I'm beginning to think that maybe spamass-milter (spamass-milter-0.3.1) isn't passing the header to spamc/d - I've had exactly 1 hit on this rule all afternoon thru spamd, despite 2500+ headers being added to emails:
[EMAIL PROTECTED] matt]# tail -400000 /var/log/maillog | grep p0f | grep "\bLinux\b" | wc -l 2504 Jul 19 14:57:45 svr1 sendmail[19122]: l6JJvT9m019122: Milter add: header: X-milter-p0f-Report: server.example.com [nn.nn.nn.nn] (unknown) Linux 2.6, seldom 2.4 (older, 4) hops 23 link ethernet/modem up 185 score 0 flags 0x0 Jul 19 14:57:47 svr1 sendmail[19231]: l6JJvbxY019231: Milter add: header: X-milter-p0f-Report: server.example.com [nn.nn.nn.nn] (unknown) Linux 2.6? (barebone, rare!) hops 1 link ethernet/modem score 0 flags 0x0 Just ONE email thru spamd has matched Matthew > -----Original Message----- > From: Matthew Dickinson [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 19, 2007 14:30 > To: users@spamassassin.apache.org > Subject: RE: Rule not firing in spamd > > > -----Original Message----- > > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > > Sent: Thursday, July 19, 2007 14:05 > > To: users@spamassassin.apache.org > > Subject: Re: Rule not firing in spamd > > > > On Thu, Jul 19, 2007 at 01:05:43PM -0500, Matthew Dickinson wrote: > > > When running spamd I get: > > > > tests=AWL,BAYES_00,DKIM_POLICY_SIGNSOME,DK_POLICY_SIGNSOME,TVD_SPACE_RATIO,U > > > NPARSEABLE_RELAY > > > > > > With spamassassin -D: > > > > tests=AWL,BAYES_00,DKIM_POLICY_SIGNSOME,DK_POLICY_SIGNSOME,JD_SPACES_KEYWORD > > > S,P0F_Linux,TVD_SPACE_RATIO > > > > have you restarted spamd since adding the rule? > > > > Yup - and sa-compile in case that affected it too > > Matthew
