You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2008/06/18 04:25:26 UTC

[Bug 5925] New: whitelist_from_rcvd and Earthlink - fails

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925

           Summary: whitelist_from_rcvd and Earthlink - fails
           Product: Spamassassin
           Version: 3.2.4
          Platform: PC
        OS/Version: Linux
            Status: NEW
          Severity: major
          Priority: P5
         Component: spamassassin
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: jdowjunkmail@earthlink.net


I cannot find a setup for trusted and internal that will allow
whitelist_from_rcvd to work with the Earthlink email service used via
fetchmail.

Here is the spamassassin -D report for a test on an email from fidelity.com
Note that the first untrusted is a fidelity.com address. Yet I cannot get the
rule to hit no matter what address I put into the rule:
===8<---
[16548] dbg: logger: adding facilities: all
[16548] dbg: logger: logging level is DBG
[16548] dbg: generic: SpamAssassin version 3.2.3
[16548] dbg: config: score set 0 chosen.
[16548] dbg: util: running in taint mode? yes
[16548] dbg: util: taint mode: deleting unsafe environment variables, resetting
PATH
[16548] dbg: util: PATH included '/usr/lib/qt-3.3/bin', keeping
[16548] dbg: util: PATH included '/usr/kerberos/bin', keeping
[16548] dbg: util: PATH included '/usr/lib/ccache', keeping
[16548] dbg: util: PATH included '/usr/local/bin', keeping
[16548] dbg: util: PATH included '/bin', keeping
[16548] dbg: util: PATH included '/usr/bin', keeping
[16548] dbg: util: PATH included '/home/jdow/bin', keeping
[16548] dbg: util: PATH included '/sbin', keeping
[16548] dbg: util: PATH included '/usr/sbin', keeping
[16548] dbg: util: final PATH set to:
/usr/lib/qt-3.3/bin:/usr/kerberos/bin:/usr/lib/ccache:/usr/local/bin:/bin:/usr/bin:/home/jdow/bin:/sbin:/usr/sbin
[16548] dbg: dns: is Net::DNS::Resolver available? yes
[16548] dbg: dns: Net::DNS version: 0.61
[16548] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[16548] dbg: config: read file /etc/mail/spamassassin/init.pre
[16548] dbg: config: read file /etc/mail/spamassassin/v310.pre
[16548] dbg: config: read file /etc/mail/spamassassin/v312.pre
[16548] dbg: config: read file /etc/mail/spamassassin/v320.pre
[16548] dbg: config: using "/var/lib/spamassassin/3.002003" for sys rules pre
files
[16548] dbg: config: using "/var/lib/spamassassin/3.002003" for default rules
dir
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org.cf
[16548] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[16548] dbg: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj1.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj2.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj_eng.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_header1.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_header_eng.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_header_x30.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_highrisk.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_html0.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_html1.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_html2.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_html_eng.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu2.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu_x31.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_specific.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_stocks.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_uri1.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_uri_eng.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_uri_x31.cf
[16548] dbg: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
[16548] dbg: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[16548] dbg: config: read file
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[16548] dbg: config: read file /etc/mail/spamassassin/88_FVGT_body.cf
[16548] dbg: config: read file /etc/mail/spamassassin/88_FVGT_headers.cf
[16548] dbg: config: read file /etc/mail/spamassassin/88_FVGT_rawbody.cf
[16548] dbg: config: read file /etc/mail/spamassassin/88_FVGT_subject.cf
[16548] dbg: config: read file /etc/mail/spamassassin/99_local.cf
[16548] dbg: config: read file /etc/mail/spamassassin/99_sare_fraud_post25x.cf
[16548] dbg: config: read file /etc/mail/spamassassin/FuzzyOcr.cf
[16548] dbg: config: read file /etc/mail/spamassassin/bogus-virus-warnings.cf
[16548] dbg: config: read file /etc/mail/spamassassin/clamav.cf
[16548] dbg: config: read file /etc/mail/spamassassin/local.cf
[16548] dbg: config: read file /etc/mail/spamassassin/useless.cf
[16548] dbg: config: read file /etc/mail/spamassassin/weeds_2.cf
[16548] dbg: config: using "/home/jdow/.spamassassin" for user state dir
[16548] dbg: config: using "/home/jdow/.spamassassin/user_prefs" for user prefs
file
[16548] dbg: config: read file /home/jdow/.spamassassin/user_prefs
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[16548] dbg: pyzor: network tests on, attempting Pyzor
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[16548] dbg: razor2: razor2 is not available
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[16548] dbg: reporter: network tests on, attempting SpamCop
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject from
@INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::DomainKeys from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTTPSMismatch from
@INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDetail from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::Bayes from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::BodyEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::DNSEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTMLEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::WLBLEval from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from @INC
[16548] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
[16548] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::VBounce=HASH(0x9d27f84), already registered
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/10_default_prefs.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/10_default_prefs.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/10_default_prefs.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_advance_fee.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_advance_fee.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_advance_fee.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_body_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_body_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_body_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_compensate.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_compensate.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_compensate.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_dnsbl_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_dnsbl_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_dnsbl_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_drugs.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_drugs.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_drugs.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_dynrdns.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_dynrdns.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_dynrdns.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_fake_helo_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_fake_helo_tests.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_fake_helo_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_head_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_head_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_head_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_html_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_html_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_html_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_imageinfo.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_imageinfo.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_imageinfo.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_meta_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_meta_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_meta_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_net_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_net_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_net_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_phrases.