You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Jason Lixfeld <ja...@lixfeld.ca> on 2004/11/08 16:28:37 UTC
Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)
I've got a whitelist_from in my SQL DB which Spamassassin is supposed
to read in. When I do a debug of spamd, I can see the connection to
the DB as the user, but the whitelist_from doesn't seem to be getting
applied to the message:
mysql> select * from spamassassin.userpref;
+------------------+-------------------------+--------------------
+--------+
| username | preference | value |
prefid |
+------------------+-------------------------+--------------------
+--------+
| $GLOBAL | whitelist_from | foobeats@gmail.com |
36 |
| jason.lixfeld.ca | whitelist_from | foobeats@gmail.com |
35 |
| $GLOBAL | score USER_IN_WHITELIST | -10 |
23 |
+------------------+-------------------------+--------------------
+--------+
4 rows in set (0.00 sec)
Below is the output of spamd in debug mode. Spamd is called twice for
this message. First to obtain the $spam_score and $spam_score_int for
data checking:
acl_check_data:
warn message = X-First-Run-SpamCheck: Checked on SMTP Transfer
spam = nobody:true
warn message = X-First-Run-SpamScore: $spam_score
spam = nobody:true
warn message = X-First-Run-is-Spam: Yes
spam = nobody
deny message = This message scored $spam_score spam points.
spam = nobody:true
condition = ${if >{$spam_score_int}{150}{1}{0}}
accept
Next, the message is passed to the spamassassin router and transport
where spamd is called as the user to get the userpref. Looking at how
things are setup, can anyone see what's going on here?
Debug, headers and .cf are below:
(NOTE: Email addresses in debug logs have been sanitized)
logmsg: connection from localhost [127.0.0.1] at port 64061
debug: Conf::SQL: executing SQL: SELECT preference, value FROM userpref
WHERE username = 'nobody' OR username = '$GLOBAL' OR username =
CONCAT('%',NULL) ORDER BY username DESC
debug: retrieving prefs for nobody from SQL server
debug: user has changed
debug: bayes: Using username: spamassassin
debug: bayes: Database connection established
debug: bayes: found bayes db version 3
debug: bayes: Using userid: 1
debug: Score set 3 chosen.
logmsg: checking message (unknown) for nobody:0.
debug: received-header: parsed as [ ip=216.7.194.254
rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
intl=0 id=1CRB3W-000Isd-1y ]
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: looking up A records for 'eshara.ebit.ca'
debug: A records for 'eshara.ebit.ca': 69.90.17.218
debug: looking up A records for 'eshara.ebit.ca'
debug: A records for 'eshara.ebit.ca': 69.90.17.218
debug: received-header: 'by' eshara.ebit.ca has public IP 69.90.17.218
debug: received-header: relay 216.7.194.254 trusted? no internal? no
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted: [ ip=216.7.194.254
rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
intl=0 id=1CRB3W-000Isd-1y ]
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: decoding: no encoding detected
debug: Message too short for language analysis
debug: URIDNSBL: domains to query:
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: all '*From' addrs:
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: SPF: checking HELO (helo=foo.com, ip=216.7.194.254)
debug: SPF: trimmed HELO down to 'foo.com'
debug: SPF: cannot load or create Mail::SPF::Query module
debug: all '*To' addrs: jason-at-lixfeld.ca
debug: SPF: cannot get Envelope-From, cannot use SPF
debug: forged-HELO: from=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca
debug: forged-HELO: mismatch on HELO: 'foo.com' != 'trek.lixfeld.ca'
debug: running body-text per-line regexp tests; score so far=0.119
debug: running uri tests; score so far=0.119
debug: bayes corpus size: nspam = 4604, nham = 299
debug: tokenize: header tokens for *RT = " "
debug: tokenize: header tokens for *RU = " [ ip=216.7.194.254
rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
intl=0 id=1CRB3W-000Isd-1y ]"
debug: tokenize: header tokens for *r = " trek.lixfeld.ca ([216.7.194
ip*216.7.194.254 ] helo=foo.com) by eshara.ebit.ca smtp (Exim 4.43
(FreeBSD)) id 1CRB3W-000Isd-1y jason-at-lixfeld.ca; "
debug: bayes: tok_get_all: Token Count: 23
debug: bayes token 'foo' => 0.0173548387096774
debug: bayes token 'H*RU:foo.com' => 0.978
debug: bayes token 'H*r:sk:jason@l' => 0.967934668617371
debug: bayes token 'H*r:foo.com' => 0.0512342735845206
debug: bayes token 'H*r:eshara.ebit.ca' => 0.867296640246297
debug: bayes token 'H*r:FreeBSD' => 0.853297353802955
debug: bayes: score = 0.514928182534538
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: Computed razorhome from env: /usr/home/jlixfeld/.razor
Razor-Log: No razorhome found, using all defaults
Razor-Log: No razor-agent.conf found, using defaults.
Nov 08 10:03:43.987772 check[72506]: [ 2] [bootup] Logging initiated
LogDebugLevel=9 to stdout
Nov 08 10:03:43.988034 check[72506]: [ 5] computed razorhome=, conf=,
ident=identity
Nov 08 10:03:43.988230 check[72506]: [ 8] Client supported_engines: 4 8
Nov 08 10:03:43.988595 check[72506]: [ 8] prep_mail done: mail 1
headers=189, mime0=40
Nov 08 10:03:43.988814 check[72506]: [ 7] Can't read file
servers.discovery.lst, looking relatve to
Nov 08 10:03:43.988967 check[72506]: [ 5] Can't read file
/servers.discovery.lst: No such file or directory
Nov 08 10:03:43.989110 check[72506]: [ 7] Can't read file
servers.nomination.lst, looking relatve to
Nov 08 10:03:43.989249 check[72506]: [ 5] Can't read file
/servers.nomination.lst: No such file or directory
Nov 08 10:03:43.989391 check[72506]: [ 7] Can't read file
servers.catalogue.lst, looking relatve to
Nov 08 10:03:43.989530 check[72506]: [ 5] Can't read file
/servers.catalogue.lst: No such file or directory
Nov 08 10:03:43.989744 check[72506]: [ 5] no listfile:
servers.catalogue.lst
Nov 08 10:03:43.989900 check[72506]: [ 6] no discovery listfile:
servers.discovery.lst
Nov 08 10:03:43.990025 check[72506]: [ 5] Finding Discovery Servers via
DNS in the razor2.cloudmark.com zone
Nov 08 10:03:43.995052 check[72506]: [ 6] Found 1 Discovery Servers via
DNS in the razor2.cloudmark.com zone
Nov 08 10:03:43.995316 check[72506]: [ 8] Checking with Razor Discovery
Server 66.151.150.12
Nov 08 10:03:43.995477 check[72506]: [ 6] No port specified, using 2703
Nov 08 10:03:43.995601 check[72506]: [ 5] Connecting to 66.151.150.12
...
Nov 08 10:03:44.112375 check[72506]: [ 8] Connection established
Nov 08 10:03:44.112583 check[72506]: [ 4] 66.151.150.12 >> 35 server
greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
Nov 08 10:03:44.112918 check[72506]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:44.113047 check[72506]: [ 6] a=g&pm=csl
Nov 08 10:03:44.173544 check[72506]: [ 4] 66.151.150.12 >> 76
Nov 08 10:03:44.173682 check[72506]: [ 6] response to sent.1
-csl=?
pride.cloudmark.com
wonder.cloudmark.com
thrill.cloudmark.com
.
Nov 08 10:03:44.174122 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with csl=pride.cloudmark.com
Nov 08 10:03:44.174283 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with csl=wonder.cloudmark.com
Nov 08 10:03:44.174430 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with csl=thrill.cloudmark.com
Nov 08 10:03:44.174753 check[72506]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:44.174894 check[72506]: [ 6] a=g&pm=nsl
Nov 08 10:03:44.234387 check[72506]: [ 4] 66.151.150.12 >> 51
Nov 08 10:03:44.234524 check[72506]: [ 6] response to sent.2
-nsl=?
folly.cloudmark.com
joy.cloudmark.com
.
Nov 08 10:03:44.234799 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with nsl=folly.cloudmark.com
Nov 08 10:03:44.234883 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with nsl=joy.cloudmark.com
Nov 08 10:03:44.235067 check[72506]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:44.235205 check[72506]: [ 6] losing old server connection,
66.151.150.12, for new server, pride.cloudmark.com
Nov 08 10:03:44.235290 check[72506]: [ 5] disconnecting from server
66.151.150.12
Nov 08 10:03:44.235536 check[72506]: [ 4] 66.151.150.12 << 5
Nov 08 10:03:44.235612 check[72506]: [ 6] a=q
Nov 08 10:03:44.235824 check[72506]: [ 5] Connecting to
pride.cloudmark.com ...
Nov 08 10:03:44.352546 check[72506]: [ 8] Connection established
Nov 08 10:03:44.352772 check[72506]: [ 4] pride.cloudmark.com >> 36
server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
Nov 08 10:03:44.353241 check[72506]: [ 4] pride.cloudmark.com << 25
Nov 08 10:03:44.353370 check[72506]: [ 6] cn=razor-agents&cv=2.61
Nov 08 10:03:44.353720 check[72506]: [ 4] pride.cloudmark.com << 14
Nov 08 10:03:44.353848 check[72506]: [ 6] a=g&pm=state
Nov 08 10:03:44.471194 check[72506]: [ 4] pride.cloudmark.com >> 141
Nov 08 10:03:44.471330 check[72506]: [ 6] response to sent.5
-sv=3.44
sn=C
zone=razor2.cloudmark.com
ac=6
srl=5048
lm=4
bql=50
bqs=129
dre=4
se=C8
srf=FF
ep4=7542-10
ep8=5
pp=1
crt=90
.
Nov 08 10:03:44.472048 check[72506]: [ 5] Updated to new server state
srl 5048 for server pride.cloudmark.com
Nov 08 10:03:44.472198 check[72506]: [ 6] pride.cloudmark.com is a
Catalogue Server srl 5048; computed min_cf=6, Server se: C8
Nov 08 10:03:44.472381 check[72506]: [ 8] Computed supported_engines: 4
8
Nov 08 10:03:44.472473 check[72506]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:44.472547 check[72506]: [ 5] srl was updated, forcing
discovery ...
Nov 08 10:03:44.472665 check[72506]: [ 5] no listfile:
servers.catalogue.lst
Nov 08 10:03:44.472765 check[72506]: [ 8] already have 1 discovery
servers
Nov 08 10:03:44.472853 check[72506]: [ 8] Checking with Razor Discovery
Server 66.151.150.12
Nov 08 10:03:44.472951 check[72506]: [ 6] losing old server connection,
pride.cloudmark.com, for new server, 66.151.150.12
Nov 08 10:03:44.473029 check[72506]: [ 5] disconnecting from server
pride.cloudmark.com
Nov 08 10:03:44.473264 check[72506]: [ 4] pride.cloudmark.com << 5
Nov 08 10:03:44.473341 check[72506]: [ 6] a=q
Nov 08 10:03:44.473451 check[72506]: [ 5] Connecting to 66.151.150.12
...
