You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by ram <ra...@netcore.co.in> on 2007/09/05 11:40:58 UTC
Spamasassin short circuit not working
I just upgraded my spamassassin from 3.1.5 to 3.2.3
But I can see that the shortcircuit rules are notworking
I created a simple text rule and put it in a short circuit rule with a
high priority
header ECM_DOMWHITELIST X-XXXX-ID =~/XX/
describe ECM_DOMWHITELIST Whitelisted sender for this recipient
score ECM_DOMWHITELIST -111
priority ECM_DOMWHITELIST -2000
shortcircuit ECM_DOMWHITELIST on
but my short circuit is not working. I can see all tests being done for
a whitelisted mail
Can someone point out what is going wrong please
Thanks
Ram
[12948] dbg: logger: adding facilities: all
[12948] dbg: logger: logging level is DBG
[12948] dbg: generic: SpamAssassin version 3.2.3
[12948] dbg: config: score set 0 chosen.
[12948] dbg: util: running in taint mode? yes
[12948] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[12948] dbg: util: PATH included '/usr/kerberos/sbin', keeping
[12948] dbg: util: PATH included '/usr/kerberos/bin', keeping
[12948] dbg: util: PATH included '/usr/local/sbin', keeping
[12948] dbg: util: PATH included '/usr/local/bin', keeping
[12948] dbg: util: PATH included '/sbin', keeping
[12948] dbg: util: PATH included '/bin', keeping
[12948] dbg: util: PATH included '/usr/sbin', keeping
[12948] dbg: util: PATH included '/usr/bin', keeping
[12948] dbg: util: PATH included '/usr/X11R6/bin', keeping
[12948] dbg: util: PATH included '/root/bin', which doesn't exist,
dropping
[12948] dbg: util: final PATH set
to: /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin
[12948] dbg: dns: is Net::DNS::Resolver available? yes
[12948] dbg: dns: Net::DNS version: 0.60
[12948] dbg: config: using "/etc/mail/spamassassin" for site rules pre
files
[12948] dbg: config: read file /etc/mail/spamassassin/init.pre
[12948] dbg: config: read file /etc/mail/spamassassin/v310.pre
[12948] dbg: config: read file /etc/mail/spamassassin/v312.pre
[12948] dbg: config: read file /etc/mail/spamassassin/v320.pre
[12948] dbg: config: using "/usr/share/spamassassin" for sys rules pre
files
[12948] dbg: config: read file /usr/share/spamassassin/empty.pre
[12948] dbg: config: using "/usr/share/spamassassin" for default rules
dir
[12948] dbg: config: read
file /usr/share/spamassassin/10_default_prefs.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_dynrdns.cf
[12948] dbg: config: read
file /usr/share/spamassassin/20_fake_helo_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_imageinfo.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[12948] dbg: config: read file /usr/share/spamassassin/20_vbounce.cf
[12948] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_asn.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[12948] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[12948] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[12948] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[12948] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[12948] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[12948] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[12948] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[12948] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[12948] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[12948] dbg: config: read
file /usr/share/spamassassin/60_shortcircuit.cf
[12948] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[12948] dbg: config: read
file /usr/share/spamassassin/60_whitelist_dk.cf
[12948] dbg: config: read
file /usr/share/spamassassin/60_whitelist_dkim.cf
[12948] dbg: config: read
file /usr/share/spamassassin/60_whitelist_spf.cf
[12948] dbg: config: read
file /usr/share/spamassassin/60_whitelist_subject.cf
[12948] dbg: config: read file /usr/share/spamassassin/70_iadb.cf
[12948] dbg: config: read file /usr/share/spamassassin/72_active.cf
[12948] dbg: config: read file /usr/share/spamassassin/80_additional.cf
[12948] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/70_sare_evilnum0.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/70_sare_genlsubj1.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_header1.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_html.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/70_sare_specific.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_stocks.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[12948] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[12948] dbg: config: read file /etc/mail/spamassassin/88_FVGT_body.cf
[12948] dbg: config: read file /etc/mail/spamassassin/88_FVGT_subject.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/99_FVGT_Tripwire.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/99_sare_fraud_post25x.cf
[12948] dbg: config: read file /etc/mail/spamassassin/Botnet.cf
[12948] dbg: config: read file /etc/mail/spamassassin/allclient.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/bogus-virus-warnings.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/ecm_client_rules.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/ecm_shortcircuit.cf
[12948] dbg: config: read
file /etc/mail/spamassassin/ecm_spf_whitelist.cf
[12948] dbg: config: read file /etc/mail/spamassassin/local.cf
[12948] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[12948] dbg: config: read file /etc/mail/spamassassin/mangled.cf
[12948] dbg: config: read file /etc/mail/spamassassin/netcore_rules.cf
[12948] dbg: config: read file /etc/mail/spamassassin/optout.cf
