You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Tom Q. Citizen" <to...@bay-online-media.com> on 2005/03/01 05:22:01 UTC
****SPAM(12.8)**** Re: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux
SpamAssassin, running on "mail.dailyhills.com", has identified this incoming
email as possible spam. The original message has been attached to this
email so you can view it (if it isn't spam).
If you have any questions, contact postmaster@dailyhills.com for details.
Content preview: Thanks, I had tried that earlier with no luck. Are
there any guidelines on what kinds of characters are allowed in the
rewrite string? I did notice I had embedded spaces between the parens
and asterisks which I've removed to see if that will make any
difference. [...]
Content analysis details: (12.8 points, 5.0 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 SPF_PASS SPF: sender matches SPF record
2.5 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50%
[cf: 100]
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000]
2.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.0 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: signcastle.com drillclub.com]
0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: drillclub.com]
1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: signcastle.com]
3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: signcastle.com drillclub.com]
4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: drillclub.com]
---- ---------------------- --------------------------------------------------
RE: I don't think the URIDNSBL is working on spams yet
Posted by Greg Allen <ga...@netrox.net>.
I just upgraded my DNS and URI, URIDNSBL appears to be working correctly
now. I'm getting all of the benefits of 3.0.2!
The URIDNSBL is pure genius, thanks to all who help create and support the
SA product.
-----Original Message-----
From: Jeff Chan [mailto:jeffc@surbl.org]
Sent: Tuesday, March 01, 2005 2:58 AM
To: Greg Allen
Cc: Matt Kettler; users@spamassassin.apache.org
Subject: Re: I don't think the URIDNSBL is working on spams yet
On Monday, February 28, 2005, 11:44:33 PM, Greg Allen wrote:
> OK, just did that. Sent from Yahoo email into my system, no luck. If
> URIDNSBL is reliant on DNS, maybe I should re-install DNS to a newer
> version?
Your Net::DNS version is too old:
> debug: Net::DNS version: 0.34
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
Re: I don't think the URIDNSBL is working on spams yet
Posted by Jeff Chan <je...@surbl.org>.
On Monday, February 28, 2005, 11:44:33 PM, Greg Allen wrote:
> OK, just did that. Sent from Yahoo email into my system, no luck. If
> URIDNSBL is reliant on DNS, maybe I should re-install DNS to a newer
> version?
Your Net::DNS version is too old:
> debug: Net::DNS version: 0.34
Jeff C.
--
Jeff Chan
mailto:jeffc@surbl.org
http://www.surbl.org/
RE: I don't think the URIDNSBL is working on spams yet
Posted by Greg Allen <ga...@netrox.net>.
OK, just did that. Sent from Yahoo email into my system, no luck. If
URIDNSBL is reliant on DNS, maybe I should re-install DNS to a newer
version?
Received: from mx10.antispamservers.com ([63.135.66.110]) by
mail.copylite.com with Microsoft SMTPSVC(6.0.3790.211);
Tue, 1 Mar 2005 02:41:47 -0500
Received: by mx10.antispamservers.com (Postfix, from userid 500)
id 6A77B23FED; Tue, 1 Mar 2005 02:38:08 -0500 (EST)
Received: from web60302.mail.yahoo.com (web60302.mail.yahoo.com
[216.109.118.113])
by mx10.antispamservers.com (Postfix) with SMTP id 89B9B23FEC
for <ad...@copylite.com>; Tue, 1 Mar 2005 02:38:00 -0500 (EST)
Received: (qmail 15992 invoked by uid 60001); 1 Mar 2005 07:37:48 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
s=s1024; d=yahoo.com;
b=RnHmvFvXbpZ6dr8BbcfEDQedxWxGhoPauv6G9/Ych5VvgrPysQrvZNmghieO1N6pGy/Z58K2
17lYRseWnrI3ODnO/lhboyhBOr3oU4qoxqlKyGbVK+sqi/Parjvoy6yXKZWFKdSXtt2TKjcCQnu5
7T+1j9SjtegPOwZbLWYXL+o= ;
Message-ID: <20...@web60302.mail.yahoo.com>
Received: from [63.135.66.106] by web60302.mail.yahoo.com via HTTP; Mon, 28
Feb 2005 23:37:47 PST
Date: Mon, 28 Feb 2005 23:37:47 -0800 (PST)
From: Greg Allen <gp...@yahoo.com>
Reply-To: gpa3email@yahoo.com
Subject: test
To: administrator@copylite.com
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="0-1741638910-1109662667=:15898"
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
mx10.antispamservers.com
X-Spam-Level:
X-Spam-Status: No, score=-2.5 required=5.0 tests=BAYES_00,HTML_MESSAGE,
NORMAL_HTTP_TO_IP autolearn=ham version=3.0.2
Return-Path: gpa3email@yahoo.com
X-OriginalArrivalTime: 01 Mar 2005 07:41:47.0789 (UTC)
FILETIME=[1FA2D3D0:01C51E32]
-----Original Message-----
From: Matt Kettler [mailto:mkettler_sa@comcast.net]
Sent: Tuesday, March 01, 2005 2:25 AM
To: gallen@netrox.net; users@spamassassin.apache.org
Subject: Re: I don't think the URIDNSBL is working on spams yet
At 01:47 AM 3/1/2005, Greg Allen wrote:
>Just did upgrade from SA 2.63 to SA 3.0.2, everything looks good, but I
>don't see any evidence that URIDNSBL is doing anything to spam emails so
>far.
