You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jason Lixfeld <ja...@lixfeld.ca> on 2004/11/09 07:43:36 UTC

SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]

Figured it out.

It seems that SA doesn't apply whitelist scores unless the rest of the  
scores add up to be greater than the score required to trigger  
X-Spam-Status: Yes.

This seems to be a rather odd methodology.  What's the rationale behind  
not taking into consideration whitelist scores regardless of the spam  
score?

On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:

> I've got a whitelist_from in my SQL DB which Spamassassin is supposed  
> to read in.  When I do a debug of spamd, I can see the connection to  
> the DB as the user, but the whitelist_from doesn't seem to be getting  
> applied to the message:
>
> mysql> select * from spamassassin.userpref;
> +------------------+-------------------------+-------------------- 
> +--------+
> | username         | preference              | value              |  
> prefid |
> +------------------+-------------------------+-------------------- 
> +--------+
> | $GLOBAL          | whitelist_from          | foobeats@gmail.com |     
>  36 |
> | jason.lixfeld.ca | whitelist_from          | foobeats@gmail.com |     
>  35 |
> | $GLOBAL          | score USER_IN_WHITELIST | -10                |     
>  23 |
> +------------------+-------------------------+-------------------- 
> +--------+
> 4 rows in set (0.00 sec)
>
> Below is the output of spamd in debug mode.  Spamd is called twice for  
> this message.  First to obtain the $spam_score and $spam_score_int   
> for data checking:
>
> acl_check_data:
>
> warn message = X-First-Run-SpamCheck: Checked on SMTP Transfer
> spam = nobody:true
>
> warn message = X-First-Run-SpamScore: $spam_score
> spam = nobody:true
>
> warn message = X-First-Run-is-Spam: Yes
> spam = nobody
>
> deny message = This message scored $spam_score spam points.
> spam = nobody:true
> condition = ${if >{$spam_score_int}{150}{1}{0}}
>
> accept
>
> Next, the message is passed to the spamassassin router and transport  
> where spamd is called as the user to get the userpref.  Looking at how  
> things are setup, can anyone see what's going on here?
>
> Debug, headers and .cf are below:
>
> (NOTE: Email addresses in debug logs have been sanitized)
>
> logmsg: connection from localhost [127.0.0.1] at port 64061
> debug: Conf::SQL: executing SQL: SELECT preference, value FROM  
> userpref WHERE username = 'nobody' OR username = '$GLOBAL' OR username  
> = CONCAT('%',NULL) ORDER BY username DESC
> debug: retrieving prefs for nobody from SQL server
> debug: user has changed
> debug: bayes: Using username: spamassassin
> debug: bayes: Database connection established
> debug: bayes: found bayes db version 3
> debug: bayes: Using userid: 1
> debug: Score set 3 chosen.
> logmsg: checking message (unknown) for nobody:0.
> debug: received-header: parsed as [ ip=216.7.194.254  
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=  
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: received-header: 'by' eshara.ebit.ca has public IP 69.90.17.218
> debug: received-header: relay 216.7.194.254 trusted? no internal? no
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted: [ ip=216.7.194.254  
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=  
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: ---- MIME PARSER START ----
> debug: main message type: text/plain
> debug: parsing normal part
> debug: added part, type: text/plain
> debug: ---- MIME PARSER END ----
> debug: decoding: no encoding detected
> debug: Message too short for language analysis
> debug: URIDNSBL: domains to query:
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: all '*From' addrs:
> debug: Running tests for priority: 0
> debug: running header regexp tests; score so far=0
> debug: SPF: checking HELO (helo=foo.com, ip=216.7.194.254)
> debug: SPF: trimmed HELO down to 'foo.com'
> debug: SPF: cannot load or create Mail::SPF::Query module
> debug: all '*To' addrs: jason-at-lixfeld.ca
> debug: SPF: cannot get Envelope-From, cannot use SPF
> debug: forged-HELO: from=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca
> debug: forged-HELO: mismatch on HELO: 'foo.com' != 'trek.lixfeld.ca'
> debug: running body-text per-line regexp tests; score so far=0.119
> debug: running uri tests; score so far=0.119
> debug: bayes corpus size: nspam = 4604, nham = 299
> debug: tokenize: header tokens for *RT = " "
> debug: tokenize: header tokens for *RU = " [ ip=216.7.194.254  
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=  
> intl=0 id=1CRB3W-000Isd-1y ]"
> debug: tokenize: header tokens for *r = "   trek.lixfeld.ca  
> ([216.7.194 ip*216.7.194.254 ] helo=foo.com) by eshara.ebit.ca   smtp  
> (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y   jason-at-lixfeld.ca; "
> debug: bayes: tok_get_all: Token Count: 23
> debug: bayes token 'foo' => 0.0173548387096774
> debug: bayes token 'H*RU:foo.com' => 0.978
> debug: bayes token 'H*r:sk:jason@l' => 0.967934668617371
> debug: bayes token 'H*r:foo.com' => 0.0512342735845206
> debug: bayes token 'H*r:eshara.ebit.ca' => 0.867296640246297
> debug: bayes token 'H*r:FreeBSD' => 0.853297353802955
> debug: bayes: score = 0.514928182534538
> debug: Razor2 is available
> debug: entering helper-app run mode
>  Razor-Log: Computed razorhome from env: /usr/home/jlixfeld/.razor
>  Razor-Log: No razorhome found, using all defaults
>  Razor-Log: No razor-agent.conf found, using defaults.
> Nov 08 10:03:43.987772 check[72506]: [ 2] [bootup] Logging initiated  
