Hi all,
Details can be found below......
One thing I have noticed is that "spamc" appears to be version 3.1.3 and
"spamassassin" appears to be version 3.1.1??
Leaving the mail client out of it seems that even from the cli SA scores
spam very low, see example "spamassassin -D <" of obvious spam at bottom
of this message:
Contents of ~/.spamassassin/user_prefs
bash-2.05a$ grep -v "^#" user_prefs
required_score 5
rewrite_header subject SPAM _HITS_ :
Contents of /etc/mail/spamassassin/*
bash-2.05a$ grep -v "^#" *
init.pre:
init.pre:
init.pre:loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
init.pre:
init.pre:loadplugin Mail::SpamAssassin::Plugin::Hashcash
init.pre:
init.pre:loadplugin Mail::SpamAssassin::Plugin::SPF
init.pre:
v310.pre:
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::Pyzor
v310.pre:
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::SpamCop
v310.pre:
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::AWL
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
v310.pre:
v310.pre:
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject
v310.pre:
v310.pre:
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
v310.pre:
v310.pre:loadplugin Mail::SpamAssassin::Plugin::ReplaceTags
v310.pre:
v312.pre:
v312.pre:
v312.pre:
bash-2.05a$ spamassassin -V
SpamAssassin version 3.1.3
running on Perl version 5.6.1
bash-2.05a$ spamassassin --lint
bash-2.05a$
bash-2.05a$
bash-2.05a$
bash-2.05a$ spamassassin -D < spam
[16796] dbg: logger: adding facilities: all
[16796] dbg: logger: logging level is DBG
[16796] dbg: generic: SpamAssassin version 3.1.3
[16796] dbg: config: score set 0 chosen.
[16796] dbg: util: running in taint mode? yes
[16796] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[16796] dbg: util: PATH included '/usr/local/bin', keeping
[16796] dbg: util: PATH included '/bin', keeping
[16796] dbg: util: PATH included '/usr/bin', keeping
[16796] dbg: util: PATH included '/usr/X11R6/bin', keeping
[16796] dbg: util: final PATH set to:
/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin
[16796] dbg: message: ---- MIME PARSER START ----
[16796] dbg: message: main message type: text/plain
[16796] dbg: message: parsing normal part
[16796] dbg: message: added part, type: text/plain
[16796] dbg: message: ---- MIME PARSER END ----
[16796] dbg: dns: is Net::DNS::Resolver available? yes
[16796] dbg: dns: Net::DNS version: 0.57
[16796] dbg: config: using "/etc/mail/spamassassin" for site rules pre
files
[16796] dbg: config: read file /etc/mail/spamassassin/init.pre
[16796] dbg: config: read file /etc/mail/spamassassin/v310.pre
[16796] dbg: config: read file /etc/mail/spamassassin/v312.pre
[16796] dbg: config: using "/usr/share/spamassassin" for sys rules pre
files
[16796] dbg: config: using "/usr/share/spamassassin" for default rules
dir
[16796] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[16796] dbg: config: read file
/usr/share/spamassassin/20_anti_ratware.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[16796] dbg: config: read file
/usr/share/spamassassin/20_fake_helo_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[16796] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[16796] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[16796] dbg: config: read file
/usr/share/spamassassin/25_body_tests_es.cf
[16796] dbg: config: read file
/usr/share/spamassassin/25_body_tests_pl.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[16796] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[16796] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[16796] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[16796] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[16796] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[16796] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[16796] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[16796] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[16796] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[16796] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[16796] dbg: config: read file
/usr/share/spamassassin/60_whitelist_dkim.cf
[16796] dbg: config: read file
/usr/share/spamassassin/60_whitelist_spf.cf
[16796] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[16796] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[16796] dbg: config: read file /etc/mail/spamassassin/local.cf
[16796] dbg: config: using "/home/cjones/.spamassassin" for user state
dir
[16796] dbg: config: using "/home/cjones/.spamassassin/user_prefs" for
user prefs file
[16796] dbg: config: read file /home/cjones/.spamassassin/user_prefs
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from
@INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8aae818)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from
@INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ac2684)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[16796] dbg: pyzor: network tests on, attempting Pyzor
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8aebc1c)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from
@INC
[16796] dbg: reporter: network tests on, attempting SpamCop
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0x8b7e46c)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0x8b8a9e8)
[16796] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8cfc478)
[16796] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8d09328)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x8d10f0c)
[16796] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags
from @INC
[16796] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8d1bdac)
[16796] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[16796] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[16796] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[16796] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[16796] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[16796] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[16796] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[16796] dbg: config: adding redirector regex:
m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&\#])'i
[16796] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:
$|[&\#])'i
[16796] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*
?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&\#])'i
[16796] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*
?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&\#])'i
[16796] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.
