 19706: entering state 1
[19678] dbg: prefork: new lowest idle kid: 19705
[19678] dbg: prefork: child reports idle
[19678] info: prefork: child states: II
[19706] dbg: prefork: sysread(10) not ready, wait max 300 secs
RE: Bayes Scores Skipped/Not Applied
Posted by John Urness <ju...@tomsawyer.com>.
Loren,
You are seriously paying attention. I did the debugs yesterday and
completely rebuilt the bayes db today using a whitelist and a blacklist
mailspool so it is now a lot smaller since it lost a couple of years of
autolearning when I started over...
So it is actually from a site bayes database that was recreated and not an
issue of multiple databases
John
-----Original Message-----
From: Loren Wilton [mailto:lwilton@earthlink.net]
Sent: Friday, December 23, 2005 4:43 PM
To: users@spamassassin.apache.org
Subject: Re: Bayes Scores Skipped/Not Applied
This seems strange:
> ####Here is sa-learn --dump magic:
> This shows that I have more than enough spam and ham
> 0.000 0 3 0 non-token data: bayes db version
> 0.000 0 3754 0 non-token data: nspam
> 0.000 0 220 0 non-token data: nham
> 0.000 0 312279 0 non-token data: ntokens
> 0.000 0 1051829432 0 non-token data: oldest atime
> 0.000 0 1135374012 0 non-token data: newest atime
> 0.000 0 0 0 non-token data: last journal sync
> atime
> 0.000 0 1135373049 0 non-token data: last expiry atime
> 0.000 0 0 0 non-token data: last expire atime
> delta
> 0.000 0 0 0 non-token data: last expire
> reduction count
> [19915] dbg: bayes: DB journal sync: last sync: 1105811470 [19915]
> dbg: bayes: corpus size: nspam = 153968, nham = 40588 [19915] dbg:
> bayes: score = 4.91619356335349e-10 [19915] dbg: bayes: DB expiry:
> tokens in DB: 1984629, Expiry max size:
> 150000, Oldest atime: 1084312293, Newest atime: 0, Last expire:
1098687948,
> Current time: 1135280002
> [19915] dbg: bayes: DB journal sync: last sync: 1105811470
As I read that, the bayes db has 3754 spam and 220 ham.
But later in processing it has 153968 spam and 40558 ham!
This makes me think you have two different bayes databases under two
different users. Which would perhaps imply different user_prefs files, and
one of them might not be enabling bayes.
Loren
Re: Bayes Scores Skipped/Not Applied
Posted by Loren Wilton <lw...@earthlink.net>.
This seems strange:
> ####Here is sa-learn --dump magic:
> This shows that I have more than enough spam and ham
> 0.000 0 3 0 non-token data: bayes db version
> 0.000 0 3754 0 non-token data: nspam
> 0.000 0 220 0 non-token data: nham
> 0.000 0 312279 0 non-token data: ntokens
> 0.000 0 1051829432 0 non-token data: oldest atime
> 0.000 0 1135374012 0 non-token data: newest atime
> 0.000 0 0 0 non-token data: last journal sync
> atime
> 0.000 0 1135373049 0 non-token data: last expiry atime
> 0.000 0 0 0 non-token data: last expire atime
> delta
> 0.000 0 0 0 non-token data: last expire
> reduction count
> [19915] dbg: bayes: DB journal sync: last sync: 1105811470
> [19915] dbg: bayes: corpus size: nspam = 153968, nham = 40588
> [19915] dbg: bayes: score = 4.91619356335349e-10
> [19915] dbg: bayes: DB expiry: tokens in DB: 1984629, Expiry max size:
> 150000, Oldest atime: 1084312293, Newest atime: 0, Last expire:
1098687948,
> Current time: 1135280002
> [19915] dbg: bayes: DB journal sync: last sync: 1105811470
As I read that, the bayes db has 3754 spam and 220 ham.
But later in processing it has 153968 spam and 40558 ham!
This makes me think you have two different bayes databases under two
different users. Which would perhaps imply different user_prefs files, and
one of them might not be enabling bayes.
