Hi,
in directory (/usr/perl5/5.6.1/etc/mail/spamassassin) , i have these files:
init.pre local.cf local.cf.040605 v310.pre
contents (for brevity, i'll only put the uncommented lines):
bash-2.05# grep -v ^# init.pre
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
loadplugin Mail::SpamAssassin::Plugin::Hashcash
loadplugin Mail::SpamAssassin::Plugin::SPF
bash-2.05# grep -v ^# local.cf
required_hits 5
ok_languages nl en fr
ok_locales en
skip_rbl_checks 0
use_bayes 1
bayes_auto_learn 1
bayes_path /var/spool/MIMEDefang-bayes/bayes
bayes_file_mode 0666
bayes_auto_expire 1
bayes_expiry_max_db_size 100000
bayes_learn_to_journal 1
bayes_min_ham_num 100
bayes_min_spam_num 100
lock_method flock
use_razor2 1
use_dcc 1
use_pyzor 1
use_bayes 1
bash-2.05# grep -v ^# v310.pre
loadplugin Mail::SpamAssassin::Plugin::DCC
loadplugin Mail::SpamAssassin::Plugin::Pyzor
loadplugin Mail::SpamAssassin::Plugin::Razor2
loadplugin Mail::SpamAssassin::Plugin::SpamCop
loadplugin Mail::SpamAssassin::Plugin::AWL
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject
loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
loadplugin Mail::SpamAssassin::Plugin::ReplaceTags
my rules are in directory /usr/perl5/5.6.1/share/spamassassin
As you can see, plugins are not commented and are enabled (use_dcc etc.)
The only check that i can see that currently works is bayes.
and spamassassin --lint -D says clearly that it can load the plugins, and the required rules files to use pyzor, razor and dcc are also there.
So I am stumped. apparently spamassassin --lint -D is misleading me here....
i'd be grateful for all possible clues to resolve this issue.
For example, is there a way to see if a mail actually passes the let's say DCC check (25_dcc.cf) ?
Perhaps the way dcc is invoked causes some kind of error that goes unnoticed ? but as razor and pyzor also don't work, this is not very likely...
---------------------------------------------------------------------------
Tom Van Overbeke - ABSI Unix System Engineer
email: [EMAIL PROTECTED]
Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
website: http://www.absi.be
---------------------------------------------------------------------------
| "Menno van Bennekom" <[EMAIL PROTECTED]>
12/10/2005 16:05
|
To: [EMAIL PROTECTED] cc: users@spamassassin.apache.org Subject: Re: spamassassin less effective after upgrade to 3.1.0: some checks no longer executed ? |
I see that the site rules dir is "/usr/perl5/5.6.1/etc/mail/spamassassin"
according to the debug output, maybe you should check that your local.cf
v310.pre and sare-rules exist in that directory.
Regards
Menno van Bennekom
> Hi,
>
> I recently upgraded our mail relay software:
>
> (sendmail is 8.13.3, but I didn't upgrade this)
>
> mimedefang from 2.51 to 2.53
> razor2 from 2.67 to 2.77
> dcc from 1.2.71 to 1.3.18
> spamassassin from 3.0.2 to 3.1.0
>
> we executed spamassassin via mimedefang's mimedefang-filter file (and
> accompanying sa-mimedefang.cf file, neither of these files were modified
> during the upgrade), these are the lines that invoke spamassassin:
>
> # Spam checks if SpamAssassin is installed
> if ($Features{"SpamAssassin"}) {
> if (-s "./INPUTMSG" < 100*1024) {
> # Only scan messages smaller than 100kB. Larger messages
> # are extremely unlikely to be spam, and SpamAssassin is
> # dreadfully slow on very large messages.
> my($hits, $req, $names, $report) = spam_assassin_check();
> my($score);
> if ($hits < 40) {
> $score = "*" x int($hits);
> } else {
> $score = "*" x 40;
>
>
> the initial upgrade went fine, but recently, customers start to complain
> that they receive more spam than before.
