MailScanner + SA3 + SURBL not registering.

[Daniel Bird]

<x-flowed>
Scott Silva wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> snip ...
> | | So am I. I have many systems setup this way and:
> | |
> | |         grep URIBL_ /var/log/maillog
> | |
> | With grep URIBL I get nothing, but with grep URI I get lots of hits.
> | I am using the spamassassin prefs from your site.
> |
> |
> |> Please send some (but NOT all :) of the log entries that are found
> with
> |> "grep URI"
>
> Just 3 log entries, and I see SC_URI, WS_URI etc...
> Same thing or not??

Yes, sort of, but that looks like you have the SURBL tests defined
somewhere in the SA config files as per the 2.6x way. The new names for
them are URIBL_xx_SURBL.
Check your /etc/mail/spamassassin (or even your spam.assassin.prefs.conf
file ) directory for any rules with those names and remove them. Then
make sure you have the latest Net::DNS module installed and the line:

loadplugin Mail::SpamAssassin::Plugin::URIDNSBL

is uncommented in  /etc/mail/spamassassin/init.pre (that's the default btw)

Dan

>
> Sep 30 05:41:14 mail MailScanner[15471]: Message i8UCekSJ017238 from
> 82.75.56.101 (pittsti at osn.de) to company1.com is spam, SpamAssassin
> (score=17.45, required 3, AB_URI_RBL 5.00, HTML_70_80 0.10,
> HTML_IMAGE_ONLY_02 2.24, HTML_MESSAGE 0.00, MIME_HTML_ONLY 0.10,
> OB_URI_RBL 4.00, SC_URI_RBL 3.00, WS_URI_RBL 3.00)
>
> Sep 30 05:47:35 mail MailScanner[15799]: Message i8UCkgSJ017347 from
> 61.174.142.171 (ocxx11qlxu at wmn.net) to company2.com is spam,
> SpamAssassin (score=20.288, required 3, autolearn=spam, HTML_30_40 0.81,
> HTML_FONT_BIG 0.10, HTML_MESSAGE 0.00, J_CHICKENPOX_22 0.60,
> J_CHICKENPOX_41 0.60, J_CHICKENPOX_42 0.60, J_CHICKENPOX_62 0.60,
> MIME_BOUND_DD_DIGITS 4.23, OB_URI_RBL 4.00, RCVD_IN_DSBL 1.10,
> RCVD_IN_NJABL_DUL 1.58, RCVD_IN_SORBS_DUL 0.07, SC_URI_RBL 3.00,
> WS_URI_RBL 3.00)
>
> Sep 30 06:58:38 mail MailScanner[17388]: Message i8UDvPSJ019387 from
> 218.72.16.142 (jnhbct at hotmail.com) to company2.com is spam, SpamAssassin
> (score=28.27, required 3, autolearn=spam, AB_URI_RBL 5.00,
> J_CHICKENPOX_33 0.60, MIME_BOUND_DD_DIGITS 4.23, MSGID_FROM_MTA_HEADER
> 0.76, OB_URI_RBL 4.00, RCVD_DOUBLE_IP_SPAM 3.91, RCVD_IN_NJABL_DUL 1.58,
> RCVD_IN_SORBS_DUL 0.07, SC_URI_RBL 3.00, WHY_PAY_MORE 2.12, WS_URI_RBL
> 3.00)
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.1 (MingW32)
> Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
>
> iD8DBQFBXIiPRADw9lziUqQRAlTuAJ9wJ7sbglrvxxPoWdC+NZXM58VRfACdHIE/
> 6espp0RdbYgScZt4ZNBT2Dc=
> =HpxE
> -----END PGP SIGNATURE-----
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
</x-flowed>