You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by ermille1979 <er...@hotmail.com> on 2009/05/05 15:59:57 UTC

Spamassassin White_list problem

Hi all,

I have a problem with Spamassassin on my Qmail

root@mail/etc/mail/spamassassin rpm -qa|grep -i spamas
perl-Mail-SpamAssassin-3.0.2-1
spamassassin-3.0.2-1
spamassassin-tools-3.0.2-1

This is My file local.rc

###########################################################################
#
# rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
report_safe 1
#required_hits 4
required_score 3
#rewrite_header Subject *****SPAM*****

#whitelist_from *@agipro.it

use_bayes 1
# bayes_path /home/spamd/.spamassassin/bayes
bayes_path /home/spamd/.spamassassin

bayes_auto_learn 1

skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1

dns_available yes

header LOCAL_RCVD Received =~ /.*\(\S+\.domain\.com\s+\[.*\]\)/
describe LOCAL_RCVD Received from local machine
#score LOCAL_RCVD -50

## Optional Score Increases
score DCC_CHECK 4.000
score SPF_FAIL 10.000
score SPF_HELO_FAIL 10.000
#score RAZOR2_CHECK 2.500
score RAZOR2_CHECK 4.500
score BAYES_99 4.300
#score BAYES_95 3.500
score BAYES_95 4.200
#score BAYES_80 3.000
score BAYES_80 4.100

The mail ehite sender domain @agipro.it are tagged as Spam!

I have this error on my maillog

May  5 15:47:16 mail spamd[2329]: Failed to run USER_IN_DEF_SPF_WL
SpamAssassin test, skipping:__(Can't locate object method
"check_for_def_spf_whitelist_from" via package
"Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
<GEN26> line 40._)
May  5 15:47:16 mail spamd[2329]: Failed to run SPF_HELO_NEUTRAL
SpamAssassin test, skipping:__(Can't locate object method
"check_for_spf_helo_neutral" via package "Mail::SpamAssassin::PerMsgStatus"
at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2312, <GEN26> line 40._)
May  5 15:47:16 mail spamd[2329]: Failed to run SPF_NEUTRAL SpamAssassin
test, skipping:__(Can't locate object method "check_for_spf_neutral" via
package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
<GEN26> line 40._)
May  5 15:47:16 mail spamd[2329]: Failed to run USER_IN_SPF_WHITELIST
SpamAssassin test, skipping:__(Can't locate object method
"check_for_spf_whitelist_from" via package
"Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
<GEN26> line 40._)
May  5 15:47:16 mail spamd[2326]: Failed to run USER_IN_DEF_SPF_WL
SpamAssassin test, skipping:__(Can't locate object method
"check_for_def_spf_whitelist_from" via package
"Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
<GEN42> line 40._)
May  5 15:47:16 mail spamd[2326]: Failed to run SPF_HELO_NEUTRAL
SpamAssassin test, skipping:__(Can't locate object method
"check_for_spf_helo_neutral" via package "Mail::SpamAssassin::PerMsgStatus"
at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2312, <GEN42> line 40._)
May  5 15:47:16 mail spamd[2326]: Failed to run SPF_NEUTRAL SpamAssassin
test, skipping:__(Can't locate object method "check_for_spf_neutral" via
package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
<GEN42> line 40._)
May  5 15:47:16 mail spamd[2326]: Failed to run USER_IN_SPF_WHITELIST
SpamAssassin test, skipping:__(Can't locate object method
"check_for_spf_whitelist_from" via package
"Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
<GEN42> line 40._)
May  5 15:47:16 mail spamd[2328]: clean message (0.0/3.0) for qscand:513 in
0.6 seconds, 1509 bytes.


Help me please?!

Alex
-- 
View this message in context: http://www.nabble.com/Spamassassin-White_list-problem-tp23387747p23387747.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.


Re: Spamassassin White_list problem

Posted by Matt Kettler <mk...@verizon.net>.

ermille1979 wrote:
> Hi all,
>
> I have a problem with Spamassassin on my Qmail
>   
Alex,

Can you  explain why you think senders from agipro.it would be whitelisted?

The only whitelist option in the config you sent is commented out, so it
would have no effect.

Is the LOCAL_RCVD rule the one that should match? (ie: is domain.com
really agipro.it?)

