Peter Pluta wrote:
>
>
>
> Gary V-2 wrote:
>>
>>>Vahur Jõesalu wrote:
>>> >
>>> > Peter Pluta wrote:
>>> >> I'm running FreeBSD 6.1 with Postfix + Amavisd-new + Spamassassin
>>>(razor,
>>> >> pyazor) + Clamav. I'm getting some nasty spams, as in 20-30 per day.
>>> My
>>> >> email is relatively new, i'm trying to figure out if razor and pyzor
>>>are
>>> >> working.
>>> >>
>>> >> I noticed this in my spamassassin -D output:
>>> >> [81423] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from
>>>@INC
>>> >> [81423] dbg: pyzor: local tests only, disabling Pyzor
>>> >> [81423] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from
>>>@INC
>>> >> [81423] dbg: razor2: local tests only, skipping Razor
>>> >>
>>> >>
>>> >> Is that a problem?
>>> >>
>>> >> Here is my local.cf file in /usr/local/etc/mail/spamassassin/
>>> >> skip_rbl_checks 0
>>> >> razor_config /var/amavis/.razor/razor-agent.conf
>>> >> pyzor_options --homedir /var/amavis/.pyzor
>>> >>
>>> >> Any feedback would be greatly appreicated!
>>> >>
>>> >
>>> > Hi
>>> >
>>> > make sure you have set
>>> >
>>> > $sa_local_tests_only = 0;
>>> >
>>> > in amavisd.conf
>>> >
>>> > all the best
>>> > Vahur
>>> >
>>>
>>>I have that already in amavisd.conf in /usr/local/etc/
>>>
>>
>> test like this:
>> wget http://spamassassin.apache.org/full/3.0.x/dist/sample-spam.txt
>> spamassassin -D razor2,pyzor < sample-spam.txt
>>
>>
>> Gary V
>>
>> _________________________________________________________________
>> Dont miss your chance to WIN $10,000 and other great prizes from
>> Microsoft
>> Office Live http://clk.atdmt.com/MRT/go/aub0540003042mrt/direct/01/
>>
>>
>>
>
> Look like it's wokring, odd.
>
> [86465] info: config: failed to parse line, skipping, in
> "/usr/local/etc/mail/sp
>
> amassassin/v310.pre": # This is the right place to customize your
> installation o
>
> f SpamAssassin.
> [86465] dbg: pyzor: network tests on, attempting Pyzor
> [86465] dbg: razor2: razor2 is available, version 2.82
> Razor-Log: read_file: 15 items read from
> /var/amavis/.razor/razor-agent.conf
> Razor-Log: Computed razorhome from env: /root/.razor
>
>
>
I just got a nasty spam and ran it thru spamassassin -D razor2,pyzor <
sample-spam.txt
Here is the output:
[root /usr/local/etc/mail/spamassassin]> spamassassin -D razor2,pyzor <
sample-spam.txt
[87641] info: config: failed to parse line, skipping, in
"/usr/local/etc/mail/spamassassin/v310.pre": # This is the right place to
customize your installation of SpamAssassin.
[87641] dbg: pyzor: network tests on, attempting Pyzor
[87641] dbg: razor2: razor2 is available, version 2.82
Razor-Log: read_file: 15 items read from
/var/amavis/.razor/razor-agent.conf
Razor-Log: Computed razorhome from env: /root/.razor
Jun 09 18:55:27.449519 check[87641]: [ 2] [bootup] Logging initiated
LogDebugLevel=9 to stdout
Jun 09 18:55:27.449946 check[87641]: [ 5] computed
razorhome=/var/amavis/.razor, conf=/var/amavis/.razor/razor-agent.conf,
ident=/var/amavis/.razor/identity-ruVp1KkmvP
Jun 09 18:55:27.450167 check[87641]: [ 8] Client supported_engines: 4 8
Jun 09 18:55:27.450622 check[87641]: [ 8] prep_mail done: mail 1
headers=861, mime0=1388
Jun 09 18:55:27.450968 check[87641]: [ 5] read_file: 1 items read from
/var/amavis/.razor/servers.discovery.lst
Jun 09 18:55:27.451300 check[87641]: [ 5] read_file: 2 items read from
/var/amavis/.razor/servers.nomination.lst
Jun 09 18:55:27.451604 check[87641]: [ 5] read_file: 2 items read from
/var/amavis/.razor/servers.catalogue.lst
Jun 09 18:55:27.451975 check[87641]: [ 9] Assigning defaults to
folly.cloudmark.com
Jun 09 18:55:27.452155 check[87641]: [ 9] Assigning defaults to
