You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by patrickbaer <p....@tvwerk.de> on 2008/09/04 21:09:33 UTC
Results from test machine, was: Re: How can I see all rules
applied?
And this is the output from the very same command, ran on the test box:
[26243] dbg: config: read file /etc/mail/spamassassin/init.pre
[26243] dbg: config: read file /etc/mail/spamassassin/v310.pre
[26243] dbg: config: read file /etc/mail/spamassassin/v312.pre
[26243] dbg: config: read file /etc/mail/spamassassin/v320.pre
[26243] dbg: config: using "/var/lib/spamassassin/3.002005" for sys rules
pre files
[26243] dbg: config: using "/var/lib/spamassassin/3.002005" for default
rules dir
[26243] dbg: config: read file
/var/lib/spamassassin/3.002005/updates_spamassassin_org.cf
[26243] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[26243] dbg: config: read file /etc/mail/spamassassin/local.cf
[26243] dbg: config: using "/root/.spamassassin" for user state dir
[26243] dbg: config: using "/root/.spamassassin/user_prefs" for user prefs
file
[26243] dbg: config: read file /root/.spamassassin/user_prefs
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::ASN from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::AccessDB from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::AntiVirus from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Bayes from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::BodyEval from @INC
[26243] dbg: plugin: loading
Mail::SpamAssassin::Plugin::BodyRuleBaseExtractor from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from @INC
[26243] dbg: dcc: network tests on, registering DCC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::DKIM from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::DNSEval from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::DomainKeys from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTMLEval from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTTPSMismatch from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEEval from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::OneLineBodyRuleType
from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[26243] dbg: pyzor: network tests on, attempting Pyzor
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[26243] dbg: razor2: razor2 is available, version 2.84
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayEval from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Rule2XSBody from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Shortcircuit from
@INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[26243] dbg: reporter: network tests on, attempting SpamCop
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::Test from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::TextCat from @INC
[26243] dbg: textcat: loading languages file...
[26243] dbg: textcat: loaded 73 language models
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDetail from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIEval from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::WLBLEval from @INC
[26243] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[26243] dbg: config: using
"/var/lib/spamassassin/3.002005/updates_spamassassin_org/10_default_prefs.cf"
for included file
[26243] dbg: config: read file
/var/lib/spamassassin/3.002005/updates_spamassassin_org/10_default_prefs.cf
[26243] dbg: rules: __XM_OL_22B61 merged duplicates: __XM_OL_A842E
[26243] dbg: rules: __MO_OL_07794 merged duplicates: __MO_OL_8627E
__MO_OL_F3B05
[26243] dbg: rules: __JM_REACTOR_DATE merged duplicates: __RATWARE_0_TZ_DATE
[26243] dbg: rules: __XM_OL_07794 merged duplicates: __XM_OL_25340
__XM_OL_3857F __XM_OL_4F240 __XM_OL_58CB5 __XM_OL_6554A __XM_OL_812FF
__XM_OL_C65FA __XM_OL_CF0C0 __XM_OL_F475E __XM_OL_F6D01
[26243] dbg: rules: FH_MSGID_01C67 merged duplicates: __MSGID_VGA
[26243] dbg: rules: FS_NEW_SOFT_UPLOAD merged duplicates:
HS_SUBJ_NEW_SOFTWARE
[26243] dbg: rules: __FH_HAS_XMSMAIL merged duplicates: __HAS_MSMAIL_PRI
[26243] dbg: rules: __MO_OL_015D5 merged duplicates: __MO_OL_6554A
[26243] dbg: rules: __XM_OL_015D5 merged duplicates: __XM_OL_4BF4C
__XM_OL_4EEDB __XM_OL_5B79A __XM_OL_9B90B __XM_OL_ADFF7 __XM_OL_B30D1
__XM_OL_B4B40 __XM_OL_BC7E6 __XM_OL_F3B05 __XM_OL_FF5C8
[26243] dbg: rules: __MO_OL_91287 merged duplicates: __MO_OL_B30D1
__MO_OL_CF0C0
[26243] dbg: rules: KAM_STOCKOTC merged duplicates: KAM_STOCKTIP15
KAM_STOCKTIP20 KAM_STOCKTIP21 KAM_STOCKTIP4 KAM_STOCKTIP6
[26243] dbg: rules: __MO_OL_22B61 merged duplicates: __MO_OL_4F240
__MO_OL_ADFF7
[26243] dbg: rules: __MO_OL_812FF merged duplicates: __MO_OL_BC7E6
[26243] dbg: rules: __MO_OL_25340 merged duplicates: __MO_OL_4EEDB
__MO_OL_7533E
[26243] dbg: rules: __MO_OL_58CB5 merged duplicates: __MO_OL_B4B40
[26243] dbg: rules: __DOS_HAS_ANY_URI merged duplicates: __HAS_ANY_URI
[26243] dbg: rules: __XM_OL_C9068 merged duplicates: __XM_OL_EF20B
[26243] dbg: rules: AXB_RCVD_ZOOBSEND merged duplicates: BROKEN_RATWARE_BOM
CTYPE_001C_A DEAR_HOMEOWNER DIV_CENTER_A_HREF DRUG_RA_PRICE FM_DDDD_TIMES_2
FM_SEX_HOSTDDDD HG_HORMONE HS_PHARMA_1 HS_UPLOADED_SOFTWARE OEBOUND
STOX_RCVD_N_NN_N URIBL_RHS_ABUSE URIBL_RHS_BOGUSMX URIBL_RHS_DSN
URIBL_RHS_POST URIBL_RHS_TLD_WHOIS URIBL_RHS_WHOIS URIBL_XS_SURBL URI_L_PHP
XMAILER_MIMEOLE_OL_5E7ED XMAILER_MIMEOLE_OL_C7C33 XMAILER_MIMEOLE_OL_D03AB
X_LIBRARY YOUR_CRD_RATING
[26243] dbg: rules: __MO_OL_72641 merged duplicates: __MO_OL_A842E
[26243] dbg: rules: __MO_OL_F475E merged duplicates: __MO_OL_FF5C8
[26243] dbg: rules: __MO_OL_4BF4C merged duplicates: __MO_OL_F6D01
[26243] dbg: conf: finish parsing
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::BodyRuleBaseExtractor=HASH(0x8061a9f0)
implements 'finish_parsing_end', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x7e645cf0) implements
'finish_parsing_end', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0x7e64764c) implements
'finish_parsing_end', priority 0
[26243] dbg: replacetags: replacing tags
[26243] dbg: replacetags: done replacing tags
[26243] dbg: zoom: loading compiled ruleset from
/var/lib/spamassassin/compiled/5.008/3.002005
[26243] dbg: zoom: no compiled ruleset found for
Mail::SpamAssassin::CompiledRegexps::body_0
[26243] dbg: config: using "/root/.spamassassin" for user state dir
[26243] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_toks
[26243] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_seen
[26243] dbg: bayes: found bayes db version 3
[26243] dbg: bayes: DB journal sync: last sync: 0
[26243] dbg: config: using "/root/.spamassassin" for user state dir
[26243] dbg: bayes: not available for scanning, only 12 spam(s) in bayes DB
< 200
[26243] dbg: bayes: untie-ing
[26243] dbg: config: score set 1 chosen.
[26243] dbg: message: line ending changed to CRLF
[26243] dbg: message: main message type: multipart/alternative
[26243] dbg: plugin: Mail::SpamAssassin::Plugin::DNSEval=HASH(0x8b4bb828)
implements 'check_start', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::OneLineBodyRuleType=HASH(0x84509348) implements
'check_start', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0x7e64764c) implements
'check_start', priority 0
[26243] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_toks
[26243] dbg: bayes: tie-ing to DB file R/O /root/.spamassassin/bayes_seen
[26243] dbg: bayes: found bayes db version 3
[26243] dbg: bayes: DB journal sync: last sync: 0
[26243] dbg: bayes: not available for scanning, only 12 spam(s) in bayes DB
< 200
[26243] dbg: bayes: untie-ing
[26243] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x7d9f1fb4)
implements 'check_main', priority 0
[26243] dbg: conf: trusted_networks are not configured; it is recommended
that you configure trusted_networks manually
[26243] dbg: received-header: unparseable: from medusa.tvwerk.de ([unix
socket])_ by medusa2 (Cyrus v2.2.13-Debian-2.2.13-10.cb1.1) with LMTPA;_
Thu, 04 Sep 2008 15:15:10 +0200
[26243] dbg: received-header: parsed as [ ip=10.10.10.2 rdns=proxy1
helo=proxy.tvwerk.de by=medusa.tvwerk.de ident= envfrom= intl=0
id=2AAD81BD7F22 auth= msa=0 ]
[26243] dbg: received-header: 'from' 10.10.10.2 has private IP
[26243] dbg: received-header: relay 10.10.10.2 trusted? yes internal? yes
msa? no
[26243] dbg: received-header: parsed as [ ip=127.0.0.1 rdns=localhost
helo=localhost by=proxy.tvwerk.de ident= envfrom= intl=0 id=208B43040D6
auth= msa=0 ]
[26243] dbg: received-header: 'from' 127.0.0.1 has private IP
[26243] dbg: received-header: relay 127.0.0.1 trusted? yes internal? yes
msa? no
[26243] dbg: received-header: parsed as [ ip=127.0.0.1 rdns=
helo=proxy.tvwerk.de by=localhost ident= envfrom= intl=0 id=4N+6qeb1DG4o
auth= msa=0 ]
[26243] dbg: received-header: 'from' 127.0.0.1 has private IP
[26243] dbg: received-header: relay 127.0.0.1 trusted? yes internal? yes
msa? no
[26243] dbg: received-header: parsed as [ ip=190.173.128.77 rdns=
helo=abenalaptop by=proxy.tvwerk.de ident= envfrom= intl=0 id=7E8E03040CB
auth= msa=0 ]
[26243] dbg: received-header: do not trust any hosts from here on
[26243] dbg: received-header: relay 190.173.128.77 trusted? no internal? no
msa? no
[26243] dbg: metadata: X-Spam-Relays-Trusted: [ ip=10.10.10.2 rdns=proxy1
helo=proxy.tvwerk.de by=medusa.tvwerk.de ident= envfrom= intl=1
id=2AAD81BD7F22 auth= msa=0 ] [ ip=127.0.0.1 rdns=localhost helo=localhost
by=proxy.tvwerk.de ident= envfrom= intl=1 id=208B43040D6 auth= msa=0 ] [
ip=127.0.0.1 rdns= helo=proxy.tvwerk.de by=localhost ident= envfrom= intl=1
id=4N+6qeb1DG4o auth= msa=0 ]
[26243] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=190.173.128.77 rdns=
helo=abenalaptop by=proxy.tvwerk.de ident= envfrom= intl=0 id=7E8E03040CB
auth= msa=0 ]
[26243] dbg: metadata: X-Spam-Relays-Internal: [ ip=10.10.10.2 rdns=proxy1
helo=proxy.tvwerk.de by=medusa.tvwerk.de ident= envfrom= intl=1
id=2AAD81BD7F22 auth= msa=0 ] [ ip=127.0.0.1 rdns=localhost helo=localhost
by=proxy.tvwerk.de ident= envfrom= intl=1 id=208B43040D6 auth= msa=0 ] [
ip=127.0.0.1 rdns= helo=proxy.tvwerk.de by=localhost ident= envfrom= intl=1
id=4N+6qeb1DG4o auth= msa=0 ]
[26243] dbg: metadata: X-Spam-Relays-External: [ ip=190.173.128.77 rdns=
helo=abenalaptop by=proxy.tvwerk.de ident= envfrom= intl=0 id=7E8E03040CB
auth= msa=0 ]
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x82d477f8) implements
'extract_metadata', priority 0
[26243] dbg: plugin: Mail::SpamAssassin::Plugin::TextCat=HASH(0x80450678)
implements 'extract_metadata', priority 0
[26243] dbg: metadata: X-Relay-Countries: AR
[26243] dbg: message: ---- MIME PARSER START ----
[26243] dbg: message: parsing multipart, got boundary:
----=_NextPart_000_0012_01C90E66.4AEF7570
[26243] dbg: message: found part of type text/plain, boundary:
----=_NextPart_000_0012_01C90E66.4AEF7570
[26243] dbg: message: added part, type: text/plain
[26243] dbg: message: found part of type text/html, boundary:
----=_NextPart_000_0012_01C90E66.4AEF7570
[26243] dbg: message: added part, type: text/html
[26243] dbg: message: parsing normal part
[26243] dbg: message: parsing normal part
[26243] dbg: message: ---- MIME PARSER END ----
[26243] dbg: message: decoding other encoding type (7bit), ignoring
[26243] dbg: message: decoding quoted-printable
[26243] dbg: textcat: classifying, skipping: yi sco lv is bs sl la ga sa eu
et rm cy eo fy gd lt
[26243] dbg: textcat: language possibly: en
[26243] dbg: textcat: X-Languages: "en", X-Languages-Length: 926
[26243] dbg: plugin: Mail::SpamAssassin::Plugin::ASN=HASH(0x86adf8b8)
implements 'parsed_metadata', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x82d477f8) implements
'parsed_metadata', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x7e64c038) implements
'parsed_metadata', priority 0
[26243] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x80cf830c)
implements 'parsed_metadata', priority 0
[26243] dbg: dns: is_dns_available() last checked 1220539376.0 seconds ago;
re-checking
[26243] dbg: dns: is Net::DNS::Resolver available? yes
[26243] dbg: dns: Net::DNS version: 0.63
[26243] dbg: dns: name server: 192.168.17.5, LocalAddr: 0.0.0.0
[26243] dbg: dns: resolver socket rx buffer size is 41600 bytes
[26243] dbg: dns: testing resolver nameservers: 192.168.17.5
[26243] dbg: dns: trying (3) yahoo.com...
[26243] dbg: dns: looking up NS for 'yahoo.com'
[26243] dbg: dns: NS lookup of yahoo.com using 192.168.17.5 succeeded => DNS
available (set dns_available to override)
[26243] dbg: dns: name server: 192.168.17.5, LocalAddr: 0.0.0.0
[26243] dbg: dns: resolver socket rx buffer size is 41600 bytes
[26243] dbg: dns: NS list: 192.168.17.5
[26243] dbg: dns: name server: 192.168.17.5, LocalAddr: 0.0.0.0
[26243] dbg: dns: resolver socket rx buffer size is 41600 bytes
[26243] dbg: dns: is DNS available? 1
[26243] dbg: asn: using first external relay IP for lookups: 190.173.128.77
[26243] dbg: async: starting: TXT, asnlookup-0-asn.routeviews.org. (timeout
15.0s, min 3.0s)
[26243] dbg: asn: launched DNS TXT query for
77.128.173.190.asn.routeviews.org. in background
[26243] dbg: uridnsbl: domains to query: dupedangryred.com
[26243] dbg: async: starting: URI-DNSBL,
DNSBL:multi.uribl.com.:dupedangryred.com (timeout 15.0s, min 3.0s)
[26243] dbg: dns: URIBL_RED lookup start
[26243] dbg: dns: URIBL_GREY lookup start
[26243] dbg: async: starting: URI-DNSBL,
DNSBL:bl.open-whois.org.:dupedangryred.com (timeout 15.0s, min 3.0s)
[26243] dbg: dns: WHOIS_SECUREWHOIS lookup start
[26243] dbg: dns: WHOIS_MYPRIVREG lookup start
[26243] dbg: dns: WHOIS_NETSOLPR lookup start
[26243] dbg: dns: WHOIS_AITPRIV lookup start
[26243] dbg: async: starting: URI-DNSBL,
DNSBL:multi.surbl.org.:dupedangryred.com (timeout 15.0s, min 3.0s)
[26243] dbg: dns: URIBL_SC_SURBL lookup start
[26243] dbg: dns: URIBL_AB_SURBL lookup start
[26243] dbg: dns: WHOIS_CONTACTPRIV lookup start
[26243] dbg: dns: WHOIS_NAMEKING lookup start
[26243] dbg: dns: WHOIS_PRIVPROT lookup start
[26243] dbg: dns: WHOIS_WHOISGUARD lookup start
[26243] dbg: dns: URIBL_PH_SURBL lookup start
[26243] dbg: dns: URIBL_BLACK lookup start
[26243] dbg: dns: WHOIS_PRIVACYPOST lookup start
[26243] dbg: async: starting: URI-DNSBL,
DNSBL:dob.sibl.support-intelligence.net:dupedangryred.com (timeout 15.0s,
min 3.0s)
[26243] dbg: dns: URIBL_RHS_DOB lookup start
[26243] dbg: dns: URIBL_JP_SURBL lookup start
[26243] dbg: dns: URIBL_WS_SURBL lookup start
[26243] dbg: dns: URIBL_OB_SURBL lookup start
[26243] dbg: dns: WHOIS_DMNBYPROXY lookup start
[26243] dbg: dns: WHOIS_REGISTERFLY lookup start
[26243] dbg: dns: WHOIS_UNLISTED lookup start
[26243] dbg: dns: WHOIS_MONIKER_PRIV lookup start
[26243] dbg: async: starting: URI-NS, NS:dupedangryred.com (timeout 15.0s,
min 3.0s)
[26243] dbg: dns: URIBL_SBL lookup start
[26243] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs:
[26243] dbg: dns: checking RBL plus.bondedsender.org., set ssc-firsttrusted
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for
77.128.173.190.plus.bondedsender.org. in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:77.128.173.190.plus.bondedsender.org. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL combined.njabl.org., set njabl
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for
77.128.173.190.combined.njabl.org. in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:77.128.173.190.combined.njabl.org. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS TXT query for 77.128.173.190.bl.spamcop.net.
in background
[26243] dbg: async: starting: DNSBL-TXT,
dns:TXT:77.128.173.190.bl.spamcop.net. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: _check_rbl_addresses RBL rhsbl.ahbl.org., set ahbl
[26243] dbg: dns: launching DNS A query for tvwerk.de.rhsbl.ahbl.org. in
background
[26243] dbg: async: starting: DNSBL-A, dns:A:tvwerk.de.rhsbl.ahbl.org.
(timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL dob.sibl.support-intelligence.net., set dob
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for
77.128.173.190.dob.sibl.support-intelligence.net. in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:77.128.173.190.dob.sibl.support-intelligence.net. (timeout 15.0s, min
3.0s)
[26243] dbg: dns: checking A and MX for host tvwerk.de
[26243] dbg: dns: launching DNS A query for tvwerk.de in background
[26243] dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-A, dns:A:tvwerk.de
(timeout 15.0s, min 3.0s)
[26243] dbg: dns: launching DNS MX query for tvwerk.de in background
[26243] dbg: async: starting: NO_DNS_FOR_FROM, DNSBL-MX, dns:MX:tvwerk.de
(timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for 77.128.173.190.zen.spamhaus.org.
in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:77.128.173.190.zen.spamhaus.org. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for 77.128.173.190.dnsbl.sorbs.net.
in background
[26243] dbg: async: starting: DNSBL-A, dns:A:77.128.173.190.dnsbl.sorbs.net.
(timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: _check_rbl_addresses RBL
dob.sibl.support-intelligence.net., set dob
[26243] dbg: dns: launching DNS A query for
tvwerk.de.dob.sibl.support-intelligence.net. in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:tvwerk.de.dob.sibl.support-intelligence.net. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for 77.128.173.190.list.dnswl.org.
in background
[26243] dbg: async: starting: DNSBL-A, dns:A:77.128.173.190.list.dnswl.org.
(timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for
77.128.173.190.sa-accredit.habeas.com. in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:77.128.173.190.sa-accredit.habeas.com. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS TXT query for 77.128.173.190.list.dsbl.org.
in background
[26243] dbg: async: starting: DNSBL-TXT,
dns:TXT:77.128.173.190.list.dsbl.org. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS TXT query for
77.128.173.190.sa-trusted.bondedsender.org. in background
[26243] dbg: async: starting: DNSBL-TXT,
dns:TXT:77.128.173.190.sa-trusted.bondedsender.org. (timeout 15.0s, min
3.0s)
[26243] dbg: dns: checking RBL zen.spamhaus.org., set zen
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: _check_rbl_addresses RBL bl.open-whois.org., set openwhois
[26243] dbg: dns: launching DNS A query for tvwerk.de.bl.open-whois.org. in
background
[26243] dbg: async: starting: DNSBL-A, dns:A:tvwerk.de.bl.open-whois.org.
(timeout 15.0s, min 3.0s)
[26243] dbg: dns: _check_rbl_addresses RBL fulldom.rfc-ignorant.org., set
rfci_envfrom
[26243] dbg: dns: launching DNS A query for
tvwerk.de.fulldom.rfc-ignorant.org. in background
[26243] dbg: async: starting: DNSBL-A,
dns:A:tvwerk.de.fulldom.rfc-ignorant.org. (timeout 15.0s, min 3.0s)
[26243] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[26243] dbg: dns: IPs found: full-external: 190.173.128.77 untrusted:
190.173.128.77 originating:
[26243] dbg: dns: only inspecting the following IPs: 190.173.128.77
[26243] dbg: dns: launching DNS A query for 77.128.173.190.iadb.isipp.com.
in background
[26243] dbg: async: starting: DNSBL-A, dns:A:77.128.173.190.iadb.isipp.com.
(timeout 15.0s, min 3.0s)
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x7e64c038) implements
'have_shortcircuited', priority 0
[26243] dbg: check: running tests for priority: -1000
[26243] dbg: asn: asn.routeviews.org.: lookup result packet:
'77.128.173.190.asn.routeviews.org. 339 IN TXT "22927" "190.172.0.0" "15"'
[26243] dbg: dns: hit <dns:77.128.173.190.bl.spamcop.net?type=TXT> "Blocked
- see http://www.spamcop.net/bl.shtml?190.173.128.77"
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x7e64c038) implements
'hit_rule', priority 0
[26243] dbg: dns: hit <dns:77.128.173.190.zen.spamhaus.org> 127.0.0.4
[26243] dbg: dns: hit <dns:77.128.173.190.zen.spamhaus.org> 127.0.0.11
[26243] dbg: dns: hit <dns:tvwerk.de.fulldom.rfc-ignorant.org> 127.0.0.7
[26243] dbg: async: select found 21 responses ready (t.o.=0.0)
[26243] dbg: async: completed in 0.038 s: DNSBL-A,
dns:A:tvwerk.de.fulldom.rfc-ignorant.org.
[26243] dbg: async: completed in 0.046 s: DNSBL-A,
dns:A:tvwerk.de.rhsbl.ahbl.org.
[26243] dbg: async: completed in 0.047 s: DNSBL-A,
dns:A:77.128.173.190.dnsbl.sorbs.net.
[26243] dbg: async: completed in 0.045 s: NO_DNS_FOR_FROM, DNSBL-MX,
dns:MX:tvwerk.de
[26243] dbg: async: completed in 0.051 s: URI-NS, NS:dupedangryred.com
[26243] dbg: async: starting: URI-A, A:ns1.gigolodns.com. (timeout 15.0s,
min 3.0s)
[26243] dbg: async: starting: URI-A, A:ns2.gigolodns.com. (timeout 15.0s,
min 3.0s)
[26243] dbg: async: completed in 0.049 s: URI-DNSBL,
DNSBL:multi.uribl.com.:dupedangryred.com
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_BLACK):
127.0.0.2
[26243] dbg: dns: URIBL_BLACK lookup finished
[26243] dbg: async: completed in 0.053 s: DNSBL-A,
dns:A:tvwerk.de.dob.sibl.support-intelligence.net.
[26243] dbg: async: completed in 0.047 s: DNSBL-TXT,
dns:TXT:77.128.173.190.bl.spamcop.net.
[26243] dbg: async: completed in 0.042 s: DNSBL-TXT,
dns:TXT:77.128.173.190.list.dsbl.org.
[26243] dbg: async: completed in 0.053 s: URI-DNSBL,
DNSBL:bl.open-whois.org.:dupedangryred.com
[26243] dbg: async: completed in 0.044 s: DNSBL-A,
dns:A:77.128.173.190.zen.spamhaus.org.
[26243] dbg: async: completed in 0.052 s: URI-DNSBL,
DNSBL:multi.surbl.org.:dupedangryred.com
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_WS_SURBL):
127.0.0.68
[26243] dbg: dns: URIBL_WS_SURBL lookup finished
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_JP_SURBL):
127.0.0.68
[26243] dbg: dns: URIBL_JP_SURBL lookup finished
[26243] dbg: async: completed in 0.048 s: DNSBL-A,
dns:A:77.128.173.190.combined.njabl.org.
[26243] dbg: async: completed in 0.038 s: DNSBL-A,
dns:A:77.128.173.190.iadb.isipp.com.
[26243] dbg: async: completed in 0.039 s: DNSBL-A,
dns:A:tvwerk.de.bl.open-whois.org.
[26243] dbg: async: completed in 0.051 s: URI-DNSBL,
DNSBL:dob.sibl.support-intelligence.net:dupedangryred.com
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_RHS_DOB):
127.0.0.2
[26243] dbg: dns: URIBL_RHS_DOB lookup finished
[26243] dbg: async: completed in 0.045 s: NO_DNS_FOR_FROM, DNSBL-A,
dns:A:tvwerk.de
[26243] dbg: async: completed in 0.046 s: TXT,
asnlookup-0-asn.routeviews.org.
[26243] dbg: async: completed in 0.045 s: DNSBL-A,
dns:A:77.128.173.190.dob.sibl.support-intelligence.net.
[26243] dbg: async: completed in 0.043 s: DNSBL-A,
dns:A:77.128.173.190.sa-accredit.habeas.com.
[26243] dbg: async: completed in 0.044 s: DNSBL-A,
dns:A:77.128.173.190.list.dnswl.org.
[26243] dbg: async: queries completed: 21, started: 2
[26243] dbg: async: queries active: DNSBL-A=1 DNSBL-TXT=1 URI-A=2 at Thu Sep
4 16:42:56 2008
[26243] dbg: dns: harvested completed queries
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::OneLineBodyRuleType=HASH(0x84509348) implements
'check_rules_at_priority', priority 0
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0x7e64764c) implements
'check_rules_at_priority', priority 0
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0x7e64764c) implements
'run_body_fast_scan', priority 0
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: running head tests; score so far=13.412
[26243] dbg: rules: compiled head tests
[26243] dbg: eval: all '*From' addrs: ayomideacton@tvwerk.de
[26243] dbg: eval: all '*To' addrs: dispo@tvwerk.de
[26243] dbg: rules: running body tests; score so far=13.412
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: running uri tests; score so far=13.412
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: running rawbody tests; score so far=13.412
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: running full tests; score so far=13.412
[26243] dbg: rules: compiled full tests
[26243] dbg: rules: running meta tests; score so far=13.412
[26243] dbg: rules: compiled meta tests
[26243] dbg: check: running tests for priority: -950
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: running head tests; score so far=13.412
[26243] dbg: rules: compiled head tests
[26243] dbg: rules: running body tests; score so far=13.412
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: running uri tests; score so far=13.412
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: running rawbody tests; score so far=13.412
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: running full tests; score so far=13.412
[26243] dbg: rules: compiled full tests
[26243] dbg: rules: running meta tests; score so far=13.412
[26243] dbg: rules: compiled meta tests
[26243] dbg: check: running tests for priority: -900
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: running head tests; score so far=13.412
[26243] dbg: rules: compiled head tests
[26243] dbg: rules: running body tests; score so far=13.412
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: running uri tests; score so far=13.412
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: running rawbody tests; score so far=13.412
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: running full tests; score so far=13.412
[26243] dbg: rules: compiled full tests
[26243] dbg: rules: running meta tests; score so far=13.412
[26243] dbg: rules: compiled meta tests
[26243] dbg: check: running tests for priority: -400
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: running head tests; score so far=13.412
[26243] dbg: rules: compiled head tests
[26243] dbg: rules: running body tests; score so far=13.412
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: running uri tests; score so far=13.412
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: running rawbody tests; score so far=13.412
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: running full tests; score so far=13.412
[26243] dbg: rules: compiled full tests
[26243] dbg: rules: running meta tests; score so far=13.412
[26243] dbg: rules: compiled meta tests
[26243] dbg: check: running tests for priority: 0
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: rules: running one_line_body tests; score so far=13.412
[26243] dbg: rules: running head tests; score so far=13.412
[26243] dbg: rules: compiled head tests
[26243] dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got hit:
"multipart/alternative"
[26243] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit:
"boundary"
[26243] dbg: rules: ran header rule __CT ======> got hit: "m"
[26243] dbg: rules: ran header rule __RDNS_NONE ======> got hit: "[
ip=190.173.128.77 rdns= "
[26243] dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH ======>
got hit: "[ ip=190.173.128.77 rdns= helo=abenalaptop by=proxy.tvwerk.de
ident= envfrom= intl=0 id=7E8E03040CB auth= "
[26243] dbg: rules: ran header rule __HELO_NO_DOMAIN ======> got hit: "[
ip=190.173.128.77 rdns= helo=abenalaptop "
[26243] dbg: rules: ran header rule __MISSING_REF ======> got hit: "UNSET"
[26243] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[26243] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[26243] dbg: rules: ran header rule __FH_HAS_XMSMAIL ======> got hit: "N"
[26243] dbg: rules: ran header rule __XM_MS_IN_GENERAL ======> got hit:
"Microsoft Office Outlook"
[26243] dbg: rules: ran header rule __HAS_X_MAILER ======> got hit: "M"
[26243] dbg: rules: ran header rule __DOS_SINGLE_EXT_RELAY ======> got hit:
"[ ip=190.173.128.77 rdns= helo=abenalaptop by=proxy.tvwerk.de ident=
envfrom= intl=0 id=7E8E03040CB auth= msa=0 ]"
[26243] dbg: rules: ran header rule __FH_HAS_XPRIORITY ======> got hit: "3"
[26243] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[26243] dbg: rules: ran header rule __DOS_RCVD_THU ======> got hit: " Thu, "
[26243] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@abenalaptop>"
[26243] dbg: rules: ran header rule __MSGID_RANDY ======> got hit:
"<00...@abenalaptop>"
[26243] dbg: rules: ran header rule __MSGID_OK_HEX ======> got hit:
"3329d9b0"
[26243] dbg: rules: ran header rule __MIMEOLE_MS ======> got hit: "Produced
By Microsoft MimeOLE"
[26243] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[26243] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<00...@abenalaptop>
[26243] dbg: rules: "
[26243] dbg: rules: ran header rule __MSGID_DOLLARS_MAYBE ======> got hit:
"<00...@abenalaptop>"
[26243] dbg: rules: ran header rule __MSGID_DOLLARS_OK ======> got hit:
"<00...@abenalaptop>"
[26243] dbg: rules: ran header rule __OE_MSGID_2 ======> got hit:
"<00...@abenalaptop>"
[26243] dbg: rules: ran header rule __EXCLAIM_SUBJ ======> got hit: "!"
[26243] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "T"
[26243] dbg: rules: ran header rule __JM_REACTOR_XMOLE ======> got hit:
"Produced By Microsoft MimeOLE V6.00.2900.3198"
[26243] dbg: rules: ran header rule __HAS_MIMEOLE ======> got hit: "P"
[26243] dbg: spf: checking to see if the message has a Received-SPF header
that we can use
[26243] dbg: spf: using Mail::SPF for SPF checks
[26243] dbg: spf: checking HELO (helo=abenalaptop, ip=190.173.128.77)
[26243] dbg: spf: cannot check HELO of 'abenalaptop', skipping
[26243] dbg: dk: from: ayomideacton@tvwerk.de
[26243] dbg: dk: signing domain name: not found
[26243] dbg: dk: fetched policy for domain tvwerk.de: o=~
[26243] dbg: dk: no signature
[26243] dbg: dk: comment is 'no signature'
[26243] dbg: dk: no signature
[26243] dbg: dk: whitelist_from_dk: could not find signing domain name
[26243] dbg: dkim: no wl entries match author ayomideacton@tvwerk.de, no
need to verify sigs
[26243] dbg: spf: already checked for Received-SPF headers, proceeding with
DNS based checks
[26243] dbg: spf: relayed through one or more trusted relays, cannot use
header-based Envelope-From, skipping
[26243] dbg: dkim: performing public key lookup and signature verification
[26243] dbg: dkim: signature verification result: none
[26243] dbg: dkim: policy: performing lookup
[26243] dbg: dkim: policy result neutral: o=~
[26243] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
(1)
[26243] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get
pass, skipping whitelist check
[26243] dbg: dk: def_whitelist_from_dk: could not find signing domain name
[26243] dbg: rules: ran eval rule UNPARSEABLE_RELAY ======> got hit (1)
[26243] dbg: spf: whitelist_from_spf: already checked spf and didn't get
pass, skipping whitelist check
[26243] dbg: async: select found 2 responses ready (t.o.=0.0)
[26243] dbg: async: completed in 0.737 s: URI-A, A:ns1.gigolodns.com.
[26243] dbg: async: starting: URI-DNSBL,
DNSBL:sbl.spamhaus.org.:55.167.135.79 (timeout 15.0s, min 3.0s)
[26243] dbg: async: completed in 0.737 s: URI-A, A:ns2.gigolodns.com.
[26243] dbg: async: starting: URI-DNSBL,
DNSBL:sbl.spamhaus.org.:132.131.34.59 (timeout 15.0s, min 3.0s)
[26243] dbg: async: queries completed: 2, started: 2
[26243] dbg: async: queries active: DNSBL-A=1 DNSBL-TXT=1 URI-DNSBL=2 at Thu
Sep 4 16:42:57 2008
[26243] dbg: dns: harvested completed queries
[26243] dbg: rules: running body tests; score so far=13.413
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: ran body rule __FRAUD_DBI ======> got hit: "dollar"
[26243] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "T"
[26243] dbg: rules: running uri tests; score so far=13.413
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "h"
[26243] dbg: eval: stock info total: 0
[26243] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1)
[26243] dbg: eval: text words: 58, html words: 57
[26243] dbg: eval: madiff: left: 5, orig: 57, max-difference: 8.77%
[26243] dbg: rules: ran eval rule __HTML_LENGTH_0000_1024 ======> got hit
(1)
[26243] dbg: rules: ran eval rule __MIME_HTML ======> got hit (1)
[26243] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1)
[26243] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1)
[26243] dbg: rules: ran eval rule __TVD_MIME_ATT_TP ======> got hit (1)
[26243] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1)
[26243] dbg: rules: running rawbody tests; score so far=13.414
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: ran rawbody rule __TVD_BODY ======> got hit: "Hey!"
[26243] dbg: rules: ran eval rule __MIME_QP ======> got hit (1)
[26243] dbg: rules: running full tests; score so far=13.414
[26243] dbg: rules: compiled full tests
registered Mail::SpamAssassin::Plugin::Test:
Mail::SpamAssassin::Plugin::Test=HASH(0x8225a3b0)
[26243] dbg: info: entering helper-app run mode
[26243] dbg: info: leaving helper-app run mode
[26243] dbg: razor2: razor2 check timed out after 5 seconds
[26243] dbg: razor2: results: spam? 0
[26243] dbg: razor2: results: engine 8, highest cf score: 0
[26243] dbg: razor2: results: engine 4, highest cf score: 0
[26243] dbg: util: current PATH is:
/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/sbin:/usr/local/bin
[26243] dbg: pyzor: pyzor is not available: no pyzor executable found
[26243] dbg: pyzor: no pyzor found, disabling Pyzor
[26243] dbg: dcc: dccifd is not available: no r/w dccifd socket found
[26243] dbg: dcc: dccproc is not available: no dccproc executable found
[26243] dbg: dcc: dccifd and dccproc are not available, disabling DCC
[26243] dbg: async: select found 4 responses ready (t.o.=0.0)
[26243] dbg: async: completed in 5.540 s: URI-DNSBL,
DNSBL:sbl.spamhaus.org.:132.131.34.59
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_SBL):
"http://www.spamhaus.org/SBL/sbl.lasso?query=SBL67639"
[26243] dbg: dns: URIBL_SBL lookup finished
[26243] dbg: async: completed in 6.331 s: DNSBL-TXT,
dns:TXT:77.128.173.190.sa-trusted.bondedsender.org.
[26243] dbg: async: completed in 5.540 s: URI-DNSBL,
DNSBL:sbl.spamhaus.org.:55.167.135.79
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_SBL):
"http://www.spamhaus.org/SBL/sbl.lasso?query=SBL66551"
[26243] dbg: dns: URIBL_SBL lookup finished
[26243] dbg: uridnsbl: domain "dupedangryred.com" listed (URIBL_SBL):
"http://www.spamhaus.org/SBL/sbl.lasso?query=SBL67640"
[26243] dbg: dns: URIBL_SBL lookup finished
[26243] dbg: async: completed in 6.357 s: DNSBL-A,
dns:A:77.128.173.190.plus.bondedsender.org.
[26243] dbg: dns: harvested completed queries
[26243] dbg: rules: running meta tests; score so far=15.882
[26243] dbg: rules: compiled meta tests
[26243] dbg: check: running tests for priority: 500
[26243] dbg: dns: harvest_dnsbl_queries
[26243] dbg: async: timing: 0.038 .
dns:A:tvwerk.de.fulldom.rfc-ignorant.org.
[26243] dbg: async: timing: 0.038 . dns:A:77.128.173.190.iadb.isipp.com.
[26243] dbg: async: timing: 0.039 . dns:A:tvwerk.de.bl.open-whois.org.
[26243] dbg: async: timing: 0.042 . dns:TXT:77.128.173.190.list.dsbl.org.
[26243] dbg: async: timing: 0.043 .
dns:A:77.128.173.190.sa-accredit.habeas.com.
[26243] dbg: async: timing: 0.044 . dns:A:77.128.173.190.list.dnswl.org.
[26243] dbg: async: timing: 0.044 . dns:A:77.128.173.190.zen.spamhaus.org.
[26243] dbg: async: timing: 0.045 . dns:MX:tvwerk.de
[26243] dbg: async: timing: 0.045 . dns:A:tvwerk.de
[26243] dbg: async: timing: 0.045 .
dns:A:77.128.173.190.dob.sibl.support-intelligence.net.
[26243] dbg: async: timing: 0.046 . dns:A:tvwerk.de.rhsbl.ahbl.org.
[26243] dbg: async: timing: 0.046 . asnlookup-0-asn.routeviews.org.
[26243] dbg: async: timing: 0.047 . dns:TXT:77.128.173.190.bl.spamcop.net.
[26243] dbg: async: timing: 0.047 . dns:A:77.128.173.190.dnsbl.sorbs.net.
[26243] dbg: async: timing: 0.048 . dns:A:77.128.173.190.combined.njabl.org.
[26243] dbg: async: timing: 0.049 . DNSBL:multi.uribl.com.:dupedangryred.com
[26243] dbg: async: timing: 0.051 . NS:dupedangryred.com
[26243] dbg: async: timing: 0.051 .
DNSBL:dob.sibl.support-intelligence.net:dupedangryred.com
[26243] dbg: async: timing: 0.052 . DNSBL:multi.surbl.org.:dupedangryred.com
[26243] dbg: async: timing: 0.053 .
dns:A:tvwerk.de.dob.sibl.support-intelligence.net.
[26243] dbg: async: timing: 0.053 .
DNSBL:bl.open-whois.org.:dupedangryred.com
[26243] dbg: async: timing: 0.737 . A:ns1.gigolodns.com.
[26243] dbg: async: timing: 0.737 . A:ns2.gigolodns.com.
[26243] dbg: async: timing: 5.540 . DNSBL:sbl.spamhaus.org.:132.131.34.59
[26243] dbg: async: timing: 5.540 . DNSBL:sbl.spamhaus.org.:55.167.135.79
[26243] dbg: async: timing: 6.331 .
dns:TXT:77.128.173.190.sa-trusted.bondedsender.org.
[26243] dbg: async: timing: 6.357 .
dns:A:77.128.173.190.plus.bondedsender.org.
[26243] dbg: rules: running one_line_body tests; score so far=15.882
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: rules: running one_line_body tests; score so far=15.882
[26243] dbg: rules: running head tests; score so far=15.882
[26243] dbg: rules: compiled head tests
[26243] dbg: rules: running body tests; score so far=15.882
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: running uri tests; score so far=15.882
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: running rawbody tests; score so far=15.882
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: running full tests; score so far=15.882
[26243] dbg: rules: compiled full tests
[26243] dbg: rules: running meta tests; score so far=15.882
[26243] dbg: rules: compiled meta tests
[26243] dbg: check: running tests for priority: 1000
[26243] dbg: rules: running one_line_body tests; score so far=15.982
[26243] dbg: rules: compiled one_line_body tests
[26243] dbg: rules: running one_line_body tests; score so far=15.982
[26243] dbg: rules: running head tests; score so far=15.982
[26243] dbg: rules: compiled head tests
[26243] dbg: config: using "/root/.spamassassin" for user state dir
[26243] dbg: locker: safe_lock: created
/root/.spamassassin/auto-whitelist.lock.voodoo.animoto.intern.26243
[26243] dbg: locker: safe_lock: trying to get lock on
/root/.spamassassin/auto-whitelist with 0 retries
[26243] dbg: locker: safe_lock: link to
/root/.spamassassin/auto-whitelist.lock: link ok
[26243] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in
/root/.spamassassin/auto-whitelist
[26243] dbg: auto-whitelist: db-based ayomideacton@tvwerk.de|ip=190.173
scores 3/36.369
[26243] dbg: auto-whitelist: AWL active, pre-score: 15.982, autolearn score:
15.982, mean: 12.123, IP: 190.173.128.77
[26243] dbg: auto-whitelist: add_score: new count: 4, new totscore: 52.351
[26243] dbg: auto-whitelist: DB addr list: untie-ing and unlocking
[26243] dbg: auto-whitelist: DB addr list: file locked, breaking lock
[26243] dbg: locker: safe_unlock: unlink
/root/.spamassassin/auto-whitelist.lock
[26243] dbg: auto-whitelist: post auto-whitelist score: 14.0525
[26243] dbg: rules: running body tests; score so far=14.0525
[26243] dbg: rules: compiled body tests
[26243] dbg: rules: running uri tests; score so far=14.0525
[26243] dbg: rules: compiled uri tests
[26243] dbg: rules: running rawbody tests; score so far=14.0525
[26243] dbg: rules: compiled rawbody tests
[26243] dbg: rules: running full tests; score so far=14.0525
[26243] dbg: rules: compiled full tests
[26243] dbg: rules: running meta tests; score so far=14.0525
[26243] dbg: rules: compiled meta tests
[26243] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x7d961528) implements
'autolearn_discriminator', priority 0
[26243] dbg: learn: auto-learn: currently using scoreset 1
[26243] dbg: learn: auto-learn: message score: 14.0525, computed score for
autolearn: 15.981
[26243] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=15.981,
head-points=15.981, learned-points=0
[26243] dbg: learn: auto-learn? yes, spam (15.981 > 12)
[26243] dbg: learn: initializing learner
[26243] dbg: learn: learning spam
[26243] dbg: plugin: Mail::SpamAssassin::Plugin::WLBLEval=HASH(0x81fb069c)
implements 'check_wb_list', priority 0
[26243] dbg: eval: all '*From' addrs: ayomideacton@tvwerk.de
[26243] dbg: eval: all '*To' addrs: dispo@tvwerk.de
[26243] dbg: locker: safe_lock: created
/root/.spamassassin/bayes.lock.voodoo.animoto.intern.26243
[26243] dbg: locker: safe_lock: trying to get lock on
/root/.spamassassin/bayes with 0 retries
[26243] dbg: locker: safe_lock: link to /root/.spamassassin/bayes.lock: link
ok
[26243] dbg: bayes: tie-ing to DB file R/W /root/.spamassassin/bayes_toks
[26243] dbg: bayes: tie-ing to DB file R/W /root/.spamassassin/bayes_seen
[26243] dbg: bayes: found bayes db version 3
[26243] dbg: bayes: 643b7f0cd83c56c748c5c97f4f22da6a94056f7c@sa_generated
already learnt correctly, not learning twice
[26243] dbg: bayes: untie-ing
[26243] dbg: bayes: files locked, now unlocking lock
[26243] dbg: locker: safe_unlock: unlink /root/.spamassassin/bayes.lock
[26243] dbg: learn: initializing learner
[26243] dbg: check: is spam? score=14.052 required=5
[26243] dbg: check:
tests=AWL,HTML_MESSAGE,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RCVD_IN_XBL,RDNS_NONE,UNPARSEABLE_RELAY,URIBL_BLACK,URIBL_JP_SURBL,URIBL_RHS_DOB,URIBL_SBL,URIBL_WS_SURBL
[26243] dbg: check:
subtests=__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__DOS_DIRECT_TO_MX,__DOS_HAS_ANY_URI,__DOS_RCVD_THU,__DOS_SINGLE_EXT_RELAY,__ENV_AND_HDR_FROM_MATCH,__EXCLAIM_SUBJ,__FH_HAS_XMSMAIL,__FH_HAS_XPRIORITY,__FRAUD_DBI,__HAS_ANY_URI,__HAS_MIMEOLE,__HAS_MSGID,__HAS_MSMAIL_PRI,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__HELO_NO_DOMAIN,__HTML_LENGTH_0000_1024,__JM_REACTOR_XMOLE,__LAST_UNTRUSTED_RELAY_NO_AUTH,__MIMEOLE_MS,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MISSING_REF,__MSGID_DOLLARS_MAYBE,__MSGID_DOLLARS_OK,__MSGID_OK_HEX,__MSGID_OK_HOST,__MSGID_RANDY,__NONEMPTY_BODY,__OE_MSGID_2,__RCVD_IN_ZEN,__RDNS_NONE,__RFC_IGNORANT_ENVFROM,__SANE_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TOCC_EXISTS,__TVD_BODY,__TVD_MIME_ATT_TP,__XM_MS_IN_GENERAL
Received: from localhost by voodoo.animoto.intern
with SpamAssassin (version 3.2.5);
Thu, 04 Sep 2008 16:43:02 +0200
From: "Ayomide Acton" <ay...@tvwerk.de>
To: <di...@tvwerk.de>
Subject: The best offer!
Date: Thu, 4 Sep 2008 08:14:46 -0500
Message-Id: <00...@abenalaptop>
X-Spam-ASN: AS22927 190.172.0.0/15
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
voodoo.animoto.intern
X-Spam-Level: **************
X-Spam-Status: Yes, score=14.1 required=5.0 tests=AWL,HTML_MESSAGE,
RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_PBL,RCVD_IN_XBL,RDNS_NONE,UNPARSEABLE_RELAY,
URIBL_BLACK,URIBL_JP_SURBL,URIBL_RHS_DOB,URIBL_SBL,URIBL_WS_SURBL
shortcircuit=no autolearn=unavailable version=3.2.5
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_48BFF3F6.0876D545"
This is a multi-part message in MIME format.
------------=_48BFF3F6.0876D545
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "voodoo.animoto.intern", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
root for details.
Content preview: Hey! I bet you feel surrounded by this capitalist world we
live in. Everybody always want more.. more money, more clothes. Did you know
that in the end, it's all about looks? [...]
Content analysis details: (14.1 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
2.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
[Blocked - see <http://www.spamcop.net/bl.shtml?190.173.128.77>]
2.9 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL
[190.173.128.77 listed in zen.spamhaus.org]
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
2.0 URIBL_BLACK Contains an URL listed in the URIBL blacklist
[URIs: dupedangryred.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: dupedangryred.com]
2.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: dupedangryred.com]
0.9 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: dupedangryred.com]
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay lines
0.0 HTML_MESSAGE BODY: HTML included in message
2.5 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: dupedangryred.com]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
-1.9 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to
open with some email clients; in particular, it may contain a virus,
or confirm that your address can receive spam. If you wish to view
it, it may be safer to save it to a file and open it with an editor.