Could you post the Received headers for a message? Are you sure that
received header is added before SA sees it (ie: how have you tied into
Qmail)

The error messages would appear to be related to the rules for the SPF
plugin are being parsed, but the plugin itself isn't loading properly.
That's very odd. Do you have any other custom config files, or have you
made any changes to the default ones?

Also,
> root@mail/etc/mail/spamassassin rpm -qa|grep -i spamas
> perl-Mail-SpamAssassin-3.0.2-1
> spamassassin-3.0.2-1
> spamassassin-tools-3.0.2-1
>
> This is My file local.rc
>
> ###########################################################################
> #
> # rewrite_header Subject *****SPAM*****
> # report_safe 1
> # trusted_networks 212.17.35.
> # lock_method flock
> report_safe 1
> #required_hits 4
> required_score 3
> #rewrite_header Subject *****SPAM*****
>
> #whitelist_from *@agipro.it
>
> use_bayes 1
> # bayes_path /home/spamd/.spamassassin/bayes
> bayes_path /home/spamd/.spamassassin
>
> bayes_auto_learn 1
>
> skip_rbl_checks 0
> use_razor2 1
> use_dcc 1
> use_pyzor 1
>
> dns_available yes
>
> header LOCAL_RCVD Received =~ /.*\(\S+\.domain\.com\s+\[.*\]\)/
> describe LOCAL_RCVD Received from local machine
> #score LOCAL_RCVD -50
>
> ## Optional Score Increases
> score DCC_CHECK 4.000
> score SPF_FAIL 10.000
> score SPF_HELO_FAIL 10.000
> #score RAZOR2_CHECK 2.500
> score RAZOR2_CHECK 4.500
> score BAYES_99 4.300
> #score BAYES_95 3.500
> score BAYES_95 4.200
> #score BAYES_80 3.000
> score BAYES_80 4.100
>
> The mail ehite sender domain @agipro.it are tagged as Spam!
>
> I have this error on my maillog
>
> May  5 15:47:16 mail spamd[2329]: Failed to run USER_IN_DEF_SPF_WL
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_def_spf_whitelist_from" via package
> "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN26> line 40._)
> May  5 15:47:16 mail spamd[2329]: Failed to run SPF_HELO_NEUTRAL
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_spf_helo_neutral" via package "Mail::SpamAssassin::PerMsgStatus"
> at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
> 2312, <GEN26> line 40._)
> May  5 15:47:16 mail spamd[2329]: Failed to run SPF_NEUTRAL SpamAssassin
> test, skipping:__(Can't locate object method "check_for_spf_neutral" via
> package "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN26> line 40._)
> May  5 15:47:16 mail spamd[2329]: Failed to run USER_IN_SPF_WHITELIST
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_spf_whitelist_from" via package
> "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN26> line 40._)
> May  5 15:47:16 mail spamd[2326]: Failed to run USER_IN_DEF_SPF_WL
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_def_spf_whitelist_from" via package
> "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN42> line 40._)
> May  5 15:47:16 mail spamd[2326]: Failed to run SPF_HELO_NEUTRAL
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_spf_helo_neutral" via package "Mail::SpamAssassin::PerMsgStatus"
> at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
> 2312, <GEN42> line 40._)
> May  5 15:47:16 mail spamd[2326]: Failed to run SPF_NEUTRAL SpamAssassin
> test, skipping:__(Can't locate object method "check_for_spf_neutral" via
> package "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN42> line 40._)
> May  5 15:47:16 mail spamd[2326]: Failed to run USER_IN_SPF_WHITELIST
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_spf_whitelist_from" via package
> "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN42> line 40._)
> May  5 15:47:16 mail spamd[2328]: clean message (0.0/3.0) for qscand:513 in
> 0.6 seconds, 1509 bytes.
>
>
> Help me please?!
>
> Alex
>   


Re: Spamassassin White_list problem

Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
On 05.05.09 06:59, ermille1979 wrote:
> I have a problem with Spamassassin on my Qmail
> 
> root@mail/etc/mail/spamassassin rpm -qa|grep -i spamas
> perl-Mail-SpamAssassin-3.0.2-1
> spamassassin-3.0.2-1
> spamassassin-tools-3.0.2-1

Oh! that is way too old! I wonder if this still can catch any spam (except
false positives of course).

upgrade first.

> required_score 3

Do you get any negatives? SA 3.0.2 uses many rules that were obsolete,
blacklists that return true fopr anything etc...