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_phrases.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_phrases.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_porn.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_porn.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_porn.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_ratware.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_ratware.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_ratware.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_uri_tests.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_uri_tests.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_uri_tests.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_vbounce.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_vbounce.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/20_vbounce.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/23_bayes.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/23_bayes.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/23_bayes.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_accessdb.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_accessdb.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_accessdb.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_antivirus.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_antivirus.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_antivirus.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_asn.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_asn.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_asn.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_dcc.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_dcc.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_dcc.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_dkim.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_dkim.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_dkim.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_domainkeys.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_domainkeys.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_domainkeys.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_hashcash.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_hashcash.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_hashcash.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_pyzor.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_pyzor.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_pyzor.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_razor2.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_razor2.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_razor2.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_replace.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_replace.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_replace.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_spf.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_spf.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_spf.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_textcat.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_textcat.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_textcat.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_uribl.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_uribl.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/25_uribl.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_de.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_de.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_de.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_fr.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_fr.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_fr.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_it.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_it.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_it.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_nl.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_nl.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_nl.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_pl.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_pl.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_pl.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_pt_br.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_pt_br.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/30_text_pt_br.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/50_scores.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/50_scores.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/50_scores.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_awl.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_awl.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_awl.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_shortcircuit.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_shortcircuit.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_shortcircuit.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_dk.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_dk.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_dk.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_dkim.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_dkim.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_dkim.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_spf.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_spf.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_spf.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_subject.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_subject.cf"
for included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/60_whitelist_subject.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_active.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_active.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_active.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_removed.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_removed.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_removed.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_scores.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_scores.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/72_scores.cf
[16548] dbg: config: fixed relative path:
/var/lib/spamassassin/3.002003/updates_spamassassin_org/80_additional.cf
[16548] dbg: config: using
"/var/lib/spamassassin/3.002003/updates_spamassassin_org/80_additional.cf" for
included file
[16548] dbg: config: read file
/var/lib/spamassassin/3.002003/updates_spamassassin_org/80_additional.cf
[16548] dbg: config: fixed relative path: /etc/mail/spamassassin/FuzzyOcr.pm
[16548] dbg: plugin: loading FuzzyOcr from /etc/mail/spamassassin/FuzzyOcr.pm
[16548] dbg: plugin: FuzzyOcr=HASH(0xa2ca334) implements 'parse_config',
priority 0
[16548] dbg: config: fixed relative path:
/etc/mail/spamassassin/local_plugin/clamav.pm
[16548] dbg: plugin: loading ClamAV from
/etc/mail/spamassassin/local_plugin/clamav.pm
[16548] dbg: config: allowing user rules!
[16548] dbg: conf: finish parsing
[16548] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x9c58a54)
implements 'finish_parsing_end', priority 0
[16548] dbg: replacetags: replacing tags
[16548] dbg: replacetags: done replacing tags
[16548] dbg: config: using "/home/jdow/.spamassassin" for user state dir
[16548] dbg: bayes: tie-ing to DB file R/O /home/jdow/.spamassassin/bayes_toks
[16548] dbg: bayes: tie-ing to DB file R/O /home/jdow/.spamassassin/bayes_seen
[16548] dbg: bayes: found bayes db version 3
[16548] dbg: bayes: DB journal sync: last sync: 1213750123
[16548] dbg: config: using "/home/jdow/.spamassassin" for user state dir
[16548] dbg: config: score set 3 chosen.
[16548] dbg: message: main message type: multipart/alternative
[16548] dbg: plugin: Mail::SpamAssassin::Plugin::DNSEval=HASH(0x9b4114c)
implements 'check_start', priority 0
[16548] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x9b3bf5c)
implements 'check_main', priority 0
[16548] dbg: received-header: found fetchmail marker outside trusted area,
ignored
[16548] dbg: received-header: parsed as [ ip=127.0.0.1 rdns= helo=noehlo.host