*?)(?:$|[&\#])'i
[16796] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8d1bdac) implements
'finish_parsing_end'
[16796] dbg: replacetags: replacing tags
[16796] dbg: replacetags: done replacing tags
[16796] dbg: config: using "/home/cjones/.spamassassin" for user state
dir
[16796] dbg: bayes: tie-ing to DB file R/O
/home/cjones/.spamassassin/bayes_toks
[16796] dbg: bayes: tie-ing to DB file R/O
/home/cjones/.spamassassin/bayes_seen
[16796] dbg: bayes: found bayes db version 3
[16796] dbg: bayes: DB journal sync: last sync: 0
[16796] dbg: config: using "/home/cjones/.spamassassin" for user state
dir
[16796] dbg: bayes: not available for scanning, only 21 spam(s) in bayes
DB < 200
[16796] dbg: bayes: untie-ing
[16796] dbg: bayes: untie-ing db_toks
[16796] dbg: bayes: untie-ing db_seen
[16796] dbg: config: score set 1 chosen.
[16796] dbg: bayes: tie-ing to DB file R/O
/home/cjones/.spamassassin/bayes_toks
[16796] dbg: bayes: tie-ing to DB file R/O
/home/cjones/.spamassassin/bayes_seen
[16796] dbg: bayes: found bayes db version 3
[16796] dbg: bayes: DB journal sync: last sync: 0
[16796] dbg: bayes: not available for scanning, only 21 spam(s) in bayes
DB < 200
[16796] dbg: bayes: untie-ing
[16796] dbg: bayes: untie-ing db_toks
[16796] dbg: bayes: untie-ing db_seen
[16796] dbg: dns: name server: 127.0.0.1, family: 2, ipv6: 0
[16796] dbg: dns: testing resolver nameservers: 127.0.0.1, 63.247.132.4,
66.129.80.152
[16796] dbg: dns: trying (3) adelphia.net...
[16796] dbg: dns: looking up NS for 'adelphia.net'
[16796] dbg: dns: NS lookup of adelphia.net using 127.0.0.1 succeeded =>
DNS available (set dns_available to override)
[16796] dbg: dns: is DNS available? 1
[16796] dbg: received-header: parsed as [ ip=89.83.188.241
rdns=d01v-89-83-188-241.d4.club-internet.fr helo=UTLU.oevoly.net
by=-----snip-----.com ident= envfrom= intl=0 id=1FoTb8-0005eV-CC auth= ]
[16796] dbg: dns: looking up A records for '-----snip-----.com'
[16796] dbg: dns: A records for '-----snip-----.com': 63.247.129.130
[16796] dbg: dns: looking up A records for '-----snip-----.com'
[16796] dbg: dns: A records for '-----snip-----.com': 63.247.129.130
[16796] dbg: received-header: 'by' -----snip-----.com has public IP
63.247.129.130
[16796] dbg: received-header: relay 89.83.188.241 trusted? no internal?
no
[16796] dbg: dns: looking up PTR record for '64.233.183.27'
[16796] dbg: dns: PTR for '64.233.183.27': 'gsmtp183.google.com'
[16796] dbg: received-header: parsed as [ ip=64.233.183.27
rdns=gsmtp183.google.com helo=gsmtp183.google.com by=UTLU.oevoly.net
ident= envfrom= intl=0 id= auth= ]
[16796] dbg: received-header: relay 64.233.183.27 trusted? no internal?