joy.cloudmark.com
Jun 09 18:55:27.452323 check[87641]: [ 9] Assigning defaults to
c104.cloudmark.com
Jun 09 18:55:27.452483 check[87641]: [ 9] Assigning defaults to
c103.cloudmark.com
Jun 09 18:55:27.453246 check[87641]: [ 5] read_file: 22 items read from
/var/amavis/.razor/server.folly.cloudmark.com.conf
Jun 09 18:55:27.453787 check[87641]: [ 5] read_file: 22 items read from
/var/amavis/.razor/server.folly.cloudmark.com.conf
Jun 09 18:55:27.454357 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c102.cloudmark.com.conf
Jun 09 18:55:27.454890 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c102.cloudmark.com.conf
Jun 09 18:55:27.455468 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c101.cloudmark.com.conf
Jun 09 18:55:27.455999 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c101.cloudmark.com.conf
Jun 09 18:55:27.456546 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c103.cloudmark.com.conf
Jun 09 18:55:27.457076 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c103.cloudmark.com.conf
Jun 09 18:55:27.457618 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c104.cloudmark.com.conf
Jun 09 18:55:27.458149 check[87641]: [ 5] read_file: 23 items read from
/var/amavis/.razor/server.c104.cloudmark.com.conf
Jun 09 18:55:27.458360 check[87641]: [ 5] 139051 seconds before closest
server discovery
Jun 09 18:55:27.458525 check[87641]: [ 6] c104.cloudmark.com is a Catalogue
Server srl 5110; computed min_cf=21, Server se: 3BC8
Jun 09 18:55:27.458712 check[87641]: [ 8] Computed supported_engines: 4 8
Jun 09 18:55:27.458880 check[87641]: [ 8] Using next closest server
c104.cloudmark.com:2703, cached info srl 5110
Jun 09 18:55:27.459015 check[87641]: [ 8] mail 1 has no subject
Jun 09 18:55:27.459398 check[87641]: [ 6] preproc: mail 1.0 went from 1388
bytes to 1350
Jun 09 18:55:27.459558 check[87641]: [ 6] computing sigs for mail 1.0, len
1350
Jun 09 18:55:27.460974 check[87641]: [ 6] Engine (8) didn't produce a
signature for mail 1.0
Jun 09 18:55:27.461238 check[87641]: [ 6] skipping whitelist file (empty?):
/var/amavis/.razor/razor-whitelist
Jun 09 18:55:27.461384 check[87641]: [ 5] Connecting to c104.cloudmark.com
...
Jun 09 18:55:27.572034 check[87641]: [ 8] Connection established
Jun 09 18:55:27.572276 check[87641]: [ 4] c104.cloudmark.com >> 36 server
greeting: sn=C&srl=5110&a=1&a=cg&ep4=7542-10
Jun 09 18:55:27.572655 check[87641]: [ 4] c104.cloudmark.com << 25
Jun 09 18:55:27.572777 check[87641]: [ 6] cn=razor-agents&cv=2.82
Jun 09 18:55:27.572990 check[87641]: [ 6] c104.cloudmark.com is a Catalogue
Server srl 5110; computed min_cf=21, Server se: 3BC8
Jun 09 18:55:27.573231 check[87641]: [ 8] Computed supported_engines: 4 8
Jun 09 18:55:27.573418 check[87641]: [ 8] mail 1.0 e4 sig:
ISmOiVM3dHgzoA4RSWhqj9mSxdsA
Jun 09 18:55:27.573587 check[87641]: [ 5] mail 1.0 e8 got no sig
Jun 09 18:55:27.573821 check[87641]: [ 8] preparing 1 queries
Jun 09 18:55:27.574023 check[87641]: [ 8] sending 1 batches
Jun 09 18:55:27.574250 check[87641]: [ 4] c104.cloudmark.com << 52
Jun 09 18:55:27.574380 check[87641]: [ 6]
a=c&e=4&ep4=7542-10&s=ISmOiVM3dHgzoA4RSWhqj9mSxdsA
Jun 09 18:55:27.793959 check[87641]: [ 4] c104.cloudmark.com >> 5
Jun 09 18:55:27.794225 check[87641]: [ 6] response to sent.2
p=0
Jun 09 18:55:27.794619 check[87641]: [ 6] mail 1.0 e=4
sig=ISmOiVM3dHgzoA4RSWhqj9mSxdsA: sig not found.
Jun 09 18:55:27.794761 check[87641]: [ 7] method 4: mail 1.0: no-contention
part, spam=0
Jun 09 18:55:27.794869 check[87641]: [ 7] method 4: mail 1: all
non-contention parts not spam, mail not spam
Jun 09 18:55:27.794999 check[87641]: [ 3] mail 1 is not known spam.