> When I checked the logfiles, i noticed that ***before the upgrade***, i
> had lots of lines with
>
> BAYES_99,DCC_CHECK,DIGEST_MULTIPLE,FORGED_OUTLOOK_HTML,FORGED_OUTLOOK_TAGS,HTML_40_50,HTML_MESSAGE,MIME_HTML_ONLY,MSGID_OUTLOOK_INVALID,NO_DNS_FOR_FROM,NO_REAL_NAME,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL,SARE_OEM_PRODS_1,SARE_OEM_PRODS_2,SARE_OEM_PRODS_3,SARE_OEM_PRODS_FEW,SARE_OEM_SOFT_IS,SARE_PRODS_LOTS,SARE_PRODUCTS_02,SARE_PRODUCTS_03,SARE_PRODUCTS_04
>
>
>
> now, ***after the upgrade*** these are the sort of checks i see on mails
> marked as spam:
> BAYES_99,DNS_FROM_RFC_ABUSE,DNS_FROM_RFC_POST,FORGED_HOTMAIL_RCVD2,HTML_MESSAGE,HTML_MIME_NO_HTML_TAG,INFO_TLD,MIME_HEADER_CTYPE_ONLY,MIME_HTML_ONLY,MSGID_FROM_MTA_ID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_NJABL_PROXY,RCVD_IN_SORBS_DUL,RCVD_IN_SORBS_SOCKS
>
> now, as far as i can tell, these checks are defined in the SARE rules in
> my directory /usr/perl5/5.6.1/share/spamassassin, so at least I assume
> spamassassin is being started by mimedefang
>
> But I don't see any DCC_CHECK , or RAZOR2 line anymore in my logs, even
> thoug it is enabled (I now the lines in v310.pre are commented. In general
> i see for the mails marked as spam at lot less checks.
>
> I didn't alter the rules in /usr/perl/5.6.1/share/spamassassin (I didn't
> read anywhere that I needed to upgrade them for 3.1.0)
>
> spamassassin --lint -D returns this (also indicating that everything
> should be fine and that network checks are enabled):
>
>
> [419] dbg: logger: adding facilities: all
> [419] dbg: logger: logging level is DBG
> [419] dbg: generic: SpamAssassin version 3.1.0
> [419] dbg: config: score set 0 chosen.
> [419] dbg: util: running in taint mode? yes
> [419] dbg: util: taint mode: deleting unsafe environment variables,
> resetting PATH
> [419] dbg: util: PATH included '/usr/sbin', keeping
> [419] dbg: util: PATH included '/usr/bin', keeping
> [419] dbg: util: PATH included '/usr/sbin', keeping
> [419] dbg: util: PATH included '/usr/ccs/bin', keeping
> [419] dbg: util: PATH included '/opt/sfw/bin', keeping
> [419] dbg: util: PATH included '/usr/local/bin', keeping
> [419] dbg: util: PATH included '/usr/perl5/5.6.1/bin', keeping
> [419] dbg: util: final PATH set to:
> /usr/sbin:/usr/bin:/usr/sbin:/usr/ccs/bin:/opt/sfw/bin:/usr/local/bin:/usr/perl5/5.6
> .1/bin
> [419] dbg: dns: is Net::DNS::Resolver available? yes
> [419] dbg: dns: Net::DNS version: 0.48
> [419] dbg: dns: name server: 193.110.158.169, family: 2, ipv6: 0
> [419] dbg: diag: perl platform: 5.006001 solaris
> [419] dbg: diag: module installed: Digest::SHA1, version 2.10
> [419] dbg: diag: module not installed: IO::Socket::SSL ('require' failed)
> [419] dbg: diag: module installed: Time::HiRes, version 1.59
> [419] dbg: diag: module installed: DBI, version 1.45
> [419] dbg: diag: module installed: Getopt::Long, version 2.25
> [419] dbg: diag: module installed: LWP::UserAgent, version 2.032
> [419] dbg: diag: module installed: HTTP::Date, version 1.46
> [419] dbg: diag: module not installed: Archive::Tar ('require' failed)
> [419] dbg: diag: module not installed: IO::Zlib ('require' failed)
> [419] dbg: diag: module installed: MIME::Base64, version 3.05
> [419] dbg: diag: module installed: HTML::Parser, version 3.45
> [419] dbg: diag: module installed: DB_File, version 1.810
> [419] dbg: diag: module installed: Net::DNS, version 0.48
> [419] dbg: diag: module installed: Net::SMTP, version 2.28
> [419] dbg: diag: module not installed: Mail::SPF::Query ('require' failed)
> [419] dbg: diag: module not installed: IP::Country::Fast ('require'
> failed)
> [419] dbg: diag: module installed: Razor2::Client::Agent, version 2.77
> [419] dbg: diag: module not installed: Net::Ident ('require' failed)
> [419] dbg: diag: module not installed: IO::Socket::INET6 ('require'
> failed)
> [419] dbg: ignore: using a test message to lint rules
> [419] dbg: config: using "/usr/perl5/5.6.1/etc/mail/spamassassin" for site
> rules pre files
> [419] dbg: config: read file
> /usr/perl5/5.6.1/etc/mail/spamassassin/init.pre
> [419] dbg: config: read file
> /usr/perl5/5.6.1/etc/mail/spamassassin/v310.pre
> [419] dbg: config: using "/usr/perl5/5.6.1/share/spamassassin" for sys
> rules pre files
> [419] dbg: config: using "/usr/perl5/5.6.1/share/spamassassin" for default
> rules dir
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/10_misc.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_advance_fee.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_anti_ratware.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_body_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_compensate.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_dnsbl_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_drugs.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_fake_helo_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_head_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_html_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_meta_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_net_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_phrases.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_porn.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_ratware.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/20_uri_tests.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/23_bayes.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_accessdb.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_antivirus.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_body_tests_es.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_body_tests_pl.cf