>
>Here is the output. Is it broke?
That looks fine, however, in order to test URIDNSBL's it might be worth
having a URI in the message
Try the SURBL test point, which should match:
http://www.surbl-org-permanent-test-point.com/
Re: I don't think the URIDNSBL is working on spams yet
Posted by Matt Kettler <mk...@comcast.net>.
At 01:47 AM 3/1/2005, Greg Allen wrote:
>Just did upgrade from SA 2.63 to SA 3.0.2, everything looks good, but I
>don't see any evidence that URIDNSBL is doing anything to spam emails so
>far.
>
>Here is the output. Is it broke?
That looks fine, however, in order to test URIDNSBL's it might be worth
having a URI in the message
Try the SURBL test point, which should match:
http://www.surbl-org-permanent-test-point.com/
Re: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux
Posted by Prashanth Narayanan <ip...@gmail.com>.
thank you! thank you! thank you!
it works - oh thank you!
:-))
-prash.
On Mon, 28 Feb 2005 21:27:41 -0800, Tom Q. Citizen
<to...@bay-online-media.com> wrote:
> Tom Q. Citizen wrote:
>
> > Theo Van Dinter wrote:
> >
> >> On Mon, Feb 28, 2005 at 08:22:01PM -0800, Tom Q. Citizen wrote:
> >>
> >>
> >>> Thanks, I had tried that earlier with no luck. Are there any
> >>> guidelines on what kinds of characters are allowed in the rewrite
> >>> string? I did notice I had embedded spaces between the parens and
> >>> asterisks which I've removed to see if that will make any difference.
> >>>
> >>
> >>
> >> You said you're using qmail-scanner, which IIRC does its own rewrites.
> >>
> >>
> >
> > You sir, ROCK! I found this on the Qmail-Scanner site in the FAQ:
> >
> > http://qmail-scanner.sourceforge.net/FAQ.php#cs
> >
> > "*I want "fast_spamassassin" for performance - but I want the Subject:
> > header tagged as "SPAM" too!* Boy - you don't want much do you! :-)
> > Anyway - you can. Simply change the "--scanner" option to
> > "fast_spamassassin=STRING" and "STRING" ("SPAM:" is a good value) will
> > be prepended to the Subject line of every message marked as Spam. If
> > you want all that cool extra detail from SA (e.g. the reasons for a
> > particular score), then there is no option but to use
> > "verbose_spamassassin""
> >
> > I'll see if this helps! Thanks!
> >
> > Peace...
> >
> > Tom
>
> Ok, that did it! I now get subject tagging when spam is detected! I
> don't get the SA scores but I do get the desired subject modification,
> which is good enough for me. :)
>
> Thanks!
>
> Peace...
>
> Tom
>
I don't think the URIDNSBL is working on spams yet
Posted by Greg Allen <ga...@netrox.net>.
Just did upgrade from SA 2.63 to SA 3.0.2, everything looks good, but I
don't see any evidence that URIDNSBL is doing anything to spam emails so
far.
Here is the output. Is it broke?
Thanks for any help.
