SA/MS Testing

Martin Hepworth martinh at SOLID-STATE-LOGIC.COM
Wed Dec 22 10:33:49 GMT 2004


Could be mailscanner processes haven't got the correct bayes database
(mentioned in spam.assassin.prefs.conf) or permissions.

When running by hand you need to be (1) the MailScanner user as defined
in MailScanner.conf and (2) use

"spamassassin -p <path-to>/spam.assassin.pref.conf -t < message"



--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300


Steen, Glenn wrote:
> Please correct me if I'm wrong, but you'd need to "revert" the message
> to it's pristine look  (meaning no headers from your server etc) before
> reinjecting it(?).
>
> -- Glenn
>
>
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Rodney Green
>>Sent: den 21 december 2004 19:36
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: SA/MS Testing
>>
>>
>>Thanks Alex. I did as you said.
>>
>>Odd how when I run the message through the system, by
>>telneting like you
>>said, and it gives me an SA score below 5. When I run the same message
>>through spamassassin using "spamassassin -t < messagefile" I
>>see a much
>>higher score of 11.9. I noticed that when running
>>"spamassasin -t" that
>>BAYES_99 is one of the tests listed but when I send the
>>message through the
>>system I see no BAYES related tests in the message headers.
>>
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
>>Of Alex Neuman van der Hans
>>Sent: Tuesday, December 21, 2004 10:53 AM
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: Re: SA/MS Testing
>>
>>
>>Try telnetting to port 25, doing a "HELO " followed by what
>>the spammer said
>>his/her hello was, then "MAIL FROM:" what the spammer said
>>the origin was,
>>"RCPT TO:" to you, then DATA, and finally, the message
>>itself. A single
>>period, and QUIT.
>>
>>-----Original Message-----
>>From: MailScanner mailing list
>>[mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf
>>Of Rodney Green
>>
>>Sent: Tuesday, December 21, 2004 10:39 AM
>>To: MAILSCANNER at JISCMAIL.AC.UK
>>Subject: SA/MS Testing
>>
>>Hello. Is there a way to re-inject a message into MailScanner
>>so it will be
>>scanned again by MS/ClamAV/SpamAssassin? I've added some spam
>>to my bayes DB
>>using sa-learn and would like to test sending the same spam
>>through again
>>and see if it is filtered properly.
>>
>>Thanks,
>>Rod
>>
>>------------------------ MailScanner list ------------------------ To
>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
>>mailscanner' in the body of the email. Before posting, read the MAQ
>>(http://www.mailscanner.biz/maq/) and the archives
>>(http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>------------------------ MailScanner list ------------------------ To
>>unsubscribe, email jiscmail at jiscmail.ac.uk with the words: 'leave
>>mailscanner' in the body of the email. Before posting, read the MAQ
>>(http://www.mailscanner.biz/maq/) and the archives
>>(http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>>------------------------ MailScanner list ------------------------
>>To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
>>'leave mailscanner' in the body of the email.
>>Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
>>the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>>
>>Support MailScanner development - buy the book off the website!
>>
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

**********************************************************************

This email and any files transmitted with it are confidential and
intended solely for the use of the individual or entity to whom they
are addressed. If you have received this email in error please notify
the system manager.

This footnote confirms that this email message has been swept
for the presence of computer viruses and is believed to be clean.

**********************************************************************

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!




More information about the MailScanner mailing list