> I have this error on my maillog
> 
> May  5 15:47:16 mail spamd[2329]: Failed to run USER_IN_DEF_SPF_WL
> SpamAssassin test, skipping:__(Can't locate object method
> "check_for_def_spf_whitelist_from" via package
> "Mail::SpamAssassin::PerMsgStatus" at
> /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312,
> <GEN26> line 40._)

I'd say you need to upgrade perl, SA and apparently whole your system too.

-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
On the other hand, you have different fingers. 

Re: Spamassassin White_list problem

Posted by John Hardin <jh...@impsec.org>.
On Wed, 6 May 2009, ermille1979 wrote:

> configuration file "/usr/share/spamassassin/20_advance_fee.cf" requires
> version 3.002004 of SpamAssassin, but this is code version 3.000002.

I would suggest you first try to fix this problem before looking at 
anything else. It seems an SA upgrade was not performed properly, and you 
have multiple versions of SA installed simultaneously and somehow 
explicitly configured to use incorrect configuration files or directories, 
or for some other reason you have multiple different versions of SA all 
installed together and interfering with each other.

You may need to completely uninstall all your SA files (except your local 
config files) and reinstall the current version from scratch to properly 
clean things up.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Democrats '61: Ask not what your country can do for you,
    ask what you can do for your country.
   Democrats '07: Ask not what your country can do for you,
    demand it!
-----------------------------------------------------------------------
  2 days until the 64th anniversary of VE day

Re: Spamassassin White_list problem

Posted by ermille1979 <er...@hotmail.com>.
Ehm...yes ;-)

this is my file init.pre 

# will affect how those files are parsed, like which plugins are loaded
# etc.
#
###########################################################################

# RelayCountry - add metadata for Bayes learning, marking the countries
# a message was relayed through
#
# loadplugin Mail::SpamAssassin::Plugin::RelayCountry

# URIDNSBL - look up URLs found in the message against several DNS
# blocklists.
#
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL

# Hashcash - perform hashcash verification.
#
loadplugin Mail::SpamAssassin::Plugin::Hashcash

# SPF - perform SPF verification.
#
loadplugin Mail::SpamAssassin::Plugin::SPF

I have insert in the file message.txt the header html of the one message
spam
and this is result

root@mail/etc/mail/spamassassin spamassassin < message.txt

configuration file "/usr/share/spamassassin/20_advance_fee.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_body_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_compensate.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_dnsbl_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_drugs.cf" requires version
3.002004 of SpamAssassin, but this is code version 3.000002. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 329.
configuration file "/usr/share/spamassassin/20_dynrdns.cf" requires version
3.002004 of SpamAssassin, but this is code version 3.000002. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 329.
configuration file "/usr/share/spamassassin/20_fake_helo_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_head_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_html_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_meta_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_net_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/20_phrases.cf" requires version
3.002004 of SpamAssassin, but this is code version 3.000002. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 329.
configuration file "/usr/share/spamassassin/20_porn.cf" requires version
3.002004 of SpamAssassin, but this is code version 3.000002. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 329.
configuration file "/usr/share/spamassassin/20_uri_tests.cf" requires
version 3.002004 of SpamAssassin, but this is code version 3.000002. Maybe
you need to use the -C switch, or remove the old config files? Skipping this
file at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line
329.
configuration file "/usr/share/spamassassin/23_bayes.cf" requires version
3.002004 of SpamAssassin, but this is code version 3.000002. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 329.
configuration file "/usr/share/spamassassin/72_active.cf" requires version
3.002004 of SpamAssassin, but this is code version 3.000002. Maybe you need
to use the -C switch, or remove the old config files? Skipping this file at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 329.
Failed to run USER_IN_DEF_SPF_WL SpamAssassin test, skipping:
        (Can't locate object method "check_for_def_spf_whitelist_from" via
package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312.
)
Failed to run SPF_HELO_NEUTRAL SpamAssassin test, skipping:
        (Can't locate object method "check_for_spf_helo_neutral" via package
"Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312.
)
Failed to run SPF_NEUTRAL SpamAssassin test, skipping:
        (Can't locate object method "check_for_spf_neutral" via package
"Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312.
)
Failed to run USER_IN_SPF_WHITELIST SpamAssassin test, skipping:
        (Can't locate object method "check_for_spf_whitelist_from" via
package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line 2312.
)

Is correct my test????

I have change my conf file local.cf 

use_bayes 1
bayes_path /home/spamd/.spamassassin/bayes
#bayes_path /home/spamd/.spamassassin

But the problem persist even after the test!

how do I turn off fast mode fast_spamassassin??

