URIDNSBL problem

[Craig Baird <cr...@xpressweb.com>]

Well, now that my Net::DNS issues are fixed, my DNS blacklist tests are now 
working, but SURBLs are not.  I'm running the latest Net::DNS, and network 
tests are working.  I inserted the SURBL test point URL into sample-spam.txt, 
and I've pasted the output of:

spamassasssin -D < sample-spam.txt

below.  25_uribl.cf has not been changed from defaults.  Can anyone see why my 
URIDNSBL tests are not firing?

Thanks!

Craig


debug: SpamAssassin version 3.0.2
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/bin/X11', which doesn't exist, dropping.
debug: Final PATH set 
to: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
debug: using "/usr/local/share/spamassassin" for default rules dir
debug: config: read file /usr/local/share/spamassassin/10_misc.cf
debug: config: read file /usr/local/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/local/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_compensate.cf
debug: config: read file /usr/local/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_drugs.cf
debug: config: read file /usr/local/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_phrases.cf
debug: config: read file /usr/local/share/spamassassin/20_porn.cf
debug: config: read file /usr/local/share/spamassassin/20_ratware.cf
debug: config: read file /usr/local/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/local/share/spamassassin/23_bayes.cf
debug: config: read file /usr/local/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/local/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/local/share/spamassassin/25_spf.cf
debug: config: read file /usr/local/share/spamassassin/25_uribl.cf
debug: config: read file /usr/local/share/spamassassin/30_text_de.cf
debug: config: read file /usr/local/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/local/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/local/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/local/share/spamassassin/50_scores.cf
debug: config: read file /usr/local/share/spamassassin/60_whitelist.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file /etc/mail/spamassassin/70_sare_adult.cf
debug: config: read file /etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
debug: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
debug: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_header0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_html0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_html1.cf
debug: config: read file /etc/mail/spamassassin/70_sare_oem.cf
debug: config: read file /etc/mail/spamassassin/70_sare_specific.cf
debug: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
debug: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
debug: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_uri1.cf
debug: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
debug: config: read file /etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_body.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_headers.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_rawbody.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_subject.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_uri.cf
debug: config: read file /etc/mail/spamassassin/99_FVGT_Tripwire.cf
debug: config: read file /etc/mail/spamassassin/99_FVGT_meta.cf
debug: config: read file /etc/mail/spamassassin/99_OBFU_drugs.cf
debug: config: read file /etc/mail/spamassassin/99_sare_fraud_post25x.cf
debug: config: read file /etc/mail/spamassassin/antidrug.cf
debug: config: read file /etc/mail/spamassassin/backhair.cf
debug: config: read file /etc/mail/spamassassin/bogus-virus-warnings.cf
debug: config: read file /etc/mail/spamassassin/chickenpox.cf
debug: config: read file /etc/mail/spamassassin/local.cf
debug: config: read file /etc/mail/spamassassin/nov2rules.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: bayes: 29866 tie-ing to DB file R/O /usr/spamassassin/bayes_toks
debug: bayes: 29866 tie-ing to DB file R/O /usr/spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: Score set 3 chosen.
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: dns_available set to yes in config file, skipping test
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.49
debug: all '*From' addrs: sender@example.net
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: decoding: other encoding type (7bit), ignoring
debug: uri found: http://www.surbl-org-permanent-test-point.com/
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: all '*To' addrs: recipient@example.net
debug: running body-text per-line regexp tests; score so far=-3.2
debug: running uri tests; score so far=998.65
debug: bayes corpus size: nspam = 9228287, nham = 207002
debug: tokenize: header tokens for *M = "  GTUBE1 1010101 example net "
debug: tokenize: header tokens for *F = "U*sender D*example.net D*net"
debug: tokenize: header tokens for To = "U*recipient D*example.net D*net"
debug: tokenize: header tokens for Precedence = " junk"
debug: tokenize: header tokens for MIME-Version = " "
debug: tokenize: header tokens for *c = " /plain; charset=us-ascii"
debug: tokenize: header tokens for Content-Transfer-Encoding = " 7bit"
debug: tokenize: header tokens for *RT = " "
debug: tokenize: header tokens for *RU = " "
debug: bayes token 'Unsolicited' => 0.998818414322251
debug: bayes token 'H*F:U*sender' => 0.998
debug: bayes token 'Generic' => 0.984212683581934
debug: bayes token 'Bulk' => 0.982535996755667
debug: bayes token 'filter' => 0.0251444736525396
debug: bayes token 'H*MI:net' => 0.958
debug: bayes token 'detecting' => 0.958
debug: bayes token 'spaces' => 0.0510520678533185
debug: bayes token 'correctly' => 0.0806883675355736
debug: bayes token 'supports' => 0.0858595619372183
debug: bayes token 'breaks' => 0.0916021780282654
debug: bayes token 'generic' => 0.897928083044784
debug: bayes token 'incoming' => 0.104093771481807
debug: bayes token 'installed' => 0.109107778589225
debug: bayes token 'outside' => 0.119860355000096
debug: bayes token 'email' => 0.1262642947252
debug: bayes token 'account' => 0.134499645936897
debug: bayes token 'bulk' => 0.139921461443179
debug: bayes token 'H*c:plain' => 0.141265037180237
debug: bayes: score = 0.497906987781773
debug: bayes: 29866 untie-ing
debug: bayes: 29866 untie-ing db_toks
debug: bayes: 29866 untie-ing db_seen
debug: Razor2 is available
debug: entering helper-app run mode
 Razor-Log: Computed razorhome from env: /root/.razor
 Razor-Log: Found razorhome: /root/.razor
 Razor-Log: No /root/.razor/razor-agent.conf found, skipping.
 Razor-Log: No razor-agent.conf found, using defaults.
Apr 08 13:55:44.170779 check[29866]: [ 2] [bootup] Logging initiated 
LogDebugLevel=9 to stdout
Apr 08 13:55:44.171179 check[29866]: [ 5] computed razorhome=/root/.razor, 
conf=, ident=/root/.razor/identity-craig@mungedxpressweb.com
Apr 08 13:55:44.171396 check[29866]: [ 8] Client supported_engines: 4 8
Apr 08 13:55:44.171825 check[29866]: [ 8]  prep_mail done: mail 1 headers=293, 
mime0=665
Apr 08 13:55:44.172145 check[29866]: [ 5] read_file: 1 items read 
from /root/.razor/servers.discovery.lst
Apr 08 13:55:44.172390 check[29866]: [ 5] read_file: 2 items read 
from /root/.razor/servers.nomination.lst
Apr 08 13:55:44.172599 check[29866]: [ 5] read_file: 1 items read 
from /root/.razor/servers.catalogue.lst
Apr 08 13:55:44.172848 check[29866]: [ 9] Assigning defaults to 
joy.cloudmark.com
Apr 08 13:55:44.172991 check[29866]: [ 9] Assigning defaults to 
folly.cloudmark.com
Apr 08 13:55:44.173125 check[29866]: [ 9] Assigning defaults to 
shock.cloudmark.com
Apr 08 13:55:44.173683 check[29866]: [ 5] read_file: 17 items read 
from /root/.razor/server.pride.cloudmark.com.conf
Apr 08 13:55:44.174078 check[29866]: [ 5] read_file: 17 items read 
from /root/.razor/server.pride.cloudmark.com.conf