[12948] dbg: config: read file /etc/mail/spamassassin/pdfinfo.cf
[12948] dbg: config: read file /etc/mail/spamassassin/tripwire.cf
[12948] dbg: config: using "/root/.spamassassin" for user state dir
[12948] dbg: config: using "/root/.spamassassin/user_prefs" for user
prefs file
[12948] dbg: config: read file /root/.spamassassin/user_prefs
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry
from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[12948] dbg: pyzor: network tests on, attempting Pyzor
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from
@INC
[12948] dbg: razor2: razor2 is available, version 2.77
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from
@INC
[12948] dbg: reporter: network tests on, attempting SpamCop
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[12948] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[12948] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags
from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTTPSMismatch
from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDetail from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Shortcircuit
from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Bayes from @INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::BodyEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::DNSEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTMLEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::WLBLEval from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from
@INC
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from
@INC
[12948] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::ImageInfo=HASH(0xace00d8), already
registered
[12948] dbg: config: fixed relative
path: /etc/mail/spamassassin/Botnet.pm
[12948] dbg: plugin: loading Mail::SpamAssassin::Plugin::Botnet
from /etc/mail/spamassassin/Botnet.pm
[12948] dbg: Botnet: version 0.8
[12948] dbg: plugin: Mail::SpamAssassin::Plugin::Botnet=HASH(0xa5b9430)
implements 'parse_config', priority 0
[12948] dbg: Botnet: setting botnet_pass_auth to 0
[12948] dbg: Botnet: setting botnet_pass_trusted to public
[12948] dbg: Botnet: adding ^127\.0\.0\.1$ to botnet_skip_ip
[12948] dbg: Botnet: adding ^10\..*$ to botnet_skip_ip
[12948] dbg: Botnet: adding ^172\.1[6789]\..*$ to botnet_skip_ip
[12948] dbg: Botnet: adding ^172\.2[0-9]\..*$ to botnet_skip_ip
[12948] dbg: Botnet: adding ^172\.3[01]\..*$ to botnet_skip_ip
[12948] dbg: Botnet: adding ^192\.168\..*$ to botnet_skip_ip
[12948] dbg: Botnet: adding ^128\.223\.98\.16$ to botnet_pass_ip
[12948] dbg: Botnet: adding (\.|\A)amazon\.com$ to botnet_pass_domains
[12948] dbg: Botnet: adding (\.|\A)apple\.com$ to botnet_pass_domains
[12948] dbg: Botnet: adding (\.|\A)ebay\.com$ to botnet_pass_domains
[12948] dbg: Botnet: adding (\b|\d).*dsl.*(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)cable(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)catv(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)ddns(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)dhcp(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)dial(-?up)?(\b|\d) to
botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)dip(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)docsis(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)dyn(amic)?(ip)?(\b|\d) to
botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)modem(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)ppp(oe)?(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)res(net|ident(ial)?)?(\b|\d) to
botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)bredband(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)client(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)fixed(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)ip(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)pool(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)static(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)user(\b|\d) to botnet_clientwords
[12948] dbg: Botnet: adding (\b|\d)e?mail(out)?(\b|\d) to
botnet_serverwords
[12948] dbg: Botnet: adding (\b|\d)mta(\b|\d) to botnet_serverwords
[12948] dbg: Botnet: adding (\b|\d)mx(pool)?(\b|\d) to
botnet_serverwords
[12948] dbg: Botnet: adding (\b|\d)relay(\b|\d) to botnet_serverwords
[12948] dbg: Botnet: adding (\b|\d)smtp(\b|\d) to botnet_serverwords
[12948] dbg: Botnet: adding (\b|\d)exch(ange)?(\b|\d) to
botnet_serverwords
[12948] dbg: rules: __XM_OL_22B61 merged duplicates: __XM_OL_A842E
[12948] dbg: rules: __VIAGRA_DOM_ALPCONSULTANTS_COM_C1 merged
duplicates: __VIAGRA_DOM_HICAL_COM_C1
[12948] dbg: rules: PREVENT_NONDELIVERY merged duplicates:
SARE_HEAD_HDR_PREVNDR
[12948] dbg: rules: __SARE_HEAD_HDR_IDKEY merged duplicates:
SARE_HEAD_HDR_XIDKEY
[12948] dbg: rules: __HAS_OUTLOOK_IN_MAILER_NEW merged duplicates:
__XM_MS_IN_GENERAL
[12948] dbg: rules: __SPAM_DOM_RAKCERAMBD_COM_C1 merged duplicates:
__SPAM_DOM_RAKCERAMBD_COM_C2
[12948] dbg: rules: __XM_OL_07794 merged duplicates: __XM_OL_25340
__XM_OL_3857F __XM_OL_4F240 __XM_OL_58CB5 __XM_OL_6554A __XM_OL_812FF
__XM_OL_C65FA __XM_OL_CF0C0 __XM_OL_F475E __XM_OL_F6D01
[12948] dbg: rules: __HTML_IMG_ONLY merged duplicates: __IMG_ONLY
[12948] dbg: rules: FU_UKGEOCITIES merged duplicates:
__SARE_SPEC_XX2GEOCIT
[12948] dbg: rules: FB_FAKE_NUMBERS merged duplicates: SARE_OBFU_NUMBERS
[12948] dbg: rules: FH_MSGID_01C67 merged duplicates: __MSGID_VGA
[12948] dbg: rules: FS_NEW_SOFT_UPLOAD merged duplicates:
HS_SUBJ_NEW_SOFTWARE
[12948] dbg: rules: __XM_OL_5E7ED merged duplicates: __XM_OL_D03AB