by=mx-roseate.atl.sa.earthlink.net ident= envfrom= intl=0 id=1k7Fl46IC3Nl34f0
auth= msa=0 ]
[16548] dbg: received-header: relay 127.0.0.1 trusted? yes internal? yes msa?
no
[16548] dbg: received-header: parsed as [ ip=192.223.226.85 rdns=
helo=cs-us102.fidelity.com by=mx-roseate.atl.sa.earthlink.net ident= envfrom=
intl=0 id=1k7Fl41nE3Nl34f1 auth= msa=0 ]
[16548] dbg: received-header: relay 192.223.226.85 trusted? yes internal? no
msa? no
[16548] dbg: received-header: parsed as [ ip=10.37.137.199 rdns=
helo=fiscprdfmx101 by=cs-us103.fidelity.com ident= envfrom= intl=0 id= auth=
msa=0 ]
[16548] dbg: received-header: relay 10.37.137.199 trusted? no internal? no msa?
no
[16548] dbg: metadata: X-Spam-Relays-Trusted: [ ip=127.0.0.1 rdns=
helo=noehlo.host by=mx-roseate.atl.sa.earthlink.net ident= envfrom= intl=1
id=1k7Fl46IC3Nl34f0 auth= msa=0 ] [ ip=192.223.226.85 rdns=
helo=cs-us102.fidelity.com by=mx-roseate.atl.sa.earthlink.net ident= envfrom=
intl=0 id=1k7Fl41nE3Nl34f1 auth= msa=0 ]
[16548] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=10.37.137.199 rdns=
helo=fiscprdfmx101 by=cs-us103.fidelity.com ident= envfrom= intl=0 id= auth=
msa=0 ]
[16548] dbg: metadata: X-Spam-Relays-Internal: [ ip=127.0.0.1 rdns=
helo=noehlo.host by=mx-roseate.atl.sa.earthlink.net ident= envfrom= intl=1
id=1k7Fl46IC3Nl34f0 auth= msa=0 ]
[16548] dbg: metadata: X-Spam-Relays-External: [ ip=192.223.226.85 rdns=
helo=cs-us102.fidelity.com by=mx-roseate.atl.sa.earthlink.net ident= envfrom=
intl=0 id=1k7Fl41nE3Nl34f1 auth= msa=0 ] [ ip=10.37.137.199 rdns=
helo=fiscprdfmx101 by=cs-us103.fidelity.com ident= envfrom= intl=0 id= auth=
msa=0 ]
[16548] dbg: message: ---- MIME PARSER START ----
[16548] dbg: message: parsing multipart, got boundary: B_3220429453_491812
[16548] dbg: message: found part of type text/plain, boundary:
B_3220429453_491812
[16548] dbg: message: added part, type: text/plain
[16548] dbg: message: found part of type text/html, boundary:
B_3220429453_491812
[16548] dbg: message: added part, type: text/html
[16548] dbg: message: parsing normal part
[16548] dbg: message: parsing normal part
[16548] dbg: message: ---- MIME PARSER END ----
[16548] dbg: message: decoding quoted-printable
[16548] dbg: message: decoding other encoding type (7bit), ignoring
[16548] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9a0c918)
implements 'parsed_metadata', priority 0
[16548] dbg: dns: servers: wizardess.wiz
[16548] dbg: dns: looking up NS records for user specified servers:
wizardess.wiz
[16548] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0
[16548] dbg: dns: testing resolver nameservers: 127.0.0.1
[16548] dbg: dns: trying (3) wizardess.wiz...
[16548] dbg: dns: looking up NS for 'wizardess.wiz'
[16548] dbg: dns: NS lookup of wizardess.wiz using 127.0.0.1 succeeded => DNS
available (set dns_available to override)
[16548] dbg: dns: is DNS available? 1
[16548] dbg: uridnsbl: domains to query: fidelity.com
[16548] dbg: dns: WHOIS_SECUREWHOIS lookup start
[16548] dbg: dns: WHOIS_MYPRIVREG lookup start
[16548] dbg: dns: WHOIS_NETSOLPR lookup start
[16548] dbg: dns: WHOIS_AITPRIV lookup start
[16548] dbg: dns: WHOIS_FINEXE lookup start
[16548] dbg: dns: WHOIS_CONTACTPRIV lookup start
[16548] dbg: dns: URIBL_XS_SURBL lookup start
[16548] dbg: dns: WHOIS_REGISTER4LESS lookup start
[16548] dbg: dns: WHOIS_NETID lookup start
[16548] dbg: dns: WHOIS_DYNADOT lookup start
[16548] dbg: dns: URIBL_OB_SURBL lookup start
[16548] dbg: dns: WHOIS_DMNBYPROXY lookup start
[16548] dbg: dns: WHOIS_MONIKER_PRIV lookup start
[16548] dbg: dns: WHOIS_PRIVDOMAIN lookup start
[16548] dbg: dns: WHOIS_DREAMPRIV lookup start
[16548] dbg: dns: URIBL_RED lookup start
[16548] dbg: dns: URIBL_SC_SURBL lookup start
[16548] dbg: dns: URIBL_AB_SURBL lookup start
[16548] dbg: dns: WHOIS_WHOISGUARD lookup start
[16548] dbg: dns: WHOIS_PRIVPROT lookup start
[16548] dbg: dns: WHOIS_NAMEKING lookup start
[16548] dbg: dns: URIBL_PH_SURBL lookup start
[16548] dbg: dns: WHOIS_DOMPRIVCORP lookup start
[16548] dbg: dns: WHOIS_PRIVACYPOST lookup start
[16548] dbg: dns: URIBL_GREYB lookup start
[16548] dbg: dns: URIBL_RHS_DOB lookup start
[16548] dbg: dns: WHOIS_DOMESCROW lookup start
[16548] dbg: dns: WHOIS_WHOISPROT lookup start
[16548] dbg: dns: URIBL_JP_SURBL lookup start
[16548] dbg: dns: WHOIS_REGTEK lookup start
[16548] dbg: dns: WHOIS_SAFENAMES lookup start
[16548] dbg: dns: URIBL_WS_SURBL lookup start
[16548] dbg: dns: WHOIS_NOMINET lookup start
[16548] dbg: dns: WHOIS_REGISTERFLY lookup start
[16548] dbg: dns: WHOIS_UNLISTED lookup start
[16548] dbg: dns: URIBL_BLACKB lookup start
[16548] dbg: dns: URIBL_SBL lookup start
[16548] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[16548] dbg: dns: checking RBL plus.bondedsender.org., set ssc-firsttrusted
[16548] dbg: dns: checking RBL combined.njabl.org., set njabl
[16548] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[16548] dbg: dns: _check_rbl_addresses RBL rhsbl.ahbl.org., set ahbl
[16548] dbg: dns: launching DNS A query for fidelity.com.rhsbl.ahbl.org. in
background
[16548] dbg: dns: checking RBL dob.sibl.support-intelligence.net., set dob
[16548] dbg: dns: checking A and MX for host fidelity.com
[16548] dbg: dns: launching DNS A query for fidelity.com in background
[16548] dbg: dns: launching DNS MX query for fidelity.com in background
[16548] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[16548] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[16548] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[16548] dbg: dns: _check_rbl_addresses RBL dob.sibl.support-intelligence.net.,
set dob
[16548] dbg: dns: launching DNS A query for
fidelity.com.dob.sibl.support-intelligence.net. in background
[16548] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[16548] dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted
[16548] dbg: dns: checking RBL sa-accredit.habeas.com., set habeas-firsttrusted
[16548] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[16548] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[16548] dbg: dns: checking RBL zen.spamhaus.org., set zen
[16548] dbg: dns: _check_rbl_addresses RBL bl.open-whois.org., set openwhois
[16548] dbg: dns: launching DNS A query for fidelity.com.bl.open-whois.org. in
background
[16548] dbg: dns: _check_rbl_addresses RBL fulldom.rfc-ignorant.org., set
rfci_envfrom
[16548] dbg: dns: launching DNS A query for
fidelity.com.fulldom.rfc-ignorant.org. in background
[16548] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[16548] dbg: check: running tests for priority: -1000
[16548] dbg: rules: running head tests; score so far=0
[16548] dbg: rules: compiled head tests
[16548] dbg: eval: all '*From' addrs: Fidelity.Investments.email@fidelity.com
[16548] dbg: eval: all '*To' addrs: jdow@earthlink.net
[16548] dbg: rules: running body tests; score so far=0
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: running uri tests; score so far=0
[16548] dbg: rules: compiled uri tests
[16548] dbg: rules: running rawbody tests; score so far=0
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: running full tests; score so far=0
[16548] dbg: rules: compiled full tests
[16548] dbg: rules: running meta tests; score so far=0
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: running tests for priority: -950
[16548] dbg: rules: running head tests; score so far=0
[16548] dbg: rules: compiled head tests
[16548] dbg: rules: running body tests; score so far=0
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: running uri tests; score so far=0
[16548] dbg: rules: compiled uri tests
[16548] dbg: rules: running rawbody tests; score so far=0
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: running full tests; score so far=0
[16548] dbg: rules: compiled full tests
[16548] dbg: rules: running meta tests; score so far=0
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: running tests for priority: -900
[16548] dbg: rules: running head tests; score so far=0
[16548] dbg: rules: compiled head tests
[16548] dbg: rules: running body tests; score so far=0
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: running uri tests; score so far=0
[16548] dbg: rules: compiled uri tests
[16548] dbg: rules: running rawbody tests; score so far=0
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: running full tests; score so far=0
[16548] dbg: rules: compiled full tests
[16548] dbg: rules: running meta tests; score so far=0
