SA 3.0.0, what other local cf files?

[Remco Barendse]

<x-flowed>
On Wed, 29 Sep 2004, Rick Cooper wrote:
>> -----Original Message-----
>> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
>> Behalf Of Remco Barendse
>> Sent: Wednesday, September 29, 2004 3:24 AM
>> To: MAILSCANNER at JISCMAIL.AC.UK
>> Subject: Re: SA 3.0.0, what other local cf files?
>>
>>
>>> Just for chuckles and grins, su to the user that runs SA and do a
>>> spamassassin -D --lint 2>&1 | less
>>>
> <snip>
>>
>> I am still struggling with SURBL too. The output from the above command
>> makes me believe that SURBL is working (some snippets):
>> debug: diag: module installed: URI, version 1.33
>> debug: running uri tests; score so far=-3.174
>> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x90a8458)
>> implements 'check_tick'
>> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x90a8458)
>> implements 'check_post_dnsbl'
>> debug: running uri tests; score so far=0.222
>>
>> At the end of the lot:
>> debug:
>> tests=ALL_TRUSTED,BAYES_50,DCC_CHECK,MISSING_HEADERS,MISSING_SUBJE
>> CT,NO_REAL_NAME
>> debug:
>> subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGI
>> D,__UNUSABLE_MSGID
>>
>>
>> But mails never get scored for URI hits. I *assume* my SpamAssassin
>> install is ok and really haven't got a clue what to look for now.
>>
>> Any hints greatly appreciated :)
>>
>>
>
> did you get "debug: RBL: success for 1 of 1 queries"? and are you running
> that command as the user who runs SA? (mail, or whatever)? I am attaching a
> message file (the names have been changed to protect the innocent, er me)
> that hits about five RBL rules and five SURBL rules (from my own corpus)
> that you can use to test with spamassassin --test < bad.msg but make sure
> you run the tests as the user that runs SA, incase there are any permission
> problems you are not aware of.

Thanks for your help.

Yes, I do get the "debug: RBL: success for 1 of 1 queries" message.

I am running SA as root. The box is running sendmail which is running as
root too, so guess that should be ok?

The message you sent generates lots of hits :
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e02dbc)
implements 'check_tick'
debug: URIDNSBL: domain "money-deal.info" listed (URIBL_AB_SURBL):
127.0.0.118
debug: URIDNSBL: domain "money-deal.info" listed (URIBL_WS_SURBL):
127.0.0.118
debug: URIDNSBL: domain "money-deal.info" listed (URIBL_OB_SURBL):
127.0.0.118
debug: URIDNSBL: domain "money-deal.info" listed (URIBL_SC_SURBL):
127.0.0.118
debug: URIDNSBL: query for money-deal.info took 6 seconds to look up
(multi.surbl.org.:money-deal.info)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Wed Sep 29 13:52:24 2004

debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Wed Sep 29 13:52:24 2004
debug: RBL: success for 26 of 26 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e02dbc)
implements 'check_post_dnsbl'
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Wed Sep 29 13:52:24 2004
debug: waiting 2 seconds for URIDNSBL lookups to complete
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Wed Sep 29 13:52:24 2004
debug: URIDNSBL: domain "money-deal.info" listed (URIBL_SBL):
"http://www.spamhaus.org/SBL/sbl.lasso?query=SBL18401"
debug: URIDNSBL: query for money-deal.info took 7 seconds to look up
(sbl.spamhaus.org.:226.52.233.222)
debug: URIDNSBL: domain "money-deal.info" listed (URIBL_SBL):
"http://www.spamhaus.org/SBL/sbl.lasso?query=SBL19598"
debug: URIDNSBL: query for money-deal.info took 7 seconds to look up
(sbl.spamhaus.org.:114.115.116.210)
debug: URIDNSBL: queries completed: 2 started: 0
debug: URIDNSBL: queries active:  at Wed Sep 29 13:52:25 2004
debug: done waiting for URIDNSBL lookups to complete
debug: running uri tests; score so far=23.159


I guess this means that SA is working correctly, dont know why the scores
aren't assingned to the mails.

Thanx!!

>
> Rick
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>