no
[16796] dbg: metadata: X-Spam-Relays-Trusted:
[16796] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=89.83.188.241
rdns=d01v-89-83-188-241.d4.club-internet.fr helo=UTLU.oevoly.net
by=-----snip-----.com ident= envfrom= intl=0 id=1FoTb8-0005eV-CC auth= ]
[ ip=64.233.183.27 rdns=gsmtp183.google.com helo=gsmtp183.google.com
by=UTLU.oevoly.net ident= envfrom= intl=0 id= auth= ]
[16796] dbg: metadata: X-Spam-Relays-Internal:
[16796] dbg: metadata: X-Spam-Relays-External: [ ip=89.83.188.241
rdns=d01v-89-83-188-241.d4.club-internet.fr helo=UTLU.oevoly.net
by=-----snip-----.com ident= envfrom= intl=0 id=1FoTb8-0005eV-CC auth= ]
[ ip=64.233.183.27 rdns=gsmtp183.google.com helo=gsmtp183.google.com
by=UTLU.oevoly.net ident= envfrom= intl=0 id= auth= ]
[16796] dbg: message: ---- MIME PARSER START ----
[16796] dbg: message: main message type: text/plain
[16796] dbg: message: parsing normal part
[16796] dbg: message: added part, type: text/plain
[16796] dbg: message: ---- MIME PARSER END ----
[16796] dbg: message: decoding other encoding type (7bit), ignoring
[16796] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8aae818) implements
'parsed_metadata'
[16796] dbg: uri: parsed uri found, F-C-Y-I.PK
[16796] dbg: uri: cleaned parsed uri, http://F-C-Y-I.PK
[16796] dbg: uri: cleaned parsed uri, F-C-Y-I.PK
[16796] dbg: uri: parsed domain, f-c-y-i.pk
[16796] dbg: uri: parsed uri found, http://F-C-Y-I.PK
[16796] dbg: uri: cleaned parsed uri, http://F-C-Y-I.PK
[16796] dbg: uri: parsed domain, f-c-y-i.pk
[16796] dbg: uridnsbl: domains to query: f-c-y-i.pk
[16796] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois-lastexternal
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: launching DNS A query for
241.188.83.89.combined-HIB.dnsiplists.completewhois.com. in background
[16796] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: launching DNS A query for
241.188.83.89.sa-accredit.habeas.com. in background
[16796] dbg: dns: checking RBL combined.njabl.org., set njabl
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 64.233.183.27,
89.83.188.241
[16796] dbg: dns: launching DNS A query for
27.183.233.64.combined.njabl.org. in background
[16796] dbg: dns: launching DNS A query for
241.188.83.89.combined.njabl.org. in background
[16796] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 64.233.183.27,
89.83.188.241
[16796] dbg: dns: launching DNS TXT query for
27.183.233.64.bl.spamcop.net. in background
[16796] dbg: dns: launching DNS TXT query for
241.188.83.89.bl.spamcop.net. in background
[16796] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 64.233.183.27,
89.83.188.241
[16796] dbg: dns: launching DNS A query for
27.183.233.64.combined-HIB.dnsiplists.completewhois.com. in background
[16796] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 64.233.183.27,
89.83.188.241
[16796] dbg: dns: launching DNS A query for
27.183.233.64.dnsbl.sorbs.net. in background
[16796] dbg: dns: launching DNS A query for
241.188.83.89.dnsbl.sorbs.net. in background
[16796] dbg: dns: checking RBL combined.njabl.org., set
njabl-lastexternal
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: launching DNS TXT query for
241.188.83.89.sa-trusted.bondedsender.org. in background
[16796] dbg: dns: checking RBL sa-other.bondedsender.org., set
bsp-untrusted
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 64.233.183.27
[16796] dbg: dns: launching DNS TXT query for
27.183.233.64.sa-other.bondedsender.org. in background
[16796] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set
sblxbl-lastexternal