> LogDebugLevel=9 to stdout
> Nov 08 10:03:43.988034 check[72506]: [ 5] computed razorhome=, conf=,  
> ident=identity
> Nov 08 10:03:43.988230 check[72506]: [ 8] Client supported_engines: 4 8
> Nov 08 10:03:43.988595 check[72506]: [ 8]  prep_mail done: mail 1  
> headers=189, mime0=40
> Nov 08 10:03:43.988814 check[72506]: [ 7] Can't read file  
> servers.discovery.lst, looking relatve to
> Nov 08 10:03:43.988967 check[72506]: [ 5] Can't read file  
> /servers.discovery.lst: No such file or directory
> Nov 08 10:03:43.989110 check[72506]: [ 7] Can't read file  
> servers.nomination.lst, looking relatve to
> Nov 08 10:03:43.989249 check[72506]: [ 5] Can't read file  
> /servers.nomination.lst: No such file or directory
> Nov 08 10:03:43.989391 check[72506]: [ 7] Can't read file  
> servers.catalogue.lst, looking relatve to
> Nov 08 10:03:43.989530 check[72506]: [ 5] Can't read file  
> /servers.catalogue.lst: No such file or directory
> Nov 08 10:03:43.989744 check[72506]: [ 5] no listfile:  
> servers.catalogue.lst
> Nov 08 10:03:43.989900 check[72506]: [ 6] no discovery listfile:  
> servers.discovery.lst
> Nov 08 10:03:43.990025 check[72506]: [ 5] Finding Discovery Servers  
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:43.995052 check[72506]: [ 6] Found 1 Discovery Servers  
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:43.995316 check[72506]: [ 8] Checking with Razor  
> Discovery Server 66.151.150.12
> Nov 08 10:03:43.995477 check[72506]: [ 6] No port specified, using 2703
> Nov 08 10:03:43.995601 check[72506]: [ 5] Connecting to 66.151.150.12  
> ...
> Nov 08 10:03:44.112375 check[72506]: [ 8] Connection established
> Nov 08 10:03:44.112583 check[72506]: [ 4] 66.151.150.12 >> 35 server  
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:44.112918 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:44.113047 check[72506]: [ 6] a=g&pm=csl
> Nov 08 10:03:44.173544 check[72506]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:44.173682 check[72506]: [ 6] response to sent.1
> -csl=?
> pride.cloudmark.com
> wonder.cloudmark.com
> thrill.cloudmark.com
> .
> Nov 08 10:03:44.174122 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:44.174283 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:44.174430 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:44.174753 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:44.174894 check[72506]: [ 6] a=g&pm=nsl
> Nov 08 10:03:44.234387 check[72506]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:44.234524 check[72506]: [ 6] response to sent.2
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:44.234799 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:44.234883 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:44.235067 check[72506]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:44.235205 check[72506]: [ 6] losing old server  
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:44.235290 check[72506]: [ 5] disconnecting from server  
> 66.151.150.12
> Nov 08 10:03:44.235536 check[72506]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:44.235612 check[72506]: [ 6] a=q
> Nov 08 10:03:44.235824 check[72506]: [ 5] Connecting to  
> pride.cloudmark.com ...
> Nov 08 10:03:44.352546 check[72506]: [ 8] Connection established
> Nov 08 10:03:44.352772 check[72506]: [ 4] pride.cloudmark.com >> 36  
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:44.353241 check[72506]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:44.353370 check[72506]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:44.353720 check[72506]: [ 4] pride.cloudmark.com << 14
> Nov 08 10:03:44.353848 check[72506]: [ 6] a=g&pm=state
> Nov 08 10:03:44.471194 check[72506]: [ 4] pride.cloudmark.com >> 141
> Nov 08 10:03:44.471330 check[72506]: [ 6] response to sent.5
> -sv=3.44
> sn=C
> zone=razor2.cloudmark.com
> ac=6
> srl=5048
> lm=4
> bql=50
> bqs=129
> dre=4
> se=C8
> srf=FF
> ep4=7542-10
> ep8=5
> pp=1
> crt=90
> .
> Nov 08 10:03:44.472048 check[72506]: [ 5] Updated to new server state  
> srl 5048 for server pride.cloudmark.com
> Nov 08 10:03:44.472198 check[72506]: [ 6] pride.cloudmark.com is a  
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:44.472381 check[72506]: [ 8] Computed supported_engines:  
> 4 8
> Nov 08 10:03:44.472473 check[72506]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:44.472547 check[72506]: [ 5] srl was updated, forcing  
> discovery ...
> Nov 08 10:03:44.472665 check[72506]: [ 5] no listfile:  
> servers.catalogue.lst
> Nov 08 10:03:44.472765 check[72506]: [ 8] already have 1 discovery  
> servers
> Nov 08 10:03:44.472853 check[72506]: [ 8] Checking with Razor  
> Discovery Server 66.151.150.12
> Nov 08 10:03:44.472951 check[72506]: [ 6] losing old server  
> connection, pride.cloudmark.com, for new server, 66.151.150.12
> Nov 08 10:03:44.473029 check[72506]: [ 5] disconnecting from server  
> pride.cloudmark.com
> Nov 08 10:03:44.473264 check[72506]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:44.473341 check[72506]: [ 6] a=q
> Nov 08 10:03:44.473451 check[72506]: [ 5] Connecting to 66.151.150.12  
> ...
> Nov 08 10:03:50.788684 check[72506]: [ 8] Connection established
> Nov 08 10:03:50.788961 check[72506]: [ 4] 66.151.150.12 >> 35 server  
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:50.789312 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:50.789458 check[72506]: [ 6] a=g&pm=csl
> Nov 08 10:03:50.849830 check[72506]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:50.849970 check[72506]: [ 6] response to sent.7
> -csl=?
> wonder.cloudmark.com
> pride.cloudmark.com
