SA problem since MS upgrade

Matt Doherty Matthew_doherty at DATAWATCH.COM
Thu Aug 29 13:59:46 IST 2002


I have a RedHat 7.3 with no upgrades to sendmail, and Mailscanner is great
with spamassassin.

Matt Doherty
IT Dept
Datawatch Corp

>>In a world without walls or fences, who needs Windows and Gates?<<

  -----Original Message-----
  From: Brandon Friedman [mailto:brandonf at BFCONSULT.CO.ZA]
  Sent: Thursday, August 29, 2002 4:05 AM
  To: MAILSCANNER at JISCMAIL.AC.UK
  Subject: Re: SA problem since MS upgrade


  Hi Julian

  I haven't done very much messing around on the box as it is our main
  production server. I have been testing on a test server but I can't seem
  to replicate the problem

  BTW it a RH7.3 box with sendmail

  I also edited the whitelist and added the From and To statements. What I
  can gather is that this was more an issue with whitelist members be
  tagged as spammers?

  The rest seem to be genuine spam alerts.

  Julian Field wrote:

  > First off, has anyone else seen this problem?
  > I haven't heard any reports of this from anyone else, so it may be a
Perl
  > oddity in your setup.
  >
  > What version of Perl are you using? And on what operating system?
  >
  > Are you getting the spam report in the log for these messages as well as
  > the subject-line tag? (you might need to turn on spam logging first)
  >
  > Please try changing lines 442-443 of sendmail.pl from
  > $IsSpam->{$mID} = 1 if $ThisIsSpam;
  > $IsSpam->{$mID} = 'high' if $ThisIsHigh;
  > to
  > $IsSpam->{"$mID"} = 1 if $ThisIsSpam;
  > $IsSpam->{"$mID"} = 'high' if $ThisIsHigh;
  >
  > If you aren't getting the log entries as well, then for some reason
  > $ThisIsHigh is being set without $ThisIsSpam being set (which shouldn't
be
  > possible).
  >
  > Let's see what happens now (and see what other responses we get from
anyone
  > else), then I'll dig further.
  >
  > I've just done a diff between 3.22-10 and 3.22-12. All the spam
detection
  > code is in sendmail.pl and here's the diff between the 2 versions of it:
  >
  >> 4c4
  >> < # $Id: sendmail.pl,v 1.99.2.22 2002/07/17 15:27:02 jkf Exp $
  >> ---
  >> > # $Id: sendmail.pl,v 1.99.2.28 2002/07/30 15:51:46 jkf Exp $
  >
  > In other words, none of that code has changed, so the change in
behaviour
  > has got to be something a lot more subtle...
  >
  > Keep me posted.
  > Jules
  > At 20:30 27/08/2002, you wrote:
  >
  >> Hi folks
  >>
  >> I upgrade my mailscanner to mailscanner-3.22-12 from
mailscanner-3.22-10.
  >>
  >> The problem is that some e-mail message....(HTML) are being tagged as
  >> spam in the subject line but I looked at the message source and it
  >> indicates that it isn't spam:
  >>
  >> X-MailScanner: Found to be clean
  >> X-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin
(score=4.7,
  >> required 8, SUBJ_HAS_Q_MARK, DEAR_SOMEBODY, CLICK_BELOW,
  >> DOUBLE_CAPSWORD, EMAIL_MARKETING, SUPERLONG_LINE,
  >> HTML_WITH_BGCOLOR,
  >> MAILTO_LINK, FREQ_SPAM_PHRASE, AWL)
  >>
  >>
  >> Any ideas?
  >> As a matter of fact I see that this is actually whitelisted!
  >> --
  >>
  >> Regards
  >> Brandon Friedman
  >> Cell:083 408 7840
  >> E-mail: brandonf at bfconsult.co.za
  >> www.bfconsult.co.za
  >
  >
  > --
  > Julian Field Teaching Systems Manager
  > jkf at ecs.soton.ac.uk Dept. of Electronics & Computer Science
  > Tel. 023 8059 2817 University of Southampton
  > Southampton SO17 1BJ
  >


  --

  Regards
  Brandon Friedman
  Cell:083 408 7840
  E-mail: brandonf at bfconsult.co.za
  www.bfconsult.co.za

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20020829/22c47288/attachment.html


More information about the MailScanner mailing list