I have URIBL lookups enabled. I have also increased my score in
mangled.cf. I have posted the email that I'm receiving at
www.yoursummit.com/pharmNews.html if you'd like to view the actual email
content. Below is the header of the latest email that I've gotten. The
names of the drugs are in blue and the dollar amounts are in red along.
I'm still at a loss as to what I need to do to get these stopped.
Here is the output of doing the "spamassassin --lint -D":
debug: config: read file /etc/mail/spamassassin/25_uribl.cf
....
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xa96f558)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa95afa4)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0xa95c66c)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xa96f558)
implements '
parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa95afa4)
implements '
parse_config'
Here is the Header info:
Received: by yoursummit.com (CommuniGate Pro PIPE 4.3.8)
with PIPE id 2829044; Tue, 14 Mar 2006 04:05:46 -0600
Received: from [81.104.204.233] (HELO gcsincorp.com)
by yoursummit.com (CommuniGate Pro SMTP 4.3.8)
with SMTP id 2829043
for [EMAIL PROTECTED]; Tue, 14 Mar 2006 04:05:38 -0600
Subject: Re: PhaPOramacy news
Date: Tue, 14 Mar 2006 04:04:55 -0600
Message-Id: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Thread-Topic: PhaPOramacy news
Priority: Normal
Importance: normal
X-MSMail-Priority: normal
X-Priority: 3
Sensitivity: Normal
From: "Kanta Bramblett" <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
X-Real-To: "Tracey Gates" <[EMAIL PROTECTED]>
X-Mailer: CommuniGate Pro MAPI Connector 1.1.22
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
yoursummit.com
X-Spam-Level:
X-Spam-Status: No, score=-0.0 required=3.5 tests=BAYES_40,FM_NO_STYLE,
HTML_80_90,HTML_MESSAGE autolearn=no version=3.0.2
X-TFF-CGPSA-Version: 1.4
X-TFF-CGPSA-Filter: Scanned
Content-Type: multipart/alternative;
boundary="----_=_NextPart_11254_00012994.00004466"
Tracey Gates
Lead Developer
[EMAIL PROTECTED]
1350 South Boulder, Third Floor / Tulsa, OK 74119-3203
Phone 918-663-0991 / Fax 918-663-0840
This communication is intended only for the recipient(s) named above;
may be confidential and/or legally privileged; and, must be treated as
such in accordance with state and federal laws. If you are not the
intended recipient, you are hereby notified that any use of this
communication, or any of its contents, is prohibited. If you have
received this communication in error, please reply to the sender and
then delete the message from your computer system immediately.
-----Original Message-----
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
Sent: Wednesday, March 08, 2006 12:01 PM
To: Tracey Gates
Cc: users@spamassassin.apache.org
Subject: Re: Drug email keeps getting thru
On Wed, Mar 08, 2006 at 11:47:49AM -0600, Tracey Gates wrote:
> Here is a list of the rulesets that I'm using:
>
> 70_sare_adult.cf 70_sare_unsub.cf
> 70_sare_bayes_poison_nxm.cf 70_sare_uri0.cf
[...]
>
> How do I tell if I have URIBL lookups enabled?
Those are the third party rules that you have enabled, URIBL is part of
the standard (assuming 3.0 or later) set of rules. They are enabled by
default if you allow network tests to be run (ie: not local-only mode),
and you'd see rule results similar to URIBL_JP_SURBL or URIBL_BLACK (if
you added in rules to use the uribl.com lists).
In general, if you run in debug mode (ala: spamassassin --lint -D),
you'll see a list of all the config files in use as well as which
plugins are loading. Make sure that 25_uribl.cf is being read and that
the URIDNSBL plugin is loaded, ala:
[21549] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[...]
[21549] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from
@INC [21549] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x845f20)
--
Randomly Generated Tagline:
Monday is a bad way to spend 1/7 of your life.