> thrill.cloudmark.com
> .
> Nov 08 10:03:50.850273 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:50.850361 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:50.850443 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:50.850687 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:50.850766 check[72506]: [ 6] a=g&pm=nsl
> Nov 08 10:03:50.910458 check[72506]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:50.910667 check[72506]: [ 6] response to sent.8
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:50.910970 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:50.911057 check[72506]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:50.911253 check[72506]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:50.911425 check[72506]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:50.911519 check[72506]: [ 8] Using next closest server  
> pride.cloudmark.com:2703, cached info srl 5048
> Nov 08 10:03:50.911634 check[72506]: [ 8] mail 1 has no subject
> Nov 08 10:03:50.911899 check[72506]: [ 6] preproc: mail 1.0 went from  
> 40 bytes to 3
> Nov 08 10:03:50.912021 check[72506]: [ 6] computing sigs for mail 1.0,  
> len 3
> Nov 08 10:03:50.913408 check[72506]: [ 6] Engine (8) didn't produce a  
> signature for mail 1.0
> Nov 08 10:03:50.913567 check[72506]: [ 6] skipping whitelist file  
> (empty?): razor-whitelist
> Nov 08 10:03:50.913675 check[72506]: [ 6] losing old server  
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:50.913758 check[72506]: [ 5] disconnecting from server  
> 66.151.150.12
> Nov 08 10:03:50.914005 check[72506]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:50.914084 check[72506]: [ 6] a=q
> Nov 08 10:03:50.914344 check[72506]: [ 5] Connecting to  
> pride.cloudmark.com ...
> Nov 08 10:03:51.031322 check[72506]: [ 8] Connection established
> Nov 08 10:03:51.031544 check[72506]: [ 4] pride.cloudmark.com >> 36  
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:51.032022 check[72506]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:51.032155 check[72506]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:51.032441 check[72506]: [ 6] pride.cloudmark.com is a  
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:51.032659 check[72506]: [ 8] Computed supported_engines:  
> 4 8
> Nov 08 10:03:51.032796 check[72506]: [ 8] mail 1.0 e4 sig:  
> DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:51.032921 check[72506]: [ 5] mail 1.0 e8 got no sig
> Nov 08 10:03:51.033028 check[72506]: [ 8] preparing 1 queries
> Nov 08 10:03:51.033202 check[72506]: [ 8] sending 1 batches
> Nov 08 10:03:51.033446 check[72506]: [ 4] pride.cloudmark.com << 52
> Nov 08 10:03:51.033530 check[72506]: [ 6]  
> a=c&e=4&ep4=7542-10&s=DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:51.346837 check[72506]: [ 4] pride.cloudmark.com >> 10
> Nov 08 10:03:51.346979 check[72506]: [ 6] response to sent.11
> p=0&ct=1
> Nov 08 10:03:51.347409 check[72506]: [ 6] mail 1.0 e=4  
> sig=DXc-2nXPD705qwuy78OtNOq1FcwA: sig not found.
> Nov 08 10:03:51.347569 check[72506]: [ 7] method 4: mail 1.0:  
> contention part, skipping
> Nov 08 10:03:51.347716 check[72506]: [ 7] method 4: mail 1: all  
> non-contention parts not spam, mail not spam
> Nov 08 10:03:51.347865 check[72506]: [ 3] mail 1 is not known spam.
> Nov 08 10:03:51.348028 check[72506]: [ 5] disconnecting from server  
> pride.cloudmark.com
> Nov 08 10:03:51.348336 check[72506]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:51.348478 check[72506]: [ 6] a=q
> debug: Using results from Razor v2.61
> debug: Found Razor2 part: part=0 engine=4 ct=1 cf=0
> debug: leaving helper-app run mode
> debug: Razor2 results: spam? 0  highest cf score: 0
> debug: running raw-body-text per-line regexp tests; score so far=0.12
> debug: running full-text regexp tests; score so far=0.12
> debug: Razor2 is available
> debug: Pyzor is not available: pyzor not found
> debug: DCCifd is not available: no r/w dccifd socket found.
> debug: DCC is not available: no executable dccproc found.
> debug: Running tests for priority: 500
> debug: RBL: success for 36 of 36 queries
> debug: running meta tests; score so far=0.12
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: Running tests for priority: 1000
> debug: running meta tests; score so far=1.346
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: auto-learn: currently using scoreset 3, recomputing score based  
> on scoreset 1.
> debug: auto-learn: message score: 1.346, computed score for autolearn:  
> 1.57
> debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0,  
> learned-points=0.001
> debug: auto-learn? no: inside auto-learn thresholds, not considered  
> ham or spam
> debug: is spam? score=1.346 required=5
> debug: tests=BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
> debug: subtests=
> logmsg: clean message (1.3/5.0) for nobody:0 in 7.5 seconds, 194 bytes.
> logmsg: result: .  1 - BAYES_50,MISSING_HEADERS,MISSING_SUBJECT  
> scantime=7.5,size=194,mid=(unknown),bayes=0.514928182534538,autolearn=n 
> o
> logmsg: connection from localhost [127.0.0.1] at port 64068
> debug: Conf::SQL: executing SQL: SELECT preference, value FROM  
> userpref WHERE username = 'jason.lixfeld.ca' OR username = '$GLOBAL'  
> OR username = CONCAT('%',NULL) ORDER BY username DESC
> debug: retrieving prefs for jason.lixfeld.ca from SQL server
> debug: user has changed
> debug: bayes: Using username: spamassassin
> debug: bayes: Database connection established
> debug: bayes: found bayes db version 3
> debug: bayes: Using userid: 1
> debug: Score set 3 chosen.