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: launching DNS A query for
241.188.83.89.sbl-xbl.spamhaus.org. in background
[16796] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: launching DNS TXT query for
241.188.83.89.list.dsbl.org. in background
[16796] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 64.233.183.27,
89.83.188.241
[16796] dbg: dns: launching DNS A query for
27.183.233.64.sbl-xbl.spamhaus.org. in background
[16796] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[16796] dbg: dns: IPs found: full-external: 89.83.188.241, 64.233.183.27
untrusted: 89.83.188.241, 64.233.183.27 originating:
[16796] dbg: dns: only inspecting the following IPs: 89.83.188.241
[16796] dbg: dns: launching DNS A query for
241.188.83.89.iadb.isipp.com. in background
[16796] dbg: check: running tests for priority: 0
[16796] dbg: rules: running header regexp tests; score so far=0
[16796] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[16796] dbg: rules: ran header rule __HAS_X_MAILER ======> got hit: "M"
[16796] dbg: rules: ran header rule __HAS_OUTLOOK_IN_MAILER ======> got
hit: "Microsoft Office Outlook"
[16796] dbg: rules: ran header rule __MIMEOLE_MS ======> got hit:
"Produced By Microsoft MimeOLE"
[16796] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[16796] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "F"
[16796] dbg: rules: ran header rule __CTYPE_CHARSET_QUOTED ======> got
hit: "charset=""
[16796] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[16796] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[16796] dbg: rules: ran header rule __CT_TEXT_PLAIN ======> got hit:
"text/plain"
[16796] dbg: rules: ran header rule __CTE ======> got hit: "7"
[16796] dbg: rules: ran header rule __CT ======> got hit: "t"
[16796] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@-----snip-----.com>"
[16796] dbg: rules: ran header rule __HAS_MIMEOLE ======> got hit: "P"
[16796] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<[EMAIL PROTECTED]>
[16796] dbg: rules: "
[16796] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: spf: cannot get Envelope-From, cannot use SPF
[16796] dbg: spf: spf_whitelist_from: could not find useable envelope
sender
[16796] dbg: eval: trying Received header date for real time: 09 Jun
2006 00:07:31 +0100
[16796] dbg: eval: time_t from date=1149808051, rcvd= 09 Jun 2006
00:07:31 +0100
[16796] dbg: eval: trying Received header date for real time: 09 Jun
2006 00:07:30 +0100
[16796] dbg: eval: time_t from date=1149808050, rcvd= 09 Jun 2006
00:07:30 +0100
[16796] dbg: eval: trying Received header date for real time: 9 Jun 2006
01:07:33 -0100
[16796] dbg: eval: time_t from date=1149818853, rcvd= 9 Jun 2006
01:07:33 -0100
[16796] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: eval: all '*From' addrs: [EMAIL PROTECTED]
[16796] dbg: eval: all '*To' addrs: [EMAIL PROTECTED]
--------snip-----------
[16796] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ac2684))
[16796] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: spf: checking HELO (helo=UTLU.oevoly.net, ip=89.83.188.241)
[16796] dbg: spf: cannot load or create Mail::SPF::Query module: Can't
locate Mail/SPF/Query.pm in @INC (@INC contains:
/usr/lib/perl5/site_perl/5.6.1/i386-linux /usr/lib/perl5/site_perl/5.6.1
/usr/lib/perl5/5.6.1/i386-linux /usr/lib/perl5/5.6.1
/usr/lib/perl5/site_perl/5.6.0 /usr/lib/perl5/site_perl
/usr/lib/perl5/vendor_perl/5.6.1/i386-linux
/usr/lib/perl5/vendor_perl/5.6.1 /usr/lib/perl5/vendor_perl) at
/usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 286.