Jun 09 18:55:27.795174 check[87641]: [ 5] disconnecting from server
c104.cloudmark.com
Jun 09 18:55:27.795355 check[87641]: [ 4] c104.cloudmark.com << 5
Jun 09 18:55:27.795480 check[87641]: [ 6] a=q
[87641] dbg: razor2: part=0 engine=4 contested=0 confidence=0
[87641] dbg: razor2: results: spam? 0
[87641] dbg: razor2: results: engine 8, highest cf score: 0
[87641] dbg: razor2: results: engine 4, highest cf score: 0
[87641] dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
[87641] dbg: pyzor: opening pipe: /usr/local/bin/pyzor --homedir
/var/amavis/.pyzor check < /tmp/.spamassassin87641PmERX9tmp
[87641] dbg: pyzor: [87642] finished: exit=0x0100
[87641] dbg: pyzor: got response: 66.250.40.33:24441 (200, 'OK') 0 0
[87641] info: rules: meta test HS_PHARMA_1 has dependency
'HS_SUBJ_ONLINE_PHARMACEUTICAL' with a zero score
Received: from localhost by mail.***.net
with SpamAssassin (version 3.2.0);
Sat, 09 Jun 2007 18:55:27 -0500
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) on
mail.placidpublishing.net
X-Spam-Level: *****
X-Spam-Status: Yes, score=5.4 required=5.0
tests=MISSING_DATE,MISSING_HB_SEP,
MISSING_HEADERS,MISSING_MID,MISSING_SUBJECT,NO_HEADERS_MESSAGE,NO_RECEIVED,
NO_RELAYS autolearn=no version=3.2.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_466B3DEF.ABBE62C5"
This is a multi-part message in MIME format.
------------=_466B3DEF.ABBE62C5
Content-Type: text/plain; charset=iso-8859-1
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "mail.placidpublishing.net",
has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
The administrator of that system for details.
Content preview: Paseo De La Castellana 15-89, 28008 Madrid,Spain Branch.
Ref.
Nº: ES/007/05/12/MAD. Batch. Nº: GHT/2907/333/05. www.loteria.com YOUR
E-MAIL
ADDRESS WON THE LOTTERY. We wish to congratulate you over your email
success
in our computer BALLOTING SWEEPSTAKE held on June 9th, 2007. This is a
millennium
scientific computer game in which email addresses were used. It is a
promotional
program aimed at encouraging internet users; therefore you do not need to
buy ticket to enter for it. Your email address attached to ticket star
number
(9901-0148-790-691) drew the EUROMILLION lucky numbers 3-19-26-49-50
which
consequently won the draw in the Second category.You have been approve
for
the star prize of EUR 787,248.26. (Seven Hundred And Eighty Seven
housand,
Two Hundred And Fourty Eight Euros,Twenty Six Cents) [...]
Content analysis details: (5.4 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.0 MISSING_MID Missing Message-Id: header
0.0 MISSING_DATE Missing Date: header
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
2.5 MISSING_HB_SEP Missing blank line between message header and
body
1.6 MISSING_HEADERS Missing To: header
1.3 MISSING_SUBJECT Missing Subject: header
-0.0 NO_RECEIVED Informational: message has no Received headers
0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
headers
------------=_466B3DEF.ABBE62C5
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Euro Million Loteria Award
Paseo De La Castellana
15-89, 28008 Madrid,Spain Branch.
Ref. Nº: ES/007/05/12/MAD.
Batch. Nº: GHT/2907/333/05.
www.loteria.com
YOUR E-MAIL ADDRESS WON THE LOTTERY.
We wish to congratulate you over your email success in our computer
BALLOTING SWEEPSTAKE held on June 9th, 2007. This is a millennium
scientific computer game in which email addresses were used. It is a
promotional program aimed at encouraging internet users; therefore you do
not need to buy ticket to enter for it. Your email address attached to
ticket star number (9901-0148-790-691) drew the EUROMILLION lucky numbers
3-19-26-49-50 which consequently won the draw in the Second category.You
have been approve for the star prize of EUR 787,248.26. (Seven Hundred
And Eighty Seven housand, Two Hundred And Fourty Eight Euros,Twenty Six
Cents)
CONGRATULATIONS !!!
You are advised to keep this winning very confidential until you receive
your lump prize in your account or optional cheque issuance to you. This
is a protective measure to avoid double claiming by people you may tell as
we have had cases like this before. You are required to provide the
information below:
Name, Telephone Number, Fax Number, Wining Ticket Number, Reference Number
and Amount Won.
This information For processing of your winning fund should be sent to our
registered claim agent in address below.
Guarantee Trust Agency.
Mr.Luis Roberto.
Address: Sin Numero Madrid Spain.
Telephone: 0034636287740.
E-mail: [EMAIL PROTECTED]
Remember, all winning must be claimed not later than June 30th, 2007.
Please note, in order to avoid unnecessary delays and complications,
remember to quote your reference number and batch number in all
correspondence. Furthermore, should there be any change of address do
inform our agent as soon as possible.
ONCE AGAIN, CONGRATULATIONS.
Best Regards,
Mrs. Emily Simon,
Lottery Co-Ordinator.
The information transmitted is intended only for the person or entity to
whom or which it is addressed. Unauthorised use, disclosure or copying is
strictly prohibited. The sender accepts no liability for the improper
transmission of this communication nor for any delay in its receipt.
------------=_466B3DEF.ABBE62C5--
--
View this message in context:
http://www.nabble.com/Pyzor-and-Razor-Are-They-Working--tf3895267.html#a11044782
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