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: running tests for priority: -400
[16548] dbg: rules: running head tests; score so far=0
[16548] dbg: rules: compiled head tests
[16548] dbg: rules: running body tests; score so far=0
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: running uri tests; score so far=0
[16548] dbg: rules: compiled uri tests
[16548] dbg: plugin: Mail::SpamAssassin::Plugin::WLBLEval=HASH(0xa1daf40)
implements 'check_wb_list', priority 0
[16548] dbg: bayes: DB journal sync: last sync: 1213750123
[16548] dbg: bayes: corpus size: nspam = 2834, nham = 3386
[16548] dbg: bayes: score = 1
[16548] dbg: bayes: DB journal sync: last sync: 1213750123
[16548] dbg: bayes: untie-ing
[16548] dbg: rules: ran eval rule BAYES_99 ======> got hit (1)
[16548] dbg: rules: running rawbody tests; score so far=5.001
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: running full tests; score so far=5.001
[16548] dbg: rules: compiled full tests
[16548] dbg: rules: running meta tests; score so far=5.001
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: running tests for priority: 0
[16548] dbg: rules: running head tests; score so far=5.001
[16548] dbg: rules: compiled head tests
[16548] dbg: rules: ran header rule __RDNS_NONE ======> got hit: "[
ip=10.37.137.199 rdns= "
[16548] dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH ======> got
hit: "[ ip=10.37.137.199 rdns= helo=fiscprdfmx101 by=cs-us103.fidelity.com
ident= envfrom= intl=0 id= auth= "
[16548] dbg: rules: ran header rule __HELO_NO_DOMAIN ======> got hit: "[
ip=10.37.137.199 rdns= helo=fiscprdfmx101 "
[16548] dbg: rules: ran header rule JD_MY_IDS ======> got hit: "jdow@"
[16548] dbg: rules: ran header rule JD_MY_NAME ======> got hit:
"jdow@earthlink.net"
[16548] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "j"
[16548] dbg: rules: ran header rule JD_TO_EARTHLINK ======> got hit:
"@earthlink.net"
[16548] dbg: rules: ran header rule __SARE_WHITELIST_FLAG ======> got hit: "F"
[16548] dbg: rules: ran header rule __DOS_RELAYED_EXT ======> got hit:
"Received: from cs-us102.fidelity.com ([192.223.226.85]) by
mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP id
1k7Fl41nE3Nl34f1 for <jd...@earthlink.net>; Sat, 14 Jun 2008 19:39:18 -0400
(EDT)
[16548] dbg: rules: Received: "
[16548] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@mx-roseate.atl.sa.earthlink.net>"
[16548] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"2008061419"
[16548] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "4"
[16548] dbg: rules: ran header rule __SUBJECT_HEADER_EXISTS ======> got hit:
"4"
[16548] dbg: rules: ran header rule __CT ======> got hit: "m"
[16548] dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got hit:
"multipart/alternative"
[16548] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit:
"boundary"
[16548] dbg: rules: ran header rule __MISSING_REF ======> got hit: "UNSET"
[16548] dbg: rules: ran header rule __TO_HEADER_EXISTS ======> got hit: "j"
[16548] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[16548] dbg: rules: ran header rule __MSOE_MID_WRONG_CASE ======> got hit: "
[16548] dbg: rules: Message-Id: "
[16548] dbg: rules: ran header rule __SARE_HEAD_MIME_VALID ======> got hit:
"1.0"
[16548] dbg: rules: ran header rule __DOS_RCVD_SAT ======> got hit: " Sat, "
[16548] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[16548] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[16548] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<20...@mx-roseate.atl.sa.earthlink.net>
[16548] dbg: rules: "
[16548] dbg: spf: checking to see if the message has a Received-SPF header that
we can use
[16548] dbg: spf: using Mail::SPF for SPF checks
[16548] dbg: spf: checking HELO (helo=cs-us102.fidelity.com, ip=192.223.226.85)
[16548] dbg: dns: hit <dns:fidelity.com> 155.199.148.111
[16548] dbg: dns: hit <dns:fidelity.com> 155.199.36.111
[16548] dbg: dns: hit <dns:fidelity.com> 155.199.76.111
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 10 maillnx-us111.fmr.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 10 maillnx-us112.fmr.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 10 maillnx-us311.fmr.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 10 maillnx-us312.fmr.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 2 fidelity.com.s8a1.psmtp.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 4 fidelity.com.s8a2.psmtp.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 6 fidelity.com.s8b1.psmtp.com.
[16548] dbg: dns: hit <dns:fidelity.com?type=MX> 8 fidelity.com.s8b2.psmtp.com.
[16548] dbg: dns: hit <dns:fidelity.com.fulldom.rfc-ignorant.org> 127.0.0.3
[16548] dbg: spf: query for /192.223.226.85/cs-us102.fidelity.com: result:
none, comment: , text: No applicable sender policy available
[16548] dbg: dk: from: Fidelity.Investments.email@fidelity.com
[16548] dbg: dk: signing domain name: not found
[16548] dbg: dk: fetched policy for domain fidelity.com: o=~
[16548] dbg: dk: no signature
[16548] dbg: dk: comment is 'no signature'
[16548] dbg: dk: no signature
[16548] dbg: dk: whitelist_from_dk: could not find signing domain name
[16548] dbg: spf: already checked for Received-SPF headers, proceeding with DNS
based checks
[16548] dbg: spf: relayed through one or more trusted relays, cannot use
header-based Envelope-From, skipping
[16548] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit (1)
[16548] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get
pass, skipping whitelist check
[16548] dbg: dk: def_whitelist_from_dk: could not find signing domain name
[16548] dbg: spf: whitelist_from_spf: already checked spf and didn't get pass,
skipping whitelist check
[16548] dbg: rules: running body tests; score so far=5.103
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: ran body rule __FB_MA ======> got hit: "MA"
[16548] dbg: rules: ran body rule __MSG_BODY_EXISTS ======> got hit: "4"
[16548] dbg: rules: ran body rule JDB_UPDATE ======> got hit: " update "
[16548] dbg: rules: ran body rule __HAS_ANY_EMAIL ======> got hit:
"s@fidelity.c"
[16548] dbg: rules: ran body rule __SARE_PHONE_NUM ======> got hit:
"800-544-6666"
[16548] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "4"
[16548] dbg: rules: ran body rule __FB_V_SPACE_HTTP ======> got hit: "via
e-mail, click here. http://"
[16548] dbg: rules: running uri tests; score so far=5.104
[16548] dbg: rules: compiled uri tests
[16548] dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "h"
[16548] dbg: rules: ran uri rule __HAS_ANY_URI ======> got hit: "h"
[16548] dbg: rules: ran uri rule __LOCAL_PP_NONPPURL ======> got hit:
"http://fmx.fidelity.com"
[16548] dbg: rules: ran uri rule __SARE_URI_ANY ======> got hit: "h"
[16548] dbg: eval: stock info total: 0
[16548] dbg: rules: ran eval rule __SARE_BODY_BLANKS_5_100 ======> got hit (1)
[16548] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1)
[16548] dbg: eval: text words: 199, html words: 192
[16548] dbg: eval: madiff: left: 40, orig: 192, max-difference: 20.83%
[16548] dbg: rules: ran eval rule __COMMENT_EXISTS ======> got hit (1)
[16548] dbg: rules: ran eval rule __MIME_HTML ======> got hit (1)
[16548] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1)
[16548] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1)
[16548] dbg: rules: relay smtp.earthlink.net doesn't match any whitelist
[16548] dbg: rules: relay noehlo.host doesn't match any whitelist
[16548] dbg: rules: relay cs-us102.fidelity.com doesn't match any whitelist
[16548] dbg: rules: ran eval rule __TVD_MIME_ATT_TP ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_BODY_BLNK_5_100 ======> got hit (1)
[16548] dbg: rules: ran eval rule __HAVE_BOUNCE_RELAYS ======> got hit (1)
[16548] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1)
[16548] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit (1)
[16548] dbg: rules: running rawbody tests; score so far=5.105
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: ran rawbody rule __SARE_WHITE_FG_COLOR ======> got hit: "
COLOR="#FFFFFF"
[16548] dbg: rules: ran rawbody rule __SARE_HAS_BG_COLOR ======> got hit:
"bgcolor="
[16548] dbg: rules: ran rawbody rule __SARE_WHITE_BG_COLOR ======> got hit:
"bgcolor="#ffffff"
[16548] dbg: rules: ran rawbody rule __SARE_BLACK_FG_COLOR ======> got hit: "
color="#000000"
[16548] dbg: rules: ran rawbody rule __TVD_BODY ======> got hit: "FIDE"
[16548] dbg: rules: ran rawbody rule __SARE_HAS_FG_COLOR ======> got hit: "