[12948] dbg: rules: SARE_HEAD_ORG_ELITEACT merged duplicates:
SARE_SUB_2UNDERSCORES SARE_SUB_6_FIG_INC SARE_SUB_ACCT_UPD
SARE_SUB_ACTION_OB SARE_SUB_ADV_DB SARE_SUB_ADV_SEARCH SARE_SUB_AGING
SARE_SUB_ALL_LEAD SARE_SUB_AM_MED_DICT SARE_SUB_ASSIST
SARE_SUB_AS_LOW_AS SARE_SUB_BETTER_DEAL SARE_SUB_BETTER_OB2
SARE_SUB_BIGGER SARE_SUB_BIGGER_OB SARE_SUB_BOOST SARE_SUB_BOOST_OB
SARE_SUB_BREAKTHRU SARE_SUB_BREAKTHRU_OB SARE_SUB_BULK_EMAIL
SARE_SUB_BUY_CHEAP SARE_SUB_BUY_OB SARE_SUB_BUY_OB1 SARE_SUB_CALL_NOW
SARE_SUB_CARD_BILLED SARE_SUB_CAR_INSURANCE SARE_SUB_CASINO_OB
SARE_SUB_CHANGE_LIFE SARE_SUB_CHARGE_OB SARE_SUB_CHEAP_OB
SARE_SUB_COMM_MAILERS SARE_SUB_CONFIDENTIAL SARE_SUB_CONFID_OB
SARE_SUB_CONSULTATION SARE_SUB_CONSULTN_OB SARE_SUB_CURRENT_NEWS
SARE_SUB_DBL_MEDICTN SARE_SUB_DBL_PHARM SARE_SUB_DEBT
SARE_SUB_DEBTS_COURT SARE_SUB_DOLLARS SARE_SUB_DOWNLOAD_OB
SARE_SUB_EBAY_OB SARE_SUB_EXPIRED SARE_SUB_FORECLOSURE SARE_SUB_FOREVER
SARE_SUB_FOR_WOMEN SARE_SUB_FREE_BANG SARE_SUB_FREE_SAMPLE
SARE_SUB_GAPPY_3 SARE_SUB_GAPPY_4 SARE_SUB_GAPPY_5 SARE_SUB_GAPPY_6
SARE_SUB_GROW_BUSINESS SARE_SUB_HARD_OB SARE_SUB_HOMEOWNER_OB
SARE_SUB_HOT_PROFITS SARE_SUB_INCHES SARE_SUB_INC_ONLINE
SARE_SUB_INEXPEN SARE_SUB_INKJET SARE_SUB_INKJET_OB SARE_SUB_INVESTMENTS
SARE_SUB_INVESTORS SARE_SUB_JOB SARE_SUB_LEAD_PUNCT SARE_SUB_LEGAL_ORDIN
SARE_SUB_LINES_CREDIT SARE_SUB_LONG_SUBJ_140 SARE_SUB_LONG_SUBJ_170
SARE_SUB_LOSE_OB SARE_SUB_LOSE_PCT1 SARE_SUB_LOSE_PCT2
SARE_SUB_LOTS_PUNC_21 SARE_SUB_LOTS_PUNC_26 SARE_SUB_MED_USE
SARE_SUB_MENS_HEALTH SARE_SUB_MINUTES SARE_SUB_MISC_1 SARE_SUB_MORTGAGE
SARE_SUB_MORTGAGE_OB SARE_SUB_MOVE_OB SARE_SUB_MSGSUB SARE_SUB_NEXT_DOOR
SARE_SUB_NOW_TIME SARE_SUB_ONLINE_OB SARE_SUB_ORIG_SOFT
SARE_SUB_ORIG_SOFT_OB SARE_SUB_PAREN_NUM2 SARE_SUB_PENIS_OB
SARE_SUB_PERFECTLY SARE_SUB_PERS_KNOW SARE_SUB_PHOTOS_OB
SARE_SUB_PHYSICIAN SARE_SUB_PHYSICIAN_OB SARE_SUB_PLEASE_OB
SARE_SUB_PORN_WORD10 SARE_SUB_RAND_UC SARE_SUB_REAL_OB SARE_SUB_SEXY
SARE_SUB_SEX_EXP_GAP SARE_SUB_SION_OB SARE_SUB_STRETCH_MARK
SARE_SUB_STRONG SARE_SUB_STRONG_OB SARE_SUB_SW_ON_CD SARE_SUB_TAXES
SARE_SUB_TION_OB SARE_SUB_TONER SARE_SUB_VIDEO_OB SARE_SUB_VIRUSQ
SARE_SUB_WINNER SARE_SUB_WP_OFFICE SARE_SUB_YOUNGER SARE_SUB_YOUNGER_OB
SARE_SUB_YOUR_LISTING SARE_SUB_YOUR_WOMAN
[12948] dbg: rules: __MO_OL_22B61 merged duplicates: __MO_OL_4F240
__MO_OL_ADFF7
[12948] dbg: rules: __MO_OL_812FF merged duplicates: __MO_OL_BC7E6
[12948] dbg: rules: __BLOCK11_DOM_GREATSHIP_COM_C2 merged duplicates:
__BLOCK9_DOM_GREATSHIP_COM_C2
[12948] dbg: rules: __SARE_HEAD_FALSE merged duplicates:
__SARE_SUB_FALSE
[12948] dbg: rules: VIRUS_WARNING128 merged duplicates: __VBOUNCE_MMS
[12948] dbg: rules: SARE_SUBJ_SLUT merged duplicates: __FPS_SLUT
[12948] dbg: rules: __FVGT_RAPE merged duplicates: __WORD_RAPED
[12948] dbg: rules: VIRUS_WARNING123 merged duplicates: VIRUS_WARNING37
[12948] dbg: rules: RED_URI_RBL merged duplicates: URIBL_RED
[12948] dbg: rules: SARE_USERAG_BAT merged duplicates:
__SARE_HEAD_MAIL_BAT2
[12948] dbg: rules: __XM_OL_C7C33 merged duplicates: __XM_OL_C9068
__XM_OL_EF20B
[12948] dbg: rules: __FH_RCV_53 merged duplicates: __RCVD_53
[12948] dbg: rules: __MO_OL_72641 merged duplicates: __MO_OL_A842E
[12948] dbg: rules: SARE_OBFU_AFFORD merged duplicates: SARE_OBFU_AMP
SARE_OBFU_BETTER_SUB SARE_OBFU_CARTRDGE_SUB SARE_OBFU_CIALIS
SARE_OBFU_OBLIGATION SARE_OBFU_SEX_SPL SARE_OBFU_TBL_05 SARE_URI_AFF_DIG
SARE_URI_DIET SARE_URI_DIG_LET_PIC SARE_URI_DOM_ENDU SARE_URI_H0
SARE_URI_HARRYDAV SARE_URI_HOUSE SARE_URI_IPPORT3333 SARE_URI_MRTG
SARE_URI_OC SARE_URI_OPTOUT SARE_URI_P8 SARE_URI_PORTD4 SARE_URI_PRIME
SARE_URI_REFID2 SARE_URI_REFID3 SARE_URI_SHARE_DIG SARE_URI_SQUARE
SARE_URI_SUCCEZZ
[12948] dbg: rules: __MO_OL_5E7ED merged duplicates: __MO_OL_C7C33
[12948] dbg: rules: VIRUS_WARNING103 merged duplicates: VIRUS_WARNING52
[12948] dbg: rules: __MO_OL_4BF4C merged duplicates: __MO_OL_F6D01
[12948] dbg: rules: __MO_OL_9B90B merged duplicates: __MO_OL_C65FA
[12948] dbg: rules: __MO_OL_07794 merged duplicates: __MO_OL_8627E
__MO_OL_F3B05
[12948] dbg: rules: SARE_SPOOF_COM2OTH merged duplicates: SPOOF_COM2COM
[12948] dbg: rules: __FH_FRM_53 merged duplicates: __FROM_53
[12948] dbg: rules: SARE_HEAD_HDR_XRMDTXT merged duplicates:
__SARE_HEAD_HDR_RMDB
[12948] dbg: rules: TVD_SPACED_SUBJECT_WORD merged duplicates:
TVD_SPACED_SUBJECT_WORD3
[12948] dbg: rules: __VIAGRA_DOM_ALPCONSULTANTS_COM_C2 merged
duplicates: __VIAGRA_DOM_HICAL_COM_C2
[12948] dbg: rules: __SEX_DOM_ALPCONSULTANTS_COM_C2 merged duplicates:
__SEX_DOM_HICAL_COM_C2
[12948] dbg: rules: FH_HELO_GMAILSMTP merged duplicates:
SARE_HELO_GMAILSMTP
[12948] dbg: rules: __FH_HAS_XMSMAIL merged duplicates: __HAS_MSMAIL_PRI
[12948] dbg: rules: KAM_STOCKTIP15 merged duplicates: KAM_STOCKTIP20
KAM_STOCKTIP21 KAM_STOCKTIP4 KAM_STOCKTIP6
[12948] dbg: rules: __XM_OL_015D5 merged duplicates: __XM_OL_4BF4C
__XM_OL_4EEDB __XM_OL_5B79A __XM_OL_9B90B __XM_OL_ADFF7 __XM_OL_B30D1
__XM_OL_B4B40 __XM_OL_BC7E6 __XM_OL_F3B05 __XM_OL_FF5C8
[12948] dbg: rules: __MO_OL_91287 merged duplicates: __MO_OL_B30D1
__MO_OL_CF0C0
[12948] dbg: rules: __MO_OL_015D5 merged duplicates: __MO_OL_6554A
[12948] dbg: rules: __MO_OL_25340 merged duplicates: __MO_OL_4EEDB
__MO_OL_7533E
[12948] dbg: rules: __MO_OL_58CB5 merged duplicates: __MO_OL_B4B40
[12948] dbg: rules: __SEX_DOM_ALPCONSULTANTS_COM_C1 merged duplicates:
__SEX_DOM_HICAL_COM_C1
[12948] dbg: rules: __DOS_HAS_ANY_URI merged duplicates: __HAS_ANY_URI
__SARE_URI_ANY
[12948] dbg: rules: __BLOCK1_DOM_GREATSHIP_COM_C2 merged duplicates:
__SPAM_DOM_EXOTICAEXPORTS_COM_C2
[12948] dbg: rules: SARE_BOUNDARY_02 merged duplicates:
SARE_BOUNDARY_ANYDIG SARE_BOUNDARY_D11 SARE_BOUNDARY_D8
SARE_BOUNDARY_MULTB SARE_CONTENT_BITBITNUM SARE_FREE_WEBM_CZSEZNA
SARE_FREE_WEBM_USACOPS SARE_FROM_AMERICA SARE_FROM_DEBT
SARE_FROM_DVDCOPY SARE_FROM_MULTI_DASH SARE_FROM_NUM_9DIG
SARE_FROM_PRINTER SARE_FROM_QUOTE SARE_FROM_SPACE2 SARE_FROM_SPAM_CHAR0
SARE_FROM_SPAM_DOMN0 SARE_FROM_SPAM_NAME2 SARE_FROM_SPAM_WORD0
SARE_FROM_SUPPORT_DIG SARE_FROM_UK2NET2 SARE_FROM_VIRUS1 SARE_FROM_WSJ
SARE_HEAD_8BIT_NOSPM SARE_HEAD_8BIT_SPAM SARE_HEAD_BDY_BOUNCES
SARE_HEAD_DATE18 SARE_HEAD_DATE_5L SARE_HEAD_DATE_RNDDATE
SARE_HEAD_HDR_ALTREC SARE_HEAD_HDR_AUTSUBD SARE_HEAD_HDR_CONVER
SARE_HEAD_HDR_JLH SARE_HEAD_HDR_MSGTYPE SARE_HEAD_HDR_NLETRID
SARE_HEAD_HDR_PID SARE_HEAD_HDR_RTNPATH SARE_HEAD_HDR_X400RCV
SARE_HEAD_HDR_XACWGHT SARE_HEAD_HDR_XAR SARE_HEAD_HDR_XAUTOGN
SARE_HEAD_HDR_XBBOUNC SARE_HEAD_HDR_XBNCETR SARE_HEAD_HDR_XCCDIAG
SARE_HEAD_HDR_XCNDINF SARE_HEAD_HDR_XCONTAC SARE_HEAD_HDR_XEMGBMS
SARE_HEAD_HDR_XENVID SARE_HEAD_HDR_XGMAILA SARE_HEAD_HDR_XIDSRVR
SARE_HEAD_HDR_XLEGAL2 SARE_HEAD_HDR_XLEGAL4 SARE_HEAD_HDR_XLISTAD
SARE_HEAD_HDR_XMAILTH SARE_HEAD_HDR_XMCAVTP SARE_HEAD_HDR_XMEBDOM
SARE_HEAD_HDR_XMLFILT SARE_HEAD_HDR_XNOSPAM SARE_HEAD_HDR_XRIPE
SARE_HEAD_HDR_XSAFMMI SARE_HEAD_HDR_XSMTPSV SARE_HEAD_HDR_XUMAIL
SARE_HEAD_HDR_XUNOLOOK SARE_HEAD_HDR_XWTID SARE_HEAD_HDR_XWTVERS
SARE_HEAD_MSMPR_RNDSTR SARE_HEAD_ORIG_RECIP SARE_HEAD_THRD_ALNUM
SARE_HEAD_XCANIT1 SARE_HEAD_XCANIT2 SARE_HEAD_XCOM_RFCMIN SARE_HEAD_XM4
SARE_HEAD_XMF_AUTHSNDR SARE_HEAD_XWORD SARE_HELO_MAIL SARE_HELO_MAILUSER
SARE_HELO_SERVER SARE_HTML_ALT_WAIT1 SARE_HTML_ALT_WAIT2
SARE_HTML_A_NULL SARE_HTML_BADOPEN SARE_HTML_BAD_FG_CLR
SARE_HTML_COLOR_NWHT3 SARE_HTML_FONT_INVIS2 SARE_HTML_FSIZE_1ALL
SARE_HTML_GIF_DIM SARE_HTML_H2_CLK SARE_HTML_HTML_AFTER
SARE_HTML_INV_TAGA SARE_HTML_JSCRIPT_ENC SARE_HTML_JVS_HREF
SARE_HTML_MANY_BR10 SARE_HTML_NO_BODY SARE_HTML_NO_HTML1
SARE_HTML_P_JUSTIFY SARE_HTML_URI_2SLASH SARE_HTML_URI_AXEL
SARE_HTML_URI_BADQRY SARE_HTML_URI_BUG SARE_HTML_URI_FORMPHP
SARE_HTML_URI_HREF SARE_HTML_URI_MANYP2 SARE_HTML_URI_MANYP3
SARE_HTML_URI_NUMPHP3 SARE_HTML_URI_OBFU4 SARE_HTML_URI_OBFU4a
SARE_HTML_URI_OPTPHP SARE_HTML_URI_REFID SARE_HTML_URI_RID
SARE_HTML_URI_RM SARE_HTML_USL_MULT SARE_MSGID_06D6 SARE_MSGID_2KDD
SARE_MSGID_DBL_AT SARE_MSGID_EMPTY SARE_MSGID_HEX30 SARE_MSGID_LONG
SARE_MSGID_LONG35 SARE_MSGID_LONG40 SARE_MSGID_LONG55 SARE_MSGID_LONG65
SARE_MSGID_LONG75 SARE_MSGID_SPAM_DOMN0 SARE_MSGID_SUSP2
SARE_MULT_RATW_02 SARE_MULT_RATW_03 SARE_MULT_SEXCLUB SARE_MULT_SUBJ
SARE_MULT_VIA_FWCATS SARE_RECV_CHAR_CARAT SARE_RECV_FREESERVE
SARE_RECV_IP_004078 SARE_RECV_IP_038112147 SARE_RECV_IP_062023
SARE_RECV_IP_063106130 SARE_RECV_IP_064034 SARE_RECV_IP_064069032
SARE_RECV_IP_064080 SARE_RECV_IP_064192082 SARE_RECV_IP_064192191
SARE_RECV_IP_065205157 SARE_RECV_IP_066063 SARE_RECV_IP_066111
SARE_RECV_IP_066114a SARE_RECV_IP_066114b SARE_RECV_IP_066159017
SARE_RECV_IP_066248154 SARE_RECV_IP_069060122 SARE_RECV_IP_070096177
SARE_RECV_IP_071004246 SARE_RECV_IP_080178 SARE_RECV_IP_081019
SARE_RECV_IP_195229 SARE_RECV_IP_206248152 SARE_RECV_IP_207182
SARE_RECV_IP_208048182 SARE_RECV_IP_209190 SARE_RECV_IP_211049
SARE_RECV_IP_212164 SARE_RECV_IP_216055133 SARE_RECV_IP_222126
SARE_RECV_ISWEST SARE_RECV_LOCALHOST SARE_RECV_RANDOM SARE_RECV_RND_DATE
SARE_RECV_RND_NUMBER SARE_RECV_SPAM_DOMN3 SARE_RECV_SPAM_DOMN81
SARE_RECV_SPAM_NAME0 SARE_RECV_SUSP_2 SARE_RECV_SUSP_3
SARE_RECV_TRADVALUES SARE_RECV_VIPLIST SARE_RECV_XACTRIX
SARE_REPLY_SPAMWORD0 SARE_REPLY_XACTRIX SARE_TOCC_BCC_MANY
SARE_TOCC_COMBO1 SARE_USERAG_Dig SARE_XMAIL_DIRUNIV SARE_XMAIL_GDI
SARE_XMAIL_GOMAIL SARE_XMAIL_INTERMED SARE_XMAIL_LEO
SARE_XMAIL_PHPBulkEmai SARE_XMAIL_SUSP3 SARE_XMAIL_TOLMAIL
SARE_XMAIL_XMAIL
[12948] dbg: rules: GREY_URI_RBL merged duplicates: URIBL_GREY
[12948] dbg: rules: VIRUS_WARNING107 merged duplicates:
__VBOUNCE_AV_RESULTS
[12948] dbg: rules: BLACK_URI_RBL merged duplicates: URIBL_BLACK
[12948] dbg: rules: __SPAM2_DOM_JMDCARS_COM_C1 merged duplicates:
__VIAGRA_DOM_RAKCERAMBD_COM_C1 __VIAGRA_DOM_RAKCERAMBD_COM_C2
[12948] dbg: rules: __MO_OL_F475E merged duplicates: __MO_OL_FF5C8
[12948] dbg: conf: finish parsing
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0xaebf784) implements
'finish_parsing_end', priority 0
[12948] dbg: replacetags: replacing tags
[12948] dbg: replacetags: done replacing tags
[12948] dbg: bayes: tie-ing to DB file
R/O /var/spool/MailScanner/spamassassin/bayes_toks
[12948] dbg: bayes: tie-ing to DB file
R/O /var/spool/MailScanner/spamassassin/bayes_seen
[12948] dbg: bayes: found bayes db version 3
[12948] dbg: bayes: DB journal sync: last sync: 1161146259
[12948] dbg: config: score set 3 chosen.
[12948] dbg: message: main message type: multipart/alternative
[12948] dbg: plugin: Mail::SpamAssassin::Plugin::DNSEval=HASH(0xacde080)
implements 'check_start', priority 0
[12948] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0xaf10b6c)
implements 'check_main', priority 0
[12948] dbg: conf: trusted_networks are not configured; it is
recommended that you configure trusted_networks manually
[12948] dbg: received-header: parsed as [ ip=196.192.46.132
rdns=mail.defense.gov.mg helo=mail.defense.gov.mg
by=ispam7.netcore.co.in ident= envfrom= intl=0 id=F2EB81C34FD auth=
msa=0 ]
[12948] dbg: received-header: do not trust any hosts from here on
[12948] dbg: received-header: relay 196.192.46.132 trusted? no internal?
no msa? no
