You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@bugzilla.spamassassin.org on 2007/03/23 12:54:40 UTC

[Bug 5386] New: SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386

           Summary: SA 3.1.8 doesn't want to stop auto_learning, despite the
                    config file!
           Product: Spamassassin
           Version: 3.1.8
          Platform: Other
        OS/Version: Linux
            Status: NEW
          Severity: critical
          Priority: P5
         Component: Learner
        AssignedTo: dev@spamassassin.apache.org
        ReportedBy: a16x@freemail.hu


SA 3.1.8 doesn't want to stop auto_learning, despite the config file!
(3.1.7 didn't do that. Config didn't change since 3.1.7)

local.cf file contents:

bayes_auto_learn 0
bayes_path /var/spamassassin/bayes

#bayes_learn_to_journal 1
#bayes_auto_learn_threshold_spam 8.0
#bayes_file_mode 0666
#bayes_auto_expire 1



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From jm@jmason.org  2007-03-23 05:17 -------
please attach output from "spamassassin -D -t < message" showing autolearning
happening with that config -- ensure that the debug output lists that config
file as being read, of course ;)



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From jm@jmason.org  2007-03-23 06:28 -------
yes, please post the *ENTIRE* debug log.  we know what we're looking for...



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From a16x@freemail.hu  2007-03-23 05:55 -------
I forgot to include the row, that shows that config file is read.
here it is:


[11749] dbg: config: read file /etc/mail/spamassassin/local.cf



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386


felicity@apache.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From felicity@apache.org  2007-03-23 07:14 -------
(In reply to comment #6)
> The number of tokens doesn't change. It remains 255481, as you can see below.
> But why SA does update the bayes_seen and the bayes-toks files when
> auto_learning is disabled?

Because it does atime updates on the tokens for expiry.  The mtime on the files
change because they were opened for writing.

> qmail:/var/spamassassin# sa-learn --dump all | wc -l
> 255481

fwiw, "sa-learn --dump magic" would give you that number (actually, it would
give you the real # of tokens, since some output lines aren't tokens.)

> My second question is:
> 
> Why is SA sometimes unable to score e-mails?
> (even timeout is set to 30 seconds)
> We are using Qmail-Scanner, and we got >1000 messages per day like these below:

Please ask these types of questions on the users list.  If you question is
related to qmail-scanner, you should ask on the appropriate qmail-scanner list.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From a16x@freemail.hu  2007-03-23 07:18 -------
(In reply to comment #5)
> yes, please post the *ENTIRE* debug log.  we know what we're looking for...


Here is the ENTIRE debug log: (it's a bit long...)