> [419] dbg: config: read file /usr/perl5/5.6.1/share/spamassassin/25_dcc.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_domainkeys.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_hashcash.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_pyzor.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_razor2.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_replace.cf
> [419] dbg: config: read file /usr/perl5/5.6.1/share/spamassassin/25_spf.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_textcat.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/25_uribl.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/30_text_de.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/30_text_fr.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/30_text_it.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/30_text_nl.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/30_text_pl.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/30_text_pt_br.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/50_scores.cf
> [419] dbg: config: read file /usr/perl5/5.6.1/share/spamassassin/60_awl.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/60_whitelist.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/60_whitelist_spf.cf
> [419] dbg: config: read file
> /usr/perl5/5.6.1/share/spamassassin/60_whitelist_subject.cf
> [419] dbg: config: using "/usr/perl5/5.6.1/etc/mail/spamassassin" for site
> rules dir
> [419] dbg: config: read file
> /usr/perl5/5.6.1/etc/mail/spamassassin/local.cf
> [419] dbg: config: using "//.spamassassin" for user state dir
> [419] dbg: config: using "//.spamassassin/user_prefs" for user prefs file
> [419] dbg: config: read file //.spamassassin/user_prefs
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e24fd4)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e39b40)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596a0)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::DCC from @INC
> [419] dbg: dcc: network tests on, registering DCC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::DCC=HASH(0x8e3b408)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
> [419] dbg: pyzor: network tests on, attempting Pyzor
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8e3d64c)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
> [419] dbg: razor2: razor2 is available, version 2.77
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::Razor2=HASH(0x8f2fe24)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
> [419] dbg: reporter: network tests on, attempting SpamCop
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::SpamCop=HASH(0x908fe84)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::AWL=HASH(0x909fde0)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
> from @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x90bd22c)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
> from @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x90b127c)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
> @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9178600)
> [419] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
> @INC
> [419] dbg: plugin: registered
> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x9005e38)
> [419] dbg: config: adding redirector regex:
> /^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
> [419] dbg: config: adding redirector regex:
> /^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
> [419] dbg: config: adding redirector regex:
> /^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=""> > [419] dbg: config: adding redirector regex:
> /^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
> [419] dbg: config: adding redirector regex:
> /^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
> [419] dbg: config: adding redirector regex:
> m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
> [419] dbg: config: adding redirector regex:
> m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
> [419] warn: config: failed to parse, now a plugin, skipping: ok_languages
> nl en fr
> [419] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x9005e38)
> implements 'finish_parsing_end'
> [419] dbg: replacetags: replacing tags
> [419] dbg: replacetags: done replacing tags
> [419] dbg: bayes: tie-ing to DB file R/O
> /var/spool/MIMEDefang-bayes/bayes_toks
> [419] dbg: bayes: tie-ing to DB file R/O
> /var/spool/MIMEDefang-bayes/bayes_seen
> [419] dbg: bayes: found bayes db version 3
> [419] dbg: bayes: DB journal sync: last sync: 1129108833
> [419] dbg: config: score set 3 chosen.
> [419] dbg: message: ---- MIME PARSER START ----
> [419] dbg: message: main message type: text/plain
> [419] dbg: message: parsing normal part
> [419] dbg: message: added part, type: text/plain
> [419] dbg: message: ---- MIME PARSER END ----
> [419] dbg: dns: testing resolver nameservers: 193.110.158.169,
> 193.110.158.168
> [419] dbg: dns: trying (3) colorado.edu...