[12948] dbg: metadata: X-Spam-Relays-Trusted:
[12948] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=196.192.46.132
rdns=mail.defense.gov.mg helo=mail.defense.gov.mg
by=ispam7.netcore.co.in ident= envfrom= intl=0 id=F2EB81C34FD auth=
msa=0 ]
[12948] dbg: metadata: X-Spam-Relays-Internal:
[12948] dbg: metadata: X-Spam-Relays-External: [ ip=196.192.46.132
rdns=mail.defense.gov.mg helo=mail.defense.gov.mg
by=ispam7.netcore.co.in ident= envfrom= intl=0 id=F2EB81C34FD auth=
msa=0 ]
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xaaacdd0) implements
'extract_metadata', priority 0
[12948] dbg: metadata: X-Relay-Countries: MG
[12948] dbg: message: ---- MIME PARSER START ----
[12948] dbg: message: parsing multipart, got boundary:
----=_NextPart_000_0003_01C7EF9A.537929C0
[12948] dbg: message: found part of type text/plain, boundary:
----=_NextPart_000_0003_01C7EF9A.537929C0
[12948] dbg: message: added part, type: text/plain
[12948] dbg: message: found part of type text/html, boundary:
----=_NextPart_000_0003_01C7EF9A.537929C0
[12948] dbg: message: added part, type: text/html
[12948] dbg: message: parsing normal part
[12948] dbg: message: parsing normal part
[12948] dbg: message: ---- MIME PARSER END ----
[12948] dbg: message: decoding quoted-printable
[12948] dbg: message: decoding quoted-printable
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa7c9d8) implements
'parsed_metadata', priority 0
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xaaacdd0) implements
'parsed_metadata', priority 0
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0xacda54c) implements
'parsed_metadata', priority 0
[12948] dbg: dns: dns_available set to yes in config file, skipping test
[12948] dbg: uridnsbl: domains to query: desibany.com saraswathi.bv
[12948] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:multi.uribl.com.:desibany.com (timeout 5.0 s)
[12948] dbg: dns: GREY_URI_RBL lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:bl.open-whois.org.:desibany.com (timeout 5.0 s)
[12948] dbg: dns: WHOIS_SECUREWHOIS lookup start
[12948] dbg: dns: WHOIS_MYPRIVREG lookup start
[12948] dbg: dns: WHOIS_NETSOLPR lookup start
[12948] dbg: dns: WHOIS_AITPRIV lookup start
[12948] dbg: dns: WHOIS_FINEXE lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.netcore.co.in.:desibany.com (timeout 5.0 s)
[12948] dbg: dns: ECMURI_GREY lookup start
[12948] dbg: dns: WHOIS_CONTACTPRIV lookup start
[12948] dbg: dns: WHOIS_REGISTER4LESS lookup start
[12948] dbg: dns: WHOIS_NETID lookup start
[12948] dbg: dns: WHOIS_DYNADOT lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.org.:desibany.com (timeout 5.0 s)
[12948] dbg: dns: URIBL_OB_SURBL lookup start
[12948] dbg: dns: WHOIS_DMNBYPROXY lookup start
[12948] dbg: dns: WHOIS_MONIKER_PRIV lookup start
[12948] dbg: dns: WHOIS_PRIVDOMAIN lookup start
[12948] dbg: dns: WHOIS_DREAMPRIV lookup start
[12948] dbg: dns: URIBL_SC_SURBL lookup start
[12948] dbg: dns: URIBL_AB_SURBL lookup start
[12948] dbg: dns: WHOIS_PRIVPROT lookup start
[12948] dbg: dns: WHOIS_NAMEKING lookup start
[12948] dbg: dns: WHOIS_WHOISGUARD lookup start
[12948] dbg: dns: RED_URI_RBL lookup start
[12948] dbg: dns: WHOIS_DOMPRIVCORP lookup start
[12948] dbg: dns: URIBL_PH_SURBL lookup start
[12948] dbg: dns: WHOIS_PRIVACYPOST lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:dob.sibl.support-intelligence.net:desibany.com (timeout 5.0 s)
[12948] dbg: dns: URIBL_RHS_DOB lookup start
[12948] dbg: dns: WHOIS_DOMESCROW lookup start
[12948] dbg: dns: ECMURI_BLACK lookup start
[12948] dbg: dns: WHOIS_WHOISPROT lookup start
[12948] dbg: dns: URIBL_JP_SURBL lookup start
[12948] dbg: dns: WHOIS_REGTEK lookup start
[12948] dbg: dns: URIBL_WS_SURBL lookup start
[12948] dbg: dns: WHOIS_SAFENAMES lookup start
[12948] dbg: dns: WHOIS_NOMINET lookup start
[12948] dbg: dns: WHOIS_UNLISTED lookup start
[12948] dbg: dns: WHOIS_REGISTERFLY lookup start
[12948] dbg: async: starting: URI-NS, NS:desibany.com (timeout 5.0 s)
[12948] dbg: dns: URIBL_SBL lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:multi.uribl.com.:saraswathi.bv (timeout 5.0 s)
[12948] dbg: dns: GREY_URI_RBL lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:bl.open-whois.org.:saraswathi.bv (timeout 5.0 s)
[12948] dbg: dns: WHOIS_SECUREWHOIS lookup start
[12948] dbg: dns: WHOIS_MYPRIVREG lookup start
[12948] dbg: dns: WHOIS_NETSOLPR lookup start
[12948] dbg: dns: WHOIS_AITPRIV lookup start
[12948] dbg: dns: WHOIS_FINEXE lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.netcore.co.in.:saraswathi.bv (timeout 5.0 s)
[12948] dbg: dns: ECMURI_GREY lookup start
[12948] dbg: dns: WHOIS_CONTACTPRIV lookup start
[12948] dbg: dns: WHOIS_REGISTER4LESS lookup start
[12948] dbg: dns: WHOIS_NETID lookup start
[12948] dbg: dns: WHOIS_DYNADOT lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.org.:saraswathi.bv (timeout 5.0 s)
[12948] dbg: dns: URIBL_OB_SURBL lookup start
[12948] dbg: dns: WHOIS_DMNBYPROXY lookup start
[12948] dbg: dns: WHOIS_MONIKER_PRIV lookup start
[12948] dbg: dns: WHOIS_PRIVDOMAIN lookup start
[12948] dbg: dns: WHOIS_DREAMPRIV lookup start
[12948] dbg: dns: URIBL_SC_SURBL lookup start
[12948] dbg: dns: URIBL_AB_SURBL lookup start
[12948] dbg: dns: WHOIS_PRIVPROT lookup start
[12948] dbg: dns: WHOIS_NAMEKING lookup start
[12948] dbg: dns: WHOIS_WHOISGUARD lookup start
[12948] dbg: dns: RED_URI_RBL lookup start
[12948] dbg: dns: WHOIS_DOMPRIVCORP lookup start
[12948] dbg: dns: URIBL_PH_SURBL lookup start
[12948] dbg: dns: WHOIS_PRIVACYPOST lookup start
