You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Phil Thompson <ph...@dodgeit.com> on 2004/09/23 17:27:25 UTC
Mail::Audit and Mail::SpamAssassin no longer getting along?
disclaimer: I posted this to comp.lang.perl.modules (no reply yet), but since this list is the FIRST place I looked, I'll send here as well.
Hello,
Until yesterday, I was happily using a combination of Mail::Audit and
Mail::SpamAssassin to filter my mail. Yesterday I upgraded
SpamAssassin to version 3.0.0 and my old script started failing with
this error:
Command output: Can't locate
auto/Mail/Audit/MailInternet/extract_mes.al in @INC (@INC contains:
/usr/lib/perl5/5.8.3/i386-linux-thread-multi /usr/lib/perl5/5.8.3
etc etc etc
Has anyone seen this error? Know how to fix it?
thanks!
Phil
here is my (hopefully anonymized) filter script:
#!/usr/local/bin/perl
use Mail::Audit;
use Mail::SpamAssassin;
my $item = Mail::Audit->new;
#send "page" messages to my cell phone
if ($item->to =~ /page\@mydomain.com/) {
$item->noexit(1); #turn off exit momentarily, so a copy still goes
to local mailbox
$item->resend("myphonenumber\@vtext.com"); #verizon
$item->noexit(0);
}
#spamassasin
my $spamtest = Mail::SpamAssassin->new();
my $status = $spamtest->check($item);
if ($status->is_spam ()) {
$item->accept("~/Maildir/.spamassassin"); #file for further review,
if desired
}
#forward all incoming mail to gmail
$item->noexit(1); #turn off exit momentarily, so a copy still goes to
local mailbox
$item->resend("myusername\@gmail.com");
$item->noexit(0);
#temp - want to see the spam scores on ham
$status->rewrite_mail();
#by default, accept all
$item->accept("~/Maildir/");
Re: Mail::Audit and Mail::SpamAssassin no longer getting along?
Posted by Theo Van Dinter <fe...@kluge.net>.
On Thu, Sep 23, 2004 at 11:27:25AM -0400, Phil Thompson wrote:
> Command output: Can't locate
> auto/Mail/Audit/MailInternet/extract_mes.al in @INC (@INC contains:
> /usr/lib/perl5/5.8.3/i386-linux-thread-multi /usr/lib/perl5/5.8.3
> etc etc etc
>
> Has anyone seen this error? Know how to fix it?
It's in the wrong section of UPGRADE for some reason, but:
- Support for versions of the optional Mail::Audit module is no longer
included.
--
Randomly Generated Tagline:
It is, of course, written in Perl. Translation to C is left as an
exercise for the reader. :-) -- Larry Wall in <74...@jpl-devvax.JPL.NASA.GOV>
SpamAssassin 3.0 gives high scores!
Posted by Danie Marais <da...@attix5.com>.
I just want to mention that since using SA 3 my average spam score went up
from 20 to 35 with some spam scoring over 80!
Way cool - well done guys. Check out this one... :)
Content analysis details: (87.6 points, 5.0 required)
pts rule name description
---- ---------------------- ------------------------------------------------
--
4.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary
3.8 MSGID_YAHOO_CAPS Message-ID has ALLCAPS@yahoo.com
1.3 SUBJECT_DRUG_GAP_C Subject contains a gappy version of 'cialis'
3.8 MSGID_SPAM_CAPS Spam tool Message-Id: (caps variant)
0.1 RCVD_BY_IP Received by mail server with no name
2.2 RCVD_HELO_IP_MISMATCH Received: HELO and IP do not match, but should
1.2 RCVD_NUMERIC_HELO Received: contains an IP address used for HELO
2.7 FORGED_YAHOO_RCVD 'From' yahoo.com does not match 'Received'
headers
1.8 LOCAL_OBFU_ONLY_XNX BODY: Obfuscated 'xanax' in body
1.8 LOCAL_OBFU_ONLY_VGR BODY: Obfuscated 'viagra' in body
1.8 LOCAL_OBFU_ONLY_CLS BODY: Obfuscated 'cialis' in body
1.8 LOCAL_OBFU_ONLY_VLM BODY: Obfuscated 'valium' in body
4.0 BIZ_TLD URI: Contains an URL in the BIZ top-level domain
0.0 HTML_40_50 BODY: Message is 40% to 50% HTML
2.9 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words
3.4 HTML_OBFUSCATE_30_40 BODY: Message is 30% to 40% HTML obfuscation
0.0 HTML_MESSAGE BODY: HTML included in message
0.0 HTML_BADTAG_40_50 BODY: HTML message is 40% to 50% bad tags
0.1 HTML_BACKHAIR_4 BODY: HTML tags used to obfuscate words
0.1 MPART_ALT_DIFF BODY: HTML and text parts are different
1.9 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
0.2 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
0.6 SARE_HTML_BAD_FG_CLR RAW: Uses illegal color code
1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?219.254.72.131>]
3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[219.254.72.131 listed in sbl-xbl.spamhaus.org]
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: sdf21.biz]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: sdf21.biz]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: sdf21.biz]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: sdf21.biz]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: sdf21.biz]
2.0 SARE_RAND_1 SARE_RAND_1
0.1 DRUGS_ANXIETY Refers to an anxiety control drug
0.1 FORGED_OUTLOOK_TAGS Outlook can't send HTML in this format
3.1 PERCENT_RANDOM PERCENT_RANDOM
2.7 DRUGS_DIET_OBFU Obfuscated reference to a diet drug
2.2 SARE_HTML_INV_TAG Message contains invalid HTML tag
1.5 SARE_RAND_1F SARE_RAND_1F
2.3 LONGWORDS Long string of long words
0.9 DRUGS_ERECTILE_OBFU Obfuscated reference to an erectile drug
3.5 DRUGS_ANXIETY_OBFU Obfuscated reference to an anxiety control drug
0.2 DRUGS_ERECTILE Refers to an erectile drug
4.1 RCVD_DOUBLE_IP_SPAM Bulk email fingerprint (double IP) found
0.6 FORGED_OUTLOOK_HTML Outlook can't send HTML message only
1.5 SARE_HTML_COLOR_NWHT HTML contains nearly white color (F.F.F.)
2.4 MIME_HTML_ONLY_MULTI Multipart message only has text/html MIME parts
0.0 MISSING_MIMEOLE Message has X-MSMail-Priority, but no X-MimeOLE
0.0 DRUGS_DIET Refers to a diet drug
2.0 SARE_RAND_8 SARE_RAND_8
0.0 DRUGS_ANXIETY_EREC Refers to both an erectile and an anxiety drug
3.9 FORGED_MUA_OUTLOOK Forged mail pretending to be from MS Outlook