[filter@mx10 filter]$ spamassassin -D < test.txt
debug: SpamAssassin version 3.0.2
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/usr/X11R6/bin', keeping.
debug: PATH included '/root/bin', which doesn't exist, dropping.
debug: Final PATH set to:
/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin
debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/mail/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file /etc/mail/spamassassin/local.cf
debug: using "/var/spool/filter/.spamassassin" for user state dir
debug: using "/var/spool/filter/.spamassassin/user_prefs" for user prefs
file
debug: config: read file /var/spool/filter/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84cd5f8)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8de16a8)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84cd5f8)
implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8de16a8)
implements 'parse_config'
debug: using "/var/spool/filter/.spamassassin" for user state dir
debug: bayes: 11045 tie-ing to DB file R/O
/var/spool/filter/.spamassassin/bayes_toks
debug: bayes: 11045 tie-ing to DB file R/O
/var/spool/filter/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: using "/var/spool/filter/.spamassassin" for user state dir
debug: Score set 3 chosen.
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84cd5f8)
implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.34
debug: trying (3) apache.org...
debug: looking up NS for 'apache.org'
debug: NS lookup of apache.org succeeded => Dns available (set dns_available
to hardcode)
debug: is DNS available? 1
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: decoding: no encoding detected
debug: URIDNSBL: domains to query:
debug: all '*From' addrs: gallen@netrox.net
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8de16a8))
debug: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8de16a8))
debug: all '*To' addrs: gallen@netrox.net
debug: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514))
debug: registering glue method for check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514))
debug: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514))
debug: registering glue method for check_for_spf_helo_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8dc0514))
debug: running body-text per-line regexp tests; score so far=-3.293
debug: running uri tests; score so far=-3.293
debug: bayes corpus size: nspam = 21473, nham = 47269
debug: tokenize: header tokens for *F = "U*gallen D*netrox.net D*net"
debug: tokenize: header tokens for To = "U*gallen D*netrox.net D*net"
debug: tokenize: header tokens for *RT = " "
debug: tokenize: header tokens for *RU = " "
debug: bayes token 'H*F:U*gallen' => 0.000976406533575318
debug: bayes token 'H*F:D*netrox.net' => 0.000976406533575318
debug: bayes token 'HTo:U*gallen' => 0.0131219512195122
debug: bayes token 'HTo:D*netrox.net' => 0.0173548387096774
debug: bayes token 'H*Ad:U*gallen' => 0.0173548387096774
debug: bayes token 'H*Ad:D*netrox.net' => 0.0256190476190476
debug: bayes: score = 0.000882081766281961
debug: bayes: 11045 untie-ing
debug: bayes: 11045 untie-ing db_toks
debug: bayes: 11045 untie-ing db_seen
debug: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84cd5f8))
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: Computed razorhome from env: /var/spool/filter/.razor
Razor-Log: Found razorhome: /var/spool/filter/.razor
Razor-Log: No /var/spool/filter/.razor/razor-agent.conf found, skipping.
Razor-Log: No razor-agent.conf found, using defaults.
Mar 01 01:29:12.935505 check[11045]: [ 2] [bootup] Logging initiated
LogDebugLevel=9 to stdout
Mar 01 01:29:12.936319 check[11045]: [ 5] computed
razorhome=/var/spool/filter/.razor, conf=,
ident=/var/spool/filter/.razor/identity
Mar 01 01:29:12.936699 check[11045]: [ 8] Client supported_engines: 4
Mar 01 01:29:13.005540 check[11045]: [ 8] prep_mail done: mail 1
headers=50, mime0=71
Mar 01 01:29:13.006474 check[11045]: [ 5] read_file: 1 items read from
/var/spool/filter/.razor/servers.discovery.lst
Mar 01 01:29:13.007099 check[11045]: [ 5] read_file: 2 items read from
/var/spool/filter/.razor/servers.nomination.lst
Mar 01 01:29:13.007739 check[11045]: [ 5] read_file: 3 items read from
/var/spool/filter/.razor/servers.catalogue.lst