[16796] dbg: plugin: registering glue method for
check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ac2684))
[16796] dbg: plugin: registering glue method for
check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8d09328))
[16796] dbg: plugin: registering glue method for
check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8d09328))
[16796] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: spf: def_spf_whitelist_from: could not find useable
envelope sender
[16796] dbg: eval: date chosen from message: Fri Jun 9 00:07:31 2006
[16796] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: rules: ran eval rule DATE_IN_FUTURE_03_06 ======> got hit
[16796] dbg: plugin: registering glue method for
check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ae65ec))
[16796] dbg: eval: forged-HELO: from=club-internet.fr helo=oevoly.net
by=efficientdns.com
[16796] dbg: eval: forged-HELO: mismatch on HELO: 'oevoly.net' !=
'club-internet.fr'
[16796] dbg: eval: forged-HELO: from=google.com helo=google.com
by=oevoly.net
[16796] dbg: eval: forged-HELO: mismatch on from: 'club-internet.fr' !=
'oevoly.net'
[16796] dbg: rules: running body-text per-line regexp tests; score so
far=2.007
[16796] dbg: rules: ran body rule __LONGWORDS_C ======> got hit: "chump
cutback arkansas cocksure discrepant brass damon annulling chateau april
"
[16796] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "F"
[16796] dbg: uri: running uri tests; score so far=2.007
[16796] dbg: bayes: tie-ing to DB file R/O
/home/cjones/.spamassassin/bayes_toks
[16796] dbg: bayes: tie-ing to DB file R/O
/home/cjones/.spamassassin/bayes_seen
[16796] dbg: bayes: found bayes db version 3
[16796] dbg: bayes: DB journal sync: last sync: 0
[16796] dbg: bayes: not available for scanning, only 21 spam(s) in bayes
DB < 200
[16796] dbg: bayes: not scoring message, returning undef
[16796] dbg: bayes: DB expiry: tokens in DB: 4043, Expiry max size:
150000, Oldest atime: 1138362688, Newest atime: 1149856340, Last expire:
0, Current time: 1149873542
[16796] dbg: bayes: DB journal sync: last sync: 0
[16796] dbg: bayes: untie-ing
[16796] dbg: bayes: untie-ing db_toks
[16796] dbg: bayes: untie-ing db_seen
[16796] dbg: plugin: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8aae818))
[16796] dbg: rules: running raw-body-text per-line regexp tests; score
so far=2.007
[16796] dbg: rules: running full-text regexp tests; score so far=2.007
[16796] dbg: plugin: registering glue method for check_pyzor
(Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8aebc1c))
[16796] dbg: util: current PATH is:
/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin
[16796] dbg: pyzor: pyzor is not available: no pyzor executable found
[16796] dbg: pyzor: no pyzor found, disabling Pyzor
[16796] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8aae818) implements
'check_tick'
[16796] dbg: uridnsbl: select found 1 socks ready
[16796] dbg: uridnsbl: query for f-c-y-i.pk took 1 seconds to look up
(multi.surbl.org.:f-c-y-i.pk)
[16796] dbg: uridnsbl: queries completed: 1 started: 0
[16796] dbg: uridnsbl: queries active: NS=1 at Fri Jun 9 18:19:02 2006
[16796] dbg: check: running tests for priority: 500
[16796] dbg: uridnsbl: select found 1 socks ready
[16796] dbg: uridnsbl: queries completed: 1 started: 0
[16796] dbg: uridnsbl: queries active: at Fri Jun 9 18:19:02 2006
[16796] dbg: dns: success for 15 of 15 queries
[16796] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8aae818) implements
'check_post_dnsbl'
[16796] dbg: rules: running meta tests; score so far=3.339
[16796] dbg: rules: running header regexp tests; score so far=3.339
[16796] dbg: rules: running body-text per-line regexp tests; score so
far=3.339
[16796] dbg: uri: running uri tests; score so far=3.339
[16796] dbg: rules: running raw-body-text per-line regexp tests; score