qmail:/tmp/spam# spamassassin -D -t <./mail.eml

[3755] dbg: logger: adding facilities: all
[3755] dbg: logger: logging level is DBG
[3755] dbg: generic: SpamAssassin version 3.1.8
[3755] dbg: config: score set 0 chosen.
[3755] dbg: util: running in taint mode? yes
[3755] dbg: util: taint mode: deleting unsafe environment variables, resetting 
PATH
[3755] dbg: util: PATH included '/sbin', keeping
[3755] dbg: util: PATH included '/bin', keeping
[3755] dbg: util: PATH included '/usr/sbin', keeping
[3755] dbg: util: PATH included '/usr/bin', keeping
[3755] dbg: util: PATH included '/usr/bin/X11', which doesn't exist, dropping
[3755] dbg: util: PATH included '/usr/local/sbin', keeping
[3755] dbg: util: PATH included '/usr/local/bin', keeping
[3755] dbg: util: final PATH set to: /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/
sbin:/usr/local/bin
[3755] dbg: message: ---- MIME PARSER START ----
[3755] dbg: message: main message type: text/plain
[3755] dbg: message: parsing normal part
[3755] dbg: message: added part, type: text/plain
[3755] dbg: message: ---- MIME PARSER END ----
[3755] dbg: dns: is Net::DNS::Resolver available? yes
[3755] dbg: dns: Net::DNS version: 0.48
[3755] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[3755] dbg: config: read file /etc/mail/spamassassin/init.pre
[3755] dbg: config: read file /etc/mail/spamassassin/v310.pre
[3755] dbg: config: read file /etc/mail/spamassassin/v312.pre
[3755] dbg: config: using "/var/lib/spamassassin/3.001008" for sys rules pre 
files
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org.pre
[3755] dbg: config: using "/var/lib/spamassassin/3.001008" for default rules dir
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org.cf
[3755] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[3755] dbg: config: read file /etc/mail/spamassassin/local.cf
[3755] dbg: config: using "/root/.spamassassin" for user state dir
[3755] dbg: config: using "/root/.spamassassin/user_prefs" for user prefs file
[3755] dbg: config: read file /root/.spamassassin/user_prefs
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::
URIDNSBL=HASH(0x8cb9f98)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::
Hashcash=HASH(0x8cd367c)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8cc094c)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from @INC
[3755] dbg: dcc: network tests on, registering DCC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::DCC=HASH(0x8c85e90)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[3755] dbg: razor2: razor2 is available, version 2.67
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::
Razor2=HASH(0x8d5e838)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::AWL=HASH(0x90007e4)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject from 
@INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::
WhiteListSubject=HASH(0x900c26c)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::
MIMEHeader=HASH(0x9015f94)
[3755] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
[3755] dbg: plugin: registered Mail::SpamAssassin::Plugin::
ReplaceTags=HASH(0x901eab4)
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/empty.pre
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/empty.pre" for included file
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_uribl.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_uribl.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_uribl.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_anti_ratware.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_anti_ratware.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_anti_ratware.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_razor2.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_razor2.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_razor2.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_body_tests_es.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_body_tests_es.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_body_tests_es.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_body_tests_pl.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_body_tests_pl.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_body_tests_pl.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_dnsbl_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_dnsbl_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_dnsbl_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_spf.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_spf.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_spf.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_awl.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_awl.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_awl.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_spf.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_spf.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_spf.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_uri_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_uri_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_uri_tests.cf
[3755] dbg: config: adding redirector regex: /^http:\/\/chkpt\.zdnet\.com\/
chkpt\/\w+\/(.*)$/i
[3755] dbg: config: adding redirector regex: /^http:\/\/www(?:\d+)?\.nate\.com\/
r\/\w+\/(.*)$/i
[3755] dbg: config: adding redirector regex: /^http:\/\/.+\.gov\/(?:.*\/)?
externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[3755] dbg: config: adding redirector regex: /^http:\/\/redir\.internet\.com\/.
+?\/.+?\/(.*)$/i
[3755] dbg: config: adding redirector regex: /^http:\/\/(?:.*?\.)?adtech\.de\/.
*(?:;|\|)link=(.*?)(?:;|$)/i
[3755] dbg: config: adding redirector regex: m'^http.*?/redirect\.php\?.*(?<=[?
&])goto=(.*?)(?:$|[&#])'i
[3755] dbg: config: adding redirector regex: m'^https?:/*(?:[^/]+\.)?emf\d\.com/
r\.cfm.*?&r=(.*)'i
[3755] dbg: config: adding redirector regex: m'/(?:index.php)?\?.*(?<=[?&])
URL=(.*?)(?:$|[&#])'i
[3755] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.
\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
[3755] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.
\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|
[\s+&#])'i
[3755] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.
\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%
22|["\s+&#])'i
[3755] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.