Nov 08 10:03:50.788684 check[72506]: [ 8] Connection established
Nov 08 10:03:50.788961 check[72506]: [ 4] 66.151.150.12 >> 35 server
greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
Nov 08 10:03:50.789312 check[72506]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:50.789458 check[72506]: [ 6] a=g&pm=csl
Nov 08 10:03:50.849830 check[72506]: [ 4] 66.151.150.12 >> 76
Nov 08 10:03:50.849970 check[72506]: [ 6] response to sent.7
-csl=?
wonder.cloudmark.com
pride.cloudmark.com
thrill.cloudmark.com
.
Nov 08 10:03:50.850273 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with csl=wonder.cloudmark.com
Nov 08 10:03:50.850361 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with csl=pride.cloudmark.com
Nov 08 10:03:50.850443 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with csl=thrill.cloudmark.com
Nov 08 10:03:50.850687 check[72506]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:50.850766 check[72506]: [ 6] a=g&pm=nsl
Nov 08 10:03:50.910458 check[72506]: [ 4] 66.151.150.12 >> 51
Nov 08 10:03:50.910667 check[72506]: [ 6] response to sent.8
-nsl=?
folly.cloudmark.com
joy.cloudmark.com
.
Nov 08 10:03:50.910970 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with nsl=folly.cloudmark.com
Nov 08 10:03:50.911057 check[72506]: [ 8] Discovery Server
66.151.150.12 replying with nsl=joy.cloudmark.com
Nov 08 10:03:50.911253 check[72506]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:50.911425 check[72506]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:50.911519 check[72506]: [ 8] Using next closest server
pride.cloudmark.com:2703, cached info srl 5048
Nov 08 10:03:50.911634 check[72506]: [ 8] mail 1 has no subject
Nov 08 10:03:50.911899 check[72506]: [ 6] preproc: mail 1.0 went from
40 bytes to 3
Nov 08 10:03:50.912021 check[72506]: [ 6] computing sigs for mail 1.0,
len 3
Nov 08 10:03:50.913408 check[72506]: [ 6] Engine (8) didn't produce a
signature for mail 1.0
Nov 08 10:03:50.913567 check[72506]: [ 6] skipping whitelist file
(empty?): razor-whitelist
Nov 08 10:03:50.913675 check[72506]: [ 6] losing old server connection,
66.151.150.12, for new server, pride.cloudmark.com
Nov 08 10:03:50.913758 check[72506]: [ 5] disconnecting from server
66.151.150.12
Nov 08 10:03:50.914005 check[72506]: [ 4] 66.151.150.12 << 5
Nov 08 10:03:50.914084 check[72506]: [ 6] a=q
Nov 08 10:03:50.914344 check[72506]: [ 5] Connecting to
pride.cloudmark.com ...
Nov 08 10:03:51.031322 check[72506]: [ 8] Connection established
Nov 08 10:03:51.031544 check[72506]: [ 4] pride.cloudmark.com >> 36
server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
Nov 08 10:03:51.032022 check[72506]: [ 4] pride.cloudmark.com << 25
Nov 08 10:03:51.032155 check[72506]: [ 6] cn=razor-agents&cv=2.61
Nov 08 10:03:51.032441 check[72506]: [ 6] pride.cloudmark.com is a
Catalogue Server srl 5048; computed min_cf=6, Server se: C8
Nov 08 10:03:51.032659 check[72506]: [ 8] Computed supported_engines: 4
8
Nov 08 10:03:51.032796 check[72506]: [ 8] mail 1.0 e4 sig:
DXc-2nXPD705qwuy78OtNOq1FcwA
Nov 08 10:03:51.032921 check[72506]: [ 5] mail 1.0 e8 got no sig
Nov 08 10:03:51.033028 check[72506]: [ 8] preparing 1 queries
Nov 08 10:03:51.033202 check[72506]: [ 8] sending 1 batches
Nov 08 10:03:51.033446 check[72506]: [ 4] pride.cloudmark.com << 52
Nov 08 10:03:51.033530 check[72506]: [ 6]
a=c&e=4&ep4=7542-10&s=DXc-2nXPD705qwuy78OtNOq1FcwA
Nov 08 10:03:51.346837 check[72506]: [ 4] pride.cloudmark.com >> 10
Nov 08 10:03:51.346979 check[72506]: [ 6] response to sent.11
p=0&ct=1
Nov 08 10:03:51.347409 check[72506]: [ 6] mail 1.0 e=4
sig=DXc-2nXPD705qwuy78OtNOq1FcwA: sig not found.
Nov 08 10:03:51.347569 check[72506]: [ 7] method 4: mail 1.0:
contention part, skipping
Nov 08 10:03:51.347716 check[72506]: [ 7] method 4: mail 1: all
non-contention parts not spam, mail not spam
Nov 08 10:03:51.347865 check[72506]: [ 3] mail 1 is not known spam.
Nov 08 10:03:51.348028 check[72506]: [ 5] disconnecting from server
pride.cloudmark.com
Nov 08 10:03:51.348336 check[72506]: [ 4] pride.cloudmark.com << 5
Nov 08 10:03:51.348478 check[72506]: [ 6] a=q
debug: Using results from Razor v2.61
debug: Found Razor2 part: part=0 engine=4 ct=1 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: running raw-body-text per-line regexp tests; score so far=0.12
debug: running full-text regexp tests; score so far=0.12
debug: Razor2 is available
debug: Pyzor is not available: pyzor not found
debug: DCCifd is not available: no r/w dccifd socket found.
debug: DCC is not available: no executable dccproc found.
debug: Running tests for priority: 500
debug: RBL: success for 36 of 36 queries
debug: running meta tests; score so far=0.12
debug: running header regexp tests; score so far=1.346
debug: running body-text per-line regexp tests; score so far=1.346
debug: running uri tests; score so far=1.346
debug: running raw-body-text per-line regexp tests; score so far=1.346
debug: running full-text regexp tests; score so far=1.346
debug: Running tests for priority: 1000
debug: running meta tests; score so far=1.346
debug: running header regexp tests; score so far=1.346
debug: running body-text per-line regexp tests; score so far=1.346
debug: running uri tests; score so far=1.346
debug: running raw-body-text per-line regexp tests; score so far=1.346
debug: running full-text regexp tests; score so far=1.346
debug: auto-learn: currently using scoreset 3, recomputing score based
on scoreset 1.
debug: auto-learn: message score: 1.346, computed score for autolearn:
1.57
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0,
learned-points=0.001
debug: auto-learn? no: inside auto-learn thresholds, not considered ham
or spam
debug: is spam? score=1.346 required=5
debug: tests=BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
debug: subtests=
logmsg: clean message (1.3/5.0) for nobody:0 in 7.5 seconds, 194 bytes.
logmsg: result: . 1 - BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
scantime=7.5,size=194,mid=(unknown),bayes=0.514928182534538,autolearn=no
logmsg: connection from localhost [127.0.0.1] at port 64068
debug: Conf::SQL: executing SQL: SELECT preference, value FROM userpref
WHERE username = 'jason.lixfeld.ca' OR username = '$GLOBAL' OR username
= CONCAT('%',NULL) ORDER BY username DESC
debug: retrieving prefs for jason.lixfeld.ca from SQL server
debug: user has changed
debug: bayes: Using username: spamassassin
debug: bayes: Database connection established
debug: bayes: found bayes db version 3
debug: bayes: Using userid: 1
debug: Score set 3 chosen.
logmsg: processing message (unknown) for jason.lixfeld.ca:0.
debug: received-header: parsed as [ ip=216.7.194.254
rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
intl=0 id=1CRB3W-000Isd-1y ]
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: looking up A records for 'eshara.ebit.ca'
debug: A records for 'eshara.ebit.ca': 69.90.17.218
debug: looking up A records for 'eshara.ebit.ca'
debug: A records for 'eshara.ebit.ca': 69.90.17.218
debug: received-header: 'by' eshara.ebit.ca has public IP 69.90.17.218
debug: received-header: relay 216.7.194.254 trusted? no internal? no
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted: [ ip=216.7.194.254
rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
intl=0 id=1CRB3W-000Isd-1y ]
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: decoding: no encoding detected
debug: Message too short for language analysis
debug: URIDNSBL: domains to query:
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: all '*From' addrs:
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: SPF: checking HELO (helo=foo.com, ip=216.7.194.254)
debug: SPF: trimmed HELO down to 'foo.com'
debug: SPF: cannot load or create Mail::SPF::Query module
debug: all '*To' addrs: jason-at-lixfeld.ca
debug: SPF: cannot get Envelope-From, cannot use SPF
debug: forged-HELO: from=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca
debug: forged-HELO: mismatch on HELO: 'foo.com' != 'trek.lixfeld.ca'
debug: running body-text per-line regexp tests; score so far=0.119
debug: running uri tests; score so far=0.119
debug: bayes corpus size: nspam = 4604, nham = 299
debug: tokenize: header tokens for X-First-Run-SpamCheck = " Checked on
SMTP Transfer"
debug: tokenize: header tokens for X-First-Run-SpamScore = " 1.3"
debug: tokenize: header tokens for X-SA-Exim-Connect-IP = "
216.7.194.254"
debug: tokenize: header tokens for X-SA-Exim-Mail-From = "
foobeats@gmail.com"
debug: tokenize: header tokens for X-SA-Exim-Scanned = " No (on
eshara.ebit.ca); SAEximRunCond expanded to false"
debug: tokenize: header tokens for *RT = " "
debug: tokenize: header tokens for *RU = " [ ip=216.7.194.254
rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
intl=0 id=1CRB3W-000Isd-1y ]"
debug: tokenize: header tokens for *r = " trek.lixfeld.ca ([216.7.194
ip*216.7.194.254 ] helo=foo.com) by eshara.ebit.ca smtp (Exim 4.43
(FreeBSD)) id 1CRB3W-000Isd-1y jason-at-lixfeld.ca; "
debug: bayes: tok_get_all: Token Count: 33
debug: bayes token 'HX-First-Run-SpamScore:1.3' => 0.0131219512195122
debug: bayes token 'foo' => 0.0173548387096774
debug: bayes token 'HX-SA-Exim-Connect-IP:216.7.194.254' => 0.978
debug: bayes token 'H*RU:foo.com' => 0.978
debug: bayes token 'H*r:sk:jason@l' => 0.967934668617371
debug: bayes token 'HX-SA-Exim-Mail-From:sk:jakbeat' =>
0.0489090909090909
debug: bayes token 'H*r:foo.com' => 0.0512342735845206
debug: bayes token 'H*r:eshara.ebit.ca' => 0.867296640246297
debug: bayes token 'H*r:FreeBSD' => 0.853297353802955
debug: bayes: score = 0.487796634412826
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: Computed razorhome from env: /usr/home/jlixfeld/.razor
Razor-Log: No razorhome found, using all defaults
Razor-Log: No razor-agent.conf found, using defaults.