> logmsg: processing message (unknown) for jason.lixfeld.ca:0.
> debug: received-header: parsed as [ ip=216.7.194.254  
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=  
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: received-header: 'by' eshara.ebit.ca has public IP 69.90.17.218
> debug: received-header: relay 216.7.194.254 trusted? no internal? no
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted: [ ip=216.7.194.254  
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=  
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: ---- MIME PARSER START ----
> debug: main message type: text/plain
> debug: parsing normal part
> debug: added part, type: text/plain
> debug: ---- MIME PARSER END ----
> debug: decoding: no encoding detected
> debug: Message too short for language analysis
> debug: URIDNSBL: domains to query:
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: all '*From' addrs:
> debug: Running tests for priority: 0
> debug: running header regexp tests; score so far=0
> debug: SPF: checking HELO (helo=foo.com, ip=216.7.194.254)
> debug: SPF: trimmed HELO down to 'foo.com'
> debug: SPF: cannot load or create Mail::SPF::Query module
> debug: all '*To' addrs: jason-at-lixfeld.ca
> debug: SPF: cannot get Envelope-From, cannot use SPF
> debug: forged-HELO: from=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca
> debug: forged-HELO: mismatch on HELO: 'foo.com' != 'trek.lixfeld.ca'
> debug: running body-text per-line regexp tests; score so far=0.119
> debug: running uri tests; score so far=0.119
> debug: bayes corpus size: nspam = 4604, nham = 299
> debug: tokenize: header tokens for X-First-Run-SpamCheck = " Checked  
> on SMTP Transfer"
> debug: tokenize: header tokens for X-First-Run-SpamScore = " 1.3"
> debug: tokenize: header tokens for X-SA-Exim-Connect-IP = "  
> 216.7.194.254"
> debug: tokenize: header tokens for X-SA-Exim-Mail-From = "  
> foobeats@gmail.com"
> debug: tokenize: header tokens for X-SA-Exim-Scanned = " No (on  
> eshara.ebit.ca); SAEximRunCond expanded to false"
> debug: tokenize: header tokens for *RT = " "
> debug: tokenize: header tokens for *RU = " [ ip=216.7.194.254  
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=  
> intl=0 id=1CRB3W-000Isd-1y ]"
> debug: tokenize: header tokens for *r = "   trek.lixfeld.ca  
> ([216.7.194 ip*216.7.194.254 ] helo=foo.com) by eshara.ebit.ca   smtp  
> (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y   jason-at-lixfeld.ca; "
> debug: bayes: tok_get_all: Token Count: 33
> debug: bayes token 'HX-First-Run-SpamScore:1.3' => 0.0131219512195122
> debug: bayes token 'foo' => 0.0173548387096774
> debug: bayes token 'HX-SA-Exim-Connect-IP:216.7.194.254' => 0.978
> debug: bayes token 'H*RU:foo.com' => 0.978
> debug: bayes token 'H*r:sk:jason@l' => 0.967934668617371
> debug: bayes token 'HX-SA-Exim-Mail-From:sk:jakbeat' =>  
> 0.0489090909090909
> debug: bayes token 'H*r:foo.com' => 0.0512342735845206
> debug: bayes token 'H*r:eshara.ebit.ca' => 0.867296640246297
> debug: bayes token 'H*r:FreeBSD' => 0.853297353802955
> debug: bayes: score = 0.487796634412826
> debug: Razor2 is available
> debug: entering helper-app run mode
>  Razor-Log: Computed razorhome from env: /usr/home/jlixfeld/.razor
>  Razor-Log: No razorhome found, using all defaults
>  Razor-Log: No razor-agent.conf found, using defaults.
> Nov 08 10:03:51.590277 check[72507]: [ 2] [bootup] Logging initiated  
> LogDebugLevel=9 to stdout
> Nov 08 10:03:51.590563 check[72507]: [ 5] computed razorhome=, conf=,  
> ident=identity
> Nov 08 10:03:51.590782 check[72507]: [ 8] Client supported_engines: 4 8
> Nov 08 10:03:51.591193 check[72507]: [ 8]  prep_mail done: mail 1  
> headers=415, mime0=40
> Nov 08 10:03:51.591433 check[72507]: [ 7] Can't read file  
> servers.discovery.lst, looking relatve to
> Nov 08 10:03:51.591595 check[72507]: [ 5] Can't read file  
> /servers.discovery.lst: No such file or directory
> Nov 08 10:03:51.591771 check[72507]: [ 7] Can't read file  
> servers.nomination.lst, looking relatve to
> Nov 08 10:03:51.591931 check[72507]: [ 5] Can't read file  
> /servers.nomination.lst: No such file or directory
> Nov 08 10:03:51.592099 check[72507]: [ 7] Can't read file  
> servers.catalogue.lst, looking relatve to
> Nov 08 10:03:51.592256 check[72507]: [ 5] Can't read file  
> /servers.catalogue.lst: No such file or directory
> Nov 08 10:03:51.592485 check[72507]: [ 5] no listfile:  
> servers.catalogue.lst
> Nov 08 10:03:51.592668 check[72507]: [ 6] no discovery listfile:  
> servers.discovery.lst
> Nov 08 10:03:51.592812 check[72507]: [ 5] Finding Discovery Servers  
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:51.597627 check[72507]: [ 6] Found 1 Discovery Servers  
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:51.597903 check[72507]: [ 8] Checking with Razor  
> Discovery Server 66.151.150.12
> Nov 08 10:03:51.598103 check[72507]: [ 6] No port specified, using 2703
> Nov 08 10:03:51.598234 check[72507]: [ 5] Connecting to 66.151.150.12  
> ...
> Nov 08 10:03:54.707718 check[72507]: [ 8] Connection established
> Nov 08 10:03:54.708009 check[72507]: [ 4] 66.151.150.12 >> 35 server  
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:54.708368 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:54.708501 check[72507]: [ 6] a=g&pm=csl
> Nov 08 10:03:54.770328 check[72507]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:54.770468 check[72507]: [ 6] response to sent.1
> -csl=?
> thrill.cloudmark.com
> pride.cloudmark.com
> wonder.cloudmark.com
> .