Mar 01 01:29:13.008488 check[11045]: [ 9] Assigning defaults to
folly.cloudmark.com
Mar 01 01:29:13.008858 check[11045]: [ 9] Assigning defaults to
joy.cloudmark.com
Mar 01 01:29:13.009220 check[11045]: [ 9] Assigning defaults to
tension.cloudmark.com
Mar 01 01:29:13.009572 check[11045]: [ 9] Assigning defaults to
shock.cloudmark.com
Mar 01 01:29:13.009917 check[11045]: [ 9] Assigning defaults to
pride.cloudmark.com
Mar 01 01:29:13.012154 check[11045]: [ 5] read_file: 17 items read from
/var/spool/filter/.razor/server.pride.cloudmark.com.conf
Mar 01 01:29:13.013550 check[11045]: [ 5] read_file: 17 items read from
/var/spool/filter/.razor/server.pride.cloudmark.com.conf
Mar 01 01:29:13.014985 check[11045]: [ 5] read_file: 17 items read from
/var/spool/filter/.razor/server.wonder.cloudmark.com.conf
Mar 01 01:29:13.016356 check[11045]: [ 5] read_file: 17 items read from
/var/spool/filter/.razor/server.wonder.cloudmark.com.conf
Mar 01 01:29:13.017749 check[11045]: [ 5] read_file: 17 items read from
/var/spool/filter/.razor/server.thrill.cloudmark.com.conf
Mar 01 01:29:13.019105 check[11045]: [ 5] read_file: 17 items read from
/var/spool/filter/.razor/server.thrill.cloudmark.com.conf
Mar 01 01:29:13.020468 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.stress.cloudmark.com.conf
Mar 01 01:29:13.021768 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.stress.cloudmark.com.conf
Mar 01 01:29:13.023104 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.tension.cloudmark.com.conf
Mar 01 01:29:13.024396 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.tension.cloudmark.com.conf
Mar 01 01:29:13.025740 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.robust.cloudmark.com.conf
Mar 01 01:29:13.027058 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.robust.cloudmark.com.conf
Mar 01 01:29:13.028374 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.shock.cloudmark.com.conf
Mar 01 01:29:13.029648 check[11045]: [ 5] read_file: 16 items read from
/var/spool/filter/.razor/server.shock.cloudmark.com.conf
Mar 01 01:29:13.274919 check[11045]: [ 5] 65526 seconds before closest
server discovery
Mar 01 01:29:13.311458 check[11045]: [ 6] tension.cloudmark.com is a
Catalogue Server srl 5060; computed min_cf=6, Server se: C8
Mar 01 01:29:13.311918 check[11045]: [ 8] Computed supported_engines: 4
Mar 01 01:29:13.312192 check[11045]: [ 8] Using next closest server
tension.cloudmark.com:2703, cached info srl 5060
Mar 01 01:29:13.312440 check[11045]: [ 8] mail 1 has no subject
Mar 01 01:29:13.467094 check[11045]: [ 6] preproc: mail 1.0 went from 71
bytes to 33
Mar 01 01:29:13.557610 check[11045]: [ 6] computing sigs for mail 1.0, len
33
Mar 01 01:29:13.593108 check[11045]: [ 6] skipping whitelist file (empty?):
/var/spool/filter/.razor/razor-whitelist
Mar 01 01:29:13.593437 check[11045]: [ 5] Connecting to
tension.cloudmark.com ...
Mar 01 01:29:13.942488 check[11045]: [ 8] Connection established
Mar 01 01:29:14.030332 check[11045]: [ 4] tension.cloudmark.com >> 36 server
greeting: sn=C&srl=5060&a=l&a=cg&ep4=7542-10
Mar 01 01:29:14.044328 check[11045]: [ 4] tension.cloudmark.com << 25
Mar 01 01:29:14.044556 check[11045]: [ 6] cn=razor-agents&cv=2.40
Mar 01 01:29:14.045085 check[11045]: [ 6] tension.cloudmark.com is a
Catalogue Server srl 5060; computed min_cf=6, Server se: C8
Mar 01 01:29:14.045497 check[11045]: [ 8] Computed supported_engines: 4
Mar 01 01:29:14.045802 check[11045]: [ 8] mail 1.0 e4 sig:
P4dKS4bajRKR7SCI_NvLBBNDOL8A
Mar 01 01:29:14.046138 check[11045]: [ 8] preparing 1 queries
Mar 01 01:29:14.046533 check[11045]: [ 8] sending 1 batches
Mar 01 01:29:14.046837 check[11045]: [ 4] tension.cloudmark.com << 52
Mar 01 01:29:14.046978 check[11045]: [ 6]
a=c&e=4&ep4=7542-10&s=P4dKS4bajRKR7SCI_NvLBBNDOL8A
Mar 01 01:29:14.352905 check[11045]: [ 4] tension.cloudmark.com >> 5
Mar 01 01:29:14.418548 check[11045]: [ 6] response to sent.2
p=0
Mar 01 01:29:14.419481 check[11045]: [ 6] mail 1.0 e=4
sig=P4dKS4bajRKR7SCI_NvLBBNDOL8A: sig not found.
Mar 01 01:29:14.419716 check[11045]: [ 7] method 4: mail 1.0: no-contention
part, spam=0
Mar 01 01:29:14.419864 check[11045]: [ 7] method 4: mail 1: all
non-contention parts not spam, mail not spam
Mar 01 01:29:14.420009 check[11045]: [ 3] mail 1 is not known spam.