Nov 08 10:03:51.590277 check[72507]: [ 2] [bootup] Logging initiated
LogDebugLevel=9 to stdout
Nov 08 10:03:51.590563 check[72507]: [ 5] computed razorhome=, conf=,
ident=identity
Nov 08 10:03:51.590782 check[72507]: [ 8] Client supported_engines: 4 8
Nov 08 10:03:51.591193 check[72507]: [ 8] prep_mail done: mail 1
headers=415, mime0=40
Nov 08 10:03:51.591433 check[72507]: [ 7] Can't read file
servers.discovery.lst, looking relatve to
Nov 08 10:03:51.591595 check[72507]: [ 5] Can't read file
/servers.discovery.lst: No such file or directory
Nov 08 10:03:51.591771 check[72507]: [ 7] Can't read file
servers.nomination.lst, looking relatve to
Nov 08 10:03:51.591931 check[72507]: [ 5] Can't read file
/servers.nomination.lst: No such file or directory
Nov 08 10:03:51.592099 check[72507]: [ 7] Can't read file
servers.catalogue.lst, looking relatve to
Nov 08 10:03:51.592256 check[72507]: [ 5] Can't read file
/servers.catalogue.lst: No such file or directory
Nov 08 10:03:51.592485 check[72507]: [ 5] no listfile:
servers.catalogue.lst
Nov 08 10:03:51.592668 check[72507]: [ 6] no discovery listfile:
servers.discovery.lst
Nov 08 10:03:51.592812 check[72507]: [ 5] Finding Discovery Servers via
DNS in the razor2.cloudmark.com zone
Nov 08 10:03:51.597627 check[72507]: [ 6] Found 1 Discovery Servers via
DNS in the razor2.cloudmark.com zone
Nov 08 10:03:51.597903 check[72507]: [ 8] Checking with Razor Discovery
Server 66.151.150.12
Nov 08 10:03:51.598103 check[72507]: [ 6] No port specified, using 2703
Nov 08 10:03:51.598234 check[72507]: [ 5] Connecting to 66.151.150.12
...
Nov 08 10:03:54.707718 check[72507]: [ 8] Connection established
Nov 08 10:03:54.708009 check[72507]: [ 4] 66.151.150.12 >> 35 server
greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
Nov 08 10:03:54.708368 check[72507]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:54.708501 check[72507]: [ 6] a=g&pm=csl
Nov 08 10:03:54.770328 check[72507]: [ 4] 66.151.150.12 >> 76
Nov 08 10:03:54.770468 check[72507]: [ 6] response to sent.1
-csl=?
thrill.cloudmark.com
pride.cloudmark.com
wonder.cloudmark.com
.
Nov 08 10:03:54.770915 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with csl=thrill.cloudmark.com
Nov 08 10:03:54.771089 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with csl=pride.cloudmark.com
Nov 08 10:03:54.771239 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with csl=wonder.cloudmark.com
Nov 08 10:03:54.771532 check[72507]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:54.771655 check[72507]: [ 6] a=g&pm=nsl
Nov 08 10:03:54.831172 check[72507]: [ 4] 66.151.150.12 >> 51
Nov 08 10:03:54.831303 check[72507]: [ 6] response to sent.2
-nsl=?
folly.cloudmark.com
joy.cloudmark.com
.
Nov 08 10:03:54.831616 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with nsl=folly.cloudmark.com
Nov 08 10:03:54.831748 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with nsl=joy.cloudmark.com
Nov 08 10:03:54.831983 check[72507]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:54.832174 check[72507]: [ 6] losing old server connection,
66.151.150.12, for new server, pride.cloudmark.com
Nov 08 10:03:54.832308 check[72507]: [ 5] disconnecting from server
66.151.150.12
Nov 08 10:03:54.832586 check[72507]: [ 4] 66.151.150.12 << 5
Nov 08 10:03:54.832707 check[72507]: [ 6] a=q
Nov 08 10:03:54.832866 check[72507]: [ 5] Connecting to
pride.cloudmark.com ...
Nov 08 10:03:54.949669 check[72507]: [ 8] Connection established
Nov 08 10:03:54.950024 check[72507]: [ 4] pride.cloudmark.com >> 36
server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
Nov 08 10:03:54.950522 check[72507]: [ 4] pride.cloudmark.com << 25
Nov 08 10:03:54.950656 check[72507]: [ 6] cn=razor-agents&cv=2.61
Nov 08 10:03:54.951006 check[72507]: [ 4] pride.cloudmark.com << 14
Nov 08 10:03:54.951148 check[72507]: [ 6] a=g&pm=state
Nov 08 10:03:55.108057 check[72507]: [ 4] pride.cloudmark.com >> 141
Nov 08 10:03:55.108198 check[72507]: [ 6] response to sent.5
-sv=3.44
sn=C
zone=razor2.cloudmark.com
ac=6
srl=5048
lm=4
bql=50
bqs=129
dre=4
se=C8
srf=FF
ep4=7542-10
ep8=5
pp=1
crt=90
.
Nov 08 10:03:55.109053 check[72507]: [ 5] Updated to new server state
srl 5048 for server pride.cloudmark.com
Nov 08 10:03:55.109207 check[72507]: [ 6] pride.cloudmark.com is a
Catalogue Server srl 5048; computed min_cf=6, Server se: C8
Nov 08 10:03:55.109393 check[72507]: [ 8] Computed supported_engines: 4
8
Nov 08 10:03:55.109489 check[72507]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:55.109566 check[72507]: [ 5] srl was updated, forcing
discovery ...
Nov 08 10:03:55.109692 check[72507]: [ 5] no listfile:
servers.catalogue.lst
Nov 08 10:03:55.109795 check[72507]: [ 8] already have 1 discovery
servers
Nov 08 10:03:55.109886 check[72507]: [ 8] Checking with Razor Discovery
Server 66.151.150.12
Nov 08 10:03:55.109990 check[72507]: [ 6] losing old server connection,
pride.cloudmark.com, for new server, 66.151.150.12
Nov 08 10:03:55.110072 check[72507]: [ 5] disconnecting from server
pride.cloudmark.com
Nov 08 10:03:55.110310 check[72507]: [ 4] pride.cloudmark.com << 5
Nov 08 10:03:55.110389 check[72507]: [ 6] a=q
Nov 08 10:03:55.110517 check[72507]: [ 5] Connecting to 66.151.150.12
...
Nov 08 10:03:55.227386 check[72507]: [ 8] Connection established
Nov 08 10:03:55.227557 check[72507]: [ 4] 66.151.150.12 >> 35 server
greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
Nov 08 10:03:55.227901 check[72507]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:55.228033 check[72507]: [ 6] a=g&pm=csl
Nov 08 10:03:55.289276 check[72507]: [ 4] 66.151.150.12 >> 76
Nov 08 10:03:55.289416 check[72507]: [ 6] response to sent.7
-csl=?
thrill.cloudmark.com
wonder.cloudmark.com
pride.cloudmark.com
.
Nov 08 10:03:55.289713 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with csl=thrill.cloudmark.com
Nov 08 10:03:55.289801 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with csl=wonder.cloudmark.com
Nov 08 10:03:55.289883 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with csl=pride.cloudmark.com
Nov 08 10:03:55.290138 check[72507]: [ 4] 66.151.150.12 << 12
Nov 08 10:03:55.290218 check[72507]: [ 6] a=g&pm=nsl
Nov 08 10:03:55.351296 check[72507]: [ 4] 66.151.150.12 >> 51
Nov 08 10:03:55.351434 check[72507]: [ 6] response to sent.8
-nsl=?
folly.cloudmark.com
joy.cloudmark.com
.
Nov 08 10:03:55.351705 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with nsl=folly.cloudmark.com
Nov 08 10:03:55.351791 check[72507]: [ 8] Discovery Server
66.151.150.12 replying with nsl=joy.cloudmark.com
Nov 08 10:03:55.351976 check[72507]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:55.352124 check[72507]: [ 5] no razorhome, not caching
server info to disk
Nov 08 10:03:55.352216 check[72507]: [ 8] Using next closest server
pride.cloudmark.com:2703, cached info srl 5048
Nov 08 10:03:55.352326 check[72507]: [ 8] mail 1 has no subject
Nov 08 10:03:55.352583 check[72507]: [ 6] preproc: mail 1.0 went from
40 bytes to 3
Nov 08 10:03:55.352715 check[72507]: [ 6] computing sigs for mail 1.0,
len 3
Nov 08 10:03:55.354106 check[72507]: [ 6] Engine (8) didn't produce a
signature for mail 1.0
Nov 08 10:03:55.354268 check[72507]: [ 6] skipping whitelist file
(empty?): razor-whitelist
Nov 08 10:03:55.354374 check[72507]: [ 6] losing old server connection,
66.151.150.12, for new server, pride.cloudmark.com
Nov 08 10:03:55.354457 check[72507]: [ 5] disconnecting from server
66.151.150.12
Nov 08 10:03:55.354694 check[72507]: [ 4] 66.151.150.12 << 5
Nov 08 10:03:55.354773 check[72507]: [ 6] a=q
Nov 08 10:03:55.354893 check[72507]: [ 5] Connecting to
pride.cloudmark.com ...
Nov 08 10:03:55.472232 check[72507]: [ 8] Connection established
Nov 08 10:03:55.472444 check[72507]: [ 4] pride.cloudmark.com >> 36
server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
Nov 08 10:03:55.472908 check[72507]: [ 4] pride.cloudmark.com << 25
Nov 08 10:03:55.473041 check[72507]: [ 6] cn=razor-agents&cv=2.61
Nov 08 10:03:55.473288 check[72507]: [ 6] pride.cloudmark.com is a
Catalogue Server srl 5048; computed min_cf=6, Server se: C8
Nov 08 10:03:55.473538 check[72507]: [ 8] Computed supported_engines: 4
8
Nov 08 10:03:55.473725 check[72507]: [ 8] mail 1.0 e4 sig:
DXc-2nXPD705qwuy78OtNOq1FcwA
Nov 08 10:03:55.473930 check[72507]: [ 5] mail 1.0 e8 got no sig
Nov 08 10:03:55.474090 check[72507]: [ 8] preparing 1 queries
Nov 08 10:03:55.474316 check[72507]: [ 8] sending 1 batches
Nov 08 10:03:55.474558 check[72507]: [ 4] pride.cloudmark.com << 52
Nov 08 10:03:55.474643 check[72507]: [ 6]
a=c&e=4&ep4=7542-10&s=DXc-2nXPD705qwuy78OtNOq1FcwA
Nov 08 10:03:55.691226 check[72507]: [ 4] pride.cloudmark.com >> 10
Nov 08 10:03:55.691365 check[72507]: [ 6] response to sent.11
p=0&ct=1
Nov 08 10:03:55.691788 check[72507]: [ 6] mail 1.0 e=4
sig=DXc-2nXPD705qwuy78OtNOq1FcwA: sig not found.