\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_fake_helo_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_fake_helo_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_fake_helo_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_pyzor.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_pyzor.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_pyzor.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_accessdb.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_accessdb.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_accessdb.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_dkim.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_dkim.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_dkim.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_domainkeys.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_domainkeys.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_domainkeys.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_porn.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_porn.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_porn.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_hashcash.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_hashcash.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_hashcash.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/70_iadb.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/70_iadb.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/70_iadb.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_net_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_net_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_net_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_dkim.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_dkim.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_dkim.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_replace.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_replace.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_replace.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/80_additional.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/80_additional.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/80_additional.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_html_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_html_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_html_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_head_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_head_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_head_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_pt_br.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_pt_br.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_pt_br.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_de.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_de.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_de.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_fr.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_fr.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_fr.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_nl.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_nl.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_nl.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_pl.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_pl.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/30_text_pl.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_ratware.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_ratware.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_ratware.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/10_misc.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/10_misc.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/10_misc.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_body_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_body_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_body_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_drugs.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_drugs.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_drugs.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_dk.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_dk.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_dk.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_subject.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_subject.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist_subject.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_advance_fee.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_advance_fee.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_advance_fee.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/23_bayes.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/23_bayes.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/23_bayes.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_antivirus.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_antivirus.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_antivirus.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/60_whitelist.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_meta_tests.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_meta_tests.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_meta_tests.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/50_scores.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/50_scores.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/50_scores.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_textcat.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_textcat.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_textcat.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_phrases.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_phrases.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_phrases.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_dcc.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_dcc.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/25_dcc.cf
[3755] dbg: plugin: fixed relative path: /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_compensate.cf
[3755] dbg: config: using "/var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_compensate.cf" for included file
[3755] dbg: config: read file /var/lib/spamassassin/3.001008/
updates_spamassassin_org/20_compensate.cf
[3755] dbg: config: not allowing user rules!
[3755] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x901eab4) 
implements 'finish_parsing_end'
[3755] dbg: replacetags: replacing tags
[3755] dbg: replacetags: done replacing tags
[3755] dbg: bayes: tie-ing to DB file R/O /var/spamassassin/bayes_toks
[3755] dbg: bayes: tie-ing to DB file R/O /var/spamassassin/bayes_seen
[3755] dbg: bayes: found bayes db version 3
[3755] dbg: bayes: DB journal sync: last sync: 1174656378