so far=3.339
[16796] dbg: rules: running full-text regexp tests; score so far=3.339
[16796] dbg: check: running tests for priority: 1000
[16796] dbg: rules: running meta tests; score so far=3.339
[16796] dbg: rules: running header regexp tests; score so far=3.339
[16796] dbg: plugin: registering glue method for
check_from_in_auto_whitelist
(Mail::SpamAssassin::Plugin::AWL=HASH(0x8b8a9e8))
[16796] dbg: config: using "/home/cjones/.spamassassin" for user state
dir
[16796] dbg: locker: safe_lock: created
/home/cjones/.spamassassin/auto-whitelist.lock.-----snip-----.com.16
796
[16796] dbg: locker: safe_lock: trying to get lock on
/home/cjones/.spamassassin/auto-whitelist with 0 retries
[16796] dbg: locker: safe_lock: link to
/home/cjones/.spamassassin/auto-whitelist.lock: link ok
[16796] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in
/home/cjones/.spamassassin/auto-whitelist
[16796] dbg: auto-whitelist: db-based
[EMAIL PROTECTED]|ip=64.233 scores 4/12.024
[16796] dbg: auto-whitelist: AWL active, pre-score: 3.339, autolearn
score: 3.339, mean: 3.006, IP: 64.233.183.27
[16796] dbg: auto-whitelist: add_score: new count: 5, new totscore:
15.363
[16796] dbg: auto-whitelist: DB addr list: untie-ing and unlocking
[16796] dbg: auto-whitelist: DB addr list: file locked, breaking lock
[16796] dbg: locker: safe_unlock: unlink
/home/cjones/.spamassassin/auto-whitelist.lock
[16796] dbg: auto-whitelist: post auto-whitelist score: 3.1725
[16796] dbg: rules: running body-text per-line regexp tests; score so
far=3.1725
[16796] dbg: uri: running uri tests; score so far=3.1725
[16796] dbg: rules: running raw-body-text per-line regexp tests; score
so far=3.1725
[16796] dbg: rules: running full-text regexp tests; score so far=3.1725
[16796] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8cfc478)
implements 'autolearn_discriminator'
[16796] dbg: learn: auto-learn: currently using scoreset 1
[16796] dbg: learn: auto-learn: message score: 3.1725, computed score
for autolearn: 3.339
[16796] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=1.332,
head-points=3.339, learned-points=0
[16796] dbg: learn: auto-learn? no: inside auto-learn thresholds, not
considered ham or spam
[16796] dbg: check: is spam? score=3.173 required=5
[16796] dbg: check:
tests=AWL,DATE_IN_FUTURE_03_06,RCVD_IN_BL_SPAMCOP_NET
[16796] dbg: check:
subtests=__CT,__CTE,__CTYPE_CHARSET_QUOTED,__CT_TEXT_PLAIN,__HAS_MIMEOLE
,__HAS_MSGID,__HAS_OUTLOOK_IN_MAILER,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MA
ILER,__LONGWORDS_C,__MIMEOLE_MS,__MIME_VERSION,__MSGID_OK_HOST,__NONEMPT
Y_BODY,__SANE_MSGID,__TOCC_EXISTS
>From [EMAIL PROTECTED] Fri Jun 09 00:07:31 2006
X-Spam-Checker-Version: SpamAssassin 3.1.3 (2006-06-01) on
-----snip-----.com
X-Spam-Status: No, score=3.2 required=5.0
tests=AWL,DATE_IN_FUTURE_03_06,
RCVD_IN_BL_SPAMCOP_NET autolearn=no version=3.1.3
X-Spam-Level: ***
Received: from cjones by -----snip-----.com with local-bsmtp (Exim
4.52)
id 1FoTb9-0005fg-0l
for [EMAIL PROTECTED]; Fri, 09 Jun 2006 00:07:31 +0100
Received: from d01v-89-83-188-241.d4.club-internet.fr ([89.83.188.241]
helo=UTLU.oevoly.net)
by -----snip-----.com with esmtp (Exim 4.52)
id 1FoTb8-0005eV-CC
for ---------snip----------; Fri, 09 Jun 2006 00:07:30 +0100
Received: from unknown (HELO gsmtp183.google.com) (64.233.183.27)
by UTLU.oevoly.net with SMTP; Fri, 9 Jun 2006 01:07:33 -0100
From: "Mai Hutchinson" <[EMAIL PROTECTED]>
To: <---------snip---------->
Subject: Financial news
Date: Fri, 9 Jun 2006 01:07:33 -0100
MIME-Version: 1.0
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
Thread-Index: HDYN1WDCvofU69LgF9Hxo660Nyu7RWfy7Hn1
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-Id: <[EMAIL PROTECTED]>
For Immediate Release
ALERT ISSUED - Watch F-C-Y-I.PK [EMAIL PROTECTED] Today!