------------=_48BFF3F6.0876D545
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: attachment
Content-Transfer-Encoding: 8bit
Return-Path: <ay...@tvwerk.de>
Received: from medusa.tvwerk.de ([unix socket])
by medusa2 (Cyrus v2.2.13-Debian-2.2.13-10.cb1.1) with LMTPA;
Thu, 04 Sep 2008 15:15:10 +0200
X-Sieve: CMU Sieve 2.2
Received: from proxy.tvwerk.de (proxy1 [10.10.10.2])
by medusa.tvwerk.de (Postfix) with ESMTP id 2AAD81BD7F22
for <di...@tvwerk.de>; Thu, 4 Sep 2008 15:15:10 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by proxy.tvwerk.de (Postfix) with ESMTP id 208B43040D6
for <di...@tvwerk.de>; Thu, 4 Sep 2008 15:15:10 +0200 (CEST)
X-Virus-Scanned: amavisd-new at tvwerk.de
X-Spam-Flag: NO
X-Spam-Score: 1.491
X-Spam-Level: *
X-Spam-Status: No, score=1.491 tagged_above=0 required=5
tests=[BAYES_05=-1.11, HTML_MESSAGE=0.001, RAZOR2_CF_RANGE_51_100=0.5,
RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, RDNS_NONE=0.1]
Received: from proxy.tvwerk.de ([127.0.0.1])
by localhost (proxy1.tvwerk.de [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 4N+6qeb1DG4o for <di...@tvwerk.de>;
Thu, 4 Sep 2008 15:14:54 +0200 (CEST)
Received: from abenalaptop (unknown [190.173.128.77])
by proxy.tvwerk.de (Postfix) with ESMTP id 7E8E03040CB
for <di...@tvwerk.de>; Thu, 4 Sep 2008 15:14:50 +0200 (CEST)
From: "Ayomide Acton" <ay...@tvwerk.de>
To: <di...@tvwerk.de>
Subject: The best offer!
Date: Thu, 4 Sep 2008 08:14:46 -0500
Message-ID: <00...@abenalaptop>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_01C90E66.4AEF7570"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Status:
This is a multi-part message in MIME format.
------=_NextPart_000_0012_01C90E66.4AEF7570
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
Hey! I bet you feel surrounded by this capitalist world we live in.
Everybody always want more.. more money, more clothes.
Did you know that in the end, it's all about looks?
So let's get it straight, you see a Million-dollar watch, but does it
cost a Million-dollars?
NOT if you know the places I do. Handmade replicas of Mont Blanc
<http://dupedangryred.com/> .
Corum <http://dupedangryred.com/> .
Oris <http://dupedangryred.com/> .
Louis Vuitton <http://dupedangryred.com/> .
Bvlgari <http://dupedangryred.com/> .
------=_NextPart_000_0012_01C90E66.4AEF7570
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
<html>
<head>
</head>
<body>
Hey! I bet you feel surrounded by this capitalist world we live =
in.<br><br>
Everybody always want more.. more money, more clothes.<br><br>
Did you know that in the end, it's all about looks?<br><br>
So let's get it straight, you see a Million-dollar watch, but does it =
cost a Million-dollars?<br><br>
NOT if you know the places I do. Handmade replicas of
3D"http://dupedangryred.com/" Mont Blanc .<br><br>
3D"http://dupedangryred.com/" Corum .<br><br>
3D"http://dupedangryred.com/" Oris .<br><br>
3D"http://dupedangryred.com/" Louis Vuitton .<br><br>
3D"http://dupedangryred.com/" Bvlgari .<br><br>
</body>
</html>
------=_NextPart_000_0012_01C90E66.4AEF7570--
------------=_48BFF3F6.0876D545--
--
View this message in context: http://www.nabble.com/How-can-I-see-all-rules-applied--tp19312076p19317779.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: Results from test machine, was: Re: How can I see all rules applied?
Posted by Jonas Eckerman <jo...@frukt.org>.
patrickbaer wrote:
> And this is the output from the very same command, ran on the test box:
The command might be the same, but the message was not. There are
important differences in the headers (see below).
Only one of the messages had any "Received:" headers, wich can
make a big difference for the score. In this case the rules
RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_XBL RBL and RCVD_IN_PBL RBL hit
the message with complete headers wich is a score difference of 5.6.
Another difference between the scores is that one of the messages
hit more URIBL rules than the other. This couls simply be because
some time has passed between your two tests, but it could also be
due to DNS problems.
The headers for the first message was:
---8<---
From: "Ayomide Acton" <ay...@tvwerk.de>
To: <di...@tvwerk.de>
Subject: The best offer!
Date: Thu, 4 Sep 2008 08:14:46 -0500
Message-ID: <00...@abenalaptop>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_01C90E66.4AEF7570"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Status:
---8<---
The headers for the message on the test box was:
---8<---
Return-Path: <ay...@tvwerk.de>
Received: from medusa.tvwerk.de ([unix socket])
by medusa2 (Cyrus v2.2.13-Debian-2.2.13-10.cb1.1) with LMTPA;
Thu, 04 Sep 2008 15:15:10 +0200
X-Sieve: CMU Sieve 2.2
Received: from proxy.tvwerk.de (proxy1 [10.10.10.2])
by medusa.tvwerk.de (Postfix) with ESMTP id 2AAD81BD7F22
for <di...@tvwerk.de>; Thu, 4 Sep 2008 15:15:10 +0200 (CEST)
Received: from localhost (localhost [127.0.0.1])
by proxy.tvwerk.de (Postfix) with ESMTP id 208B43040D6
for <di...@tvwerk.de>; Thu, 4 Sep 2008 15:15:10 +0200 (CEST)
X-Virus-Scanned: amavisd-new at tvwerk.de
X-Spam-Flag: NO
X-Spam-Score: 1.491
X-Spam-Level: *
X-Spam-Status: No, score=1.491 tagged_above=0 required=5
tests=[BAYES_05=-1.11, HTML_MESSAGE=0.001,
RAZOR2_CF_RANGE_51_100=0.5,RAZOR2_CF_RANGE_E8_51_100=1.5,
RAZOR2_CHECK=0.5, RDNS_NONE=0.1]
Received: from proxy.tvwerk.de ([127.0.0.1])
by localhost (proxy1.tvwerk.de [127.0.0.1])
(amavisd-new, port 10024)
with ESMTP id 4N+6qeb1DG4o for <di...@tvwerk.de>;
Thu, 4 Sep 2008 15:14:54 +0200 (CEST)
Received: from abenalaptop (unknown [190.173.128.77])
by proxy.tvwerk.de (Postfix) with ESMTP id 7E8E03040CB
for <di...@tvwerk.de>; Thu, 4 Sep 2008 15:14:50 +0200 (CEST)
From: "Ayomide Acton" <ay...@tvwerk.de>
To: <di...@tvwerk.de>
Subject: The best offer!
Date: Thu, 4 Sep 2008 08:14:46 -0500
Message-ID: <00...@abenalaptop>
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----=_NextPart_000_0012_01C90E66.4AEF7570"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Office Outlook 11
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
Status:
---8<---
Regards
/Jonas
--
Jonas Eckerman, FSDB & Fruktträdet
http://whatever.frukt.org/
http://www.fsdb.org/
http://www.frukt.org/
Re: Results from test machine, was: Re: How can I see all rules
applied?
Posted by PileOfMush <pi...@hotmail.com>.
I removed the [#####]s from the beginning of the live and the test debugs and
opened them in KDiff3 and it becomes really apparent around like 57 in on
file and 108 in the other that they aren't both running the same tests. One
appears to only be running 10_default_prefs.cf.
--
View this message in context: http://www.nabble.com/How-can-I-see-all-rules-applied--tp19312076p19377389.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.