Loren
RE: Bayes Scores Skipped/Not Applied: HAPPY RESOLUTION
Posted by John Urness <ju...@tomsawyer.com>.
Hi Matt,
I resolved the issue. Thanks for pointing me in a different direction- the
rubber has not been meeting the road for about a week on this issue!
After upgrading using CPAN I am getting BAYES scores (among others from the
/usr/share/spamassassin dir). So apparently it was an installation issue.
Dec 23 18:45:12 unixserv0 MailScanner[24894]: Message jBO2iqfX025133 from
68.76.136.35 (tracymcwilliamssl@ravissant.com) to tomsawyer.com is spam,
SBL+XBL, spamcop.net, SpamAssassin (score=36.46, required 4, autolearn=spam,
BAYES_50 0.00, FORGED_RCVD_HELO 0.14, PYZOR_CHECK 3.70, RATWARE_NAME_ID
4.10, RCVD_IN_BL_SPAMCOP_NET 1.56, RCVD_IN_DSBL 2.60, RCVD_IN_NJABL_DUL
1.95, RCVD_IN_XBL 3.90, SAVE_THOUSANDS 0.40, SUBJECT_EXCESS_BASE64 0.45,
TO_CC_NONE 0.13, URIBL_AB_SURBL 3.81, URIBL_JP_SURBL 4.09, URIBL_OB_SURBL
3.01, URIBL_SC_SURBL 4.50, URIBL_WS_SURBL 2.14)
This leads me to a question about installation since in the INSTALL file it
says:
[unzip/untar the archive]
cd Mail-SpamAssassin-*
perl Makefile.PL
[option: add -DSPAMC_SSL to $CFLAGS to build an SSL-enabled spamc]
make
make install
This is how I normally done it over the past few years- install to a prefix
in /usr/local and then create a symbolic link to /usr/local/spamassassin so
that I can keep the previous version around in the event I need to recover
from a bad upgrade. I don't recall ever having the difficulty that I had
this time around.
perl Makefile.PL --PREFIX=/usr/local/spamassassin-n.nn
make
make install
ln -sf /usr/local/spamassassin-n.nn /usr/local/spamassassin
The problem is that the installer did not put the perl modules in the site
directory (/usr/perl5/site_perl/../... The spamassassin.pm module in the
site dir now (after running CPAN) shows the updated version:
#/usr/perl5# grep 3.00 /usr/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm
$VERSION = "3.001000"; # update after release (same format as perl $])
The SpamAssassin.pm file from my original make, make install is here, but
obviously was not being used:
# ls -lsa /usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail
total 53
1 drwxr-xr-x 3 root 512 Dec 12 16:08 ./
1 drwxr-xr-x 4 root 512 Dec 12 16:08 ../
1 drwxr-xr-x 10 root 1024 Dec 12 16:08 SpamAssassin/
50 -r--r--r-- 1 root 50780 Sep 13 19:07 SpamAssassin.pm
This is also version 3.001.000
In the install directions, it does not say anything about building
spamassassin and then moving perl modules manually. Am I missing something?
John
-----Original Message-----
From: Matt Kettler [mailto:mkettler@evi-inc.com]
Sent: Friday, December 23, 2005 3:08 PM
To: John Urness
Cc: users@spamassassin.apache.org
Subject: Re: Bayes Scores Skipped/Not Applied
John Urness wrote:
>
> ####/etc/mail/spamassassin/local.cf
> score ALL_TRUSTED 0 0 0 0
That is very concerning. Why'd you do that? 99.9% of the time the proper fix
is to declare a trusted_networks. Disabling this rule merely covers up one
symptom of a very pervasive problem (errant trust).
>
> use_bayes 1
> use_bayes_rules 1
> use_auto_whitelist 1
> bayes_auto_learn 1
> bayes_auto_expire 1
> bayes_expiry_max_db_size 200000
> bayes_file_mode 0777
> auto_whitelist_path
/extra/system/spamassassin/autoDB/auto-whitelist
> auto_whitelist_file_mode 0666
> bayes_path /extra/system/spamassassin/autoDB/bayes
> bayes_ignore_header X-MailScanner
> bayes_ignore_header X-MailScanner-SpamCheck bayes_ignore_header
> X-MailScanner-SpamScore bayes_ignore_header X-MailScanner-Information
Wait, why the mailscanner ignores? Are you using mailscanner? If so, stop
running spamd. MailScanner uses the perl API, so you don't need spamd, it's
just wasting memory to run it.