F a l c o n E n e r g y, Inc.
F*C*Y*I*
Last $ 1.25
Market Plus Top Four P1ck
Yesterday change of price was 105% !
VANCOUVER, British Columbia, June 05, 2006 (PRIME ZONE) --
As part of the commitment of Falcon Energy, Inc., a Nevada Corporation,
to keep investors informed of its status and activities, the company is
providing this investor update.
Gas production continues steadily from Falcon Energy's Richmount
Westlock property in Alberta, Canada. This opportunity has proven itself
out as the property and investment have benefited from the surge in
natural gas prices since the well was first tied in May of 2005. The
market price (NYMEX) for natural gas at that time was approximately
$6.50 per MMBTU but in the last year prices stayed over 10.00 per MMBTU
for a 5 month period with several spikes above the $14.00 range. The
company is pleased that the investment continues to provide consistent
revenue for the company and its shareholders.
F a l c o n E n e r g y Inc. has also announced that due to the
confirmed
addition of its mining
exploration properties in Mongolia, that it will shortly be expanding
the executive team to assist in managing this new opportunity. Details
will be forthcoming.
VANCOUVER, British Columbia, May 17, 2006 (PRIME ZONE) -- F a l c o n E
n e r g y , Inc. is pleased to announce that the granting of exploration
licenses for five mining properties in Mongolia has been finalized.
These licenses will be held for a minimum of three years and grant F a l
c o n E n e r g y, Inc. access to the mineral rights for the licensed
properties.
F a l c o n E n e r g y , Inc. had recently sought the mineral rights
to these
significant properties
in the mineral rich region of Mongolia. F a l c o n E n e r g y's
interest in
the region is driven in
part by the anticipation of deploying modern prospecting methods to an
area that abounds in both base and precious metals.
The five licensed areas are:
8825E - The Duhum Hujirt License Area
8454X - Tsagaan Tolgoi Copper/Gold Project
9997X - The Huld License Area
9996X - The Har Tolgoi License Area
9668X - Hutagt License Area
Exploitable mineral resources found in the area in which the licenses
are held include: Gold, base metals such as Copper, Molybdenum, Lead and
Zinc as well as Fluorite and Uranium.
-----Original Message-----
From: Sietse van Zanen [mailto:[EMAIL PROTECTED]
Sent: 09 June 2006 11:20
To: Jones, Chris L: IT (LDN); users@spamassassin.apache.org
Subject: RE: Low scoring since 3.1.1 upgrade
Please send in some examples and output of spamassassin --lint -D.
version numbers, milter version, sendmail version, configuration files
etc. etc.
You are aware about changes to the operation & configuration of SA3.1.1
and 3.1.2? Lots of things have changed and this needs to be adjusted in
the config. This is especially true if you used 2.x version before.
Every check is now in plugins, that need to be explicitely enabled.
-Sietse
________________________________
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Sent: Fri 09-Jun-06 11:11
To: users@spamassassin.apache.org
Subject: Low scoring since 3.1.1 upgrade
Hi all,
Ever since I upgraded to spamassassin 3.1.1 spam filtering has not been
working properly. In short all spam is assigned a score so low that it
always gets through.
Background info:
* Everything worked fine prior to upgrade, previous version was
3.1.0
* Using the spamd method
* Base OS: redhat linux
* Manual testing with "spamassassin -D <" results in the same
score as messages getting through spamd
* I've flushed my bayes DB, didn't make a difference
Has anyone else experienced similar problems?
Thanks in advance,
Chris.
------------------------------------------------------------------------
For more information about Barclays Capital, please visit our web site
at http://www.barcap.com <http://www.barcap.com/> .
Internet communications are not secure and therefore the Barclays Group
does not accept legal responsibility for the contents of this message.
Although the Barclays Group operates anti-virus programmes, it does not
accept responsibility for any damage whatsoever that is caused by
viruses being passed. Any views or opinions presented are solely those
of the author and do not necessarily represent those of the Barclays
Group. Replies to this email may be monitored by the Barclays Group for
operational or business reasons.
------------------------------------------------------------------------