COLOR="
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_P ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_BR ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_IMG ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_A ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_FONT ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_PRE ======> got hit (1)
[16548] dbg: rules: ran eval rule MIME_QP_LONG_LINE ======> got hit (1)
[16548] dbg: rules: ran eval rule __SARE_HTML_HAS_TITLE ======> got hit (1)
[16548] dbg: rules: ran eval rule __MIME_QP ======> got hit (1)
[16548] dbg: rules: running full tests; score so far=6.501
[16548] dbg: rules: compiled full tests
[16548] dbg: util: current PATH is:
/usr/lib/qt-3.3/bin:/usr/kerberos/bin:/usr/lib/ccache:/usr/local/bin:/bin:/usr/bin:/home/jdow/bin:/sbin:/usr/sbin
[16548] dbg: pyzor: pyzor is not available: no pyzor executable found
[16548] dbg: pyzor: no pyzor found, disabling Pyzor
[16548] dbg: ClamAV: No virus detected
[16548] dbg: rules: running meta tests; score so far=6.501
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: running tests for priority: 500
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 2 seconds to look up
(bl.open-whois.org.:fidelity.com)
[16548] dbg: uridnsbl: query for fidelity.com took 2 seconds to look up
(multi.surbl.org.:fidelity.com)
[16548] dbg: async: queries completed: 8 started: 9
[16548] dbg: async: queries active: DNSBL-A=1 URI-DNSBL=3 at Tue Jun 17
19:10:40 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 2 seconds to look up
(dob.sibl.support-intelligence.net:fidelity.com)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: DNSBL-A=1 URI-A=9 URI-DNSBL=2 at Tue Jun 17
19:10:40 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-A=9 URI-DNSBL=2 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 2 seconds to look up
(multi.uribl.com.:fidelity.com)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-A=9 URI-DNSBL=1 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 2 seconds to look up
(xs.surbl.org.:fidelity.com)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-A=9 at Tue Jun 17 19:10:40 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=8 at Tue Jun 17 19:10:40 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=7 URI-DNSBL=1 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=6 URI-DNSBL=2 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=5 URI-DNSBL=3 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=4 URI-DNSBL=4 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=3 URI-DNSBL=5 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=2 URI-DNSBL=6 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-A=1 URI-DNSBL=7 at Tue Jun 17 19:10:40
2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: async: queries completed: 1 started: 1
[16548] dbg: async: queries active: URI-DNSBL=8 at Tue Jun 17 19:10:40 2008
[16548] dbg: async: select found no socks ready
[16548] dbg: async: queries completed: 0 started: 0
[16548] dbg: async: queries active: URI-DNSBL=9 at Tue Jun 17 19:10:41 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:33.112.54.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=8 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:33.93.42.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=7 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:11.186.223.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=6 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:11.252.223.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=5 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:33.51.35.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=4 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:15.207.223.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=3 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:33.79.48.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=2 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:33.6.5.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: URI-DNSBL=1 at Tue Jun 17 19:10:42 2008
[16548] dbg: async: select found 1 socks ready
[16548] dbg: uridnsbl: query for fidelity.com took 4 seconds to look up
(sbl.spamhaus.org.:33.162.41.192)
[16548] dbg: async: queries completed: 1 started: 0
[16548] dbg: async: queries active: at Tue Jun 17 19:10:42 2008
[16548] dbg: dns: success for 11 of 12 queries
[16548] dbg: rules: running head tests; score so far=6.501
[16548] dbg: rules: compiled head tests
[16548] dbg: rules: running body tests; score so far=6.501
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: running uri tests; score so far=6.501
[16548] dbg: rules: compiled uri tests
[16548] dbg: rules: running rawbody tests; score so far=6.501
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: running full tests; score so far=6.501
[16548] dbg: rules: compiled full tests
[16548] dbg: rules: running meta tests; score so far=6.501
[16548] dbg: rules: meta test DIGEST_MULTIPLE has undefined dependency
'DCC_CHECK'
[16548] dbg: rules: meta test SARE_HEAD_SUBJ_RAND has undefined dependency
'SARE_XMAIL_SUSP2'
[16548] dbg: rules: meta test SARE_HEAD_SUBJ_RAND has undefined dependency
'X_AUTH_WARN_FAKED'
[16548] dbg: rules: meta test SARE_HEAD_XORIP_NOTIP has undefined dependency
'X_ORIG_IPNOT_IPV4'
[16548] dbg: rules: meta test SARE_RD_SAFE has undefined dependency
'SARE_RD_SAFE_MKSHRT'
[16548] dbg: rules: meta test SARE_RD_SAFE has undefined dependency
'SARE_RD_SAFE_GT'
[16548] dbg: rules: meta test SARE_RD_SAFE has undefined dependency
'SARE_RD_SAFE_TINY'
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: running tests for priority: 1000
[16548] dbg: rules: running head tests; score so far=6.603
[16548] dbg: rules: compiled head tests
[16548] dbg: rules: running body tests; score so far=6.603
[16548] dbg: rules: compiled body tests
[16548] dbg: rules: running uri tests; score so far=6.603
[16548] dbg: rules: compiled uri tests
[16548] dbg: rules: running rawbody tests; score so far=6.603
[16548] dbg: rules: compiled rawbody tests
[16548] dbg: rules: running full tests; score so far=6.603
[16548] dbg: rules: compiled full tests
[16548] dbg: rules: running meta tests; score so far=6.603
[16548] dbg: rules: compiled meta tests
[16548] dbg: check: is spam? score=6.603 required=5
[16548] dbg: check:
tests=BAYES_99,HTML_MESSAGE,JDB_UPDATE,JD_HI_BAYES,JD_MY_IDS,JD_MY_NAME,JD_TO_EARTHLINK,JD_VHI_BAYES,MIME_QP_LONG_LINE,RDNS_NONE
[16548] dbg: check:
subtests=__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__DNS_FROM_RFC_POST,__DOS_HAS_ANY_URI,__DOS_RCVD_SAT,__DOS_RELAYED_EXT,__ENV_AND_HDR_FROM_MATCH,__FB_MA,__FB_VIA_URL_SPEC1,__FB_V_SPACE_HTTP,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAVE_BOUNCE_RELAYS,__HELO_NO_DOMAIN,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSG_BODY_EXISTS,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__RDNS_NONE,__RFC_IGNORANT_ENVFROM,__SANE_MSGID,__SARE_BLACK_FG_COLOR,__SARE_BODY_BLANKS_5_100,__SARE_BODY_BLNK_5_100,__SARE_HAS_BG_COLOR,__SARE_HAS_FG_COLOR,__SARE_HEAD_MIME_VALID,__SARE_HTML_HAS_A,__SARE_HTML_HAS_BR,__SARE_HTML_HAS_FONT,__SARE_HTML_HAS_IMG,__SARE_HTML_HAS_P,__SARE_HTML_HAS_PRE,__SARE_HTML_HAS_TITLE,__SARE_META_MURTY3,__SARE_PHONE_NUM,__SARE_URI_ANY,__SARE_WHITELIST_FLAG,__SARE_WHITE_BG_COLOR,__SARE_WHITE_FG_COLOR,__SUBJECT_HEADER_EXISTS,__TAG_EXISTS_BODY,
 __TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TOCC_EXISTS,__TO_HEADER_EXISTS,__TVD_BODY,__TVD_MIME_ATT_TP
>From jdow@morticia.wizardess.wiz  Sat Jun 14 16:39:35 2008
Received: from localhost by morticia.wizardess.wiz
        with SpamAssassin (version 3.2.3);
        Tue, 17 Jun 2008 19:10:42 -0700
From: Fidelity Investments <Fi...@fidelity.com>
To: jdow@earthlink.net <jd...@earthlink.net>
Subject: *****SPAM***** 006.6 ** 4 Tax Steps to Take Now
Date: Sat, 14 Jun 2008 19:39:17 -0400
Message-Id: <20...@mx-roseate.atl.sa.earthlink.net>
X-Spam-Virus: No
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
        morticia.wizardess.wiz
X-Spam-Level: ******
X-Spam-Status: Yes, score=6.6 required=5.0 tests=BAYES_99=5.001,
        HTML_MESSAGE=0.001,JDB_UPDATE=0.001,JD_HI_BAYES=0.001,JD_MY_IDS=0.001,
        JD_MY_NAME=0.001,JD_TO_EARTHLINK=0.1,JD_VHI_BAYES=0.001,
        MIME_QP_LONG_LINE=1.396,RDNS_NONE=0.1 autolearn=disabled version=3.2.3
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_48586EA2.AA6B6BC7"

