Re: KAM contrib rules and v3.4 svn

[Kevin A. McGrail]

Rules that are encapsulated by if blocks still fail dependency checks because the dependency checks do not parse the if blocks. For example, the rule using __ KAM_BODY_LENGTH_LT_128 has a check for the required code. In any case, you can ignore these dependencies as they won't cause functional issues. I generally try and write my rules so they are effective for a fairly wide swath of versions. Regards, KAM On 5/21/2013 8:07 PM, Kevin Miller wrote: I'm seeing the same thing with the KAM rules in SA 3.3.1. I pull KAM.cf down from http://www.peregrinehw.com/downloads/SpamAssassin/contrib/KAM.cf placing it in /etc/mail/spamassassin. Is that not the place to get the KAM rulesets? I grab it with a cron.daily script - not sure if there's a channel I should be specifying instead. The KAM rules that don't fail dependencies are getting compiled and spamassassin is using them. Running the lint test in Mailwatch for MailScanner returns the following: May 21 14:03:02.175 [12193] dbg: rules: meta test KAM_BBB has undefined dependency 'KAM_RAPTOR' 0.00173 May 21 14:03:02.180 [12193] dbg: rules: meta test KAM_ARREST has undefined dependency '__KAM_BODY_LENGTH_LT_128' 0.00478 May 21 14:03:02.184 [12193] dbg: rules: meta test KAM_BLANK01 has undefined dependency 'UNDISC_RECIPS' 0.00402 May 21 14:03:02.184 [12193] dbg: rules: meta test KAM_BLANK01 has undefined dependency 'FM_NO_FROM_OR_TO' 7.0E-5 May 21 14:03:02.184 [12193] dbg: rules: meta test KAM_BLANK01 has undefined dependency 'FM_NO_TO' 6.0E-5 May 21 14:03:02.185 [12193] dbg: rules: meta test KAM_WEIGHT2 has undefined dependency '__KAM_WEIGHT3_1' 0.00054 May 21 14:03:02.197 [12193] dbg: rules: meta test KAM_CARD has undefined dependency 'KAM_RPTR_SUSPECT' 0.01167 May 21 14:03:02.198 [12193] dbg: rules: meta test KAM_NOTIFY2 has undefined dependency 'KAM_IFRAME' 0.00187 May 21 14:03:02.199 [12193] dbg: rules: meta test KAM_NOTIFY2 has undefined dependency 'T_HEADER_FROM_DIFFERENT_DOMAINS' 7.0E-5 May 21 14:03:02.201 [12193] dbg: rules: meta test KAM_BLANK02 has undefined dependency 'MSGID_FROM_MTA_ID' 0.00196 May 21 14:03:02.204 [12193] dbg: rules: meta test KAM_BADPDF1 has undefined dependency 'GMD_PDF_EMPTY_BODY' 0.00368 May 21 14:03:02.209 [12193] dbg: rules: meta test KAM_BADPDF2 has undefined dependency 'KAM_RPTR_SUSPECT' 0.00532 May 21 14:03:02.210 [12193] dbg: rules: meta test KAM_BADPDF2 has undefined dependency 'KAM_RPTR_FAILED' 7.0E-5 May 21 14:03:02.211 [12193] dbg: rules: meta test KAM_ADWORD has undefined dependency 'KAM_RPTR_SUSPECT' 0.00128 May 21 14:03:02.211 [12193] dbg: rules: meta test KAM_ADWORD has undefined dependency 'KAM_RPTR_FAILED' 7.0E-5 May 21 14:03:02.214 [12193] dbg: rules: meta test KAM_YAHOO has undefined dependency '__KAM_BODY_LENGTH_LT_128' 0.00282 May 21 14:03:02.223 [12193] dbg: rules: meta test KAM_PHISH2 has undefined dependency 'KAM_FAKERBL' 0.00937 If one does a search in that file for KAM_WEIGHT3_1 you'll see it referenced only in the KAM_WEIGHT2 line, but never defined elsewhere in the file: mkm@mxg:/etc/mail/spamassassin> grep __KAM_WEIGHT3_1 KAM.cf meta KAM_WEIGHT2 (__KAM_WEIGHT2_1 + __KAM_WEIGHT3_1 + __KAM_SHORT >= 2) Oddly, it complains about KAM_BBB missing KAM_RAPTOR, however that does exist. It has it's own score though, so maybe it gets excluded for that? mkm@mxg:/etc/mail/spamassassin> grep KAM_RAPTOR KAM.cf body KAM_RAPTOR /altered by our Raptor filters/i describe KAM_RAPTOR PCCC Raptor altered the email score KAM_RAPTOR 2.5 meta KAM_BBB (__KAM_BBB1 + __KAM_BBB2 + __KAM_BBB3 + __KAM_BBB4 + __KAM_BBB5 + SPF_FAIL + __KAM_GALLERY5 + KAM_RAPTOR >= 4) Similar story with some of the other rules above... ...Kevin -- Kevin Miller Network/email Administrator, CBJ MIS Dept. 155 South Seward Street Juneau, Alaska 99801 Phone: (907) 586-0242, Fax: (907) 586-4500 Registered Linux User No: 307357 -- Kevin A. McGrail President Peregrine Computer Consultants Corporation 3927 Old Lee Highway, Suite 102-C Fairfax, VA 22030-2422 http://www.pccc.com/ 703-359-9700 x50 / 800-823-8402 (Toll-Free) 703-359-8451 (fax) kmcgr...@pccc.com