Ok, I think something is still wrong with my VBounce setup as a great % of backscatter doesn't get tagged with "ANY_BOUNCE_MESSAGE".

Could I request from a few people on the list to send me a sample message attached as text which I can use "spamassassin -Lt < sample-vbounce.txt" on to see if I get the right content analysis (please send your content analysis of it).

As a sample, I'll attach another message to this one which gave me the following (but not ANY_BOUNCE_MESSAGE):

X-Spam-Report: *  0.4 URI_HEX URI: URI hostname has long hexadecimal sequence *  0.0 NUMERIC_HTTP_ADDR URI: Uses a numeric IP address in URL * -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% *      [score: 0.0000] *  1.5 URIBL_SBL Contains an URL listed in the SBL blocklist *      [URIs: veloxzone.com.br] *  1.0 AWL AWL: From: address is in the auto white-list



As you can see from the attachment this email contains the original headers (but not the body) of the bouncing message. The Received: fields of these headers contain none of my whitelisted servers. As a result, I would expect VBounce to tag it with "ANY_BOUNCE_MESSAGE".

My local.cf file, found in ~/.spamassassin contains the following (should anything be in my user_prefs ?) :

whitelist_bounce_relays smtp.onething.net
whitelist_bounce_relays mail.anotherthing.com 
whitelist_bounce_relays owa.otherserver.com
whitelist_bounce_relays mail.otherserver.com

Again, my spamassassin 2>&1 -D --lint | grep ounce gives me the following:

[13492] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
[13492] dbg: config: fixed relative path: /var/lib/spamassassin/3.002004/updates_spamassassin_org/20_vbounce.cf
[13492] dbg: config: using "/var/lib/spamassassin/3.002004/updates_spamassassin_org/20_vbounce.cf" for included file
[13492] dbg: config: read file /var/lib/spamassassin/3.002004/updates_spamassassin_org/20_vbounce.cf

Thanks in advance,

Erik 

--- Begin Message ---
This is an automatically generated Delivery Status Notification

THIS IS A WARNING MESSAGE ONLY.

YOU DO NOT NEED TO RESEND YOUR MESSAGE.

Delivery to the following recipient has been delayed:

     [EMAIL PROTECTED]

Message will be retried for 1 more day(s)

   ----- Message header follows -----

Received: by 10.141.88.3 with SMTP id q3mr3743149rvl.46.1210605546345;
        Mon, 12 May 2008 08:19:06 -0700 (PDT)
Return-Path: <[EMAIL PROTECTED]>
Received: from 20178235020.user.veloxzone.com.br ([201.78.235.20])
        by mx.google.com with ESMTP id f21si10936600rvb.0.2008.05.12.08.19.00;
        Mon, 12 May 2008 08:19:06 -0700 (PDT)
Received-SPF: neutral (google.com: 201.78.235.20 is neither permitted nor 
denied by best guess record for domain of [EMAIL PROTECTED]) 
client-ip=201.78.235.20;
Authentication-Results: mx.google.com; spf=neutral (google.com: 201.78.235.20 
is neither permitted nor denied by best guess record for domain of [EMAIL 
PROTECTED]) [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
From: "dukey babak" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Mother's day special discount prices 
Date: Mon, 12 May 2008 13:31:29 +0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0002_01C8B443.0563A481"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198

   ----- Message body suppressed -----


--- End Message ---

Reply via email to