Mar 01 01:29:14.420185 check[11045]: [ 5] disconnecting from server
tension.cloudmark.com
Mar 01 01:29:14.420530 check[11045]: [ 4] tension.cloudmark.com << 5
Mar 01 01:29:14.420671 check[11045]: [ 6] a=q
debug: Using results from Razor v2.40
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84cd5f8)
implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=-5.793
debug: running full-text regexp tests; score so far=-5.793
debug: Razor2 is available
debug: Current PATH is:
/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin
debug: executable for pyzor was found at /usr/bin/pyzor
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: setuid: helper proc 11046: ruid=500 euid=500
debug: Pyzor: got response: 66.250.40.33:24441 (200, 'OK') 0 0
debug: leaving helper-app run mode
debug: DCCifd is not available: no r/w dccifd socket found.
debug: executable for dccproc was found at /usr/bin/dccproc
debug: DCC is available: /usr/bin/dccproc
debug: entering helper-app run mode
debug: setuid: helper proc 11047: ruid=500 euid=500
debug: DCC: got response: X-DCC-NIET-Metrics: mx10.antispamservers.com 1080;
Body=0
debug: leaving helper-app run mode
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84cd5f8)
implements 'check_post_dnsbl'
debug: running meta tests; score so far=-5.793
debug: running header regexp tests; score so far=-4.567
debug: running body-text per-line regexp tests; score so far=-4.567
debug: running uri tests; score so far=-4.567
debug: running raw-body-text per-line regexp tests; score so far=-4.567
debug: running full-text regexp tests; score so far=-4.567
debug: Running tests for priority: 1000
debug: running meta tests; score so far=-4.567
debug: running header regexp tests; score so far=-4.567
debug: using "/var/spool/filter/.spamassassin" for user state dir
debug: lock: 11045 created
/var/spool/filter/.spamassassin/auto-whitelist.lock.mx10.antispamservers.com
.11045
debug: lock: 11045 trying to get lock on
/var/spool/filter/.spamassassin/auto-whitelist with 0 retries
debug: lock: 11045 link to
/var/spool/filter/.spamassassin/auto-whitelist.lock: link ok
debug: Tie-ing to DB file R/W in
/var/spool/filter/.spamassassin/auto-whitelist
debug: unlock: 11045 unlink
/var/spool/filter/.spamassassin/auto-whitelist.lock
debug: open of AWL file failed: Cannot open auto_whitelist_path
/var/spool/filter/.spamassassin/auto-whitelist: Inappropriate ioctl for
device
debug: Post AWL score: -4.567
debug: running body-text per-line regexp tests; score so far=-4.567
debug: running uri tests; score so far=-4.567
debug: running raw-body-text per-line regexp tests; score so far=-4.567
debug: running full-text regexp tests; score so far=-4.567
debug: auto-learn: currently using scoreset 3, recomputing score based on
scoreset 1.
debug: auto-learn: message score: -4.567, computed score for
autolearn: -1.072
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=-2.642,
learned-points=-2.5
debug: auto-learn? yes, ham (-1.072 < 0.1)
debug: Learning Ham
debug: all '*From' addrs: gallen@netrox.net
debug: all '*To' addrs: gallen@netrox.net
debug: lock: 11045 created
/var/spool/filter/.spamassassin/bayes.lock.mx10.antispamservers.com.11045
debug: lock: 11045 trying to get lock on
/var/spool/filter/.spamassassin/bayes with 0 retries
debug: lock: 11045 link to /var/spool/filter/.spamassassin/bayes.lock: link
ok
debug: bayes: 11045 tie-ing to DB file R/W
/var/spool/filter/.spamassassin/bayes_toks
debug: bayes: 11045 tie-ing to DB file R/W
/var/spool/filter/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: b6f3cb3738ac1067e61b69d071c2cf0d2d83d8a1@sa_generated: already learnt
correctly, not learning twice
debug: bayes: 11045 untie-ing
debug: bayes: 11045 untie-ing db_toks
debug: bayes: 11045 untie-ing db_seen
debug: bayes: files locked, now unlocking lock
debug: unlock: 11045 unlink /var/spool/filter/.spamassassin/bayes.lock
debug: is spam? score=-4.567 required=5
debug: tests=ALL_TRUSTED,BAYES_00,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__UNUSABLE_MSGID
From: <ga...@netrox.net>
To: <ga...@netrox.net>
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
mx10.antispamservers.com
X-Spam-Level:
X-Spam-Status: No, score=-4.6 required=5.0 tests=ALL_TRUSTED,BAYES_00,
MISSING_SUBJECT,NO_REAL_NAME autolearn=unavailable version=3.0.2
Hi there. This is a test messag
Re: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux
Posted by "Tom Q. Citizen" <to...@bay-online-media.com>.