Nov 08 10:03:55.691911 check[72507]: [ 7] method 4: mail 1.0:
contention part, skipping
Nov 08 10:03:55.691995 check[72507]: [ 7] method 4: mail 1: all
non-contention parts not spam, mail not spam
Nov 08 10:03:55.692076 check[72507]: [ 3] mail 1 is not known spam.
Nov 08 10:03:55.692161 check[72507]: [ 5] disconnecting from server
pride.cloudmark.com
Nov 08 10:03:55.692397 check[72507]: [ 4] pride.cloudmark.com << 5
Nov 08 10:03:55.692476 check[72507]: [ 6] a=q
debug: Using results from Razor v2.61
debug: Found Razor2 part: part=0 engine=4 ct=1 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: running raw-body-text per-line regexp tests; score so far=0.12
debug: running full-text regexp tests; score so far=0.12
debug: Razor2 is available
debug: Pyzor is not available: pyzor not found
debug: DCCifd is not available: no r/w dccifd socket found.
debug: DCC is not available: no executable dccproc found.
debug: Running tests for priority: 500
debug: RBL: success for 36 of 36 queries
debug: running meta tests; score so far=0.12
debug: running header regexp tests; score so far=1.346
debug: running body-text per-line regexp tests; score so far=1.346
debug: running uri tests; score so far=1.346
debug: running raw-body-text per-line regexp tests; score so far=1.346
debug: running full-text regexp tests; score so far=1.346
debug: Running tests for priority: 1000
debug: running meta tests; score so far=1.346
debug: running header regexp tests; score so far=1.346
debug: running body-text per-line regexp tests; score so far=1.346
debug: running uri tests; score so far=1.346
debug: running raw-body-text per-line regexp tests; score so far=1.346
debug: running full-text regexp tests; score so far=1.346
debug: auto-learn: currently using scoreset 3, recomputing score based
on scoreset 1.
debug: auto-learn: message score: 1.346, computed score for autolearn:
1.57
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0,
learned-points=0.001
debug: auto-learn? no: inside auto-learn thresholds, not considered ham
or spam
debug: is spam? score=1.346 required=5
debug: tests=BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
debug: subtests=
logmsg: clean message (1.3/5.0) for jason.lixfeld.ca:0 in 4.3 seconds,
420 bytes.
logmsg: result: . 1 - BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
scantime=4.3,size=420,mid=(unknown),bayes=0.487796634412826,autolearn=no
Header for message is here:
From: foobeats@gmail.com
Date: November 8, 2004 10:03:55 AM EST
Return-Path: <fo...@gmail.com>
Envelope-To: jason.lixfeld.ca-at-eshara.ebit.ca
Delivery-Date: Mon, 08 Nov 2004 10:03:55 -0500
Received: from mailnull by eshara.ebit.ca with spamassassin-scanned
(Exim 4.43 (FreeBSD)) id 1CRB3f-000Isg-GW for
jason.lixfeld.ca-at-eshara.ebit.ca; Mon, 08 Nov 2004 10:03:55 -0500
Received: from trek.lixfeld.ca ([216.7.194.254] helo=foo.com) by
eshara.ebit.ca with smtp (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y for
jason-at-lixfeld.ca; Mon, 08 Nov 2004 10:03:51 -0500
X-First-Run-Spamcheck: Checked on SMTP Transfer
X-First-Run-Spamscore: 1.3
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
eshara.ebit.ca
X-Spam-Level: *
X-Spam-Status: No, score=1.3 required=5.0
tests=BAYES_50,MISSING_HEADERS, MISSING_SUBJECT autolearn=no
version=3.0.1
Message-Id: <E1...@eshara.ebit.ca>
X-Sa-Exim-Connect-Ip: <locally generated>
X-Sa-Exim-Mail-From: foobeats@gmail.com
X-Sa-Exim-Scanned: No (on eshara.ebit.ca); SAEximRunCond expanded to
false
Exim Router & Transport:
spam_check:
debug_print = "R: spamassasssin_router for $local_part@$domain"
driver = accept
no_verify
check_local_user
condition = "${if and
{{!def:h_X-Spam-Status:}{!eq{$received_protocol}{spamassassin-
scanned}}}{1}{0}}"
transport = spam_kill
...
spam_kill:
debug_print = "T: spamassassin_transport for $local_part@$domain"
driver = pipe
command = /usr/local/sbin/exim -oMr spamassassin-scanned -bS
use_bsmtp = true
transport_filter = /usr/local/bin/spamc -d 127.0.0.1 -u $local_part
home_directory = "/tmp"
current_directory = "/tmp"
user = mailnull
group = mailnull
log_output = true
return_fail_output = true
return_path_add = false
.cf:
# local.cf
# This is the right place to customize your installation of
SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
########################################################################
###
rewrite_header Subject **** Possible SPAM (_SCORE_) ****
ok_languages en fr de
ok_locales en
# sql.cf
user_scores_dsn DBI:mysql:spamassassin:localhost:3306
user_scores_sql_username ****
user_scores_sql_password ****
user_scores_sql_custom_query SELECT preference, value FROM _TABLE_
WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username =
CONCAT('%',_DOMAIN_) ORDER BY username DESC
Re: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]
Posted by Michael Parker <pa...@pobox.com>.
On Tue, Nov 09, 2004 at 01:43:36AM -0500, Jason Lixfeld wrote:
> Figured it out.
>
> It seems that SA doesn't apply whitelist scores unless the rest of the
> scores add up to be greater than the score required to trigger
> X-Spam-Status: Yes.
>
> This seems to be a rather odd methodology. What's the rationale behind
> not taking into consideration whitelist scores regardless of the spam
> score?
>
Hmmm....this doesn't seem right. Can you show us how you figure that?
I haven't really looked at the code but it's just another rule/score
and I don't believe it has that sort of smarts.
Michael
--
ApacheCon November 13-17 2004 http://www.apachecon.com/
See three SpamAssassin sessions & more
Birds of a Feather Session: November 16th, 9-10pm
Re: (UN)SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]
Posted by Jason Lixfeld <ja...@lixfeld.ca>.
Ok, looks like this is still an issue... Mail from MAILER-DAEMON was
getting tagged because it was a bounce back as one of my addresses
spoofed by a bad guy... Here's the header from the message that got
tagged:
*NOTE: Headers, etc below sanitized via s/"@"/-at-/g.
From: MAILER-DAEMON-at-ebit.ca
Subject: **** Possible SPAM (10.8) **** Undelivered Mail Returned to
Sender
Date: November 11, 2004 6:46:47 PM EST
To: hi-t-at-synchrosounds.com
Return-Path: <>
Envelope-To: jason.lixfeld.ca-at-eshara.ebit.ca
Delivery-Date: Thu, 11 Nov 2004 18:46:56 -0500
Received: from mailnull by eshara.ebit.ca with spamassassin-scanned
(Exim 4.43 (FreeBSD)) id 1CSOeS-0000GK-1X for
jason.lixfeld.ca-at-eshara.ebit.ca; Thu, 11 Nov 2004 18:46:56 -0500
Received: from localhost by eshara.ebit.ca with SpamAssassin (version
3.0.1); Thu, 11 Nov 2004 18:46:56 -0500
Received: from ebit.ca ([207.136.103.131] helo=mail.ebit.ca) by
eshara.ebit.ca with esmtp (Exim 4.43 (FreeBSD)) id 1CSOeN-0000GH-Af for
jason-at-lixfeld.ca; Thu, 11 Nov 2004 18:46:51 -0500
Received: by mail.ebit.ca (Postfix) id 1C4E23C80A8; Thu, 11 Nov 2004
18:46:47 -0500 (EST)
Message-Id: <20041111234647.1C4E23C80A8-at-mail.ebit.ca>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
eshara.ebit.ca
X-Spam-Level: **********
X-Spam-Status: Yes, score=10.8 required=5.0
tests=AWL,BAYES_99,DRUGS_SLEEP,
HTML_80_90,HTML_MESSAGE,HTML_NONELEMENT_00_10,MIME_CHARSET_FARAWAY,
MIME_HTML_MOSTLY,MPART_ALT_DIFF,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,
URIBL_WS_SURBL,URI_REDIRECTOR autolearn=no version=3.0.1
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="----------=_4193F9F0.AFB6C167"
X-Sa-Exim-Connect-Ip: <locally generated>
X-Sa-Exim-Mail-From:
X-Sa-Exim-Scanned: No (on eshara.ebit.ca); SAEximRunCond expanded to
false
So I try to white-list MAILER-DAEMON-at-ebit.ca in SQL:
mysql> insert into userpref (username,preference,value) VALUES
("$GLOBAL","whitelist_from","MAILER-DAEMON-at-ebit.ca");
Query OK, 1 row affected (0.02 sec)
mysql> select * from userpref;
+------------------+-------------------------+-----------------------
+--------+
| username | preference | value |
prefid |
+------------------+-------------------------+-----------------------
+--------+
| $GLOBAL | whitelist_from | MAILER-DAEMON-at-ebit.ca
| 37 |
| $GLOBAL | whitelist_from | jakbeatz-at-gmail.com
| 36 |
| jason.lixfeld.ca | whitelist_from | jakbeatz-at-gmail.com
| 35 |
| $GLOBAL | score USER_IN_BLACKLIST | 10 |
24 |
| $GLOBAL | score USER_IN_WHITELIST | -10 |
23 |
+------------------+-------------------------+-----------------------
+--------+
5 rows in set (0.00 sec)
mysql>
So I sent a test message but whitelist whitelist isn't fired:
From: MAILER-DAEMON-at-ebit.ca
Date: November 12, 2004 12:19:41 AM EST
Return-Path: <MAILER-DAEMON-at-ebit.ca>
Envelope-To: jason.lixfeld.ca-at-eshara.ebit.ca
Delivery-Date: Fri, 12 Nov 2004 00:19:41 -0500
Received: from mailnull by eshara.ebit.ca with spamassassin-scanned
(Exim 4.43 (FreeBSD)) id 1CSTqW-0000h4-1x for
jason.lixfeld.ca-at-eshara.ebit.ca; Fri, 12 Nov 2004 00:19:41 -0500
Received: from trek.lixfeld.ca ([216.7.194.254] helo=foo.com) by
eshara.ebit.ca with smtp (Exim 4.43 (FreeBSD)) id 1CSTqR-0000h0-O8 for
jason-at-lixfeld.ca; Fri, 12 Nov 2004 00:19:39 -0500
X-First-Run-Spamcheck: Checked on SMTP Transfer
X-First-Run-Spamscore: 0.2
X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
eshara.ebit.ca
X-Spam-Level:
X-Spam-Status: No, score=-0.6 required=5.0
tests=BAYES_20,MISSING_HEADERS, MISSING_SUBJECT autolearn=no
version=3.0.1
Message-Id: <E1CSTqW-0000h4-1x-at-eshara.ebit.ca>
X-Sa-Exim-Connect-Ip: <locally generated>
X-Sa-Exim-Mail-From: MAILER-DAEMON-at-ebit.ca
X-Sa-Exim-Scanned: No (on eshara.ebit.ca); SAEximRunCond expanded to
false
Nov 12 00:19:40 eshara spamd[2631]: connection from localhost
[127.0.0.1] at port 55576
Nov 12 00:19:40 eshara spamd[2631]: processing message (unknown) for
jason.lixfeld.ca:0.