This is a multi-part message in MIME format.

------------=_48586EA2.AA6B6BC7
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "morticia.wizardess.wiz", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
jdow for details.

Content preview:  FIDELITY INVESTOR'S MONTHLY(SM) June 2008 4 TAX STEPS TO TAKE
   NOW The best tax plan, experts say, should begin long before the end of the
   year, when it's early enough to help achieve the most good. See what you
  can do.
http://fmx.fidelity.com/cgi-bin/fmxRedirect.pl?id=NgtWNBU_IDw_P3JlZnByPUZpZFB1Yg
   [...] 

Content analysis details:   (6.6 points, 5.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 5.0 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.0 JD_MY_IDS              To my ids somewhere.
 0.0 JD_MY_NAME             To my ids at Earthlink.
 0.1 JD_TO_EARTHLINK        To somebody at @earthlink.net specifically
 0.0 JDB_UPDATE             BODY: "update"
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.4 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76 chars
 0.1 RDNS_NONE              Delivered to trusted network by a host with no rDNS
 0.0 JD_VHI_BAYES           JD_VHI_BAYES
 0.0 JD_HI_BAYES            JD_HI_BAYES

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_48586EA2.AA6B6BC7
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

X-Spam-Virus: No
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
        morticia.wizardess.wiz
X-Spam-Level: ***
X-Spam-Status: No, score=3.2 required=5.0 tests=BAYES_99=5.001,
       