Tom Q. Citizen wrote:
> Theo Van Dinter wrote:
>
>> On Mon, Feb 28, 2005 at 08:22:01PM -0800, Tom Q. Citizen wrote:
>>
>>
>>> Thanks, I had tried that earlier with no luck. Are there any
>>> guidelines on what kinds of characters are allowed in the rewrite
>>> string? I did notice I had embedded spaces between the parens and
>>> asterisks which I've removed to see if that will make any difference.
>>>
>>
>>
>> You said you're using qmail-scanner, which IIRC does its own rewrites.
>>
>>
>
> You sir, ROCK! I found this on the Qmail-Scanner site in the FAQ:
>
> http://qmail-scanner.sourceforge.net/FAQ.php#cs
>
> "*I want "fast_spamassassin" for performance - but I want the Subject:
> header tagged as "SPAM" too!* Boy - you don't want much do you! :-)
> Anyway - you can. Simply change the "--scanner" option to
> "fast_spamassassin=STRING" and "STRING" ("SPAM:" is a good value) will
> be prepended to the Subject line of every message marked as Spam. If
> you want all that cool extra detail from SA (e.g. the reasons for a
> particular score), then there is no option but to use
> "verbose_spamassassin""
>
> I'll see if this helps! Thanks!
>
> Peace...
>
> Tom
Ok, that did it! I now get subject tagging when spam is detected! I
don't get the SA scores but I do get the desired subject modification,
which is good enough for me. :)
Thanks!
Peace...
Tom
Re: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux
Posted by "Tom Q. Citizen" <to...@bay-online-media.com>.
Theo Van Dinter wrote:
>On Mon, Feb 28, 2005 at 08:22:01PM -0800, Tom Q. Citizen wrote:
>
>
>>Thanks, I had tried that earlier with no luck. Are there any guidelines
>>on what kinds of characters are allowed in the rewrite string? I did
>>notice I had embedded spaces between the parens and asterisks which I've
>>removed to see if that will make any difference.
>>
>>
>
>You said you're using qmail-scanner, which IIRC does its own rewrites.
>
>
You sir, ROCK! I found this on the Qmail-Scanner site in the FAQ:
http://qmail-scanner.sourceforge.net/FAQ.php#cs
"*I want "fast_spamassassin" for performance - but I want the Subject:
header tagged as "SPAM" too!* Boy - you don't want much do you! :-)
Anyway - you can. Simply change the "--scanner" option to
"fast_spamassassin=STRING" and "STRING" ("SPAM:" is a good value) will
be prepended to the Subject line of every message marked as Spam. If you
want all that cool extra detail from SA (e.g. the reasons for a
particular score), then there is no option but to use
"verbose_spamassassin""
I'll see if this helps! Thanks!
Peace...
Tom
Re: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux
Posted by "Tom Q. Citizen" <to...@bay-online-media.com>.
Theo Van Dinter wrote:
>On Mon, Feb 28, 2005 at 08:22:01PM -0800, Tom Q. Citizen wrote:
>
>
>>Thanks, I had tried that earlier with no luck. Are there any guidelines
>>on what kinds of characters are allowed in the rewrite string? I did
>>notice I had embedded spaces between the parens and asterisks which I've
>>removed to see if that will make any difference.
>>
>>
>
>You said you're using qmail-scanner, which IIRC does its own rewrites.
>
>
Ah, ok. I wasn't aware of this. I'll head down the qmail-scanner path
and see what I need to configure there, if anything. Thanks for the
heads-up! :)
Peace...
Tom
Re: Help needed with rewrite_header and Spamassassin 3.0.2 on Linux
Posted by Theo Van Dinter <fe...@kluge.net>.
On Mon, Feb 28, 2005 at 08:22:01PM -0800, Tom Q. Citizen wrote:
> Thanks, I had tried that earlier with no luck. Are there any guidelines
> on what kinds of characters are allowed in the rewrite string? I did
> notice I had embedded spaces between the parens and asterisks which I've
> removed to see if that will make any difference.
You said you're using qmail-scanner, which IIRC does its own rewrites.
--
Randomly Generated Tagline:
"Who would have though hell would really exist? And that it would be in New
Jersey?" -Leela
"Actually..." - Fry