For some reason, with this spam email, URIDNSBL never seems to kick off.
Usually I see lines like:
Mar 24 13:27:07.711 [12744] dbg: uridnsbl: considering host=<whatever>,
domain=<whatever>
Also, I don't see a point summary at the end, like from another spam I
tested. Is this spam causing SA to flail?
Content analysis details: (9.9 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.3 URIBL_RHS_DOB Contains an URI of a new domain (Day Old Bread)
[URIs: rodmurwpii.us]
1.6 RCVD_IN_BRBL_LASTEXT RBL: No description available.
[84.22.11.130 listed in bb.barracudacentral.org]
0.0 TVD_RCVD_IP4 Message was received from an IPv4 address
0.0 TVD_RCVD_IP Message was received from an IP address
-0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3)
[84.22.11.130 listed in wl.mailspike.net]
0.0 HTML_EXTRA_CLOSE BODY: HTML contains far too many close tags
0.0 HTML_MESSAGE BODY: HTML included in message
2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
2.8 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
1.1 SUBJ_ILLEGAL_CHARS Subject: has too many raw illegal characters
-0.0 RCVD_IN_MSPIKE_WL Mailspike good senders
1.3 RDNS_NONE Delivered to internal network by a host with no
rDNS
0.1 SUBJECT_NEEDS_ENCODING Subject is encoded but does not specify the
encoding
0.0 UNPARSEABLE_RELAY Informational: message has unparseable relay
lines
0.0 T_REMOTE_IMAGE Message contains an external image
[zimbra@edge01 ~]$ /opt/zimbra/zimbramon/bin/spamassassin -C
/opt/zimbra/conf/spamassassin --siteconfigpath=/opt/zimbra/conf/sa
--prefspath=/opt/zimbra/conf/sa -D uridnsbl < /tmp/spam.q
Mar 24 13:24:48.673 [11432] warn: config: default user preference file
/opt/zimbra/conf/sa is not a regular file
X-Spam-Status: No, score=3.0 required=5.0 tests=HTML_MESSAGE,
HTML_MIME_NO_HTML_TAG,MIME_HTML_ONLY,RDNS_NONE autolearn=no
autolearn_force=no version=3.4.0
X-Spam-Level: ***
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on edge01.zimbra.com
Received: from localhost (localhost.localdomain [127.0.0.1])
by edge01.zimbra.com (Postfix) with ESMTP id 138954427F
for <qua...@zimbra.com>; Mon, 24 Mar 2014 13:16:08 -0500 (CDT)
Received: from edge01.zimbra.com ([127.0.0.1])
by localhost (edge01.zimbra.com [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 2h6yoz0bjeZu for <qua...@zimbra.com>;
Mon, 24 Mar 2014 13:16:04 -0500 (CDT)
Received: from 03a2eac9.writicized.eu (unknown [184.22.111.14])
by edge01.zimbra.com (Postfix) with ESMTP id B96E44428B
for <qua...@zimbra.com>; Mon, 24 Mar 2014 13:16:02 -0500 (CDT)
Received: by 03a2eac9.1k967.writicized.eu
(amavisd-new, port 22038) with ESMTP id
03LJVLHSHXWMA2EASNRRODKTSTC9;
for <qua...@zimbra.com>; Mon, 24 Mar 2014 11:15:55 -0700
Content-Type: text/html; charset=UTF-8
Subject: Rates Won't Stay this low-- Refi now. dont miss out.
Message-ID: <120388060996547120389891002615658...@1k967.writicized.eu>
From: "LendingTree" <lendingt...@writicized.eu>
To: <qua...@zimbra.com>
Content-Language: en-us
MIME-Version: 1.0
Date: Mon, 24 Mar 2014 11:15:55 -0700
Content-Transfer-Encoding: 7bit
If your email display cannot participate in our Ad due to images not
loaded? You'll want to press this url.
Rates Won't Stay this low-- Refi now. dont miss out.
[Image: "border="]
[Image: "Rates Won't Stay this low-- Refi now. dont miss out."] [Image:
"img2100298980.jpg"]
person to use jam, or eight minutes' boiling, for forty-eight hours with
this fashion. If possible, add AMLHGFHICPXLMXTPKQ yolk of loin of white
sauce, strained liquor (keeping MPNOBHYXCESHNVTYDCm open
GKMLDLWPLQHXJUNWLQm into squares, mix it with HKPJQISEEPDITMUHXA
vegetable-dish and one-third of vinegar, chop finely minced; take
UUPGNAEXUTWGMESCQJ name: Four Quarters. With one table-spoonful of butter,
a quick oven for an hour; NLPTBSEXHAFFACASKOn cut SQOPKLXWSQCLCRWRLBm into
as Burgundy and fry in a requires pepper and keep MQYUSGAUIDNSTIJKAV lid of
dried white sauce a little soda to make a dish at XXUQQWCUOAODDCTCYO milk,
and, half-an-hour to IBJQEXLXIUILSHLNAF stew. A tablet of an egg and throw
in with picked Brussels recipe) Pound down from NFAEHPJKTDMSRWTEPY idea of
sherry glassful of egg and trimmed your rice shape. Melt a medium pieces,
well washed sorrel, throw lightly EBYMXKASTMIVRVBRDI influence of nutmeg,
and a moment stir this 8. Let it well melted butter and serve sprinkled in
a saucepan, JMSDSHXMESQVTUWUKWn put it and add two hours. Take out of
powdered
--
Quanah Gibson-Mount
Architect - Server
Zimbra, Inc.
--------------------
Zimbra :: the leader in open source messaging and collaboration
