From: "David Minard" <[EMAIL PROTECTED]>
G'day All,
I'm hoping for enlightenment with a peculiar problem I'm having with
SpamAssassin 3.1.1, on a fresh install of Fedora Core 4, fully
patched. I'm using sendmail and the latest MailScanner.
I'm having trouble with SpamAssassin. When I first install it and
test it, things seem to go well. Mail gets tagged as follows:
May 3 16:28:40 jarjar MailScanner[4732]: Message k436SX2M005191 from
111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is spam
, SpamAssassin (score=17.613, required 6, ALL_TRUSTED -1.44,
HTML_MESSAGE 0.00, MSGID_DOLLARS 2.16, RATWARE_MS_HASH 1.38,
URIBL_AB_SUR
BL 3.31, URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62, URIBL_SBL 1.09,
URIBL_SC_SURBL 3.60, URIBL_WS_SURBL 1.53)
May 3 16:34:24 jarjar MailScanner[5317]: Message k436YNXb005322 from
111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is spam
, SpamAssassin (score=17.613, required 6, ALL_TRUSTED -1.44,
HTML_MESSAGE 0.00, MSGID_DOLLARS 2.16, RATWARE_MS_HASH 1.38,
URIBL_AB_SUR
BL 3.31, URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62, URIBL_SBL 1.09,
URIBL_SC_SURBL 3.60, URIBL_WS_SURBL 1.53)
May 3 16:37:15 jarjar MailScanner[5317]: Message k436bAr0005350 from
111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is spam
, SpamAssassin (score=17.109, required 6, ALL_TRUSTED -1.44,
HTML_IMAGE_ONLY_12 1.64, HTML_MESSAGE 0.00, HTML_OBFUSCATE_05_10
1.17, HT
ML_SHORT_LINK_IMG_1 0.28, INFO_TLD 0.81, MSGID_DOLLARS 2.16,
RATWARE_MS_HASH 1.38, URIBL_JP_SURBL 3.36, URIBL_OB_SURBL 2.62,
URIBL_SC_
SURBL 3.60, URIBL_WS_SURBL 1.53)
If this is sending to yourself using your own sendmail and all that
then the ALL_TRUSTED makes some sense here.
Then after 5 or so non-spam e-mails going through the server I start
to see:
May 3 16:39:16 jarjar MailScanner[5317]: Message k436dCIW005370 from
111.222.111.222 ([EMAIL PROTECTED]) to another.domain.org is not s
pam, SpamAssassin (score=-1.44, required 6, autolearn=not spam,
ALL_TRUSTED -1.44)
May 4 04:02:14 jarjar MailScanner[5317]: Message k43I23TJ010337 from
127.0.0.1 ([EMAIL PROTECTED]) to mailserver.our.domain.org
is not spam, SpamAssassin (score=-0.89, required 6, autolearn=not
spam, ALL_TRUSTED -1.44, NO_REAL_NAME 0.55)
Ah - you are configured to test your OUTGOING path?
Then not too many e-mails after that, I get this (for all e-mails
spam or otherwise (including GTUBE)):
May 4 04:10:40 jarjar MailScanner[10918]: Message k43IAZSd011141
from 127.0.0.1 ([EMAIL PROTECTED]) to
mailserver.our.domain.org
is not spam, SpamAssassin (score=0, required 6, autolearn=not spam)
May 4 11:02:59 jarjar MailScanner[10918]: Message k4412muZ013842
from 111.222.111.222 ([EMAIL PROTECTED]) to our.domain.org is not
spam, SpamAssassin (score=0, required 6, autolearn=not spam)
Somehow something in SpamAssassin has decided that anything going to
or from our network is not spam. I even cut the new mail server over
live (temporarily) hoping that new mail coming from the outside world
would trigger SpamAssassin into life, but it doesn't. We get the
"SpamAssassin (score=0, required 6, autolearn=not spam)" tag.
I don't see anything that indicates email coming in from outside your
domain.
I'm still running an older version of Mail Scanner and SpamAssassin
on the current production mail server, and it's picking up mail as
spam without a problem, but the new one, scanning the same e-mails,
does not tag them.
Has anyone come across something like this? I've spent hours
searching for something similar but haven't found anything.
In desperation I've done things like sa-learn --clear. Put
unwhitelist_* options in spamassassin/mailscanner.cf. Nothing
changed. I've even scoured the whole file system looking for any .db
related to spamassassin, bayes etc and remove the databases I found.
No difference. I've re-installed the test server from scratch, re-
installed/configured sendmail, MailScanner, and Spamassassin, and
things start working well again, then deteriorate to where nothing
gets tagged as spam again.
Help !
1) Compare your MailScanner configuration with that of a machine known
to work.
2) How are you running SpamAssassin from within MailScanner - options
and the like?
You MAY have to get help from the MailScanner folks regarding calling
your version of SpamAssassin.
It ALMOST looks like you are running SpamAssassin inside a jail and
it cannot find any of its configuration files at all. Are you sure
MailScanner can even find SpamAssassin? Use "su -l" as root to get
logged in as the account under which MailScanner runs. Then see if
it can run a "SpamAssassin -D --lint".
When you make changes make sure you restart (not just reload) MailScanner.
{^_^}