HELO_MISMATCH_COM=0.553,HTML_MESSAGE=0.001,JDB_UPDATE=0.001,JD_HI_BAYES=0.001,
       
JD_MY_IDS=0.001,JD_MY_NAME=0.001,JD_TO_EARTHLINK=0.1,JD_VHI_BAYES=0.001,
        MIME_QP_LONG_LINE=1.396,RCVD_IN_DNSWL_MED=-4,RDNS_NONE=0.1
autolearn=disabled
        version=3.2.3
Return-Path: <Fi...@fidelity.com>
Received: from smtp.earthlink.net [209.86.93.207]
        by morticia.wizardess.wiz with POP3 (fetchmail-6.3.7)
        for <jd...@morticia.wizardess.wiz> (single-drop); Sat, 14 Jun 2008
16:39:35 -0700 (PDT)
Received: from noehlo.host ([127.0.0.1])
        by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id
1k7Fl46IC3Nl34f0; Sat, 14 Jun 2008 19:39:18 -0400 (EDT)
Received: from cs-us102.fidelity.com ([192.223.226.85])
        by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP
id 1k7Fl41nE3Nl34f1
        for <jd...@earthlink.net>; Sat, 14 Jun 2008 19:39:18 -0400 (EDT)
Received: from fiscprdfmx101 ([10.37.137.199])
 by cs-us103.fidelity.com ([192.223.226.86]); Sat, 14 Jun 2008 19:39:17 -0400
Date: Sat, 14 Jun 2008 19:39:17 -0400
Subject: 4 Tax Steps to Take Now
x-fmx-id: 2152861154
X-CampaignID: FIDELITY-FCAOC001PIREMENEWS04195944
From: Fidelity Investments <Fi...@fidelity.com>
To: jdow@earthlink.net <jd...@earthlink.net>
Reply-To: Fidelity.Investments@fidelity.com
Mime-version: 1.0
Content-type: multipart/alternative;  
        boundary="B_3220429453_491812"
Message-Id: <20...@mx-roseate.atl.sa.earthlink.net>
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
X-Jdow: user jdow
Status: R
X-Keywords:                                                                     
Content-Length: 18381


--B_3220429453_491812
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable


FIDELITY INVESTOR'S MONTHLY(SM)
June 2008


===8<---

Here is the local.cf file.
===8<---
rewrite_header Subject     *****SPAM***** _SCORE(00)_ **
# report_safe 1
use_auto_whitelist 0
dns_available yes
dns_available test: <valid internal DNS address here for testing>
bayes_auto_learn 0
bayes_auto_expire 0
bayes_auto_learn_threshold_spam 20.0
bayes_auto_learn_threshold_nonspam 0.1
allow_user_rules 1
required_score 5.0
trusted_networks 192.168/16 209.86.93/24 192.223.226.85
internal_networks 192.168/16 209.86.93/24
===8<---

This has been annoying me since the switch to 3.2.x. I've just not had time to
run all the permutations I could think of.

I have come to think that it's the localhost as the last relay before coming
from Earthlink's MTA.

{^_^}


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925





--- Comment #6 from Matt Kettler <mk...@verizon.net>  2009-04-13 18:04:17 PST ---
Ok, looking at this bug report, I do see one thing missing..

Where's the whitelist_from_rcvd statement that the message was supposed to be
matching, but didn't?

I'm assuming you're trying to match the fidelity bit. That will *never* happen.

whitelist_from_rcvd requires that the MTA that receives a message do a
reverse-dns lookup on the host.

Looking at this header:

Received: from cs-us102.fidelity.com ([192.223.226.85])
        by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP
id 1k7Fl41nE3Nl34f1
        for <jd...@earthlink.net>; Sat, 14 Jun 2008 19:39:18 -0400 (EDT)


Earthlink isn't bothering, or the header would look like:

Received: from cs-us102.fidelity.com (cs-us102.fidelity.com [192.223.226.85])
        by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP
id 1k7Fl41nE3Nl34f1
        for <jd...@earthlink.net>; Sat, 14 Jun 2008 19:39:18 -0400 (EDT)


Sorry, SA can't do much to make up for lack of effort on the part of Earthlink.


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925

Mark Martinec <Ma...@ijs.si> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|3.3.0                       |Undefined
           Severity|major                       |normal

-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925





--- Comment #7 from Joanne <jd...@earthlink.net>  2009-04-15 22:59:43 PST ---
whitelist_from_rcvd     *@fidelity.com *fidelity.com

At the time that was the address the messages came from.
I fish them out of spam when I have to.

This seems to be working at present.
whitelist_from_spf *@fidelity.com

I just got these scores with both the above fidelity rules engaged:
 5.0 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 0.0 JD_MY_IDS              To my ids somewhere.
 0.0 JD_MY_NAME             To my ids at Earthlink.
 0.1 JD_TO_EARTHLINK        To somebody at @earthlink.net specifically
-0.0 SPF_PASS               SPF: sender matches SPF record
-100 USER_IN_SPF_WHITELIST  From: address is in the user's SPF whitelist
 0.0 JDB_MARKET             BODY: Stock word
 0.0 JDB_UPDATE             BODY: "update"
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.6 SARE_UNSUB38D          RAW: SARE_UNSUB38D
 1.4 MIME_QP_LONG_LINE      RAW: Quoted-printable line longer than 76 chars
 0.1 RDNS_NONE              Delivered to trusted network by a host with no 
rDNS
 0.0 JD_VHI_BAYES           JD_VHI_BAYES
 0.0 JD_HI_BAYES            JD_HI_BAYES
 0.6 HELO_MISMATCH_COM      HELO_MISMATCH_COM

This is the message header:
===8<---
[jdow@morticia big]$ spamassassin -t "~/mail/Investor's Monthly_  Message 
from Fidelity President.eml"
Return-Path: <Fi...@fidelity.com>
X-Spam-Virus: No
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
        morticia.wizardess.wiz
X-Spam-Level:
X-Spam-Status: No, score=-92.2 required=5.0 tests=BAYES_99=5.001,
       
HELO_MISMATCH_COM=0.553,HTML_MESSAGE=0.001,JDB_MARKET=0.01,JDB_UPDATE=0.001,
        JD_HI_BAYES=0.001,JD_MY_IDS=0.001,JD_MY_NAME=0.001,JD_TO_EARTHLINK=0.1,
       