>
>
RE: Bayes Scores Skipped/Not Applied
Posted by John Urness <ju...@tomsawyer.com>.
Hi Matt,
I stopped running spamd.
The ALL_TRUSTED was letting a lot of junk get through and I saw a post that
recommended 0 for the score to prevent false negatives. I have restored it
to its original and added trusted networks (with a couple of subnets) as you
suggest.
I am still not seeing any BAYES scores. Here are a few examples:
Message jBO1kTfX011690 from 141.157.60.60 (achabwmlg@sstsun20.sps.mot.com)
to tomsawyer.com is spam, SBL+XBL, spamcop.net, SpamAssassin (score=8.364,
required 4, RATWARE_RCVD_PF 3.60, SARE_GETFCK 0.68, URIBL_JP_SURBL 4.09)
Message jBO1hXfX008995 from 24.175.86.36 (miu0a@bigwave.ne.jp) to
tomsawyer.com is spam, SpamAssassin (score=6.711, required 4,
SPF_HELO_SOFTFAIL 2.43, SUBJ_ILLEGAL_CHARS 4.28)
Message jBO1fYfX008953 from 222.47.203.164 (dykdysk@yahoo.com) to
tomsawyer.com is spam, SBL+XBL, SpamAssassin (score=10.678, required 4,
FORGED_MUA_OUTLOOK 4.06, MSGID_SPAM_CAPS 4.40, SARE_RECV_IP_222032 2.22)
Message jBO1kTfX011690 from 141.157.60.60 (achabwmlg@sstsun20.sps.mot.com)
to tomsawyer.com is spam, SBL+XBL, spamcop.net, SpamAssassin (score=8.364,
required 4, RATWARE_RCVD_PF 3.60, SARE_GETFCK 0.68, URIBL_JP_SURBL 4.09)
John
-----Original Message-----
From: Matt Kettler [mailto:mkettler@evi-inc.com]
Sent: Friday, December 23, 2005 3:08 PM
To: John Urness
Cc: users@spamassassin.apache.org
Subject: Re: Bayes Scores Skipped/Not Applied
John Urness wrote:
>
> ####/etc/mail/spamassassin/local.cf
> score ALL_TRUSTED 0 0 0 0
That is very concerning. Why'd you do that? 99.9% of the time the proper fix
is to declare a trusted_networks. Disabling this rule merely covers up one
symptom of a very pervasive problem (errant trust).
>
> use_bayes 1
> use_bayes_rules 1
> use_auto_whitelist 1
> bayes_auto_learn 1
> bayes_auto_expire 1
> bayes_expiry_max_db_size 200000
> bayes_file_mode 0777
> auto_whitelist_path
/extra/system/spamassassin/autoDB/auto-whitelist
> auto_whitelist_file_mode 0666
> bayes_path /extra/system/spamassassin/autoDB/bayes
> bayes_ignore_header X-MailScanner
> bayes_ignore_header X-MailScanner-SpamCheck bayes_ignore_header
> X-MailScanner-SpamScore bayes_ignore_header X-MailScanner-Information
Wait, why the mailscanner ignores? Are you using mailscanner? If so, stop
running spamd. MailScanner uses the perl API, so you don't need spamd, it's
just wasting memory to run it.
>
>
RE: Bayes Scores Skipped/Not Applied
Posted by John Urness <ju...@tomsawyer.com>.
Here is some debugging info from MailScanner.
Starting MailScanner...
In Debugging mode, not forking...
debug: SpamAssassin version 3.0.1
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: config: SpamAssassin failed to parse line, skipping: use_razor1 0
debug: SpamAssassin version 3.0.1
debug: Score set 0 chosen.
Use of uninitialized value in concatenation (.) or string at
/usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 978.
