SpamAssassin weirdness...

[Peter Bates]

Hello all...

I'm still testing/playing with the new Postfix support (which seems fine and dandy), but I'm now seeing strangeness with SA.

Here's the 'sample-spam.txt' from the SA distribution (md5sum f903a50b57f303b5395bb4c74058b60d if anyone wants to check!) sent through MS & SA:

Apr 23 15:05:27 hancock MailScanner[15586]: Message 5BE7514A139 from [193.63.251.41] (anstpbat at gilliam.lshtm.ac.uk) to lshtm.ac.uk is spam, SpamAssassin (score=8.4, required 8, DATE_IN_PAST_12_24, DRASTIC_REDUCED, HOME_EMPLOYMENT, INVALID_DATE, INVALID_MSGID, NO_REAL_NAME, ONCE_IN_LIFETIME, RCVD_IN_OSIRUSOFT_COM, REMOVE_SUBJ, UNDISC_RECIPS)

Now, if I set 'Debug = yes' in MailScanner.conf, and also 'Debug SpamAssassin = yes', and send the same message through, the end score is:

debug: is spam? score=11.5 required=8 tests=DATE_IN_PAST_12_24,DCC_CHECK,DRASTIC_REDUCED,HOME_EMPLOYMENT,INVALID_DATE,INVALID_MSGID,NO_REAL_NAME,ONCE_IN_LIFETIME,RCVD_IN_OSIRUSOFT_COM,REMOVE_SUBJ,UNDISC_RECIPS

Observe now how DCC is being run.

I have added a score for DCC to /etc/MailScanner/spam.assassin.prefs.conf, and also had to set:

dcc_path /usr/local/bin/dccproc

... as running MS as the 'Postfix' user, /usr/local/bin was clearly not in the $PATH.

Now, even weirder, if I run:

spamassassin -D -t < sample-spam.txt > spam.out

X-Spam-Status: Yes, hits=13.5 required=8.0
        tests=DATE_IN_PAST_12_24,DCC_CHECK,DRASTIC_REDUCED,
            HOME_EMPLOYMENT,INVALID_DATE,INVALID_MSGID,NO_REAL_NAME,
              ONCE_IN_LIFETIME,RAZOR2_CHECK,RCVD_IN_OSIRUSOFT_COM,
              REMOVE_SUBJ,UNDISC_RECIPS

The score is 13.5, and DCC and RAZOR2 checks have been run...
This is all SA 2.53, by the way.

Anyone any clues, and additionally, I'd be curious to know how many people are running SA with:

- DCC

- Razor (2)

- any of the others (Pyzor, etc.)

...



--------------------------------------------------------------------------------------------------->
Peter Bates, Systems Support Officer, Network Support Team.
London School of Hygiene & Tropical Medicine.
Telephone:0207-958 8353 / Fax: 0207- 636 9838