> [419] dbg: dns: looking up NS for 'colorado.edu'
> [419] dbg: dns: NS lookup of colorado.edu using 193.110.158.169 succeeded
> => DNS available (set dns_available to overrid
> e)
> [419] dbg: dns: is DNS available? 1
> [419] dbg: metadata: X-Spam-Relays-Trusted:
> [419] dbg: metadata: X-Spam-Relays-Untrusted:
> [419] dbg: message: no encoding detected
> [419] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e24fd4)
> implements 'parsed_metadata'
> [419] dbg: uridnsbl: domains to query:
> [419] dbg: check: running tests for priority: 0
> [419] dbg: rules: running header regexp tests; score so far=0
> [419] dbg: rules: ran header rule NO_REAL_NAME ======> got hit:
> "[EMAIL PROTECTED]
> [419] dbg: rules: "
> [419] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
> "1129109016"
> [419] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
> [419] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
> "@lint_rules>"
> [419] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
> "<[EMAIL PROTECTED]>
> [419] dbg: rules: "
> [419] dbg: rules: ran eval rule NO_RELAYS ======> got hit
> [419] dbg: plugin: registering glue method for
> check_for_spf_whitelist_from (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e59
> 6a0))
> [419] dbg: spf: cannot get Envelope-From, cannot use SPF
> [419] dbg: spf: spf_whitelist_from: could not find useable envelope sender
> [419] dbg: plugin: registering glue method for check_for_spf_fail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596a0))
> [419] dbg: spf: message was delivered entirely via trusted relays, not
> required
> [419] dbg: plugin: registering glue method for check_for_spf_pass
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596a0))
> [419] dbg: plugin: registering glue method for check_for_spf_neutral
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596a0))
> [419] dbg: eval: all '*From' addrs:
> [EMAIL PROTECTED]
> [419] dbg: eval: all '*To' addrs:
> [419] dbg: plugin: registering glue method for check_hashcash_value
> (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e39b40
> ))
> [419] dbg: plugin: registering glue method for check_for_spf_helo_pass
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596a0))
> [419] dbg: spf: message was delivered entirely via trusted relays, not
> required
> [419] dbg: plugin: registering glue method for check_hashcash_double_spend
> (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x
> 8e39b40))
> [419] dbg: plugin: registering glue method for check_subject_in_whitelist
> (Mail::SpamAssassin::Plugin::WhiteListSubject=
> HASH(0x90b127c))
> [419] dbg: plugin: registering glue method for check_subject_in_blacklist
> (Mail::SpamAssassin::Plugin::WhiteListSubject=
> HASH(0x90b127c))
> [419] dbg: plugin: registering glue method for
> check_for_def_spf_whitelist_from (Mail::SpamAssassin::Plugin::SPF=HASH(0x
> 8e596a0))
> [419] dbg: spf: def_spf_whitelist_from: could not find useable envelope
> sender
> [419] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
> [419] dbg: plugin: registering glue method for check_for_spf_softfail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596a0))
> [419] dbg: plugin: registering glue method for check_for_spf_helo_softfail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8e596
> a0))
> [419] dbg: rules: running body-text per-line regexp tests; score so
> far=0.96
> [419] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I"
> [419] dbg: uri: running uri tests; score so far=0.96
> [419] dbg: bayes: DB journal sync: last sync: 1129108833
> [419] dbg: bayes: corpus size: nspam = 955695, nham = 451651
> [419] dbg: bayes: score = 0.569605827036911
> [419] dbg: bayes: DB journal sync: last sync: 1129108833
> [419] dbg: bayes: untie-ing
> [419] dbg: bayes: untie-ing db_toks
> [419] dbg: bayes: untie-ing db_seen
> [419] dbg: plugin: registering glue method for check_uridnsbl
> (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e24fd4))
> [419] dbg: rules: ran eval rule BAYES_50 ======> got hit
> [419] dbg: rules: running raw-body-text per-line regexp tests; score so
> far=0.961
> [419] dbg: rules: running full-text regexp tests; score so far=0.961
> [419] dbg: plugin: registering glue method for check_razor2_range
> (Mail::SpamAssassin::Plugin::Razor2=HASH(0x8f2fe24))
> [419] dbg: info: entering helper-app run mode
> [419] dbg: info: leaving helper-app run mode
> [419] dbg: razor2: part=0 engine=4 contested=0 confidence=0
