MailScanner & SURBL / URIBL and SPF checks

[Stijn Jonker]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

Hello all,

Once the MailScanner systems where upgraded to MailScanner 4.34.8 with
SpamAssassin 3.0 there where quite some spam email slipping through, so
some investigation was performed to the cause.

I upgraded to SpamAssassin 3.01 due to the URIBL checks where set to
head instead of body.

I inserted:
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL and
loadplugin Mail::SpamAssassin::Plugin::SPF
first in /etc/mail/spamassassin/local.cf then moved it to:
/etc/MailScanner/spam.assassin.prefs.conf

But whatever I do i don't see any hits on the rules with URIBL/SURBL and
or SPF. Although I couldn't find it back in the list I believe i need
the latest beta for SPF support, but URIBL should work.

I check some of the spam only minutes after they where received on
http://www.rulesemporium.com/cgi-bin/uribl.cgi and they where indeed
listed in one or more lists.

The only rule scoring I modified in local.cf is:
score ALL_TRUSTED 0

Is there somebody who can offer some adivce on how to troubleshoot
and/or find the culprit for this?

P.S. MailScanner -v output is in the attachment.

Thanks in advance.

--
Met Vriendelijke groet/Yours Sincerely
Stijn Jonker <SJCJonker at sjc.nl>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

    [ Part 2: "Attached Text" ]

Running on
Linux <> 2.6.8-1.521smp #1 SMP Mon Aug 16 09:25:06 EDT 2004 i686 i686 i386 GNU/Linux
This is Fedora Core release 2 (Tettnang)
This is Perl version 5.008003 (5.8.3)

This is MailScanner version 4.34.8
Module versions are:
1.00    AnyDBM_File
1.13    Archive::Zip
1.01    Carp
1.119   Convert::BinHex
1.00    DirHandle
1.05    Fcntl
2.72    File::Basename
2.07    File::Copy
2.01    FileHandle
1.06    File::Path
0.14    File::Temp
1.27    HTML::Entities
3.36    HTML::Parser
2.28    HTML::TokeParser
1.21    IO
1.10    IO::File
1.122   IO::Pipe
3.03    MIME::Base64
5.413   MIME::Decoder
5.413   MIME::Decoder::UU
5.413   MIME::Head
5.413   MIME::Parser
3.03    MIME::QuotedPrint
5.413   MIME::Tools
0.09    Net::CIDR
1.07    POSIX
1.76    Socket
0.04    Sys::Syslog
1.02    Time::localtime

Optional module versions are:
1.808   DB_File
1.05    Digest
1.01    Digest::HMAC
2.33    Digest::MD5
2.10    Digest::SHA1
0.44    Inline
0.11    Mail::ClamAV
3.000001        Mail::SpamAssassin
1.997   Mail::SPF::Query
0.15    Net::CIDR::Lite
0.48    Net::DNS
0.32    Net::LDAP
1.94    Parse::RecDescent
0.15    SAVI
1.2     Sys::Hostname::Long
2.42    Test::Harness
0.47    Test::Simple
1.95    Text::Balanced
1.34    URI

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).