> Nov 08 10:03:54.770915 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:54.771089 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:54.771239 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:54.771532 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:54.771655 check[72507]: [ 6] a=g&pm=nsl
> Nov 08 10:03:54.831172 check[72507]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:54.831303 check[72507]: [ 6] response to sent.2
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:54.831616 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:54.831748 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:54.831983 check[72507]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:54.832174 check[72507]: [ 6] losing old server  
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:54.832308 check[72507]: [ 5] disconnecting from server  
> 66.151.150.12
> Nov 08 10:03:54.832586 check[72507]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:54.832707 check[72507]: [ 6] a=q
> Nov 08 10:03:54.832866 check[72507]: [ 5] Connecting to  
> pride.cloudmark.com ...
> Nov 08 10:03:54.949669 check[72507]: [ 8] Connection established
> Nov 08 10:03:54.950024 check[72507]: [ 4] pride.cloudmark.com >> 36  
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:54.950522 check[72507]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:54.950656 check[72507]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:54.951006 check[72507]: [ 4] pride.cloudmark.com << 14
> Nov 08 10:03:54.951148 check[72507]: [ 6] a=g&pm=state
> Nov 08 10:03:55.108057 check[72507]: [ 4] pride.cloudmark.com >> 141
> Nov 08 10:03:55.108198 check[72507]: [ 6] response to sent.5
> -sv=3.44
> sn=C
> zone=razor2.cloudmark.com
> ac=6
> srl=5048
> lm=4
> bql=50
> bqs=129
> dre=4
> se=C8
> srf=FF
> ep4=7542-10
> ep8=5
> pp=1
> crt=90
> .
> Nov 08 10:03:55.109053 check[72507]: [ 5] Updated to new server state  
> srl 5048 for server pride.cloudmark.com
> Nov 08 10:03:55.109207 check[72507]: [ 6] pride.cloudmark.com is a  
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:55.109393 check[72507]: [ 8] Computed supported_engines:  
> 4 8
> Nov 08 10:03:55.109489 check[72507]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:55.109566 check[72507]: [ 5] srl was updated, forcing  
> discovery ...
> Nov 08 10:03:55.109692 check[72507]: [ 5] no listfile:  
> servers.catalogue.lst
> Nov 08 10:03:55.109795 check[72507]: [ 8] already have 1 discovery  
> servers
> Nov 08 10:03:55.109886 check[72507]: [ 8] Checking with Razor  
> Discovery Server 66.151.150.12
> Nov 08 10:03:55.109990 check[72507]: [ 6] losing old server  
> connection, pride.cloudmark.com, for new server, 66.151.150.12
> Nov 08 10:03:55.110072 check[72507]: [ 5] disconnecting from server  
> pride.cloudmark.com
> Nov 08 10:03:55.110310 check[72507]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:55.110389 check[72507]: [ 6] a=q
> Nov 08 10:03:55.110517 check[72507]: [ 5] Connecting to 66.151.150.12  
> ...
> Nov 08 10:03:55.227386 check[72507]: [ 8] Connection established
> Nov 08 10:03:55.227557 check[72507]: [ 4] 66.151.150.12 >> 35 server  
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:55.227901 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:55.228033 check[72507]: [ 6] a=g&pm=csl
> Nov 08 10:03:55.289276 check[72507]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:55.289416 check[72507]: [ 6] response to sent.7
> -csl=?
> thrill.cloudmark.com
> wonder.cloudmark.com
> pride.cloudmark.com
> .
> Nov 08 10:03:55.289713 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:55.289801 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:55.289883 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:55.290138 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:55.290218 check[72507]: [ 6] a=g&pm=nsl
> Nov 08 10:03:55.351296 check[72507]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:55.351434 check[72507]: [ 6] response to sent.8
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:55.351705 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:55.351791 check[72507]: [ 8] Discovery Server  
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:55.351976 check[72507]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:55.352124 check[72507]: [ 5] no razorhome, not caching  
> server info to disk
> Nov 08 10:03:55.352216 check[72507]: [ 8] Using next closest server  
> pride.cloudmark.com:2703, cached info srl 5048
> Nov 08 10:03:55.352326 check[72507]: [ 8] mail 1 has no subject
> Nov 08 10:03:55.352583 check[72507]: [ 6] preproc: mail 1.0 went from  
> 40 bytes to 3
> Nov 08 10:03:55.352715 check[72507]: [ 6] computing sigs for mail 1.0,  
> len 3
> Nov 08 10:03:55.354106 check[72507]: [ 6] Engine (8) didn't produce a  
> signature for mail 1.0
> Nov 08 10:03:55.354268 check[72507]: [ 6] skipping whitelist file  
> (empty?): razor-whitelist
> Nov 08 10:03:55.354374 check[72507]: [ 6] losing old server  
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:55.354457 check[72507]: [ 5] disconnecting from server  
> 66.151.150.12
> Nov 08 10:03:55.354694 check[72507]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:55.354773 check[72507]: [ 6] a=q
> Nov 08 10:03:55.354893 check[72507]: [ 5] Connecting to  
> pride.cloudmark.com ...
> Nov 08 10:03:55.472232 check[72507]: [ 8] Connection established
> Nov 08 10:03:55.472444 check[72507]: [ 4] pride.cloudmark.com >> 36  
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:55.472908 check[72507]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:55.473041 check[72507]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:55.473288 check[72507]: [ 6] pride.cloudmark.com is a  