Nov 12 00:19:41 eshara spamd[2631]: clean message (-0.6/5.0) for
jason.lixfeld.ca:0 in 1.2 seconds, 428 bytes.
Nov 12 00:19:41 eshara spamd[2631]: result: . 0 -
BAYES_20,MISSING_HEADERS,MISSING_SUBJECT
scantime=1.2,size=428,mid=(unknown),bayes=0.14535404453241,autolearn=no
On 9-Nov-04, at 4:42 PM, Jason Lixfeld wrote:
> Odd. I tested it again just now and it worked fine, even though the
> message was not scored > 5.0. It wasn't working yesterday. I must
> have done something to fix it in the meantime.
>
> Sorry for the confusion.
>
> On 9-Nov-04, at 11:29 AM, Noel K Hall II wrote:
>
>> That's definitely not the case with our systems:
>>
>> ----example----
>> X-Spam-Level:
>> X-Spam-Status: No, score=-105.9 required=7.0
>> tests=ALL_TRUSTED,BAYES_00,
>> HTML_MESSAGE,USER_IN_WHITELIST autolearn=ham
>> version=3.0.1-prforsa3.0.0
>> ----end ex----
>>
>> Something seems a bit fishy there.
>>
>>
>> -----Original Message-----
>> From: Jason Lixfeld [mailto:jason+lists.spamassassin-at-lixfeld.ca]
>> Sent: Tuesday, November 09, 2004 1:44 AM
>> To: users-at-spamassassin.apache.org
>> Subject: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1
>> & Exim
>> 4.43)]
>>
>> Figured it out.
>>
>> It seems that SA doesn't apply whitelist scores unless the rest of the
>> scores add up to be greater than the score required to trigger
>> X-Spam-Status: Yes.
>>
>> This seems to be a rather odd methodology. What's the rationale
>> behind not
>> taking into consideration whitelist scores regardless of the spam
>> score?
>>
>> On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:
>>
>>> I've got a whitelist_from in my SQL DB which Spamassassin is supposed
>>> to read in. When I do a debug of spamd, I can see the connection to
>>> the DB as the user, but the whitelist_from doesn't seem to be getting
>>> applied to the message:
>>>
>>> mysql> select * from spamassassin.userpref;
>>> +------------------+-------------------------+--------------------
>>> +--------+
>>> | username | preference | value |
>>> prefid |
>>> +------------------+-------------------------+--------------------
>>> +--------+
>>> | $GLOBAL | whitelist_from | foobeats-at-gmail.com
>>> |
>>> 36 |
>>> | jason.lixfeld.ca | whitelist_from | foobeats-at-gmail.com
>>> |
>>> 35 |
>>> | $GLOBAL | score USER_IN_WHITELIST | -10 |
>>> 23 |
>>> +------------------+-------------------------+--------------------
>>> +--------+
>>> 4 rows in set (0.00 sec)
>>>
>>> Below is the output of spamd in debug mode. Spamd is called twice
>>> for
>>> this message. First to obtain the $spam_score and $spam_score_int
>>> for data checking:
>>
>>
>
Re: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]
Posted by Jason Lixfeld <ja...@lixfeld.ca>.
Odd. I tested it again just now and it worked fine, even though the
message was not scored > 5.0. It wasn't working yesterday. I must
have done something to fix it in the meantime.
Sorry for the confusion.
On 9-Nov-04, at 11:29 AM, Noel K Hall II wrote:
> That's definitely not the case with our systems:
>
> ----example----
> X-Spam-Level:
> X-Spam-Status: No, score=-105.9 required=7.0
> tests=ALL_TRUSTED,BAYES_00,
> HTML_MESSAGE,USER_IN_WHITELIST autolearn=ham
> version=3.0.1-prforsa3.0.0
> ----end ex----
>
> Something seems a bit fishy there.
>
>
> -----Original Message-----
> From: Jason Lixfeld [mailto:jason+lists.spamassassin@lixfeld.ca]
> Sent: Tuesday, November 09, 2004 1:44 AM
> To: users@spamassassin.apache.org
> Subject: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 &
> Exim
> 4.43)]
>
> Figured it out.
>
> It seems that SA doesn't apply whitelist scores unless the rest of the
> scores add up to be greater than the score required to trigger
> X-Spam-Status: Yes.
>
> This seems to be a rather odd methodology. What's the rationale
> behind not
> taking into consideration whitelist scores regardless of the spam
> score?
>
> On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:
>
>> I've got a whitelist_from in my SQL DB which Spamassassin is supposed
>> to read in. When I do a debug of spamd, I can see the connection to
>> the DB as the user, but the whitelist_from doesn't seem to be getting
>> applied to the message:
>>
>> mysql> select * from spamassassin.userpref;
>> +------------------+-------------------------+--------------------
>> +--------+
>> | username | preference | value |
>> prefid |
>> +------------------+-------------------------+--------------------
>> +--------+
>> | $GLOBAL | whitelist_from | foobeats@gmail.com |
>> 36 |
>> | jason.lixfeld.ca | whitelist_from | foobeats@gmail.com |
>> 35 |
>> | $GLOBAL | score USER_IN_WHITELIST | -10 |
>> 23 |
>> +------------------+-------------------------+--------------------
>> +--------+
>> 4 rows in set (0.00 sec)
>>
>> Below is the output of spamd in debug mode. Spamd is called twice for
>> this message. First to obtain the $spam_score and $spam_score_int
>> for data checking:
>
>
RE: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]
Posted by Noel K Hall II <no...@physicianrecruiting.com>.
That's definitely not the case with our systems:
----example----
X-Spam-Level:
X-Spam-Status: No, score=-105.9 required=7.0 tests=ALL_TRUSTED,BAYES_00,
HTML_MESSAGE,USER_IN_WHITELIST autolearn=ham
version=3.0.1-prforsa3.0.0
----end ex----
Something seems a bit fishy there.
-----Original Message-----
From: Jason Lixfeld [mailto:jason+lists.spamassassin@lixfeld.ca]
Sent: Tuesday, November 09, 2004 1:44 AM
To: users@spamassassin.apache.org
Subject: SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim
4.43)]
Figured it out.
It seems that SA doesn't apply whitelist scores unless the rest of the
scores add up to be greater than the score required to trigger
X-Spam-Status: Yes.
This seems to be a rather odd methodology. What's the rationale behind not
taking into consideration whitelist scores regardless of the spam score?
On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:
> I've got a whitelist_from in my SQL DB which Spamassassin is supposed
> to read in. When I do a debug of spamd, I can see the connection to
> the DB as the user, but the whitelist_from doesn't seem to be getting
> applied to the message:
>
> mysql> select * from spamassassin.userpref;
> +------------------+-------------------------+--------------------
> +--------+
> | username | preference | value |
> prefid |
> +------------------+-------------------------+--------------------
> +--------+
> | $GLOBAL | whitelist_from | foobeats@gmail.com |
> 36 |
> | jason.lixfeld.ca | whitelist_from | foobeats@gmail.com |
> 35 |
> | $GLOBAL | score USER_IN_WHITELIST | -10 |
> 23 |
> +------------------+-------------------------+--------------------
> +--------+
> 4 rows in set (0.00 sec)
>
> Below is the output of spamd in debug mode. Spamd is called twice for
> this message. First to obtain the $spam_score and $spam_score_int
> for data checking:
SOLVED [Re: Reading, but not loading SQL userprefs (SA3.0.1 & Exim 4.43)]
Posted by Jason Lixfeld <ja...@lixfeld.ca>.
Figured it out.
It seems that SA doesn't apply whitelist scores unless the rest of the
scores add up to be greater than the score required to trigger
X-Spam-Status: Yes.
This seems to be a rather odd methodology. What's the rationale behind
not taking into consideration whitelist scores regardless of the spam
score?
On 8-Nov-04, at 10:28 AM, Jason Lixfeld wrote:
> I've got a whitelist_from in my SQL DB which Spamassassin is supposed
> to read in. When I do a debug of spamd, I can see the connection to
> the DB as the user, but the whitelist_from doesn't seem to be getting
> applied to the message:
>
> mysql> select * from spamassassin.userpref;
> +------------------+-------------------------+--------------------
> +--------+
> | username | preference | value |
> prefid |
> +------------------+-------------------------+--------------------
> +--------+
> | $GLOBAL | whitelist_from | foobeats@gmail.com |
> 36 |
> | jason.lixfeld.ca | whitelist_from | foobeats@gmail.com |
> 35 |
> | $GLOBAL | score USER_IN_WHITELIST | -10 |
> 23 |
> +------------------+-------------------------+--------------------
> +--------+
> 4 rows in set (0.00 sec)
>
> Below is the output of spamd in debug mode. Spamd is called twice for
> this message. First to obtain the $spam_score and $spam_score_int
> for data checking:
>
> acl_check_data:
>
> warn message = X-First-Run-SpamCheck: Checked on SMTP Transfer
> spam = nobody:true
>
> warn message = X-First-Run-SpamScore: $spam_score
> spam = nobody:true
>
> warn message = X-First-Run-is-Spam: Yes
> spam = nobody
>
> deny message = This message scored $spam_score spam points.
> spam = nobody:true
> condition = ${if >{$spam_score_int}{150}{1}{0}}
>
> accept
>
> Next, the message is passed to the spamassassin router and transport
> where spamd is called as the user to get the userpref. Looking at how
> things are setup, can anyone see what's going on here?
>
> Debug, headers and .cf are below:
>
> (NOTE: Email addresses in debug logs have been sanitized)
>
> logmsg: connection from localhost [127.0.0.1] at port 64061
> debug: Conf::SQL: executing SQL: SELECT preference, value FROM
> userpref WHERE username = 'nobody' OR username = '$GLOBAL' OR username
> = CONCAT('%',NULL) ORDER BY username DESC
> debug: retrieving prefs for nobody from SQL server
> debug: user has changed
> debug: bayes: Using username: spamassassin
> debug: bayes: Database connection established
> debug: bayes: found bayes db version 3
> debug: bayes: Using userid: 1
> debug: Score set 3 chosen.
> logmsg: checking message (unknown) for nobody:0.