[12948] dbg: async: starting: URI-DNSBL,
DNSBL:dob.sibl.support-intelligence.net:saraswathi.bv (timeout 5.0 s)
[12948] dbg: dns: URIBL_RHS_DOB lookup start
[12948] dbg: dns: WHOIS_DOMESCROW lookup start
[12948] dbg: dns: ECMURI_BLACK lookup start
[12948] dbg: dns: WHOIS_WHOISPROT lookup start
[12948] dbg: dns: URIBL_JP_SURBL lookup start
[12948] dbg: dns: WHOIS_REGTEK lookup start
[12948] dbg: dns: URIBL_WS_SURBL lookup start
[12948] dbg: dns: WHOIS_SAFENAMES lookup start
[12948] dbg: dns: WHOIS_NOMINET lookup start
[12948] dbg: dns: WHOIS_UNLISTED lookup start
[12948] dbg: dns: WHOIS_REGISTERFLY lookup start
[12948] dbg: async: starting: URI-NS, NS:saraswathi.bv (timeout 5.0 s)
[12948] dbg: dns: URIBL_SBL lookup start
[12948] dbg: dns: checking RBL sa-other.bondedsender.org., set
bsp-untrusted
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs:
[12948] dbg: dns: checking RBL combined.njabl.org., set njabl
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.combined.njabl.org. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.combined.njabl.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS TXT query for
132.46.192.196.bl.spamcop.net. in background
[12948] dbg: async: starting: DNSBL-TXT,
dns:TXT:132.46.192.196.bl.spamcop.net. (timeout 5.0 s)
[12948] dbg: dns: _check_rbl_addresses RBL blackhole.securitysage.com.,
set securitysage
[12948] dbg: dns: launching DNS A query for
psychassualt.org.blackhole.securitysage.com. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:psychassualt.org.blackhole.securitysage.com. (timeout 5.0 s)
[12948] dbg: dns: _check_rbl_addresses RBL rhsbl.ahbl.org., set ahbl
[12948] dbg: dns: launching DNS A query for
psychassualt.org.rhsbl.ahbl.org. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:psychassualt.org.rhsbl.ahbl.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL dob.sibl.support-intelligence.net., set
dob
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.dob.sibl.support-intelligence.net. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.dob.sibl.support-intelligence.net. (timeout 5.0 s)
[12948] dbg: dns: checking A and MX for host psychassualt.org
[12948] dbg: dns: launching DNS A query for psychassualt.org in
background
[12948] dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-A,
dns:A:psychassualt.org (timeout 5.0 s)
[12948] dbg: dns: launching DNS MX query for psychassualt.org in
background
[12948] dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-MX,
dns:MX:psychassualt.org (timeout 5.0 s)
[12948] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.zen.spamhaus.org. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.zen.spamhaus.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.dnsbl.sorbs.net. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.dnsbl.sorbs.net. (timeout 5.0 s)
[12948] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: _check_rbl_addresses RBL
dob.sibl.support-intelligence.net., set dob
[12948] dbg: dns: launching DNS A query for
psychassualt.org.dob.sibl.support-intelligence.net. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:psychassualt.org.dob.sibl.support-intelligence.net. (timeout 5.0
s)
[12948] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.list.dnswl.org. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.list.dnswl.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.sa-accredit.habeas.com. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.sa-accredit.habeas.com. (timeout 5.0 s)
[12948] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.combined-HIB.dnsiplists.completewhois.com. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.combined-HIB.dnsiplists.completewhois.com. (timeout
5.0 s)
[12948] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS TXT query for
132.46.192.196.list.dsbl.org. in background
[12948] dbg: async: starting: DNSBL-TXT,
dns:TXT:132.46.192.196.list.dsbl.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS TXT query for
132.46.192.196.sa-trusted.bondedsender.org. in background
[12948] dbg: async: starting: DNSBL-TXT,
dns:TXT:132.46.192.196.sa-trusted.bondedsender.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois-lastexternal
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: checking RBL zen.spamhaus.org., set zen
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: _check_rbl_addresses RBL bl.open-whois.org., set
openwhois
[12948] dbg: dns: launching DNS A query for
psychassualt.org.bl.open-whois.org. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:psychassualt.org.bl.open-whois.org. (timeout 5.0 s)
[12948] dbg: dns: _check_rbl_addresses RBL fulldom.rfc-ignorant.org.,
set rfci_envfrom
[12948] dbg: dns: launching DNS A query for
psychassualt.org.fulldom.rfc-ignorant.org. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:psychassualt.org.fulldom.rfc-ignorant.org. (timeout 5.0 s)
[12948] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[12948] dbg: dns: IPs found: full-external: 196.192.46.132 untrusted:
196.192.46.132 originating:
[12948] dbg: dns: only inspecting the following IPs: 196.192.46.132
[12948] dbg: dns: launching DNS A query for
132.46.192.196.iadb.isipp.com. in background
[12948] dbg: async: starting: DNSBL-A,
dns:A:132.46.192.196.iadb.isipp.com. (timeout 5.0 s)
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0xacda54c) implements
'have_shortcircuited', priority 0
[12948] dbg: check: running tests for priority: -2000
[12948] dbg: dns: hit <dns:psychassualt.org> 69.89.22.104
[12948] dbg: dns: hit <dns:psychassualt.org?type=MX> 0 psychassualt.org.