Use of uninitialized value in concatenation (.) or string at
/usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin.pm line 980.
debug: read_scoreonly_config: cannot open "": No such file or directory
[SNIP]
/usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_dnsbl_tests.cf" requires
version 3.001000 of SpamAssassin, but this is code version 3.000001. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at
/usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_drugs.cf" requires version
3.001000 of SpamAssassin, but this is code version 3.000001. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf/Parser.pm line
329.
[Snip]
########
The parser/version errors are numerous and indicate SpamAssassin 3.0 is
being called. Odd.
########
More debug...
debug: bayes: 19802 tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_toks
debug: bayes: 19802 tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_seen
debug: bayes: found bayes db version 3
debug: Score set 3 chosen.
[Snip]
So it looks like it is finding bayes. And scoring with it, but maybe its
that it can't read the scoring from the cf files in /usr/share/spamassassin
because a version conflict.
Yes, going through the the log again I found that the bayes_cf file could
not be parsed because an older version of spamassassin is at work.
Presumably this is what no scores from Bayes are being used:
configuration file "/usr/share/spamassassin/23_bayes.cf" requires version
3.001000 of SpamAssassin, but this is code version 3.000001. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf/Parser.pm line
329.
I installed it with make, make install, so assuming that is part of the
problem, I am going to try upgrading with CPAN and see if that resolves the
issue.
John
-----Original Message-----
From: Matt Kettler [mailto:mkettler@evi-inc.com]
Sent: Friday, December 23, 2005 3:08 PM
To: John Urness
Cc: users@spamassassin.apache.org
Subject: Re: Bayes Scores Skipped/Not Applied
John Urness wrote:
>
> ####/etc/mail/spamassassin/local.cf
> score ALL_TRUSTED 0 0 0 0
That is very concerning. Why'd you do that? 99.9% of the time the proper fix
is to declare a trusted_networks. Disabling this rule merely covers up one
symptom of a very pervasive problem (errant trust).
>
> use_bayes 1
> use_bayes_rules 1
> use_auto_whitelist 1
> bayes_auto_learn 1
> bayes_auto_expire 1
> bayes_expiry_max_db_size 200000
> bayes_file_mode 0777
> auto_whitelist_path
/extra/system/spamassassin/autoDB/auto-whitelist
> auto_whitelist_file_mode 0666
> bayes_path /extra/system/spamassassin/autoDB/bayes
> bayes_ignore_header X-MailScanner
> bayes_ignore_header X-MailScanner-SpamCheck bayes_ignore_header
> X-MailScanner-SpamScore bayes_ignore_header X-MailScanner-Information
Wait, why the mailscanner ignores? Are you using mailscanner? If so, stop
running spamd. MailScanner uses the perl API, so you don't need spamd, it's
just wasting memory to run it.
>
>
Re: Bayes Scores Skipped/Not Applied
Posted by Matt Kettler <mk...@evi-inc.com>.
John Urness wrote:
>
> ####/etc/mail/spamassassin/local.cf
> score ALL_TRUSTED 0 0 0 0
That is very concerning. Why'd you do that? 99.9% of the time the proper fix is
to declare a trusted_networks. Disabling this rule merely covers up one symptom
of a very pervasive problem (errant trust).
>
> use_bayes 1
> use_bayes_rules 1
> use_auto_whitelist 1
> bayes_auto_learn 1
> bayes_auto_expire 1
> bayes_expiry_max_db_size 200000
> bayes_file_mode 0777
> auto_whitelist_path /extra/system/spamassassin/autoDB/auto-whitelist
> auto_whitelist_file_mode 0666
> bayes_path /extra/system/spamassassin/autoDB/bayes
> bayes_ignore_header X-MailScanner
> bayes_ignore_header X-MailScanner-SpamCheck
> bayes_ignore_header X-MailScanner-SpamScore
> bayes_ignore_header X-MailScanner-Information
Wait, why the mailscanner ignores? Are you using mailscanner? If so, stop
running spamd. MailScanner uses the perl API, so you don't need spamd, it's just
wasting memory to run it.
>
>