From: alan premselaar [mailto:[EMAIL PROTECTED] > > NFN Smith wrote: > > Thanks for the ongoing feedback.... > > > > Bowie Bailey wrote: > >> > >> Also, you may want to save your email into a file and manually > >> run it through SA to see what happens. Just add '-t -D' to the > >> option list > > > > > > I did that, and found a couple of things. I'm closer, but not there yet. > > > > In reading the debugging output, I realized that I was putting my work > > in /etc/mail/sa-mimedefang.cf, and all my other local config settings > > are in /etc/mail/spamassassin/local.cf. When I moved this work to > > local.cf, debug showed me getting further. > > > > I also found that Net::DNS wasn't installed -- up until now, I haven't > > needed it, because I haven't been doing stuff that requires DNS queries.
> > I installed that, and am making further progress. > > > > With the two changes, I'm getting correct designation of which hosts are > > trusted or not (which I wasn't getting before), but still not getting > > the ALL_TRUSTED rule. > > > > By the way, I've also made sure that the $HOME/.spamassassin/user_prefs > > doesn't have any user-specific settings that may be interfering. > > > > Debug output shows: > > > >> debug: using "/usr/share/spamassassin" for default rules dir > >> debug: using "/etc/mail/spamassassin" for site rules dir > >> debug: using "/home/test-user/.spamassassin" for user state dir > >> debug: using "/home/test-user/.spamassassin/user_prefs" for user prefs > >> file > >> debug: Failed to parse line in SpamAssassin configuration, skipping: > >> internal_networks 64.65.180.91 > >> debug: Failed to parse line in SpamAssassin configuration, skipping: > >> internal_networks 10.10.10.141 > >> debug: Score set 1 chosen. > >> debug: Initialising learner > >> debug: received-header: parsed as [ ip=68.99.120.79 > >> rdns=lakecmmtao05.coxmail.com helo=lakecmmtao05.coxmail.com > >> by=pulsar.lfa.com ident= ] > >> debug: received-header: parsed as [ ip=24.249.175.20 rdns=really > >> helo=!192.168.1.100! by=lakecmmtao05.coxmail.com ident= ] > >> debug: received-header: relay 68.99.120.79 trusted? yes > >> debug: received-header: relay 24.249.175.20 trusted? no > >> debug: running header regexp tests; score so far=0 > >> debug: running body-text per-line regexp tests; score so far=0 > >> debug: running raw-body-text per-line regexp tests; score so far=5.733 > >> debug: running uri tests; score so far=6.536 > >> debug: uri tests: Done uriRE > >> debug: running full-text regexp tests; score so far=6.573 > >> debug: Current PATH is: > >> /usr/kerberos/bin:/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin > >> debug: all '*From' addrs: [EMAIL PROTECTED] > >> debug: all '*To' addrs: [EMAIL PROTECTED] [EMAIL PROTECTED] > >> debug: is Net::DNS::Resolver available? yes > >> debug: trying (3) kernel.org... > >> debug: looking up MX for 'kernel.org' > >> debug: MX for 'kernel.org' exists? 1 > >> debug: MX lookup of kernel.org succeeded => Dns available (set > >> dns_available to hardcode) > >> debug: is DNS available? 1 > >> debug: DNS MX records found: 1 > >> debug: forged-HELO: from=really helo=!192.168.1.100! by=coxmail.com > >> debug: running meta tests; score so far=6.573 > >> debug: is spam? score=7.673 required=4 > >> tests=CLICK_BELOW,EXCUSE_3,FREE_CONSULTATION,MAILTO_TO_REMOVE, > >> MIME_MISSING_BOUNDARY,NO_OBLIGATION,ONE_TIME_MAILING, > >> REMOVE_IN_QUOTES,REMOVE_SUBJ,RISK_FREE > >> > >> From [EMAIL PROTECTED] Tue Sep 27 15:22:19 2005 > >> Received: from localhost by pulsar.lfa.com > >> with SpamAssassin (2.64 2004-01-11); > >> Tue, 27 Sep 2005 15:24:16 -0700 > >> From: NFN Smith <[EMAIL PROTECTED] > >> To: [EMAIL PROTECTED] > >> Subject: *****SPAM***** Sequential test #12a > >> Date: Tue, 27 Sep 2005 15:21:15 -0700 > >> Message-Id: <[EMAIL PROTECTED]> > >> X-Spam-Flag: YES > >> X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on pulsar.lfa.com > >> X-Spam-Level: ******* > >> X-Spam-Status: Yes, hits=7.7 required=4.0 tests=CLICK_BELOW,EXCUSE_3, > >> FREE_CONSULTATION,MAILTO_TO_REMOVE,MIME_MISSING_BOUNDARY, > >> NO_OBLIGATION,ONE_TIME_MAILING,REMOVE_IN_QUOTES,REMOVE_SUBJ,RISK_FREE > >> autolearn=no version=2.64 > >> MIME-Version: 1.0 > > > > > > Anything else obvious that I might be missing? I think I'm close.... > > If I'm not mistaken (and I could be, it's been awhile since I've > used the 2.6x series), the ALL_TRUSTED rule wasn't introduced until > the 3.0x series. your headers show you're using 2.64. also your > debug output shows that spamassassin wasn't able to parse the > "internal_network" settings (which also weren't introduced until the > 3.0x series). > > So, you either have some misconceptions about 2.64's capabilities, > or you have 2 copies of spamassassin running in 2 different > locations on your machine and the one in your path is 2.64, and > causing you headaches. Good catch Alan, I hadn't noticed that. I think you're right about the ALL_TRUSTED rule -- and, based on the debug output, right about the internal_networks rule as well. My comments have been based on settings for 3.04. I'm not sure if your version wasn't mentioned before or if I just didn't catch it. I would suggest that you upgrade at least to 3.04 in order to get the benefit of all the new changes. You would probably want to upgrade all the way to 3.1 since it has been out for a week or so now without any major issues being reported. If you don't upgrade, you may want to read the Mail::SpamAssassin::Conf man page on your system to see what it says about the trusted_networks and whitelist_from_rcvd settings. I'm not sure if 2.64 treated them differently than 3.04 due to the absence of internal_networks. Also, if you look at your debug output, you'll notice that 24.249.175.20 was not trusted. If this IP is one of yours, you should add it to trusted_networks. Bowie