> [419] dbg: razor2: results: spam? 0
> [419] dbg: razor2: results: engine 8, highest cf score: 0
> [419] dbg: razor2: results: engine 4, highest cf score: 0
> [419] dbg: plugin: registering glue method for check_razor2
> (Mail::SpamAssassin::Plugin::Razor2=HASH(0x8f2fe24))
> [419] dbg: plugin: registering glue method for check_dcc
> (Mail::SpamAssassin::Plugin::DCC=HASH(0x8e3b408))
> [419] dbg: dcc: dccifd is not available: no r/w dccifd socket found
> [419] dbg: util: current PATH is:
> /usr/sbin:/usr/bin:/usr/sbin:/usr/ccs/bin:/opt/sfw/bin:/usr/local/bin:/usr/perl5/5.6.1
> /bin
> [419] dbg: util: executable for dccproc was found at
> /usr/local/bin/dccproc
> [419] dbg: dcc: dccproc is available: /usr/local/bin/dccproc
> [419] dbg: info: entering helper-app run mode
> [419] dbg: dcc: opening pipe: /usr/local/bin/dccproc -H -R <
> /tmp/.spamassassin419ml0n4mtmp
> [422] dbg: util: setuid: ruid=0 euid=0
> [419] dbg: dcc: got response: X-DCC-EATSERVER-Metrics: mx1 1166;
> Body=66946 Fuz1=370985 Fuz2=370970
> [419] dbg: info: leaving helper-app run mode
> [419] dbg: plugin: registering glue method for check_pyzor
> (Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8e3d64c))
> [419] dbg: util: executable for pyzor was found at /usr/local/bin/pyzor
> [419] dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
> [419] dbg: info: entering helper-app run mode
> [419] dbg: pyzor: opening pipe: /usr/local/bin/pyzor check <
> /tmp/.spamassassin419ml0n4mtmp
> [423] dbg: util: setuid: ruid=0 euid=0
> [419] dbg: pyzor: [423] finished: exit=0x0100
> [419] dbg: pyzor: got response: 66.250.40.33:24441_(200, 'OK')_0_0
> [419] dbg: info: leaving helper-app run mode
> [419] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e24fd4)
> implements 'check_tick'
> [419] dbg: check: running tests for priority: 500
> [419] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e24fd4)
> implements 'check_post_dnsbl'
> [419] dbg: rules: running meta tests; score so far=0.961
> [419] dbg: rules: running header regexp tests; score so far=2.907
> [419] dbg: rules: running body-text per-line regexp tests; score so
> far=2.907
> [419] dbg: uri: running uri tests; score so far=2.907
> [419] dbg: rules: running raw-body-text per-line regexp tests; score so
> far=2.907
> [419] dbg: rules: running full-text regexp tests; score so far=2.907
> [419] dbg: check: running tests for priority: 1000
> [419] dbg: rules: running meta tests; score so far=2.907
> [419] dbg: rules: running header regexp tests; score so far=2.907
> [419] dbg: plugin: registering glue method for
> check_from_in_auto_whitelist (Mail::SpamAssassin::Plugin::AWL=HASH(0x909f
> de0))
> [419] dbg: config: using "//.spamassassin" for user state dir
> [419] dbg: locker: safe_lock: created //.spamassassin/auto-whitelist.mutex
> [419] dbg: locker: safe_lock: trying to get lock on
> //.spamassassin/auto-whitelist with 30 timeout
> [419] dbg: locker: safe_lock: link to
> //.spamassassin/auto-whitelist.mutex: link ok
> [419] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in
> //.spamassassin/auto-whitelist
> [419] dbg: auto-whitelist: db-based
> [EMAIL PROTECTED]|ip=none scores 0/0
> [419] dbg: auto-whitelist: AWL active, pre-score: 2.907, autolearn score:
> 2.907, mean: undef, IP: undef
> [419] dbg: auto-whitelist: DB addr list: untie-ing and unlocking
> [419] dbg: auto-whitelist: DB addr list: file locked, breaking lock
> [419] dbg: locker: safe_unlock: unlocked
> //.spamassassin/auto-whitelist.mutex
> [419] dbg: auto-whitelist: post auto-whitelist score: 2.907
> [419] dbg: rules: running body-text per-line regexp tests; score so
> far=2.907
> [419] dbg: uri: running uri tests; score so far=2.907
> [419] dbg: rules: running raw-body-text per-line regexp tests; score so
> far=2.907
> [419] dbg: rules: running full-text regexp tests; score so far=2.907
> [419] dbg: check: is spam? score=2.907 required=5
> [419] dbg: check:
> tests=BAYES_50,MISSING_SUBJECT,NO_REAL_NAME,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
> [419] dbg: check:
> subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__UNUSABLE_MSGID
>
>
>
>
>
> ---------------------------------------------------------------------------
> Tom Van Overbeke - ABSI Unix System Engineer
> email: [EMAIL PROTECTED]
> Tel: +32 2 333 40 00 - Fax: +32 2 332 34 69
> website: http://www.absi.be
> ---------------------------------------------------------------------------
>
