You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Angel L. Mateo" <am...@um.es> on 2010/11/25 12:10:02 UTC
Not passing checks (tests=[none])
Hello,
We are running spamassassin (with postfix and amavisd-new) for a long time.
Since a time, I'm observing that I have a lot of messages with:
X-Spam-Flag: NO
X-Spam-Score: 0
X-Spam-Level:
X-Spam-Status: No, score=0 tagged_above=-4 required=5 tests=[none]
that is, SA is not passing them any check.
I haven't seen any timeout of error log in my logs.
I have a lot of messages like this and I don't see any common pattern
in them. The only common pattern is that we receive all our external
mail from an external relay, but I don't have it in internal_networks
neither trusted_networks.
Any idea?
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información _o)
y las Comunicaciones Aplicadas (ATICA) / \\
http://www.um.es/atica _(___V
Tfo: 868887590
Fax: 868888337
Re: Not passing checks (tests=[none])
Posted by "Angel L. Mateo" <am...@um.es>.
El 29/11/10 13:07, Mark Martinec escribió:
> Angel,
>
>> I have run it with amavis user. I attach you the output of the command.
>> There you can see some checks (dns checks), but it seems that none of
>> them is passed.
>
> I only one serious issue that I can see:
>
> Assuming the xenon12.um.es is your MX, it needs to be declared as such
> in your trusted_networks and internal_networks:
>
> trusted_networks 155.54.212.166
> internal_networks 155.54.212.166
>
> otherwise RBL lookups do not find the correct transition point.
>
OK, I'll check this.
> Also you have Razor disabled (perhaps intentionally):
>
> [8295] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
> [8295] dbg: razor2: razor2 is not available
>
I think it is disabled because is the default configuration (at least
in debian). I don't remember to explicitly disabled them.
> and the bayes database still lacks a few training messages to become useful:
>
> [8295] dbg: bayes: not available for scanning, only 185 ham(s) in bayes DB< 200
>
Yes, it is another problem we are trying to fix.
> Otherwise it all looks fine. Your sample message really does not hit
> much, so an occasional tests=[none] does not necessarily mean that
> something is wrong. You may consider upgrading SA to 3.3.
>
The problem is that almost all messages has tests=[none]. It is not a
punctual problem.
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información _o)
y las Comunicaciones Aplicadas (ATICA) / \\
http://www.um.es/atica _(___V
Tfo: 868887590
Fax: 868888337
Re: Not passing checks (tests=[none])
Posted by Mark Martinec <Ma...@ijs.si>.
Angel,
> I have run it with amavis user. I attach you the output of the command.
> There you can see some checks (dns checks), but it seems that none of
> them is passed.
I only one serious issue that I can see:
Assuming the xenon12.um.es is your MX, it needs to be declared as such
in your trusted_networks and internal_networks:
trusted_networks 155.54.212.166
internal_networks 155.54.212.166
otherwise RBL lookups do not find the correct transition point.
Also you have Razor disabled (perhaps intentionally):
[8295] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[8295] dbg: razor2: razor2 is not available
and the bayes database still lacks a few training messages to become useful:
[8295] dbg: bayes: not available for scanning, only 185 ham(s) in bayes DB < 200
Otherwise it all looks fine. Your sample message really does not hit
much, so an occasional tests=[none] does not necessarily mean that
something is wrong. You may consider upgrading SA to 3.3.
Mark
Re: Not passing checks (tests=[none])
Posted by "Angel L. Mateo" <am...@um.es>.
El 26/11/10 15:37, Mark Martinec escribió:
> Angel,
>
>>>> Since a time, I'm observing that I have a lot of messages with:
>>> have you tried a debug?
>>> spamassassin -t -D< spam-message
>
>> Now I've done. This is an example for a message:
>> Content analysis details: (0.0 points, 5.0 required)
>> pts rule name description
>> ---- ----------------------
>> --------------------------------------------------
>> _SUMMARY_
>
> Perhaps rules are not in a directory where SpamAssassin expects them.
>
I don't think so. If this was the problem, why some messages pass
checks and other don't?
> The -D option did provide you with debug information, please examine
> it, and if you can't see an obvious problem, post it here. A likely
> culprit is a wrong path for rules or .cf files.
>
> Btw, the testing command-line spamassassin should be executed
> under the same user as amavisd runs, otherwise the difference
> in environment may cause different behaviour. Try something like:
>
> # su vscan -c 'spamassassin -t -D<spam-message'
>
I have run it with amavis user. I attach you the output of the command.
There you can see some checks (dns checks), but it seems that none of
them is passed.
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información _o)
y las Comunicaciones Aplicadas (ATICA) / \\
http://www.um.es/atica _(___V
Tfo: 868887590
Fax: 868888337
Re: Not passing checks (tests=[none])
Posted by Mark Martinec <Ma...@ijs.si>.
Angel,
> >> Since a time, I'm observing that I have a lot of messages with:
> > have you tried a debug?
> > spamassassin -t -D < spam-message
> Now I've done. This is an example for a message:
> Content analysis details: (0.0 points, 5.0 required)
> pts rule name description
> ---- ----------------------
> --------------------------------------------------
> _SUMMARY_
Perhaps rules are not in a directory where SpamAssassin expects them.
The -D option did provide you with debug information, please examine
it, and if you can't see an obvious problem, post it here. A likely
culprit is a wrong path for rules or .cf files.
Btw, the testing command-line spamassassin should be executed
under the same user as amavisd runs, otherwise the difference
in environment may cause different behaviour. Try something like:
# su vscan -c 'spamassassin -t -D <spam-message'
Mark
Re: Not passing checks (tests=[none])
Posted by "Angel L. Mateo" <am...@um.es>.
El 25/11/10 12:48, Tom Kinghorn escribió:
> On 2010/11/25 01:10 PM, Angel L. Mateo wrote:
>> Hello,
>>
>> We are running spamassassin (with postfix and amavisd-new) for a long
>> time.
>>
>> Since a time, I'm observing that I have a lot of messages with:
>>
> have you tried a debug?
>
> spamassassin -t -D < spam-message
>
> will produce a report similar to
>
> Content analysis details: (8.9 points, 6.0 required)
>
> pts rule name description
> ---- ----------------------
> --------------------------------------------------
> 0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
> [41.12.3.121 listed in zen.spamhaus.org]
> 2.2 DEAR_SOMETHING BODY: Contains 'Dear (something)'
> 1.0 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 1.9 UPPERCASE_75_100 message body is 75-100% uppercase
> 0.1 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image
> 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
> 3.0 DOS_OE_TO_MX_IMAGE Direct to MX with OE headers and an image
>
>
Now I've done. This is an example for a message:
Content analysis details: (0.0 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
_SUMMARY_
--
Angel L. Mateo Martínez
Sección de Telemática
Área de Tecnologías de la Información _o)
y las Comunicaciones Aplicadas (ATICA) / \\
http://www.um.es/atica _(___V
Tfo: 868887590
Fax: 868888337
Re: Not passing checks (tests=[none])
Posted by Tom Kinghorn <th...@gmail.com>.
On 2010/11/25 01:10 PM, Angel L. Mateo wrote:
> Hello,
>
> We are running spamassassin (with postfix and amavisd-new) for a
> long time.
>
> Since a time, I'm observing that I have a lot of messages with:
>
have you tried a debug?
spamassassin -t -D < spam-message
will produce a report similar to
Content analysis details: (8.9 points, 6.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.5 RCVD_IN_PBL RBL: Received via a relay in Spamhaus PBL
[41.12.3.121 listed in zen.spamhaus.org]
2.2 DEAR_SOMETHING BODY: Contains 'Dear (something)'
1.0 EXTRA_MPART_TYPE Header has extraneous Content-type:...type=
entry
0.0 HTML_MESSAGE BODY: HTML included in message
1.9 UPPERCASE_75_100 message body is 75-100% uppercase
0.1 SHORT_HELO_AND_INLINE_IMAGE Short HELO string, with inline image
0.1 RDNS_NONE Delivered to trusted network by a host with
no rDNS
3.0 DOS_OE_TO_MX_IMAGE Direct to MX with OE headers and an image
regards
Tom