[3755] dbg: config: score set 3 chosen.
[3755] dbg: dns: name server: 127.0.0.1, family: 2, ipv6: 0
[3755] dbg: dns: testing resolver nameservers: 127.0.0.1
[3755] dbg: dns: trying (3) google.com...
[3755] dbg: dns: looking up NS for 'google.com'
[3755] dbg: dns: NS lookup of google.com using 127.0.0.1 succeeded => DNS 
available (set dns_available to override)
[3755] dbg: dns: is DNS available? 1
[3755] dbg: dns: looking up PTR record for '82.79.222.67'
[3755] dbg: dns: PTR for '82.79.222.67': ''
[3755] dbg: received-header: parsed as [ ip=82.79.222.67 rdns= helo=nawaragroup.
com by=qmail.rnd ident= envfrom= intl=0 id= auth= ]
[3755] dbg: received-header: relay 82.79.222.67 trusted? no internal? no
[3755] dbg: dns: looking up PTR record for '216.163.188.58'
[3755] dbg: dns: PTR for '216.163.188.58': 'eforwardct.name-services.com'
[3755] dbg: received-header: parsed as [ ip=216.163.188.58 rdns=eforwardct.name-
services.com helo=eforwardct.name-services.com by=calivita.com ident= envfrom= 
intl=0 id=H?TYI--7)07/U-,6 auth= ]
[3755] dbg: received-header: relay 216.163.188.58 trusted? no internal? no
[3755] dbg: metadata: X-Spam-Relays-Trusted:
[3755] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=82.79.222.67 rdns= 
helo=nawaragroup.com by=qmail.rnd ident= envfrom= intl=0 id= auth= ] [ ip=216.
163.188.58 rdns=eforwardct.name-services.com helo=eforwardct.name-services.com 
by=calivita.com ident= envfrom= intl=0 id=H?TYI--7)07/U-,6 auth= ]
[3755] dbg: metadata: X-Spam-Relays-Internal:
[3755] dbg: metadata: X-Spam-Relays-External: [ ip=82.79.222.67 rdns= 
helo=nawaragroup.com by=qmail.rnd ident= envfrom= intl=0 id= auth= ] [ ip=216.
163.188.58 rdns=eforwardct.name-services.com helo=eforwardct.name-services.com 
by=calivita.com ident= envfrom= intl=0 id=H?TYI--7)07/U-,6 auth= ]
[3755] dbg: message: ---- MIME PARSER START ----
[3755] dbg: message: main message type: multipart/alternative
[3755] dbg: message: parsing multipart, got boundary: ----
=_NextPart_000_0006_01C76D06.29377480
[3755] dbg: message: found part of type text/plain, boundary: ----
=_NextPart_000_0006_01C76D06.29377480
[3755] dbg: message: parsing normal part
[3755] dbg: message: added part, type: text/plain
[3755] dbg: message: found part of type text/html, boundary: ----
=_NextPart_000_0006_01C76D06.29377480
[3755] dbg: message: parsing normal part
[3755] dbg: message: added part, type: text/html
[3755] dbg: message: ---- MIME PARSER END ----
[3755] dbg: message: decoding other encoding type (7bit), ignoring
[3755] dbg: message: decoding quoted-printable
[3755] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb9f98) 
implements 'parsed_metadata'
[3755] dbg: uridnsbl: domains to query:
[3755] dbg: dns: checking A and MX for host riecooper.com
[3755] dbg: dns: launching DNS A query for riecooper.com in background
[3755] dbg: dns: launching DNS MX query for riecooper.com in background
[3755] dbg: check: running tests for priority: 0
[3755] dbg: rules: running header regexp tests; score so far=0
[3755] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[3755] dbg: rules: ran header rule __CT ======> got hit: "m"
[3755] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[3755] dbg: rules: ran header rule __SANE_MSGID ======> got hit: 
"<01...@dwriecooperm>
[3755] dbg: rules: "
[3755] dbg: rules: ran header rule __MIMEOLE_MS ======> got hit: "Produced By 
Microsoft MimeOLE"
[3755] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit: 
"@dwriecooperm>"
[3755] dbg: rules: ran header rule __MSGID_RANDY ======> got hit: 
"<01...@dwriecooperm>"
[3755] dbg: rules: ran header rule __MAILER_OL_5510 ======> got hit: "Microsoft 
Office Outlook, Build 11.0.5510"
[3755] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[3755] dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got hit: 
"multipart/alternative"
[3755] dbg: rules: ran header rule __HAS_OUTLOOK_IN_MAILER_NEW ======> got hit: 
"Microsoft Office Outlook"
[3755] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[3755] dbg: rules: ran header rule __HAS_MIMEOLE ======> got hit: "P"
[3755] dbg: rules: ran header rule __MSGID_DOLLARS_MAYBE ======> got hit: 
"<01...@dwriecooperm>"
[3755] dbg: rules: ran header rule __MSGID_DOLLARS_OK ======> got hit: 
"<01...@dwriecooperm>"
[3755] dbg: rules: ran header rule __OE_MSGID_2 ======> got hit: 
"<01...@dwriecooperm>"
[3755] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "N"
[3755] dbg: rules: ran header rule __HAS_OUTLOOK_IN_MAILER ======> got hit: 
"Microsoft Office Outlook"
[3755] dbg: rules: ran header rule RCVD_FORGED_WROTE ======> got hit: " by 
calivita.com with esmtp (/49*'<G@F P'S*U6) id"
[3755] dbg: rules: ran header rule __MSGID_OK_HEX ======> got hit: "01c76d49"
[3755] dbg: rules: ran header rule __SUBJECT_NEEDS_MIME ======> got hit: ""
[3755] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit: 
"boundary"
[3755] dbg: rules: ran header rule __HAS_X_MAILER ======> got hit: "M"
[3755] dbg: spf: checking HELO (helo=nawaragroup.com, ip=82.79.222.67)
[3755] dbg: spf: cannot load or create Mail::SPF::Query module: Can't locate 
Mail/SPF/Query.pm in @INC (@INC contains: lib /usr/local/share/perl/5.8.4 /etc/
perl /usr/local/lib/perl/5.8.4 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 
/usr/share/perl/5.8 /usr/local/lib/site_perl) at /usr/local/share/perl/5.8.4/
Mail/SpamAssassin/Plugin/SPF.pm line 287.
[3755] dbg: eval: all '*From' addrs: dwriecooperm@riecooper.com
[3755] dbg: eval: forged-HELO: from= helo=nawaragroup.com by=qmail.rnd
[3755] dbg: eval: forged-HELO: from=name-services.com helo=name-services.com 
by=calivita.com
[3755] dbg: eval: trying Received header date for real time: 23 Mar 2007 12:46:
20 -0000
[3755] dbg: eval: time_t from date=1174653980, rcvd= 23 Mar 2007 12:46:20 -0000
[3755] dbg: eval: trying Received header date for real time: 23 Mar 2007 12:46:
03 +0480
[3755] dbg: eval: time_t from date=1174634763, rcvd= 23 Mar 2007 12:46:03 +0480
[3755] dbg: eval: all '*To' addrs: 83taeaaaaa@calivita.com
[3755] dbg: spf: checking EnvelopeFrom (helo=nawaragroup.com, ip=82.79.222.67, 
envfrom=dwriecooperm@riecooper.com)
[3755] dbg: spf: cannot load or create Mail::SPF::Query module: Can't locate 
Mail/SPF/Query.pm in @INC (@INC contains: lib /usr/local/share/perl/5.8.4 /etc/
perl /usr/local/lib/perl/5.8.4 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 
/usr/share/perl/5.8 /usr/local/lib/site_perl) at /usr/local/share/perl/5.8.4/
Mail/SpamAssassin/Plugin/SPF.pm line 287.
[3755] dbg: rules: ran eval rule DATE_IN_PAST_03_06 ======> got hit
[3755] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