JD_VHI_BAYES=0.001,MIME_QP_LONG_LINE=1.396,RDNS_NONE=0.1,SARE_UNSUB38D=0.642,
        SPF_PASS=-0.001,USER_IN_SPF_WHITELIST=-100 autolearn=disabled 
version=3.2.5
Received: from smtp.earthlink.net [209.86.93.210]
        by morticia.wizardess.wiz with POP3 (fetchmail-6.3.8)
        for <jd...@morticia.wizardess.wiz> (single-drop); Sat, 28 Mar 2009 
14:39:44 -0700 (PDT)
Received: from mx-various.atl.sa.earthlink.net ([127.0.0.1])
        by mx-various.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP 
id 1lNGf24kQ3Nl36J0; Sat, 28 Mar 2009 17:39:00 -0400 (EDT)
Received: from lmmk629.fidelity.com ([192.223.243.138])
        by mx-various.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP 
id 1lNGf13483Nl36J2
        for <jd...@earthlink.net>; Sat, 28 Mar 2009 17:38:59 -0400 (EDT)
Received: from fiscprdfmx302.fmr.com ([10.33.194.134])
 by cs-us302.fidelity.com ([192.223.243.149]); Sat, 28 Mar 2009 
17:38:58 -0400
Date: Sat, 28 Mar 2009 17:38:58 -0400
Subject: Investor's Monthly:  Message from Fidelity President
x-fmx-id: 3664871072
X-CampaignID: FIDELITY-FCAOC001PIREMENEWS08428588
From: Fidelity Investments <Fi...@fidelity.com>
To: jdow@earthlink.net <jd...@earthlink.net>
Reply-To: Fidelity.Investments@fidelity.com
Mime-version: 1.0
Content-type: multipart/alternative;
        boundary="B_3220429453_491812"
Message-Id: <20...@mx-various.atl.sa.earthlink.net>
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
X-Jdow: user jdow


--B_3220429453_491812
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable
===8<--- (And a little extra for good measure)


{^_^}    Joanne


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925





--- Comment #3 from Joanne Dow <jd...@earthlink.net>  2008-11-05 02:22:53 PST ---
(In reply to comment #2)
> did you bring this up on spamassassin-users?
> I can't see the mail header nor your whitelist setting...
> 

1)
The last form I tested was:
whitelist_from_rcvd     *@fidelity.com *fidelity.com

I tried many others as I thought of them.
whitelist_from_rcvd     *@fidelity.com fidelity.com
etc....

2)
I included the header in that long message above:
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

X-Spam-Virus: No
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
        morticia.wizardess.wiz
X-Spam-Level: ***
X-Spam-Status: No, score=3.2 required=5.0 tests=BAYES_99=5.001,

HELO_MISMATCH_COM=0.553,HTML_MESSAGE=0.001,JDB_UPDATE=0.001,JD_HI_BAYES=0.001,

JD_MY_IDS=0.001,JD_MY_NAME=0.001,JD_TO_EARTHLINK=0.1,JD_VHI_BAYES=0.001,
        MIME_QP_LONG_LINE=1.396,RCVD_IN_DNSWL_MED=-4,RDNS_NONE=0.1
autolearn=disabled
        version=3.2.3
Return-Path: <Fi...@fidelity.com>
Received: from smtp.earthlink.net [209.86.93.207]
        by morticia.wizardess.wiz with POP3 (fetchmail-6.3.7)
        for <jd...@morticia.wizardess.wiz> (single-drop); Sat, 14 Jun 2008
16:39:35 -0700 (PDT)
Received: from noehlo.host ([127.0.0.1])
        by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with SMTP id
1k7Fl46IC3Nl34f0; Sat, 14 Jun 2008 19:39:18 -0400 (EDT)
Received: from cs-us102.fidelity.com ([192.223.226.85])
        by mx-roseate.atl.sa.earthlink.net (EarthLink SMTP Server) with ESMTP
id 1k7Fl41nE3Nl34f1
        for <jd...@earthlink.net>; Sat, 14 Jun 2008 19:39:18 -0400 (EDT)
Received: from fiscprdfmx101 ([10.37.137.199])
 by cs-us103.fidelity.com ([192.223.226.86]); Sat, 14 Jun 2008 19:39:17 -0400
Date: Sat, 14 Jun 2008 19:39:17 -0400
Subject: 4 Tax Steps to Take Now
x-fmx-id: 2152861154
X-CampaignID: FIDELITY-FCAOC001PIREMENEWS04195944
From: Fidelity Investments <Fi...@fidelity.com>
To: jdow@earthlink.net <jd...@earthlink.net>
Reply-To: Fidelity.Investments@fidelity.com
Mime-version: 1.0
Content-type: multipart/alternative;  
        boundary="B_3220429453_491812"
Message-Id: <20...@mx-roseate.atl.sa.earthlink.net>
X-ELNK-AV: 0
X-ELNK-Info: sbv=0; sbrc=.0; sbf=00; sbw=000;
X-Jdow: user jdow
Status: R
X-Keywords:                                                                     
Content-Length: 18381


--B_3220429453_491812
Content-type: text/plain; charset="ISO-8859-1"
Content-transfer-encoding: quoted-printable


FIDELITY INVESTOR'S MONTHLY(SM)
June 2008


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925


Matus UHLAR - fantomas <uh...@fantomas.sk> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |uhlar@fantomas.sk




--- Comment #2 from Matus UHLAR - fantomas <uh...@fantomas.sk>  2008-11-05 01:44:23 PST ---
did you bring this up on spamassassin-users?
I can't see the mail header nor your whitelist setting...


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925





--- Comment #4 from Matus UHLAR - fantomas <uh...@fantomas.sk>  2009-02-12 23:45:13 PST ---
did you bring this issue up on spamassassin-users mailing list?

did you ask earthlink for advise on setting up of trusted_networks and
internal_networks?


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925





--- Comment #5 from Joanne Dow <jd...@earthlink.net>  2009-02-13 03:30:34 PST ---
(In reply to comment #4)
> did you bring this issue up on spamassassin-users mailing list?
> 
> did you ask earthlink for advise on setting up of trusted_networks and
> internal_networks?
> 

Been there. Done that. Using tee-shirt as a dust rag.

{^_^}


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925


Joanne Dow <jd...@earthlink.net> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jdowjunkmail@earthlink.net




--- Comment #1 from Joanne Dow <jd...@earthlink.net>  2008-06-18 02:30:15 PST ---
Is the cause known and is there a code snippet I could use to temporarily
repair 3.2.4 or 3.2.5? Too much spam is starting to come through the holes I
have to create using straight whitelist_from. And now that the bug is out in
the open I expect it to be exploited heavily.

{^_^}


-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.

[Bug 5925] whitelist_from_rcvd and Earthlink - fails

Posted by bu...@bugzilla.spamassassin.org.
https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5925


Justin Mason <jm...@jmason.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Target Milestone|Undefined                   |3.3.0




-- 
Configure bugmail: https://issues.apache.org/SpamAssassin/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.