> debug: received-header: parsed as [ ip=216.7.194.254
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: received-header: 'by' eshara.ebit.ca has public IP 69.90.17.218
> debug: received-header: relay 216.7.194.254 trusted? no internal? no
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted: [ ip=216.7.194.254
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: ---- MIME PARSER START ----
> debug: main message type: text/plain
> debug: parsing normal part
> debug: added part, type: text/plain
> debug: ---- MIME PARSER END ----
> debug: decoding: no encoding detected
> debug: Message too short for language analysis
> debug: URIDNSBL: domains to query:
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: all '*From' addrs:
> debug: Running tests for priority: 0
> debug: running header regexp tests; score so far=0
> debug: SPF: checking HELO (helo=foo.com, ip=216.7.194.254)
> debug: SPF: trimmed HELO down to 'foo.com'
> debug: SPF: cannot load or create Mail::SPF::Query module
> debug: all '*To' addrs: jason-at-lixfeld.ca
> debug: SPF: cannot get Envelope-From, cannot use SPF
> debug: forged-HELO: from=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca
> debug: forged-HELO: mismatch on HELO: 'foo.com' != 'trek.lixfeld.ca'
> debug: running body-text per-line regexp tests; score so far=0.119
> debug: running uri tests; score so far=0.119
> debug: bayes corpus size: nspam = 4604, nham = 299
> debug: tokenize: header tokens for *RT = " "
> debug: tokenize: header tokens for *RU = " [ ip=216.7.194.254
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
> intl=0 id=1CRB3W-000Isd-1y ]"
> debug: tokenize: header tokens for *r = " trek.lixfeld.ca
> ([216.7.194 ip*216.7.194.254 ] helo=foo.com) by eshara.ebit.ca smtp
> (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y jason-at-lixfeld.ca; "
> debug: bayes: tok_get_all: Token Count: 23
> debug: bayes token 'foo' => 0.0173548387096774
> debug: bayes token 'H*RU:foo.com' => 0.978
> debug: bayes token 'H*r:sk:jason@l' => 0.967934668617371
> debug: bayes token 'H*r:foo.com' => 0.0512342735845206
> debug: bayes token 'H*r:eshara.ebit.ca' => 0.867296640246297
> debug: bayes token 'H*r:FreeBSD' => 0.853297353802955
> debug: bayes: score = 0.514928182534538
> debug: Razor2 is available
> debug: entering helper-app run mode
> Razor-Log: Computed razorhome from env: /usr/home/jlixfeld/.razor
> Razor-Log: No razorhome found, using all defaults
> Razor-Log: No razor-agent.conf found, using defaults.
> Nov 08 10:03:43.987772 check[72506]: [ 2] [bootup] Logging initiated
> LogDebugLevel=9 to stdout
> Nov 08 10:03:43.988034 check[72506]: [ 5] computed razorhome=, conf=,
> ident=identity
> Nov 08 10:03:43.988230 check[72506]: [ 8] Client supported_engines: 4 8
> Nov 08 10:03:43.988595 check[72506]: [ 8] prep_mail done: mail 1
> headers=189, mime0=40
> Nov 08 10:03:43.988814 check[72506]: [ 7] Can't read file
> servers.discovery.lst, looking relatve to
> Nov 08 10:03:43.988967 check[72506]: [ 5] Can't read file
> /servers.discovery.lst: No such file or directory
> Nov 08 10:03:43.989110 check[72506]: [ 7] Can't read file
> servers.nomination.lst, looking relatve to
> Nov 08 10:03:43.989249 check[72506]: [ 5] Can't read file
> /servers.nomination.lst: No such file or directory
> Nov 08 10:03:43.989391 check[72506]: [ 7] Can't read file
> servers.catalogue.lst, looking relatve to
> Nov 08 10:03:43.989530 check[72506]: [ 5] Can't read file
> /servers.catalogue.lst: No such file or directory
> Nov 08 10:03:43.989744 check[72506]: [ 5] no listfile:
> servers.catalogue.lst
> Nov 08 10:03:43.989900 check[72506]: [ 6] no discovery listfile:
> servers.discovery.lst
> Nov 08 10:03:43.990025 check[72506]: [ 5] Finding Discovery Servers
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:43.995052 check[72506]: [ 6] Found 1 Discovery Servers
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:43.995316 check[72506]: [ 8] Checking with Razor
> Discovery Server 66.151.150.12
> Nov 08 10:03:43.995477 check[72506]: [ 6] No port specified, using 2703
> Nov 08 10:03:43.995601 check[72506]: [ 5] Connecting to 66.151.150.12
> ...
> Nov 08 10:03:44.112375 check[72506]: [ 8] Connection established
> Nov 08 10:03:44.112583 check[72506]: [ 4] 66.151.150.12 >> 35 server
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:44.112918 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:44.113047 check[72506]: [ 6] a=g&pm=csl
> Nov 08 10:03:44.173544 check[72506]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:44.173682 check[72506]: [ 6] response to sent.1
> -csl=?
> pride.cloudmark.com
> wonder.cloudmark.com
> thrill.cloudmark.com
> .
> Nov 08 10:03:44.174122 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:44.174283 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:44.174430 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:44.174753 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:44.174894 check[72506]: [ 6] a=g&pm=nsl
> Nov 08 10:03:44.234387 check[72506]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:44.234524 check[72506]: [ 6] response to sent.2
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:44.234799 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:44.234883 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:44.235067 check[72506]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:44.235205 check[72506]: [ 6] losing old server
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:44.235290 check[72506]: [ 5] disconnecting from server
> 66.151.150.12
> Nov 08 10:03:44.235536 check[72506]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:44.235612 check[72506]: [ 6] a=q
> Nov 08 10:03:44.235824 check[72506]: [ 5] Connecting to
> pride.cloudmark.com ...
> Nov 08 10:03:44.352546 check[72506]: [ 8] Connection established
> Nov 08 10:03:44.352772 check[72506]: [ 4] pride.cloudmark.com >> 36
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:44.353241 check[72506]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:44.353370 check[72506]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:44.353720 check[72506]: [ 4] pride.cloudmark.com << 14
> Nov 08 10:03:44.353848 check[72506]: [ 6] a=g&pm=state
> Nov 08 10:03:44.471194 check[72506]: [ 4] pride.cloudmark.com >> 141
> Nov 08 10:03:44.471330 check[72506]: [ 6] response to sent.5
> -sv=3.44
> sn=C
> zone=razor2.cloudmark.com
> ac=6
> srl=5048
> lm=4
> bql=50
> bqs=129
> dre=4
> se=C8
> srf=FF
> ep4=7542-10
> ep8=5
> pp=1
> crt=90
> .
> Nov 08 10:03:44.472048 check[72506]: [ 5] Updated to new server state
> srl 5048 for server pride.cloudmark.com
> Nov 08 10:03:44.472198 check[72506]: [ 6] pride.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:44.472381 check[72506]: [ 8] Computed supported_engines:
> 4 8
> Nov 08 10:03:44.472473 check[72506]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:44.472547 check[72506]: [ 5] srl was updated, forcing
> discovery ...
> Nov 08 10:03:44.472665 check[72506]: [ 5] no listfile:
> servers.catalogue.lst
> Nov 08 10:03:44.472765 check[72506]: [ 8] already have 1 discovery
> servers
> Nov 08 10:03:44.472853 check[72506]: [ 8] Checking with Razor
> Discovery Server 66.151.150.12
> Nov 08 10:03:44.472951 check[72506]: [ 6] losing old server
> connection, pride.cloudmark.com, for new server, 66.151.150.12
> Nov 08 10:03:44.473029 check[72506]: [ 5] disconnecting from server
> pride.cloudmark.com
> Nov 08 10:03:44.473264 check[72506]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:44.473341 check[72506]: [ 6] a=q
> Nov 08 10:03:44.473451 check[72506]: [ 5] Connecting to 66.151.150.12
> ...
> Nov 08 10:03:50.788684 check[72506]: [ 8] Connection established
> Nov 08 10:03:50.788961 check[72506]: [ 4] 66.151.150.12 >> 35 server
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:50.789312 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:50.789458 check[72506]: [ 6] a=g&pm=csl
> Nov 08 10:03:50.849830 check[72506]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:50.849970 check[72506]: [ 6] response to sent.7
> -csl=?
> wonder.cloudmark.com
> pride.cloudmark.com
> thrill.cloudmark.com
> .
> Nov 08 10:03:50.850273 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:50.850361 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:50.850443 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:50.850687 check[72506]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:50.850766 check[72506]: [ 6] a=g&pm=nsl
> Nov 08 10:03:50.910458 check[72506]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:50.910667 check[72506]: [ 6] response to sent.8
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:50.910970 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:50.911057 check[72506]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:50.911253 check[72506]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:50.911425 check[72506]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:50.911519 check[72506]: [ 8] Using next closest server
> pride.cloudmark.com:2703, cached info srl 5048
> Nov 08 10:03:50.911634 check[72506]: [ 8] mail 1 has no subject
> Nov 08 10:03:50.911899 check[72506]: [ 6] preproc: mail 1.0 went from
> 40 bytes to 3
> Nov 08 10:03:50.912021 check[72506]: [ 6] computing sigs for mail 1.0,
> len 3
> Nov 08 10:03:50.913408 check[72506]: [ 6] Engine (8) didn't produce a
> signature for mail 1.0
> Nov 08 10:03:50.913567 check[72506]: [ 6] skipping whitelist file
> (empty?): razor-whitelist
> Nov 08 10:03:50.913675 check[72506]: [ 6] losing old server
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:50.913758 check[72506]: [ 5] disconnecting from server
> 66.151.150.12
> Nov 08 10:03:50.914005 check[72506]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:50.914084 check[72506]: [ 6] a=q
> Nov 08 10:03:50.914344 check[72506]: [ 5] Connecting to
> pride.cloudmark.com ...
> Nov 08 10:03:51.031322 check[72506]: [ 8] Connection established
> Nov 08 10:03:51.031544 check[72506]: [ 4] pride.cloudmark.com >> 36
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:51.032022 check[72506]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:51.032155 check[72506]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:51.032441 check[72506]: [ 6] pride.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:51.032659 check[72506]: [ 8] Computed supported_engines:
> 4 8
> Nov 08 10:03:51.032796 check[72506]: [ 8] mail 1.0 e4 sig:
> DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:51.032921 check[72506]: [ 5] mail 1.0 e8 got no sig
> Nov 08 10:03:51.033028 check[72506]: [ 8] preparing 1 queries
> Nov 08 10:03:51.033202 check[72506]: [ 8] sending 1 batches
> Nov 08 10:03:51.033446 check[72506]: [ 4] pride.cloudmark.com << 52
> Nov 08 10:03:51.033530 check[72506]: [ 6]
> a=c&e=4&ep4=7542-10&s=DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:51.346837 check[72506]: [ 4] pride.cloudmark.com >> 10
> Nov 08 10:03:51.346979 check[72506]: [ 6] response to sent.11
> p=0&ct=1
> Nov 08 10:03:51.347409 check[72506]: [ 6] mail 1.0 e=4
> sig=DXc-2nXPD705qwuy78OtNOq1FcwA: sig not found.
> Nov 08 10:03:51.347569 check[72506]: [ 7] method 4: mail 1.0:
> contention part, skipping
> Nov 08 10:03:51.347716 check[72506]: [ 7] method 4: mail 1: all
> non-contention parts not spam, mail not spam
> Nov 08 10:03:51.347865 check[72506]: [ 3] mail 1 is not known spam.
> Nov 08 10:03:51.348028 check[72506]: [ 5] disconnecting from server
> pride.cloudmark.com
> Nov 08 10:03:51.348336 check[72506]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:51.348478 check[72506]: [ 6] a=q
> debug: Using results from Razor v2.61
> debug: Found Razor2 part: part=0 engine=4 ct=1 cf=0
> debug: leaving helper-app run mode
> debug: Razor2 results: spam? 0 highest cf score: 0
> debug: running raw-body-text per-line regexp tests; score so far=0.12
> debug: running full-text regexp tests; score so far=0.12
> debug: Razor2 is available
> debug: Pyzor is not available: pyzor not found
> debug: DCCifd is not available: no r/w dccifd socket found.
> debug: DCC is not available: no executable dccproc found.
> debug: Running tests for priority: 500
> debug: RBL: success for 36 of 36 queries
> debug: running meta tests; score so far=0.12
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: Running tests for priority: 1000
> debug: running meta tests; score so far=1.346
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: auto-learn: currently using scoreset 3, recomputing score based
> on scoreset 1.
> debug: auto-learn: message score: 1.346, computed score for autolearn:
> 1.57
> debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0,
> learned-points=0.001
> debug: auto-learn? no: inside auto-learn thresholds, not considered
> ham or spam
> debug: is spam? score=1.346 required=5
> debug: tests=BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
> debug: subtests=
> logmsg: clean message (1.3/5.0) for nobody:0 in 7.5 seconds, 194 bytes.
> logmsg: result: . 1 - BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
> scantime=7.5,size=194,mid=(unknown),bayes=0.514928182534538,autolearn=n
> o
> logmsg: connection from localhost [127.0.0.1] at port 64068
> debug: Conf::SQL: executing SQL: SELECT preference, value FROM
> userpref WHERE username = 'jason.lixfeld.ca' OR username = '$GLOBAL'
> OR username = CONCAT('%',NULL) ORDER BY username DESC
> debug: retrieving prefs for jason.lixfeld.ca from SQL server
> debug: user has changed
> debug: bayes: Using username: spamassassin
> debug: bayes: Database connection established
> debug: bayes: found bayes db version 3
> debug: bayes: Using userid: 1
> debug: Score set 3 chosen.
> logmsg: processing message (unknown) for jason.lixfeld.ca:0.
> debug: received-header: parsed as [ ip=216.7.194.254
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: looking up A records for 'eshara.ebit.ca'
> debug: A records for 'eshara.ebit.ca': 69.90.17.218
> debug: received-header: 'by' eshara.ebit.ca has public IP 69.90.17.218
> debug: received-header: relay 216.7.194.254 trusted? no internal? no
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted: [ ip=216.7.194.254
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
> intl=0 id=1CRB3W-000Isd-1y ]
> debug: ---- MIME PARSER START ----
> debug: main message type: text/plain
> debug: parsing normal part
> debug: added part, type: text/plain
> debug: ---- MIME PARSER END ----
> debug: decoding: no encoding detected
> debug: Message too short for language analysis
> debug: URIDNSBL: domains to query:
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: all '*From' addrs:
> debug: Running tests for priority: 0
> debug: running header regexp tests; score so far=0
> debug: SPF: checking HELO (helo=foo.com, ip=216.7.194.254)
> debug: SPF: trimmed HELO down to 'foo.com'
> debug: SPF: cannot load or create Mail::SPF::Query module
> debug: all '*To' addrs: jason-at-lixfeld.ca
> debug: SPF: cannot get Envelope-From, cannot use SPF
> debug: forged-HELO: from=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca
> debug: forged-HELO: mismatch on HELO: 'foo.com' != 'trek.lixfeld.ca'
> debug: running body-text per-line regexp tests; score so far=0.119
> debug: running uri tests; score so far=0.119
> debug: bayes corpus size: nspam = 4604, nham = 299
> debug: tokenize: header tokens for X-First-Run-SpamCheck = " Checked
> on SMTP Transfer"
> debug: tokenize: header tokens for X-First-Run-SpamScore = " 1.3"
> debug: tokenize: header tokens for X-SA-Exim-Connect-IP = "
> 216.7.194.254"
> debug: tokenize: header tokens for X-SA-Exim-Mail-From = "
> foobeats@gmail.com"
> debug: tokenize: header tokens for X-SA-Exim-Scanned = " No (on
> eshara.ebit.ca); SAEximRunCond expanded to false"
> debug: tokenize: header tokens for *RT = " "
> debug: tokenize: header tokens for *RU = " [ ip=216.7.194.254
> rdns=trek.lixfeld.ca helo=foo.com by=eshara.ebit.ca ident= envfrom=
> intl=0 id=1CRB3W-000Isd-1y ]"
> debug: tokenize: header tokens for *r = " trek.lixfeld.ca
> ([216.7.194 ip*216.7.194.254 ] helo=foo.com) by eshara.ebit.ca smtp
> (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y jason-at-lixfeld.ca; "
> debug: bayes: tok_get_all: Token Count: 33
> debug: bayes token 'HX-First-Run-SpamScore:1.3' => 0.0131219512195122
> debug: bayes token 'foo' => 0.0173548387096774
> debug: bayes token 'HX-SA-Exim-Connect-IP:216.7.194.254' => 0.978
> debug: bayes token 'H*RU:foo.com' => 0.978
> debug: bayes token 'H*r:sk:jason@l' => 0.967934668617371
> debug: bayes token 'HX-SA-Exim-Mail-From:sk:jakbeat' =>
> 0.0489090909090909
> debug: bayes token 'H*r:foo.com' => 0.0512342735845206
> debug: bayes token 'H*r:eshara.ebit.ca' => 0.867296640246297
> debug: bayes token 'H*r:FreeBSD' => 0.853297353802955
> debug: bayes: score = 0.487796634412826
> debug: Razor2 is available
> debug: entering helper-app run mode
> Razor-Log: Computed razorhome from env: /usr/home/jlixfeld/.razor
> Razor-Log: No razorhome found, using all defaults
> Razor-Log: No razor-agent.conf found, using defaults.
> Nov 08 10:03:51.590277 check[72507]: [ 2] [bootup] Logging initiated
> LogDebugLevel=9 to stdout
> Nov 08 10:03:51.590563 check[72507]: [ 5] computed razorhome=, conf=,
> ident=identity
> Nov 08 10:03:51.590782 check[72507]: [ 8] Client supported_engines: 4 8
> Nov 08 10:03:51.591193 check[72507]: [ 8] prep_mail done: mail 1
> headers=415, mime0=40
> Nov 08 10:03:51.591433 check[72507]: [ 7] Can't read file
> servers.discovery.lst, looking relatve to
> Nov 08 10:03:51.591595 check[72507]: [ 5] Can't read file
> /servers.discovery.lst: No such file or directory
> Nov 08 10:03:51.591771 check[72507]: [ 7] Can't read file
> servers.nomination.lst, looking relatve to
> Nov 08 10:03:51.591931 check[72507]: [ 5] Can't read file
> /servers.nomination.lst: No such file or directory
> Nov 08 10:03:51.592099 check[72507]: [ 7] Can't read file
> servers.catalogue.lst, looking relatve to
> Nov 08 10:03:51.592256 check[72507]: [ 5] Can't read file
> /servers.catalogue.lst: No such file or directory
> Nov 08 10:03:51.592485 check[72507]: [ 5] no listfile:
> servers.catalogue.lst
> Nov 08 10:03:51.592668 check[72507]: [ 6] no discovery listfile:
> servers.discovery.lst
> Nov 08 10:03:51.592812 check[72507]: [ 5] Finding Discovery Servers
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:51.597627 check[72507]: [ 6] Found 1 Discovery Servers
> via DNS in the razor2.cloudmark.com zone
> Nov 08 10:03:51.597903 check[72507]: [ 8] Checking with Razor
> Discovery Server 66.151.150.12
> Nov 08 10:03:51.598103 check[72507]: [ 6] No port specified, using 2703
> Nov 08 10:03:51.598234 check[72507]: [ 5] Connecting to 66.151.150.12
> ...
> Nov 08 10:03:54.707718 check[72507]: [ 8] Connection established
> Nov 08 10:03:54.708009 check[72507]: [ 4] 66.151.150.12 >> 35 server
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:54.708368 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:54.708501 check[72507]: [ 6] a=g&pm=csl
> Nov 08 10:03:54.770328 check[72507]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:54.770468 check[72507]: [ 6] response to sent.1
> -csl=?
> thrill.cloudmark.com
> pride.cloudmark.com
> wonder.cloudmark.com
> .
> Nov 08 10:03:54.770915 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:54.771089 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:54.771239 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:54.771532 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:54.771655 check[72507]: [ 6] a=g&pm=nsl
> Nov 08 10:03:54.831172 check[72507]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:54.831303 check[72507]: [ 6] response to sent.2
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:54.831616 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:54.831748 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:54.831983 check[72507]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:54.832174 check[72507]: [ 6] losing old server
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:54.832308 check[72507]: [ 5] disconnecting from server
> 66.151.150.12
> Nov 08 10:03:54.832586 check[72507]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:54.832707 check[72507]: [ 6] a=q
> Nov 08 10:03:54.832866 check[72507]: [ 5] Connecting to
> pride.cloudmark.com ...
> Nov 08 10:03:54.949669 check[72507]: [ 8] Connection established
> Nov 08 10:03:54.950024 check[72507]: [ 4] pride.cloudmark.com >> 36
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:54.950522 check[72507]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:54.950656 check[72507]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:54.951006 check[72507]: [ 4] pride.cloudmark.com << 14
> Nov 08 10:03:54.951148 check[72507]: [ 6] a=g&pm=state
> Nov 08 10:03:55.108057 check[72507]: [ 4] pride.cloudmark.com >> 141
> Nov 08 10:03:55.108198 check[72507]: [ 6] response to sent.5
> -sv=3.44
> sn=C
> zone=razor2.cloudmark.com
> ac=6
> srl=5048
> lm=4
> bql=50
> bqs=129
> dre=4
> se=C8
> srf=FF
> ep4=7542-10
> ep8=5
> pp=1
> crt=90
> .
> Nov 08 10:03:55.109053 check[72507]: [ 5] Updated to new server state
> srl 5048 for server pride.cloudmark.com
> Nov 08 10:03:55.109207 check[72507]: [ 6] pride.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:55.109393 check[72507]: [ 8] Computed supported_engines:
> 4 8
> Nov 08 10:03:55.109489 check[72507]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:55.109566 check[72507]: [ 5] srl was updated, forcing
> discovery ...
> Nov 08 10:03:55.109692 check[72507]: [ 5] no listfile:
> servers.catalogue.lst
> Nov 08 10:03:55.109795 check[72507]: [ 8] already have 1 discovery
> servers
> Nov 08 10:03:55.109886 check[72507]: [ 8] Checking with Razor
> Discovery Server 66.151.150.12
> Nov 08 10:03:55.109990 check[72507]: [ 6] losing old server
> connection, pride.cloudmark.com, for new server, 66.151.150.12
> Nov 08 10:03:55.110072 check[72507]: [ 5] disconnecting from server
> pride.cloudmark.com
> Nov 08 10:03:55.110310 check[72507]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:55.110389 check[72507]: [ 6] a=q
> Nov 08 10:03:55.110517 check[72507]: [ 5] Connecting to 66.151.150.12
> ...
> Nov 08 10:03:55.227386 check[72507]: [ 8] Connection established
> Nov 08 10:03:55.227557 check[72507]: [ 4] 66.151.150.12 >> 35 server
> greeting: sn=D&srl=461&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:55.227901 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:55.228033 check[72507]: [ 6] a=g&pm=csl
> Nov 08 10:03:55.289276 check[72507]: [ 4] 66.151.150.12 >> 76
> Nov 08 10:03:55.289416 check[72507]: [ 6] response to sent.7
> -csl=?
> thrill.cloudmark.com
> wonder.cloudmark.com
> pride.cloudmark.com
> .
> Nov 08 10:03:55.289713 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=thrill.cloudmark.com
> Nov 08 10:03:55.289801 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=wonder.cloudmark.com
> Nov 08 10:03:55.289883 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with csl=pride.cloudmark.com
> Nov 08 10:03:55.290138 check[72507]: [ 4] 66.151.150.12 << 12
> Nov 08 10:03:55.290218 check[72507]: [ 6] a=g&pm=nsl
> Nov 08 10:03:55.351296 check[72507]: [ 4] 66.151.150.12 >> 51
> Nov 08 10:03:55.351434 check[72507]: [ 6] response to sent.8
> -nsl=?
> folly.cloudmark.com
> joy.cloudmark.com
> .
> Nov 08 10:03:55.351705 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=folly.cloudmark.com
> Nov 08 10:03:55.351791 check[72507]: [ 8] Discovery Server
> 66.151.150.12 replying with nsl=joy.cloudmark.com
> Nov 08 10:03:55.351976 check[72507]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:55.352124 check[72507]: [ 5] no razorhome, not caching
> server info to disk
> Nov 08 10:03:55.352216 check[72507]: [ 8] Using next closest server
> pride.cloudmark.com:2703, cached info srl 5048
> Nov 08 10:03:55.352326 check[72507]: [ 8] mail 1 has no subject
> Nov 08 10:03:55.352583 check[72507]: [ 6] preproc: mail 1.0 went from
> 40 bytes to 3
> Nov 08 10:03:55.352715 check[72507]: [ 6] computing sigs for mail 1.0,
> len 3
> Nov 08 10:03:55.354106 check[72507]: [ 6] Engine (8) didn't produce a
> signature for mail 1.0
> Nov 08 10:03:55.354268 check[72507]: [ 6] skipping whitelist file
> (empty?): razor-whitelist
> Nov 08 10:03:55.354374 check[72507]: [ 6] losing old server
> connection, 66.151.150.12, for new server, pride.cloudmark.com
> Nov 08 10:03:55.354457 check[72507]: [ 5] disconnecting from server
> 66.151.150.12
> Nov 08 10:03:55.354694 check[72507]: [ 4] 66.151.150.12 << 5
> Nov 08 10:03:55.354773 check[72507]: [ 6] a=q
> Nov 08 10:03:55.354893 check[72507]: [ 5] Connecting to
> pride.cloudmark.com ...
> Nov 08 10:03:55.472232 check[72507]: [ 8] Connection established
> Nov 08 10:03:55.472444 check[72507]: [ 4] pride.cloudmark.com >> 36
> server greeting: sn=C&srl=5048&a=l&a=cg&ep4=7542-10
> Nov 08 10:03:55.472908 check[72507]: [ 4] pride.cloudmark.com << 25
> Nov 08 10:03:55.473041 check[72507]: [ 6] cn=razor-agents&cv=2.61
> Nov 08 10:03:55.473288 check[72507]: [ 6] pride.cloudmark.com is a
> Catalogue Server srl 5048; computed min_cf=6, Server se: C8
> Nov 08 10:03:55.473538 check[72507]: [ 8] Computed supported_engines:
> 4 8
> Nov 08 10:03:55.473725 check[72507]: [ 8] mail 1.0 e4 sig:
> DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:55.473930 check[72507]: [ 5] mail 1.0 e8 got no sig
> Nov 08 10:03:55.474090 check[72507]: [ 8] preparing 1 queries
> Nov 08 10:03:55.474316 check[72507]: [ 8] sending 1 batches
> Nov 08 10:03:55.474558 check[72507]: [ 4] pride.cloudmark.com << 52
> Nov 08 10:03:55.474643 check[72507]: [ 6]
> a=c&e=4&ep4=7542-10&s=DXc-2nXPD705qwuy78OtNOq1FcwA
> Nov 08 10:03:55.691226 check[72507]: [ 4] pride.cloudmark.com >> 10
> Nov 08 10:03:55.691365 check[72507]: [ 6] response to sent.11
> p=0&ct=1
> Nov 08 10:03:55.691788 check[72507]: [ 6] mail 1.0 e=4
> sig=DXc-2nXPD705qwuy78OtNOq1FcwA: sig not found.
> Nov 08 10:03:55.691911 check[72507]: [ 7] method 4: mail 1.0:
> contention part, skipping
> Nov 08 10:03:55.691995 check[72507]: [ 7] method 4: mail 1: all
> non-contention parts not spam, mail not spam
> Nov 08 10:03:55.692076 check[72507]: [ 3] mail 1 is not known spam.
> Nov 08 10:03:55.692161 check[72507]: [ 5] disconnecting from server
> pride.cloudmark.com
> Nov 08 10:03:55.692397 check[72507]: [ 4] pride.cloudmark.com << 5
> Nov 08 10:03:55.692476 check[72507]: [ 6] a=q
> debug: Using results from Razor v2.61
> debug: Found Razor2 part: part=0 engine=4 ct=1 cf=0
> debug: leaving helper-app run mode
> debug: Razor2 results: spam? 0 highest cf score: 0
> debug: running raw-body-text per-line regexp tests; score so far=0.12
> debug: running full-text regexp tests; score so far=0.12
> debug: Razor2 is available
> debug: Pyzor is not available: pyzor not found
> debug: DCCifd is not available: no r/w dccifd socket found.
> debug: DCC is not available: no executable dccproc found.
> debug: Running tests for priority: 500
> debug: RBL: success for 36 of 36 queries
> debug: running meta tests; score so far=0.12
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: Running tests for priority: 1000
> debug: running meta tests; score so far=1.346
> debug: running header regexp tests; score so far=1.346
> debug: running body-text per-line regexp tests; score so far=1.346
> debug: running uri tests; score so far=1.346
> debug: running raw-body-text per-line regexp tests; score so far=1.346
> debug: running full-text regexp tests; score so far=1.346
> debug: auto-learn: currently using scoreset 3, recomputing score based
> on scoreset 1.
> debug: auto-learn: message score: 1.346, computed score for autolearn:
> 1.57
> debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0,
> learned-points=0.001
> debug: auto-learn? no: inside auto-learn thresholds, not considered
> ham or spam
> debug: is spam? score=1.346 required=5
> debug: tests=BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
> debug: subtests=
> logmsg: clean message (1.3/5.0) for jason.lixfeld.ca:0 in 4.3 seconds,
> 420 bytes.
> logmsg: result: . 1 - BAYES_50,MISSING_HEADERS,MISSING_SUBJECT
> scantime=4.3,size=420,mid=(unknown),bayes=0.487796634412826,autolearn=n
> o
>
> Header for message is here:
>
> From: foobeats@gmail.com
> Date: November 8, 2004 10:03:55 AM EST
> Return-Path: <fo...@gmail.com>
> Envelope-To: jason.lixfeld.ca-at-eshara.ebit.ca
> Delivery-Date: Mon, 08 Nov 2004 10:03:55 -0500
> Received: from mailnull by eshara.ebit.ca with spamassassin-scanned
> (Exim 4.43 (FreeBSD)) id 1CRB3f-000Isg-GW for
> jason.lixfeld.ca-at-eshara.ebit.ca; Mon, 08 Nov 2004 10:03:55 -0500
> Received: from trek.lixfeld.ca ([216.7.194.254] helo=foo.com) by
> eshara.ebit.ca with smtp (Exim 4.43 (FreeBSD)) id 1CRB3W-000Isd-1y for
> jason-at-lixfeld.ca; Mon, 08 Nov 2004 10:03:51 -0500
> X-First-Run-Spamcheck: Checked on SMTP Transfer
> X-First-Run-Spamscore: 1.3
> X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
> eshara.ebit.ca
> X-Spam-Level: *
> X-Spam-Status: No, score=1.3 required=5.0
> tests=BAYES_50,MISSING_HEADERS, MISSING_SUBJECT autolearn=no
> version=3.0.1
> Message-Id: <E1...@eshara.ebit.ca>
> X-Sa-Exim-Connect-Ip: <locally generated>
> X-Sa-Exim-Mail-From: foobeats@gmail.com
> X-Sa-Exim-Scanned: No (on eshara.ebit.ca); SAEximRunCond expanded to
> false
>
> Exim Router & Transport:
>
> spam_check:
> debug_print = "R: spamassasssin_router for $local_part@$domain"
> driver = accept
> no_verify
> check_local_user
> condition = "${if and
> {{!def:h_X-Spam-Status:}{!eq{$received_protocol}{spamassassin-
> scanned}}}{1}{0}}"
> transport = spam_kill
> ...
> spam_kill:
> debug_print = "T: spamassassin_transport for $local_part@$domain"
> driver = pipe
> command = /usr/local/sbin/exim -oMr spamassassin-scanned -bS
> use_bsmtp = true
> transport_filter = /usr/local/bin/spamc -d 127.0.0.1 -u $local_part
> home_directory = "/tmp"
> current_directory = "/tmp"
> user = mailnull
> group = mailnull
> log_output = true
> return_fail_output = true
> return_path_add = false
>
> .cf:
>
> # local.cf
> # This is the right place to customize your installation of
> SpamAssassin.
> #
> # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
> # tweaked.
> #
> #######################################################################
> ####
>
> rewrite_header Subject **** Possible SPAM (_SCORE_) ****
> ok_languages en fr de
> ok_locales en
>
> # sql.cf
> user_scores_dsn DBI:mysql:spamassassin:localhost:3306
> user_scores_sql_username ****
> user_scores_sql_password ****
> user_scores_sql_custom_query SELECT preference, value FROM _TABLE_
> WHERE username = _USERNAME_ OR username = '$GLOBAL' OR username =
> CONCAT('%',_DOMAIN_) ORDER BY username DESC
>