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:55.473538 check[72507]: [ 8] Computed supported_engines:  
> 4 8
> Nov 08 10:03:55.473725 check[72507]: [ 8] mail 1.0 e4 sig:  
> DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:55.473930 check[72507]: [ 5] mail 1.0 e8 got no sig
> Nov 08 10:03:55.474090 check[72507]: [ 8] preparing 1 queries
> Nov 08 10:03:55.474316 check[72507]: [ 8] sending 1 batches
> Nov 08 10:03:55.474558 check[72507]: [ 4] pride.cloudmark.com << 52
> Nov 08 10:03:55.474643 check[72507]: [ 6]  
> a=c&e=4&ep4=7542-10&s=DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:55.691226 check[72507]: [ 4] pride.cloudmark.com >> 10
> Nov 08 10:03:55.691365 check[72507]: [ 6] response to sent.11
> p=0&ct=1
> Nov 08 10:03:55.691788 check[72507]: [ 6] mail 1.0 e=4  
> sig=DXc-2nXPD705qwuy78OtNOq1FcwA: sig not found.
> Nov 08 10:03:55.691911 check[72507]: [ 7] method 4: mail 1.0:  
> contention part, skipping
> Nov 08 10:03:55.691995 check[72507]: [ 7] method 4: mail 1: all  
> non-contention parts not spam, mail not spam
> Nov 08 10:03:55.692076 check[72507]: [ 3] mail 1 is not known spam.
> Nov 08 10:03:55.692161 check[72507]: [ 5] disconnecting from server  
> pride.cloudmark.com
> Nov 08 10:03:55.692397 check[72507]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:55.692476 check[72507]: [ 6] a=q
> debug: Using results from Razor v2.61
> debug: Found Razor2 part: part=0 engine=4 ct=1 cf=0
> debug: leaving helper-app run mode
> debug: Razor2 results: spam? 0  highest cf score: 0
> debug: running raw-body-text per-line regexp tests; score so far=0.12
> debug: running full-text regexp tests; score so far=0.12
> debug: Razor2 is available
> debug: Pyzor is not available: pyzor not found
> debug: DCCifd is not available: no r/w dccifd socket found.
> debug: DCC is not available: no executable dccproc found.
> debug: Running tests for priority: 500
> debug: RBL: success for 36 of 36 queries
> debug: running meta tests; score so far=0.12
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: Running tests for priority: 1000
> debug: running meta tests; score so far=1.346
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: auto-learn: currently using scoreset 3, recomputing score based  
> on scoreset 1.
> debug: auto-learn: message score: 1.346, computed score for autolearn:  
> 1.57
> debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0,  
> learned-points=0.001
> debug: auto-learn? no: inside auto-learn thresholds, not considered  
> ham or spam
> debug: is spam? score=1.346 required=5
> debug: tests=BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
> debug: subtests=
> logmsg: clean message (1.3/5.0) for jason.lixfeld.ca:0 in 4.3 seconds,  
> 420 bytes.
> logmsg: result: .  1 - BAYES_50,MISSING_HEADERS,MISSING_SUBJECT  
> scantime=4.3,size=420,mid=(unknown),bayes=0.487796634412826,autolearn=n 
> o
>
> Header for message is here:
>
> From: 	  foobeats@gmail.com
> 	Date: 	November 8, 2004 10:03:55 AM EST
> 	Return-Path: 	<fo...@gmail.com>
> 	Envelope-To: 	jason.lixfeld.ca-at-eshara.ebit.ca
> 	Delivery-Date: 	Mon, 08 Nov 2004 10:03:55 -0500
> 	Received: 	from mailnull by eshara.ebit.ca with spamassassin-scanned  
> (Exim 4.43 (FreeBSD)) id 1CRB3f-000Isg-GW for  
> jason.lixfeld.ca-at-eshara.ebit.ca; Mon, 08 Nov 2004 10:03:55 -0500
> 	Received: 	from trek.lixfeld.ca ([216.7.194.254] helo=foo.com) by  
> eshara.ebit.ca with smtp (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y for  
> jason-at-lixfeld.ca; Mon, 08 Nov 2004 10:03:51 -0500
> 	X-First-Run-Spamcheck: 	Checked on SMTP Transfer
> 	X-First-Run-Spamscore: 	1.3
> 	X-Spam-Checker-Version: 	SpamAssassin 3.0.1 (2004-10-22) on  
> eshara.ebit.ca
> 	X-Spam-Level: 	*
> 	X-Spam-Status: 	No, score=1.3 required=5.0  
> tests=BAYES_50,MISSING_HEADERS, MISSING_SUBJECT autolearn=no  
> version=3.0.1
> 	Message-Id: 	<E1...@eshara.ebit.ca>
> 	X-Sa-Exim-Connect-Ip: 	<locally generated>
> 	X-Sa-Exim-Mail-From: 	foobeats@gmail.com
> 	X-Sa-Exim-Scanned: 	No (on eshara.ebit.ca); SAEximRunCond expanded to  
> false
>
> Exim Router & Transport:
>
> spam_check:
>   debug_print = "R: spamassasssin_router for $local_part@$domain"
>   driver = accept
>   no_verify
>   check_local_user
>   condition = "${if and  
> {{!def:h_X-Spam-Status:}{!eq{$received_protocol}{spamassassin- 
> scanned}}}{1}{0}}"
>   transport = spam_kill
> ...
> spam_kill:
>   debug_print = "T: spamassassin_transport for $local_part@$domain"
>   driver = pipe
>   command =  /usr/local/sbin/exim -oMr spamassassin-scanned -bS
>   use_bsmtp = true
>   transport_filter = /usr/local/bin/spamc -d 127.0.0.1 -u $local_part
>   home_directory = "/tmp"
>   current_directory = "/tmp"
>   user = mailnull
>   group = mailnull
>   log_output = true
>   return_fail_output = true
>   return_path_add = false
>
> .cf:
>
> # local.cf
> # This is the right place to customize your installation of  
> SpamAssassin.
> #
> # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
> # tweaked.
> #
> ####################################################################### 
> ####
>
> rewrite_header  Subject         **** Possible SPAM (_SCORE_) ****
> ok_languages                    en fr de
> ok_locales                      en
>
> # sql.cf
> user_scores_dsn                 DBI:mysql:spamassassin:localhost:3306
> user_scores_sql_username        ****
> user_scores_sql_password        ****
> user_scores_sql_custom_query    SELECT preference, value FROM _TABLE_  
> WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username =  
> CONCAT('%',_DOMAIN_) ORDER BY username DESC
>