[3755] dbg: spf: def_whitelist_from_spf: dwriecooperm@riecooper.com is not in 
DEF_WHITELIST_FROM_SPF
[3755] dbg: eval: date chosen from message: Fri Mar 23 13:46:20 2007
[3755] dbg: spf: whitelist_from_spf: dwriecooperm@riecooper.com is not in user's 
WHITELIST_FROM_SPF
[3755] dbg: rules: running body-text per-line regexp tests; score so far=3.278
[3755] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "N"
[3755] dbg: uri: running uri tests; score so far=3.278
[3755] dbg: bayes: DB journal sync: last sync: 1174656378
[3755] dbg: bayes: corpus size: nspam = 56865, nham = 2682
[3755] dbg: bayes: score = 0.99999990564985
[3755] dbg: bayes: DB journal sync: last sync: 1174656378
[3755] dbg: bayes: untie-ing
[3755] dbg: bayes: untie-ing db_toks
[3755] dbg: bayes: untie-ing db_seen
[3755] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit
[3755] dbg: eval: text words: 69, html words: 75
[3755] dbg: eval: madiff: left: 11, orig: 75, max-difference: 14.67%
[3755] dbg: rules: ran eval rule __MIME_HTML ======> got hit
[3755] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit
[3755] dbg: rules: ran eval rule __UPPERCASE_25_50 ======> got hit
[3755] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit
[3755] dbg: rules: ran eval rule BAYES_99 ======> got hit
[3755] dbg: rules: ran eval rule __HTML_LENGTH_1536_2048 ======> got hit
[3755] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit
[3755] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit
[3755] dbg: rules: running raw-body-text per-line regexp tests; score so far=6.
779
[3755] dbg: rules: ran eval rule __MIME_QP ======> got hit
[3755] dbg: rules: running full-text regexp tests; score so far=6.779
[3755] dbg: info: entering helper-app run mode
[3755] dbg: info: leaving helper-app run mode
[3755] dbg: razor2: part=0 engine=4 contested=0 confidence=0
[3755] dbg: razor2: part=1 engine=4 contested=0 confidence=100
[3755] dbg: razor2: part=1 engine=8 contested=1 confidence=0
[3755] dbg: razor2: results: spam? 0
[3755] dbg: razor2: results: engine 8, highest cf score: 0
[3755] dbg: razor2: results: engine 4, highest cf score: 100
[3755] dbg: rules: ran eval rule RAZOR2_CF_RANGE_E4_51_100 ======> got hit
[3755] dbg: rules: ran eval rule RAZOR2_CF_RANGE_51_100 ======> got hit
[3755] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[3755] dbg: util: current PATH is: /sbin:/bin:/usr/sbin:/usr/bin:/usr/local/
sbin:/usr/local/bin
[3755] dbg: util: executable for dccproc was found at /usr/bin/dccproc
[3755] dbg: dcc: dccproc is available: /usr/bin/dccproc
[3755] dbg: info: entering helper-app run mode
[3755] dbg: dcc: opening pipe: /usr/bin/dccproc -H -x 0 -a 82.79.222.67 < /tmp/.
spamassassin3755CHxQ1ytmp
[3766] dbg: util: setuid: ruid=0 euid=0
[3755] dbg: dcc: got response: X-DCC--Metrics: qmail.rnd 104; Body=1 Fuz1=1 
Fuz2=1
[3755] dbg: info: leaving helper-app run mode
[3755] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb9f98) 
implements 'check_tick'
[3755] dbg: check: running tests for priority: 500
[3755] dbg: dns: success for 2 of 2 queries
[3755] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb9f98) 
implements 'check_post_dnsbl'
[3755] dbg: rules: running meta tests; score so far=8.779
[3755] info: rules: meta test DIGEST_MULTIPLE has undefined dependency 
'PYZOR_CHECK'
[3755] dbg: rules: running header regexp tests; score so far=8.779
[3755] dbg: rules: running body-text per-line regexp tests; score so far=8.779
[3755] dbg: uri: running uri tests; score so far=8.779
[3755] dbg: rules: running raw-body-text per-line regexp tests; score so far=8.
779
[3755] dbg: rules: running full-text regexp tests; score so far=8.779
[3755] dbg: check: running tests for priority: 1000
[3755] dbg: rules: running meta tests; score so far=8.779
[3755] dbg: rules: running header regexp tests; score so far=8.779
[3755] dbg: locker: safe_lock: created /var/spamassassin/auto-whitelist.lock.
qmail.rnd.3755
[3755] dbg: locker: safe_lock: trying to get lock on /var/spamassassin/auto-
whitelist with 0 retries
[3755] dbg: locker: safe_lock: link to /var/spamassassin/auto-whitelist.lock: 
link ok
[3755] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in /var/
spamassassin/auto-whitelist
[3755] dbg: auto-whitelist: db-based dwriecooperm@riecooper.com|ip=216.163 
scores 6/41.23
[3755] dbg: auto-whitelist: AWL active, pre-score: 8.779, autolearn score: 8.
779, mean: 6.87166666666667, IP: 216.163.188.58
[3755] dbg: auto-whitelist: add_score: new count: 7, new totscore: 50.009
[3755] dbg: auto-whitelist: DB addr list: untie-ing and unlocking
[3755] dbg: auto-whitelist: DB addr list: file locked, breaking lock
[3755] dbg: locker: safe_unlock: unlink /var/spamassassin/auto-whitelist.lock
[3755] dbg: auto-whitelist: post auto-whitelist score: 7.82533333333333
[3755] dbg: rules: running body-text per-line regexp tests; score so far=7.
82533333333333
[3755] dbg: uri: running uri tests; score so far=7.82533333333333
[3755] dbg: rules: running raw-body-text per-line regexp tests; score so far=7.
82533333333333
[3755] dbg: rules: running full-text regexp tests; score so far=7.82533333333333
[3755] dbg: check: is spam? score=7.825 required=3.7
[3755] dbg: check: tests=AWL,BAYES_99,DATE_IN_PAST_03_06,HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E4_51_100,RCVD_FORGED_WROTE,
UPPERCASE_25_50
[3755] dbg: check: subtests=__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,
__ENV_AND_HDR_FROM_MATCH,__HAS_MIMEOLE,__HAS_MSGID,__HAS_OUTLOOK_IN_MAILER,
__HAS_OUTLOOK_IN_MAILER_NEW,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,
__HTML_LENGTH_1536_2048,__MAILER_OL_5510,__MIMEOLE_MS,__MIME_HTML,__MIME_QP,
__MIME_VERSION,__MSGID_DOLLARS_MAYBE,__MSGID_DOLLARS_OK,__MSGID_OK_HEX,
__MSGID_OK_HOST,__MSGID_RANDY,__NONEMPTY_BODY,__OE_MSGID_2,__SANE_MSGID,
__SUBJECT_NEEDS_MIME,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,
__TAG_EXISTS_META,__TOCC_EXISTS,__UPPERCASE_25_50
Received: from localhost by qmail.rnd
        with SpamAssassin (version 3.1.8);
        Fri, 23 Mar 2007 14:54:49 +0100
From: "RF Mackey" <dw...@riecooper.com>
To: <83...@calivita.com>
Subject: ---SPAM--- No more need to beg for a promotion  get a University Degree
Date: Fri, 23 Mar 2007 12:46:03 +0480
Message-Id: <01...@dwriecooperm>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on qmail.rnd
X-Spam-Level: *******
X-Spam-Status: Yes, hits=7.8 required=3.7 score=7.8 tests=AWL,BAYES_99,
        DATE_IN_PAST_03_06,HTML_MESSAGE,RAZOR2_CF_RANGE_51_100,
        RAZOR2_CF_RANGE_E4_51_100,RCVD_FORGED_WROTE,UPPERCASE_25_50
        autolearn=disabled version=3.1.8
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4603DC29.76EE9DF8"

This is a multi-part message in MIME format.

------------=_4603DC29.76EE9DF8
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit

Spam detection software, running on the system "qmail.rnd", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  University DegreeOBTAIN A PROSPEROUS FUTURE, MONEY-EARNING
   POWER, AND THE PRESTIGE THAT COMES WITH HAVING THE CAREER POSITION YOUVE
   ALWAYS DREAMED OF. DIPLOMA FROM PRESTIGIOUS NON-ACCREDITED UNVERSITIES BASED
   ON YOUR PRESENT KNOWLEDGE AND PROFESSIONAL EXPERIENCE.If you qualify, no
  required tests, classes, books or examinations.Confidentiality Assured1-682-
626-000824
   hours a day, 7 days a week including Sundays and HolidaysFri, 23 Mar 2007
   12:46:03 +0480 Swinedrunk and in his sleep. Well see what may be done so
  you. [...]

Content analysis details:   (7.8 points, 3.7 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.8 RCVD_FORGED_WROTE      Forged 'Received' header found ('wrote:' spam)
 0.5 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
 0.0 HTML_MESSAGE           BODY: HTML included in message
 3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 0.0 UPPERCASE_25_50        message body is 25-50% uppercase
-1.0 AWL                    AWL: From: address is in the auto white-list

The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam.  If you wish to view
it, it may be safer to save it to a file and open it with an editor.


------------=_4603DC29.76EE9DF8
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit

Received: from unknown (HELO nawaragroup.com) (82.79.222.67)
  by qmail.rnd with SMTP; 23 Mar 2007 12:46:20 -0000
Return-Path: <dw...@riecooper.com>
Received: from 216.163.188.58 (HELO eforwardct.name-services.com)
     by calivita.com with esmtp (/49*'<G@F P'S*U6)
     id H?TYI--7)07/U-,6
     for 83taeaaaaa@calivita.com; Fri, 23 Mar 2007 12:46:03 +0480
From: "RF Mackey" <dw...@riecooper.com>
To: <83...@calivita.com>
Subject: No more need to beg for a promotion  get a University Degree
Date: Fri, 23 Mar 2007 12:46:03 +0480
Message-ID: <01...@dwriecooperm>
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0006_01C76D06.29377480"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
Thread-Index: Aca6QQ.081AB.30SMS(6IP@2>77M:)==

This is a multi-part message in MIME format.

------=_NextPart_000_0006_01C76D06.29377480
Content-Type: text/plain;
        charset="windows-1250"
Content-Transfer-Encoding: 7bit

University DegreeOBTAIN A PROSPEROUS FUTURE, MONEY-EARNING POWER, AND THE 
PRESTIGE THAT COMES WITH HAVING THE CAREER POSITION YOUVE ALWAYS DREAMED OF. 
DIPLOMA FROM PRESTIGIOUS NON-ACCREDITED UNVERSITIES BASED ON YOUR PRESENT 
KNOWLEDGE AND PROFESSIONAL EXPERIENCE.If you qualify, no required tests, 
classes, books or examinations.Confidentiality Assured1-682-626-000824 hours a 
day, 7 days a week including Sundays and HolidaysFri, 23 Mar 2007 12:46:03 +0480 
Swinedrunk and in his sleep. Well see what may be done so you.


------=_NextPart_000_0006_01C76D06.29377480
Content-Type: text/html;
        charset="windows-1250"
Content-Transfer-Encoding: quoted-printable

<html xmlns:o=3D"urn:schemas-microsoft-com:office:office" xmlns:w=3D"urn:sc=
hemas-microsoft-com:office:word" xmlns=3D"http://www.w3.org/TR/REC-html40">

<head>
<META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; charset=3Dwindows-1250">
<meta name=3DGenerator content=3D"Microsoft Word 11 (filtered medium)">
</head>
<body>
<html><head>
<meta http-equiv=3D"Content-Style-Type" content=3D"text/css">
<style type=3D"text/css"><!--
new22 { font-size: 22pt; font-family: Georgia; color: #000000; text-align:=
 center; font-weight: bold;}
new12 { font-size: 12pt; font-family: Georgia; color: #000000; text-align:=
 center;}
new14 { font-size: 14pt; font-family: Georgia; color: #000000; text-align:=
 center; font-style: italic;}
new18 { font-size: 18pt; font-family: Georgia; color: #000000; text-align:=
 center; font-weight: bold;}
new20 { font-size: 20pt; font-family: Georgia; color: #FF0000; text-align:=
 center; font-weight: bold;}
new6 { font-size: 7pt; font-family: Georgia; color: #000000; text-align: c=
enter;}

--></style></head>
<body bgcolor=3D"#FFFFFF">
<div class=3D"new22">University Degree</div><br>
<div class=3D"new12">OBTAIN A PROSPEROUS FUTURE, MONEY-EARNING POWER, AND T=
HE PRESTIGE THAT COMES WITH HAVING THE CAREER POSITION YOU=92VE ALWAYS DREA=
MED OF. DIPLOMA FROM PRESTIGIOUS NON-ACCREDITED UNVERSITIES BASED ON YOUR P=
RESENT KNOWLEDGE AND PROFESSIONAL EXPERIENCE.</div><br>
<div class=3D"new14">If you qualify, no required tests, classes, books or e=
xaminations.</div><br>
<div class=3D"new22">Confidentiality Assured</div><br>
<div class=3D"new20">1-682-626-0008</div>
<div class=3D"new12">24 hours a day, 7 days a week including Sundays and Ho=
lidays</div><br><br>
<div class=3D"new6">Fri, 23 Mar 2007 12:46:03 +0480 Swinedrunk and in his s=
leep. Well see what may be done so you.</div>
</body>
</html>
</body>
</html>

------=_NextPart_000_0006_01C76D06.29377480--


*** Qmail-Scanner Quarantine Envelope Details Begin ***
X-Qmail-Scanner-Mail-From: "dwriecooperm@riecooper.com" via qmail.rnd
X-Qmail-Scanner-Rcpt-To: "83taeaaaaa@calivita.com"
X-Qmail-Scanner: 2.01st (nod32: 2.52.2 spamassassin: 3.1.8. perlscan: 2.01st.  
SPAM Found. Processed in 3.692446 secs) process 10073/10067
Quarantine-Description: SPAM exceeds "quarantine" threshold - hits=5.1/3.7
*** Qmail-Scanner Envelope Details End ***

------------=_4603DC29.76EE9DF8--

Spam detection software, running on the system "qmail.rnd", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  University DegreeOBTAIN A PROSPEROUS FUTURE, MONEY-EARNING
   POWER, AND THE PRESTIGE THAT COMES WITH HAVING THE CAREER POSITION YOUVE
   ALWAYS DREAMED OF. DIPLOMA FROM PRESTIGIOUS NON-ACCREDITED UNVERSITIES BASED
   ON YOUR PRESENT KNOWLEDGE AND PROFESSIONAL EXPERIENCE.If you qualify, no
  required tests, classes, books or examinations.Confidentiality Assured1-682-
626-000824
   hours a day, 7 days a week including Sundays and HolidaysFri, 23 Mar 2007
   12:46:03 +0480 Swinedrunk and in his sleep. Well see what may be done so
  you. [...]

Content analysis details:   (7.8 points, 3.7 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
 2.8 RCVD_FORGED_WROTE      Forged 'Received' header found ('wrote:' spam)
 0.5 DATE_IN_PAST_03_06     Date: is 3 to 6 hours before Received: date
 0.0 HTML_MESSAGE           BODY: HTML included in message
 3.5 BAYES_99               BODY: Bayesian spam probability is 99 to 100%
                            [score: 1.0000]
 1.5 RAZOR2_CF_RANGE_E4_51_100 Razor2 gives engine 4 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 0.0 UPPERCASE_25_50        message body is 25-50% uppercase
-1.0 AWL                    AWL: From: address is in the auto white-list






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From a16x@freemail.hu  2007-03-23 06:53 -------
The number of tokens doesn't change. It remains 255481, as you can see below.
But why SA does update the bayes_seen and the bayes-toks files when
auto_learning is disabled?


At 14:19

qmail:/var/spamassassin# ls -l

-rw-------  1 qscand qscand    28848 2007-03-23 14:19 bayes_journal
-rw-rw-rw-  1 qscand qscand  5287936 2007-03-23 14:16 bayes_seen
-rw-rw-rw-  1 qscand qscand 10944512 2007-03-23 14:16 bayes_toks

qmail:/var/spamassassin# sa-learn --sync
qmail:/var/spamassassin# sa-learn --dump all | wc -l
255481


At 14.24

qmail:/var/spamassassin# ls -l

-rw-------  1 qscand qscand    37872 2007-03-23 14:24 bayes_journal
-rw-rw-rw-  1 qscand qscand  5287936 2007-03-23 14:23 bayes_seen
-rw-rw-rw-  1 qscand qscand 10944512 2007-03-23 14:23 bayes_toks

qmail:/var/spamassassin# sa-learn --sync
qmail:/var/spamassassin# sa-learn --dump all | wc -l
255481


My second question is:

Why is SA sometimes unable to score e-mails?
(even timeout is set to 30 seconds)
We are using Qmail-Scanner, and we got >1000 messages per day like these below:

Fri, 23 Mar 2007 11:32:30 CET:24077/24011: SA: finished scan in 4.254294 secs - 
hits=?/?
Fri, 23 Mar 2007 11:32:31 CET:24166/24113: SA: finished scan in 3.103765 secs - 
hits=?/?
Fri, 23 Mar 2007 11:32:31 CET:24160/24148: SA: finished scan in 3.107523 secs - 
hits=?/?
Fri, 23 Mar 2007 11:32:32 CET:24189/24165: SA: finished scan in 3.063552 secs - 
hits=?/?
Fri, 23 Mar 2007 11:32:32 CET:24200/24030: SA: finished scan in 3.065767 secs - 
hits=?/?
Fri, 23 Mar 2007 11:32:34 CET:24237/24212: SA: finished scan in 3.168408 secs - 
hits=?/?
Fri, 23 Mar 2007 11:32:34 CET:24235/24207: SA: finished scan in 3.105207 secs - 
hits=?/?






------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From a16x@freemail.hu  2007-03-23 05:50 -------
Here is the output you asked:
It shows, that autolearn is disabled.
Inspite of that SA still learns to /var/spamassassin/bayes!

From: "RF Mackey" <dw...@riecooper.com>
To: <83...@calivita.com>
Subject: ---SPAM--- No more need to beg for a promotion  get a University Degr
ee
Date: Fri, 23 Mar 2007 12:46:03 +0480
Message-Id: <01...@dwriecooperm>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on qmail.rnd
X-Spam-Level: *****
X-Spam-Status: Yes, hits=5.4 required=3.7 score=5.4 tests=AWL,BAYES_99,
        DATE_IN_PAST_03_06,HTML_MESSAGE,RCVD_FORGED_WROTE,UPPERCASE_25_50
        autolearn=disabled version=3.1.8
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_4603CCCD.399ECB18"




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug 5386] SA 3.1.8 doesn't want to stop auto_learning, despite the config file!

Posted by bu...@bugzilla.spamassassin.org.
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5386





------- Additional Comments From parkerm@pobox.com  2007-03-23 06:07 -------
Are you sure its not just recording token atimes?  Thats not the same as
autolearning.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.