[12948] dbg: dns: hit <dns:132.46.192.196.bl.spamcop.net?type=TXT>
"Blocked - see http://www.spamcop.net/bl.shtml?196.192.46.132"
[12948] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0xacda54c) implements
'hit_rule', priority 0
[12948] dbg: async: select found 29 responses ready
[12948] dbg: async: query completed in 0.215 s: URI-DNSBL,
DNSBL:dob.sibl.support-intelligence.net:saraswathi.bv
[12948] dbg: async: query completed in 0.126 s: URI-DNSBL,
DNSBL:multi.uribl.com.:desibany.com
[12948] dbg: uridnsbl: domain "desibany.com" listed (RED_URI_RBL):
127.0.0.2
[12948] dbg: dns: RED_URI_RBL lookup finished
[12948] dbg: uridnsbl: domain "desibany.com" listed (RED_URI_RBL):
127.0.0.2
[12948] dbg: dns: RED_URI_RBL lookup finished
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_BLACK):
127.0.0.2
[12948] dbg: uridnsbl: domain "desibany.com" listed
(URIBL_RHS_URIBL_BLACK): 127.0.0.2
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_BLACK):
127.0.0.2
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_BLACK):
127.0.0.2
[12948] dbg: async: query completed in 0.180 s: NO_DNS_FOR_FROM,
DNSBL-MX, dns:MX:psychassualt.org
[12948] dbg: async: query completed in 0.219 s: URI-DNSBL,
DNSBL:multi.surbl.org.:saraswathi.bv
[12948] dbg: async: query completed in 0.121 s: URI-DNSBL,
DNSBL:multi.uribl.com.:saraswathi.bv
[12948] dbg: async: query completed in 0.234 s: URI-DNSBL,
DNSBL:dob.sibl.support-intelligence.net:desibany.com
[12948] dbg: async: query completed in 0.167 s: DNSBL-A,
dns:A:psychassualt.org.fulldom.rfc-ignorant.org.
[12948] dbg: async: query completed in 0.168 s: DNSBL-A,
dns:A:psychassualt.org.bl.open-whois.org.
[12948] dbg: async: query completed in 0.129 s: URI-DNSBL,
DNSBL:multi.surbl.org.:desibany.com
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_AB_SURBL):
127.0.0.114
[12948] dbg: dns: URIBL_AB_SURBL lookup finished
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_JP_SURBL):
127.0.0.114
[12948] dbg: dns: URIBL_JP_SURBL lookup finished
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_OB_SURBL):
127.0.0.114
[12948] dbg: dns: URIBL_OB_SURBL lookup finished
[12948] dbg: uridnsbl: domain "desibany.com" listed (URIBL_SC_SURBL):
127.0.0.114
[12948] dbg: dns: URIBL_SC_SURBL lookup finished
[12948] dbg: async: query completed in 0.194 s: DNSBL-A,
dns:A:132.46.192.196.zen.spamhaus.org.
[12948] dbg: async: query completed in 0.178 s: DNSBL-TXT,
dns:TXT:132.46.192.196.list.dsbl.org.
[12948] dbg: async: query completed in 0.192 s: DNSBL-A,
dns:A:132.46.192.196.dnsbl.sorbs.net.
[12948] dbg: async: query completed in 0.176 s: DNSBL-TXT,
dns:TXT:132.46.192.196.sa-trusted.bondedsender.org.
[12948] dbg: async: query completed in 0.121 s: URI-NS, NS:desibany.com
[12948] dbg: async: starting: URI-A, A:ns3.met-dns.com. (timeout 5.0 s)
[12948] dbg: async: starting: URI-A, A:ns4.met-dns.com. (timeout 5.0 s)
[12948] dbg: async: starting: URI-A, A:ns1.met-dns.com. (timeout 5.0 s)
[12948] dbg: async: starting: URI-A, A:ns2.met-dns.com. (timeout 5.0 s)
[12948] dbg: async: query completed in 0.213 s: URI-NS, NS:saraswathi.bv
[12948] dbg: async: query completed in 0.180 s: DNSBL-A,
dns:A:132.46.192.196.dob.sibl.support-intelligence.net.
[12948] dbg: async: query completed in 0.189 s: DNSBL-A,
dns:A:psychassualt.org.dob.sibl.support-intelligence.net.
[12948] dbg: async: query completed in 0.132 s: URI-DNSBL,
DNSBL:multi.surbl.netcore.co.in.:desibany.com
[12948] dbg: async: query completed in 0.221 s: URI-DNSBL,
DNSBL:multi.surbl.netcore.co.in.:saraswathi.bv
[12948] dbg: async: query completed in 0.184 s: DNSBL-A,
dns:A:132.46.192.196.sa-accredit.habeas.com.
[12948] dbg: async: query completed in 0.186 s: DNSBL-A,
dns:A:132.46.192.196.list.dnswl.org.
[12948] dbg: async: query completed in 0.182 s: DNSBL-A,
dns:A:psychassualt.org.rhsbl.ahbl.org.
[12948] dbg: async: query completed in 0.283 s: URI-DNSBL,
DNSBL:bl.open-whois.org.:desibany.com
[12948] dbg: async: query completed in 0.123 s: URI-DNSBL,
DNSBL:bl.open-whois.org.:saraswathi.bv
[12948] dbg: async: query completed in 0.200 s: DNSBL-A,
dns:A:psychassualt.org.blackhole.securitysage.com.