Re: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]

Posted by Michael Parker <pa...@pobox.com>.
On Tue, Nov 09, 2004 at 01:43:36AM -0500, Jason Lixfeld wrote:
> Figured it out.
> 
> It seems that SA doesn't apply whitelist scores unless the rest of the  
> scores add up to be greater than the score required to trigger  
> X-Spam-Status: Yes.
> 
> This seems to be a rather odd methodology.  What's the rationale behind  
> not taking into consideration whitelist scores regardless of the spam  
> score?
> 

Hmmm....this doesn't seem right.  Can you show us how you figure that?
I haven't really looked at the code but it's just another rule/score
and I don't believe it has that sort of smarts.

Michael

-- 
ApacheCon November 13-17 2004 http://www.apachecon.com/
See three SpamAssassin sessions & more
Birds of a Feather Session: November 16th, 9-10pm

Re: (UN)SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]

Posted by Jason Lixfeld <ja...@lixfeld.ca>.
Ok, looks like this is still an issue...  Mail from MAILER-DAEMON was  
getting tagged because it was a bounce back as one of my addresses  
spoofed by a bad guy...  Here's the header from the message that got  
tagged:

*NOTE:  Headers, etc below sanitized via s/"@"/-at-/g.

	From: 	  MAILER-DAEMON-at-ebit.ca
	Subject: 	**** Possible SPAM (10.8) **** Undelivered Mail Returned to  
Sender
	Date: 	November 11, 2004 6:46:47 PM EST
	To: 	  hi-t-at-synchrosounds.com
	Return-Path: 	<>
	Envelope-To: 	jason.lixfeld.ca-at-eshara.ebit.ca
	Delivery-Date: 	Thu, 11 Nov 2004 18:46:56 -0500
	Received: 	from mailnull by eshara.ebit.ca with spamassassin-scanned  
(Exim 4.43 (FreeBSD)) id 1CSOeS-0000GK-1X for  
jason.lixfeld.ca-at-eshara.ebit.ca; Thu, 11 Nov 2004 18:46:56 -0500
	Received: 	from localhost by eshara.ebit.ca with SpamAssassin (version  
3.0.1); Thu, 11 Nov 2004 18:46:56 -0500
	Received: 	from ebit.ca ([207.136.103.131] helo=mail.ebit.ca) by  
eshara.ebit.ca with esmtp (Exim 4.43 (FreeBSD)) id 1CSOeN-0000GH-Af for  
jason-at-lixfeld.ca; Thu, 11 Nov 2004 18:46:51 -0500
	Received: 	by mail.ebit.ca (Postfix) id 1C4E23C80A8; Thu, 11 Nov 2004  
18:46:47 -0500 (EST)
	Message-Id: 	<20041111234647.1C4E23C80A8-at-mail.ebit.ca>
	X-Spam-Flag: 	YES
	X-Spam-Checker-Version: 	SpamAssassin 3.0.1 (2004-10-22) on  
eshara.ebit.ca
	X-Spam-Level: 	**********
	X-Spam-Status: 	Yes, score=10.8 required=5.0  
tests=AWL,BAYES_99,DRUGS_SLEEP,  
HTML_80_90,HTML_MESSAGE,HTML_NONELEMENT_00_10,MIME_CHARSET_FARAWAY,  
MIME_HTML_MOSTLY,MPART_ALT_DIFF,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,  
URIBL_WS_SURBL,URI_REDIRECTOR autolearn=no version=3.0.1
	Mime-Version: 	1.0
	Content-Type: 	multipart/mixed;  
boundary="----------=_4193F9F0.AFB6C167"
	X-Sa-Exim-Connect-Ip: 	<locally generated>
	X-Sa-Exim-Mail-From: 	
	X-Sa-Exim-Scanned: 	No (on eshara.ebit.ca); SAEximRunCond expanded to  
false

So I try to white-list MAILER-DAEMON-at-ebit.ca in SQL:

mysql> insert into userpref (username,preference,value) VALUES  
("$GLOBAL","whitelist_from","MAILER-DAEMON-at-ebit.ca");
Query OK, 1 row affected (0.02 sec)

mysql> select * from userpref;
+------------------+-------------------------+----------------------- 
+--------+
| username         | preference              | value                 |  
prefid |
+------------------+-------------------------+----------------------- 
+--------+
| $GLOBAL          | whitelist_from          | MAILER-DAEMON-at-ebit.ca  
|     37 |
| $GLOBAL          | whitelist_from          | jakbeatz-at-gmail.com     
|     36 |
| jason.lixfeld.ca | whitelist_from          | jakbeatz-at-gmail.com     
|     35 |
| $GLOBAL          | score USER_IN_BLACKLIST | 10                    |   
    24 |
| $GLOBAL          | score USER_IN_WHITELIST | -10                   |   
    23 |
+------------------+-------------------------+----------------------- 
+--------+
5 rows in set (0.00 sec)

mysql>

So I sent a test message but whitelist whitelist isn't fired:


	From: 	  MAILER-DAEMON-at-ebit.ca
	Date: 	November 12, 2004 12:19:41 AM EST
	Return-Path: 	<MAILER-DAEMON-at-ebit.ca>
	Envelope-To: 	jason.lixfeld.ca-at-eshara.ebit.ca
	Delivery-Date: 	Fri, 12 Nov 2004 00:19:41 -0500
	Received: 	from mailnull by eshara.ebit.ca with spamassassin-scanned  
(Exim 4.43 (FreeBSD)) id 1CSTqW-0000h4-1x for  
jason.lixfeld.ca-at-eshara.ebit.ca; Fri, 12 Nov 2004 00:19:41 -0500
	Received: 	from trek.lixfeld.ca ([216.7.194.254] helo=foo.com) by  
eshara.ebit.ca with smtp (Exim 4.43 (FreeBSD)) id 1CSTqR-0000h0-O8 for  
jason-at-lixfeld.ca; Fri, 12 Nov 2004 00:19:39 -0500
	X-First-Run-Spamcheck: 	Checked on SMTP Transfer
	X-First-Run-Spamscore: 	0.2
	X-Spam-Checker-Version: 	SpamAssassin 3.0.1 (2004-10-22) on  
eshara.ebit.ca
	X-Spam-Level: 	
	X-Spam-Status: 	No, score=-0.6 required=5.0  
tests=BAYES_20,MISSING_HEADERS, MISSING_SUBJECT autolearn=no  
version=3.0.1
	Message-Id: 	<E1CSTqW-0000h4-1x-at-eshara.ebit.ca>
	X-Sa-Exim-Connect-Ip: 	<locally generated>
	X-Sa-Exim-Mail-From: 	MAILER-DAEMON-at-ebit.ca
	X-Sa-Exim-Scanned: 	No (on eshara.ebit.ca); SAEximRunCond expanded to  
false

Nov 12 00:19:40 eshara spamd[2631]: connection from localhost  
[127.0.0.1] at port 55576
Nov 12 00:19:40 eshara spamd[2631]: processing message (unknown) for  
jason.lixfeld.ca:0.
Nov 12 00:19:41 eshara spamd[2631]: clean message (-0.6/5.0) for  
jason.lixfeld.ca:0 in 1.2 seconds, 428 bytes.
Nov 12 00:19:41 eshara spamd[2631]: result: .  0 -  
BAYES_20,MISSING_HEADERS,MISSING_SUBJECT  
scantime=1.2,size=428,mid=(unknown),bayes=0.14535404453241,autolearn=no

On 9-Nov-04, at 4:42 PM, Jason Lixfeld wrote:

> Odd.  I tested it again just now and it worked fine, even though the  
> message was not scored > 5.0.  It wasn't working yesterday.  I must  
> have done something to fix it in the meantime.
>
> Sorry for the confusion.
>
> On 9-Nov-04, at 11:29 AM, Noel K Hall II wrote:
>
>> That's definitely not the case with our systems:
>>
>> ----example----
>> X-Spam-Level:
>> X-Spam-Status: No, score=-105.9 required=7.0  
>> tests=ALL_TRUSTED,BAYES_00,
>> 	HTML_MESSAGE,USER_IN_WHITELIST autolearn=ham
>> 	version=3.0.1-prforsa3.0.0
>> ----end ex----
>>
>> Something seems a bit fishy there.
>>
>>
>> -----Original Message-----
>> From: Jason Lixfeld [mailto:jason+lists.spamassassin-at-lixfeld.ca]
>> Sent: Tuesday, November 09, 2004 1:44 AM
>> To: users-at-spamassassin.apache.org
>> Subject: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1  
>> & Exim
>> 4.43)]
>>
>> Figured it out.
>>
>> It seems that SA doesn't apply whitelist scores unless the rest of the
>> scores add up to be greater than the score required to trigger
>> X-Spam-Status: Yes.
>>
>> This seems to be a rather odd methodology.  What's the rationale  
>> behind not
>> taking into consideration whitelist scores regardless of the spam  
>> score?
>>
>> On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:
>>
>>> I've got a whitelist_from in my SQL DB which Spamassassin is supposed
>>> to read in.  When I do a debug of spamd, I can see the connection to
>>> the DB as the user, but the whitelist_from doesn't seem to be getting
>>> applied to the message:
>>>
>>> mysql> select * from spamassassin.userpref;
>>> +------------------+-------------------------+--------------------
>>> +--------+
>>> | username         | preference              | value              |
>>> prefid |
>>> +------------------+-------------------------+--------------------
>>> +--------+
>>> | $GLOBAL          | whitelist_from          | foobeats-at-gmail.com  
>>> |
>>>  36 |
>>> | jason.lixfeld.ca | whitelist_from          | foobeats-at-gmail.com  
>>> |
>>>  35 |
>>> | $GLOBAL          | score USER_IN_WHITELIST | -10                |
>>>  23 |
>>> +------------------+-------------------------+--------------------
>>> +--------+
>>> 4 rows in set (0.00 sec)
>>>
>>> Below is the output of spamd in debug mode.  Spamd is called twice  
>>> for
>>> this message.  First to obtain the $spam_score and $spam_score_int
>>> for data checking:
>>
>>
>


Re: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]

Posted by Jason Lixfeld <ja...@lixfeld.ca>.
Odd.  I tested it again just now and it worked fine, even though the 
message was not scored > 5.0.  It wasn't working yesterday.  I must 
have done something to fix it in the meantime.

Sorry for the confusion.

On 9-Nov-04, at 11:29 AM, Noel K Hall II wrote:

> That's definitely not the case with our systems:
>
> ----example----
> X-Spam-Level:
> X-Spam-Status: No, score=-105.9 required=7.0 
> tests=ALL_TRUSTED,BAYES_00,
> 	HTML_MESSAGE,USER_IN_WHITELIST autolearn=ham
> 	version=3.0.1-prforsa3.0.0
> ----end ex----
>
> Something seems a bit fishy there.
>
>
> -----Original Message-----
> From: Jason Lixfeld [mailto:jason+lists.spamassassin@lixfeld.ca]
> Sent: Tuesday, November 09, 2004 1:44 AM
> To: users@spamassassin.apache.org
> Subject: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & 
> Exim
> 4.43)]
>
> Figured it out.
>
> It seems that SA doesn't apply whitelist scores unless the rest of the
> scores add up to be greater than the score required to trigger
> X-Spam-Status: Yes.
>
> This seems to be a rather odd methodology.  What's the rationale 
> behind not
> taking into consideration whitelist scores regardless of the spam 
> score?
>
> On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:
>
>> I've got a whitelist_from in my SQL DB which Spamassassin is supposed
>> to read in.  When I do a debug of spamd, I can see the connection to
>> the DB as the user, but the whitelist_from doesn't seem to be getting
>> applied to the message:
>>
>> mysql> select * from spamassassin.userpref;
>> +------------------+-------------------------+--------------------
>> +--------+
>> | username         | preference              | value              |
>> prefid |
>> +------------------+-------------------------+--------------------
>> +--------+
>> | $GLOBAL          | whitelist_from          | foobeats@gmail.com |
>>  36 |
>> | jason.lixfeld.ca | whitelist_from          | foobeats@gmail.com |
>>  35 |
>> | $GLOBAL          | score USER_IN_WHITELIST | -10                |
>>  23 |
>> +------------------+-------------------------+--------------------
>> +--------+
>> 4 rows in set (0.00 sec)
>>
>> Below is the output of spamd in debug mode.  Spamd is called twice for
>> this message.  First to obtain the $spam_score and $spam_score_int
>> for data checking:
>
>


RE: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]

Posted by Noel K Hall II <no...@physicianrecruiting.com>.
That's definitely not the case with our systems:

----example----
X-Spam-Level: 
X-Spam-Status: No, score=-105.9 required=7.0 tests=ALL_TRUSTED,BAYES_00,
	HTML_MESSAGE,USER_IN_WHITELIST autolearn=ham 
	version=3.0.1-prforsa3.0.0
----end ex----

Something seems a bit fishy there.


-----Original Message-----
From: Jason Lixfeld [mailto:jason+lists.spamassassin@lixfeld.ca] 
Sent: Tuesday, November 09, 2004 1:44 AM
To: users@spamassassin.apache.org
Subject: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim
4.43)]

Figured it out.

It seems that SA doesn't apply whitelist scores unless the rest of the
scores add up to be greater than the score required to trigger
X-Spam-Status: Yes.

This seems to be a rather odd methodology.  What's the rationale behind not
taking into consideration whitelist scores regardless of the spam score?

On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:

> I've got a whitelist_from in my SQL DB which Spamassassin is supposed 
> to read in.  When I do a debug of spamd, I can see the connection to 
> the DB as the user, but the whitelist_from doesn't seem to be getting 
> applied to the message:
>
> mysql> select * from spamassassin.userpref;
> +------------------+-------------------------+--------------------
> +--------+
> | username         | preference              | value              |  
> prefid |
> +------------------+-------------------------+--------------------
> +--------+
> | $GLOBAL          | whitelist_from          | foobeats@gmail.com |     
>  36 |
> | jason.lixfeld.ca | whitelist_from          | foobeats@gmail.com |     
>  35 |
> | $GLOBAL          | score USER_IN_WHITELIST | -10                |     
>  23 |
> +------------------+-------------------------+--------------------
> +--------+
> 4 rows in set (0.00 sec)
>
> Below is the output of spamd in debug mode.  Spamd is called twice for  
> this message.  First to obtain the $spam_score and $spam_score_int   
> for data checking: