We have just implemented SA in a site wide configuration. In debug mode, I am not seeing any RBL checks in the list of tests, but when I run spamc on the same message they show up just fine. The final scores also do not match. Here are parts of the log files.
debug: running raw-body-text per-line regexp tests; score so far=3.51
spamd[28929]: debug: running uri tests; score so far=3.51
spamd[28929]: debug: uri tests: Done uriRE
spamd[28929]: debug: running full-text regexp tests; score so far=6.51
spamd[28929]: debug: Razor2 is not available
spamd[28929]: debug: Pyzor is not available: pyzor not found
spamd[28929]: debug: DCCifd is not available: no r/w dccifd socket found.
spamd[28929]: debug: DCC is not available: no executable dccproc found.
spamd[28929]: debug: all '*To' addrs: [EMAIL PROTECTED]
spamd[28929]: debug: DNS MX records found: 2
spamd[28929]: debug: RBL: success for 1 of 1 queries
spamd[28929]: debug: running meta tests; score so far=6.51
spamd[28929]: debug: auto-learn? ham=0.1, spam=12, body-hits=5.689, head-hits=0.821
spamd[28929]: debug: auto-learn: currently using scoreset 3. recomputing score based on scoreset 1.
spamd[28929]: debug: Score set 1 chosen.
spamd[28929]: debug: auto-learn: original score: 6.51, recomputed score: 6.866
spamd[28929]: debug: Score set 3 chosen.
spamd[28929]: debug: auto-learn? no: inside auto-learn thresholds
spamd[28929]: debug: is spam? score=8.167 required=4.5 tests=BAYES_80,BigEvilList_162,HTML_COMMENT_SAVED_URL,HTML_IMAGE_ONLY_02,HTML_MESSAGE,MIME_HTML_ONLY,SUBJ_YOUR_DEBT
spamd[28929]: logmsg: identified spam (8.2/4.5) for (unknown):60001 in 1.0 seconds, 1306 bytes.
spamd[28929]: identified spam (8.2/4.5) for (unknown):60001 in 1.0 seconds, 1306 bytes.
990>spamc -R <121.msg
Content analysis details: (8.9 points, 4.5 required)
pts rule name description
---- ---------------------- --------------------------------------------------
0.8 SUBJ_YOUR_DEBT Subject contains "Your Bills" or similar
0.1 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 50 to 56%
[score: 0.5294]
1.0 HTML_COMMENT_SAVED_URL BODY: HTML message is a saved web page
0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.2 HTML_IMAGE_ONLY_02 BODY: HTML: images with 0-200 bytes of words
3.0 BigEvilList_162 URI: Generated BigEvilList_162
1.1 RCVD_IN_SBL RBL: Received via a relay in Spamhaus Block List
[<http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6636>]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[69.6.29.201 listed in dnsbl.njabl.org]
1.2 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam source
[69.6.29.201 listed in dnsbl.njabl.org]
There is a line for a RBL query, but shouldn't the RBL tests shop up in the "tests line" in the debug log? If RBL is not running site wide, any ideas why?
Thanks.....
-- Dave
------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