[12948] dbg: async: query completed in 0.217 s: DNSBL-TXT,
dns:TXT:132.46.192.196.bl.spamcop.net.
[12948] dbg: async: query completed in 0.179 s: NO_DNS_FOR_FROM,
DNSBL-A, dns:A:psychassualt.org
[12948] dbg: async: query completed in 0.207 s: DNSBL-A,
dns:A:132.46.192.196.combined.njabl.org.
[12948] dbg: async: query completed in 0.165 s: DNSBL-A,
dns:A:132.46.192.196.iadb.isipp.com.
[12948] dbg: async: queries completed: 29, started: 4
[12948] dbg: async: queries active: DNSBL-A=1 URI-A=4 at Wed Sep 5
14:05:53 2007
[12948] dbg: dns: harvested completed queries
[12948] dbg: rules: running head tests; score so far=7.236
[12948] dbg: rules: compiled head tests
[12948] dbg: shortcircuit: s/c due to ECM_DOMWHITELIST, using score of
-111
[12948] dbg: rules: ran header rule ECM_DOMWHITELIST ======> got hit:
"XX"
[12948] dbg: check: is spam? score=-103.764 required=5
[12948] dbg: check:
tests=ECM_DOMWHITELIST,RCVD_IN_BL_SPAMCOP_NET,RED_URI_RBL,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_RED,URIBL_SC_SURBL
[12948] dbg: check: subtests=
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
ispam7.netcore.co.in
X-Spam-Level:
X-Spam-Status: No, score=-103.8 required=5.0 tests=ECM_DOMWHITELIST,
RCVD_IN_BL_SPAMCOP_NET,RED_URI_RBL,URIBL_AB_SURBL,URIBL_JP_SURBL,
URIBL_OB_SURBL,URIBL_RED,URIBL_SC_SURBL shortcircuit=ham
autolearn=disabled
version=3.2.3
X-Envelope-From: <ma...@psychassualt.org>
Received: from mail.defense.gov.mg (mail.defense.gov.mg
[196.192.46.132])
by ispam7.netcore.co.in (Postfix) with ESMTP id F2EB81C34FD
for <sa...@s-p-apparels.com>; Wed, 5 Sep 2007 11:26:53 +0530
(IST)
Received: by 10.139.108.2 with SMTP id cnnFChBUPsLfS;
Wed, 5 Sep 2007 08:54:15 +0300 (GMT)
Received: by 192.168.150.157 with SMTP id lofPgvNdDfekOi.9574826084363;
Wed, 5 Sep 2007 08:54:13 +0300 (GMT)
Message-ID: <00...@MJS032>
X-ECM-Milter-ID: XX
From: "Marvelle Morten" <Ma...@psychassualt.org>
To: <AA...@BB>
Subject: javellis
Date: Wed, 5 Sep 2007 08:54:10 +0300
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0003_01C7EF9A.537929C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3028
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3028
------=_NextPart_000_0003_01C7EF9A.537929C0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://www.desibany.com/
Wassup saraswathi.bv
Its amazing, now ALL woman want to screw me.
wondercum
Sanggu KINGSBURY
------=_NextPart_000_0003_01C7EF9A.537929C0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html;
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2900.3059" name=3DGENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=3D#ffffff>
<DIV><FONT Arial size=3D2><A=20
HREF=3D"http://www.desibany.com/">http://www.desibany.com/</A></FONT></DI=
V>
<DIV><FONT Arial size=3D2>Wassup saraswathi.bv</FONT></DIV>
<DIV><FONT Arial size=3D2>Its amazing, now ALL woman want to screw =
me.</FONT></DIV>
<DIV><FONT Arial size=3D2></FONT></DIV>
<DIV><FONT Arial size=3D2>Sanggu KINGSBURY</FONT></DIV></BODY></HTML>
------=_NextPart_000_0003_01C7EF9A.537929C0--
Spam detection software, running on the system "ispam7.netcore.co.in",
has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: http://www.desibany.com/ Wassup saraswathi.bv Its
amazing,
now ALL woman want to screw me. wondercum Sanggu KINGSBURY
http://www.desibany.com/
[...]
Content analysis details: (-103.8 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.7 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see
<http://www.spamcop.net/bl.shtml?196.192.46.132>]
1.2 RED_URI_RBL Contains an URL listed in the URIBL redlist
[URIs: desibany.com]
0.0 URIBL_RED Contains an URL listed in the URIBL redlist
1.9 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
blocklist
[URIs: desibany.com]
1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
blocklist
[URIs: desibany.com]
1.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL
blocklist
[URIs: desibany.com]
0.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL
blocklist
[URIs: desibany.com]
-111 ECM_DOMWHITELIST Whitelisted sender
Re: Spamasassin short circuit not working
Posted by ram <ra...@netcore.co.in>.
On Wed, 2007-09-05 at 15:10 +0530, ram wrote:
> I just upgraded my spamassassin from 3.1.5 to 3.2.3
> But I can see that the shortcircuit rules are notworking
>
> I created a simple text rule and put it in a short circuit rule with a
> high priority
>
>
> header ECM_DOMWHITELIST X-XXXX-ID =~/XX/
> describe ECM_DOMWHITELIST Whitelisted sender for this recipient
> score ECM_DOMWHITELIST -111
>
> priority ECM_DOMWHITELIST -2000
> shortcircuit ECM_DOMWHITELIST on
> but my short circuit is not working. I can see all tests being done for
> a whitelisted mail
>
> Can someone point out what is going wrong please
>
> Thanks
> Ram
>
>
Actually I can see that that the DNS tests are started *before* my rules
even if my rule has a higher priority
So is this why the Short circuit is not happenning
Thanks
Ram
Re: Spamasassin short circuit not working
Posted by Adam Stephens <ad...@bristol.ac.uk>.
ram wrote:
> I just upgraded my spamassassin from 3.1.5 to 3.2.3
> But I can see that the shortcircuit rules are notworking
>
> I created a simple text rule and put it in a short circuit rule with a
> high priority
>
>
> header ECM_DOMWHITELIST X-XXXX-ID =~/XX/
> describe ECM_DOMWHITELIST Whitelisted sender for this recipient
> score ECM_DOMWHITELIST -111
>
> priority ECM_DOMWHITELIST -2000
> shortcircuit ECM_DOMWHITELIST on
> but my short circuit is not working. I can see all tests being done for
> a whitelisted mail
>
> Can someone point out what is going wrong please
>
You need to say if it's spam or ham, eg:
shortcircuit ECM_DOMWHITELIST ham
or
shortcircuit ANY_BOUNCE_MESSAGE spam
regards,
Adam.
--
--------------------------------
Adam Stephens
Network Specialist - Email & DNS
adam.stephens@bristol.ac.uk