Thank you!!!!






-- 
View this message in context: http://www.nabble.com/Spamassassin-White_list-problem-tp23387747p23404563.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.


Re: Spamassassin White_list problem

Posted by Matt Kettler <mk...@verizon.net>.
ermille1979 wrote:
> Hi Matt!
>
> OH! Sorry..
>
> This is file correct
>
> This is My file local.rc
>   
Hopefully you mean local.cf not local.rc :)

Also, can you check your init.pre and make sure it contains this line:

loadplugin Mail::SpamAssassin::Plugin::SPF

I think that may have to do with your SPF problems.

> whitelist_from *@agipro.it
>   
Ok, so it should be whitelisted..

What happens when you run the message through spamassassin manually?

i.e.:
spamassassin <message.txt

What's the resulting X-Spam-Status? Does USER_IN_WHITELIST match in this
test?

> use_bayes 1
> # bayes_path /home/spamd/.spamassassin/bayes
> bayes_path /home/spamd/.spamassassin
>   
Note: This setting is probably broken. You probably should be using the
one that is commented out. bayes_path should always end in /bayes,
because it's not just a path, it's path plus partial filename.

As it is, SA is going to create the bayes DB as:

/home/spamd/.spamassassin_toks 
/home/spamd/.spamassassin_seen.

Also, you must make absolutely sure that nothing else beginning with .spamassassin exists in /home/spamd. Particularly there must be no directories with this name! Otherwise bayes locking will fail. (SA tries to lock <bayes_path>*, or in your case /home/spamd/.spamassassin*, but you can't lock a directory.)

If you wish to put your bayes DB into the /home/spamd/.spamassassin/ directory, the commented out line (/home/spamd/.spamassassin/bayes)
is the correct one. Again, make sure there's nothing else in /home/spamd/.spamassassin/ that starts with "bayes".


> dns_available yes
>
> header LOCAL_RCVD Received =~ /.*\(\S+\.domain\.com\s+\[.*\]\)/
> describe LOCAL_RCVD Received from local machine
> #score LOCAL_RCVD -50
>   
Careful. If you declare a rule without declaring a score, it scores as
+1.0. If you want to disable the rule, explicitly set the score to 0

> Received: from 212.29.130.2 by mail.cogetech.it (envelope-from
> <il...@agipro.it>, uid 508) with qmail-scanner-1.25-st-qms 
>  (clamdscan: 0.88.2/1476. spamassassin: 3.0.2. perlscan: 1.25-st-qms.  
>  Clear:RC:0(212.29.130.2):SA:1(3.1/3.0):. 
>  Processed in 1.512266 secs); 05 May 2009 11:33:32 -0000
> X-Spam-Status: Yes, hits=3.1 required=3.0
> X-Spam-Level: +++
>   
Ok, it looks like you're using qmail-scanner in fast_spamassassin mode.
You might want to turn fast mode off while trying to debug problems,
this should give you an X-Spam-Status that contains the list of rules
that matched, not just a score. Very helpful when doing diagnostics (and
if your system isn't heavily loaded, very helpful in general).

Have you restarted spamd since you edited local.cf? (spamd only loads it
on startup).



Re: Spamassassin White_list problem

Posted by ermille1979 <er...@hotmail.com>.
Hi Matt!

OH! Sorry..

This is file correct

This is My file local.rc

###########################################################################
#
# rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
report_safe 1
#required_hits 4
required_score 3
#rewrite_header Subject *****SPAM*****

whitelist_from *@agipro.it

use_bayes 1
# bayes_path /home/spamd/.spamassassin/bayes
bayes_path /home/spamd/.spamassassin

bayes_auto_learn 1

skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1

dns_available yes

header LOCAL_RCVD Received =~ /.*\(\S+\.domain\.com\s+\[.*\]\)/
describe LOCAL_RCVD Received from local machine
#score LOCAL_RCVD -50

## Optional Score Increases
score DCC_CHECK 4.000
score SPF_FAIL 10.000
score SPF_HELO_FAIL 10.000
#score RAZOR2_CHECK 2.500
score RAZOR2_CHECK 4.500
score BAYES_99 4.300
#score BAYES_95 3.500
score BAYES_95 4.200
#score BAYES_80 3.000
score BAYES_80 4.100 

I was back to the old configuration! :-P

I have to make sure that the email that arrives with *@agippro.it are not
tagged as spam
because with spam level 3 I have many false negatives! 

