G'day All,
I'm hoping for enlightenment with a peculiar problem I'm having with
SpamAssassin 3.1.1, on a fresh install of Fedora Core 4, fully
patched. I'm using sendmail and the latest MailScanner.
I'm having trouble with SpamAssassin. When I first install it and
test it, things seem to go well. Mail gets tagged as follows:
May 3 16:28:40 jarjar MailScanner[4732]: Message k436SX2M005191 from
111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is spam
, SpamAssassin (score=17.613, required 6, ALL_TRUSTED -1.44,
HTML_MESSAGE 0.00, MSGID_DOLLARS 2.16, RATWARE_MS_HASH 1.38,
URIBL_AB_SUR
BL 3.31, URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62, URIBL_SBL 1.09,
URIBL_SC_SURBL 3.60, URIBL_WS_SURBL 1.53)
May 3 16:34:24 jarjar MailScanner[5317]: Message k436YNXb005322 from
111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is spam
, SpamAssassin (score=17.613, required 6, ALL_TRUSTED -1.44,
HTML_MESSAGE 0.00, MSGID_DOLLARS 2.16, RATWARE_MS_HASH 1.38,
URIBL_AB_SUR
BL 3.31, URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62, URIBL_SBL 1.09,
URIBL_SC_SURBL 3.60, URIBL_WS_SURBL 1.53)
May 3 16:37:15 jarjar MailScanner[5317]: Message k436bAr0005350 from
111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is spam
, SpamAssassin (score=17.109, required 6, ALL_TRUSTED -1.44,
HTML_IMAGE_ONLY_12 1.64, HTML_MESSAGE 0.00, HTML_OBFUSCATE_05_10
1.17, HT
ML_SHORT_LINK_IMG_1 0.28, INFO_TLD 0.81, MSGID_DOLLARS 2.16,
RATWARE_MS_HASH 1.38, URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62,
URIBL_SC_
SURBL 3.60, URIBL_WS_SURBL 1.53)
Then after 5 or so non-spam e-mails going through the server I start
to see:
May 3 16:39:16 jarjar MailScanner[5317]: Message k436dCIW005370 from
111.222.111.222 ([EMAIL PROTECTED]) to another.domain.org is not s
pam, SpamAssassin (score=-1.44, required 6, autolearn=not spam,
ALL_TRUSTED -1.44)
May 4 04:02:14 jarjar MailScanner[5317]: Message k43I23TJ010337 from
127.0.0.1 ([EMAIL PROTECTED]) to mailserver.our.domain.org
is not spam, SpamAssassin (score=-0.89, required 6, autolearn=not
spam, ALL_TRUSTED -1.44, NO_REAL_NAME 0.55)
Then not too many e-mails after that, I get this (for all e-mails
spam or otherwise (including GTUBE)):
May 4 04:10:40 jarjar MailScanner[10918]: Message k43IAZSd011141
from 127.0.0.1 ([EMAIL PROTECTED]) to
mailserver.our.domain.org
is not spam, SpamAssassin (score=0, required 6, autolearn=not spam)
May 4 11:02:59 jarjar MailScanner[10918]: Message k4412muZ013842
from 111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is not
spam, SpamAssassin (score=0, required 6, autolearn=not spam)
Somehow something in SpamAssassin has decided that anything going to
or from our network is not spam. I even cut the new mail server over
live (temporarily) hoping that new mail coming from the outside world
would trigger SpamAssassin into life, but it doesn't. We get the
"SpamAssassin (score=0, required 6, autolearn=not spam)" tag.
I'm still running an older version of Mail Scanner and SpamAssassin
on the current production mail server, and it's picking up mail as
spam without a problem, but the new one, scanning the same e-mails,
does not tag them.
Has anyone come across something like this? I've spent hours
searching for something similar but haven't found anything.
In desperation I've done things like sa-learn --clear. Put
unwhitelist_* options in spamassassin/mailscanner.cf. Nothing
changed. I've even scoured the whole file system looking for any .db
related to spamassassin, bayes etc and remove the databases I found.
No difference. I've re-installed the test server from scratch, re-
installed/configured sendmail, MailScanner, and Spamassassin, and
things start working well again, then deteriorate to where nothing
gets tagged as spam again.
Help !
David.
[Sometimes waking up just isn't worth the insult of the day to come.]
Scanned by SCIT E-Mail Gateway http://www.cit.uws.edu.au