Apr 08 13:55:44.174467 check[29866]: [ 5] read_file: 17 items read 
from /root/.razor/server.thrill.cloudmark.com.conf
Apr 08 13:55:44.174840 check[29866]: [ 5] read_file: 17 items read 
from /root/.razor/server.thrill.cloudmark.com.conf
Apr 08 13:55:44.175211 check[29866]: [ 5] read_file: 16 items read 
from /root/.razor/server.wonder.cloudmark.com.conf
Apr 08 13:55:44.175565 check[29866]: [ 5] read_file: 16 items read 
from /root/.razor/server.wonder.cloudmark.com.conf
Apr 08 13:55:44.175942 check[29866]: [ 5] read_file: 16 items read 
from /root/.razor/server.tension.cloudmark.com.conf
Apr 08 13:55:44.176293 check[29866]: [ 5] read_file: 16 items read 
from /root/.razor/server.tension.cloudmark.com.conf
Apr 08 13:55:44.176656 check[29866]: [ 5] read_file: 16 items read 
from /root/.razor/server.shock.cloudmark.com.conf
Apr 08 13:55:44.177012 check[29866]: [ 5] read_file: 16 items read 
from /root/.razor/server.shock.cloudmark.com.conf
Apr 08 13:55:44.177210 check[29866]: [ 5] 73742 seconds before closest server 
discovery
Apr 08 13:55:44.177386 check[29866]: [ 6] shock.cloudmark.com is a Catalogue 
Server srl 5068; computed min_cf=6, Server se: C8
Apr 08 13:55:44.177570 check[29866]: [ 8] Computed supported_engines: 4 8
Apr 08 13:55:44.177701 check[29866]: [ 8] Using next closest server 
shock.cloudmark.com:2703, cached info srl 5068
Apr 08 13:55:44.177809 check[29866]: [ 8] mail 1 has no subject
Apr 08 13:55:44.178123 check[29866]: [ 6] preproc: mail 1.0 went from 665 
bytes to 552
Apr 08 13:55:44.178251 check[29866]: [ 6] computing sigs for mail 1.0, len 552
Apr 08 13:55:44.180193 check[29866]: [ 6] skipping whitelist file 
(empty?): /root/.razor/razor-whitelist
Apr 08 13:55:44.180379 check[29866]: [ 5] Connecting to shock.cloudmark.com ...
Apr 08 13:55:44.339278 check[29866]: [ 8] Connection established
Apr 08 13:55:44.339468 check[29866]: [ 4] shock.cloudmark.com >> 36 server 
greeting: sn=C&srl=5068&a=l&a=cg&ep4=7542-10
Apr 08 13:55:44.339792 check[29866]: [ 4] shock.cloudmark.com << 25
Apr 08 13:55:44.339895 check[29866]: [ 6] cn=razor-agents&cv=2.67
Apr 08 13:55:44.340105 check[29866]: [ 6] shock.cloudmark.com is a Catalogue 
Server srl 5068; computed min_cf=6, Server se: C8
Apr 08 13:55:44.340305 check[29866]: [ 8] Computed supported_engines: 4 8
Apr 08 13:55:44.340469 check[29866]: [ 8] mail 1.0 e4 sig: oen_Qsnrn1c9-
D6yJQY4ZRRHlN0A
Apr 08 13:55:44.340620 check[29866]: [ 8] mail 1.0 e8 sig: RtreoCOl8cUA
Apr 08 13:55:44.340778 check[29866]: [ 8] preparing 2 queries
Apr 08 13:55:44.341009 check[29866]: [ 8] sending 1 batches
Apr 08 13:55:44.341159 check[29866]: [ 4] shock.cloudmark.com << 80
Apr 08 13:55:44.341261 check[29866]: [ 6] -a=c&e=4&ep4=7542-10&s=oen_Qsnrn1c9-
D6yJQY4ZRRHlN0A
a=c&e=8&s=RtreoCOl8cUA

Re: URIDNSBL problem

[Craig Baird <cr...@xpressweb.com>]

Quoting Matt Kettler <mk...@evi-inc.com>:

> Craig. One thing that REALLY jumps out at me is that there's no mention
> of init.pre by the rulefile parsing debug output.

And you would, of course, be absolutely correct.  That was the problem.  
My /etc/mail/spamassassin directory is NFS mounted read-only, so when I 
ran 'make install', it obviously wasn't able to copy that file over.

Thank you very much for your help, Matt  I've been beating my head on this one 
for the last couple of hours.  My upgrade from 2.64 has been somewhat less 
than smooth, but I think I'm finally there.

Craig

Re: URIDNSBL problem

[Matt Kettler <mk...@evi-inc.com>]

Craig Baird wrote:

>below.  25_uribl.cf has not been changed from defaults.  Can anyone see why my 
>URIDNSBL tests are not firing?
>

Craig. One thing that REALLY jumps out at me is that there's no mention
of init.pre by the rulefile parsing debug output.

That would be a bad thing. It should be in your /etc/mail/spamassassin
and it should be the very first thing parsed.

Init.pre is responsible for loading the URIBL plugin, and without it,
you're not going to get any URIBL tests at all.