(ie: is domain.comreally agipro.it?) yes is it!

This is header of the email Spam on domain agipro.it

Microsoft Mail Internet Headers Version 2.0
Received: from margot.cogetech.locale ([10.30.18.196]) by
FUJIKO.cogetech.locale with Microsoft SMTPSVC(6.0.3790.3959);
	 Tue, 5 May 2009 13:33:10 +0200
Received: from mail.cogetech.it ([10.30.27.100]) by margot.cogetech.locale
with Microsoft SMTPSVC(6.0.3790.3959);
	 Tue, 5 May 2009 13:33:12 +0200
Received: (qmail 13124 invoked by uid 514); 5 May 2009 13:33:32 +0200
Received: from 212.29.130.2 by mail.cogetech.it (envelope-from
<il...@agipro.it>, uid 508) with qmail-scanner-1.25-st-qms 
 (clamdscan: 0.88.2/1476. spamassassin: 3.0.2. perlscan: 1.25-st-qms.  
 Clear:RC:0(212.29.130.2):SA:1(3.1/3.0):. 
 Processed in 1.512266 secs); 05 May 2009 11:33:32 -0000
X-Spam-Status: Yes, hits=3.1 required=3.0
X-Spam-Level: +++
X-Antivirus-MYDOMAIN-Mail-From: ilaria.benedetto@agipro.it via
mail.cogetech.it
X-Antivirus-MYDOMAIN: 1.25-st-qms (Clear:RC:0(212.29.130.2):SA:1(3.1/3.0):.
Processed in 1.512266 secs Process 13036)
Received: from relay3.enter.it (212.29.130.2)
  by mail.cogetech.it with SMTP; 5 May 2009 13:33:30 +0200
Received: from relay3.enter.it (relay3.enter.it [127.0.0.1])
	by relay3.enter.it (Postfix) with ESMTP id DEFF12386AF
	for <Ro...@cogetech.it>; Tue,  5 May 2009 13:33:29 +0200 (CEST)
Received: from whm1.enter.it (whm1.enter.it [212.29.129.133])
	by relay3.enter.it (Postfix) with ESMTP id AC66F2386AE
	for <Ro...@cogetech.it>; Tue,  5 May 2009 13:33:29 +0200 (CEST)
Received: (qmail 27136 invoked from network); 5 May 2009 13:33:27 +0200
Received: from host158-47-static.59-217-b.business.telecomitalia.it (HELO
PETERPAN) (217.59.47.158)
  by whm1.enter.it with SMTP; 5 May 2009 13:33:27 +0200
Message-ID: <25...@PETERPAN>
From: "Ilaria Benedetto" <il...@agipro.it>
To: "Rossella Noris" <Ro...@cogetech.it>
Cc: "ufficiostampa" <uf...@cogetech.it>,
	"Fabio Schiavolin" <Fa...@cogetech.it>
Subject: :SPAM: mandato pubblitalia
Date: Tue, 5 May 2009 13:33:28 +0200
MIME-Version: 1.0
Content-Type: multipart/mixed;
	boundary="----=_NextPart_000_00AA_01C9CD86.12EF3C70"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.5512
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.5579
Return-Path: ilaria.benedetto@agipro.it
X-OriginalArrivalTime: 05 May 2009 11:33:12.0757 (UTC)
FILETIME=[46174E50:01C9CD75]

------=_NextPart_000_00AA_01C9CD86.12EF3C70
Content-Type: multipart/alternative;
	boundary="----=_NextPart_001_00AB_01C9CD86.12EF3C70"

------=_NextPart_001_00AB_01C9CD86.12EF3C70
Content-Type: text/plain;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

------=_NextPart_001_00AB_01C9CD86.12EF3C70
Content-Type: text/html;
	charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


------=_NextPart_001_00AB_01C9CD86.12EF3C70--
------=_NextPart_000_00AA_01C9CD86.12EF3C70
Content-Type: application/msword;
	name="MANDATO AGENZIA.doc"
Content-Transfer-Encoding: base64
Content-Disposition: attachment;
	filename="MANDATO AGENZIA.doc"


------=_NextPart_000_00AA_01C9CD86.12EF3C70--



the only configuration file is local.cf!

Thank you for help!



-- 
View this message in context: http://www.nabble.com/Spamassassin-White_list-problem-tp23387747p23401349.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.