Message tagged as spam even if sender is whitelisted

Fri Oct 21 18:43:26 IST 2005

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Dhaway,
i've installed SPF but the problem is still there.
Please note that the end of debug output says that the message has -99
but it is still tagged.

Here is new debug output.

Thanks
Luca

In Debugging mode, not forking...
[9335] dbg: logger: adding facilities: all
[9335] dbg: logger: logging level is DBG
[9335] dbg: generic: SpamAssassin version 3.1.0
[9335] dbg: config: score set 0 chosen.
[9335] dbg: util: running in taint mode? no
[9335] dbg: dns: is Net::DNS::Resolver available? yes
[9335] dbg: dns: Net::DNS version: 0.48
[9335] dbg: dns: name server: 212.210.251.2, family: 2, ipv6: 0
SA bayes lock is /tmp/.spamassassin/bayes.lock
Bayes lock is at /tmp/.spamassassin/bayes.lock
[9335] dbg: ignore: test message to precompile patterns and load modules
[9335] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[9335] dbg: config: read file /etc/mail/spamassassin/init.pre
[9335] dbg: config: read file /etc/mail/spamassassin/v310.pre
[9335] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[9335] dbg: config: using "/usr/share/spamassassin" for default rules dir
[9335] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[9335] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[9335] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[9335] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[9335] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[9335] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[9335] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[9335] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[9335] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[9335] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[9335] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[9335] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[9335] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[9335] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[9335] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[9335] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[9335] dbg: config: read file /etc/mail/spamassassin/local.cf
[9335] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[9335] dbg: config: using "/etc/MailScanner/spam.assassin.prefs.conf"
for user prefs file
[9335] dbg: config: read file /etc/MailScanner/spam.assassin.prefs.conf
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9409a94)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9428ff4)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[9335] dbg: pyzor: network tests on, attempting Pyzor
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x944bf1c)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[9335] dbg: reporter: network tests on, attempting SpamCop
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0x94b096c)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0x94b80bc)
[9335] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x945786c)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9458274)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x960ce5c)
[9335] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[9335] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x96175ac)
[9335] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[9335] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[9335] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[9335] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[9335] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[9335] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[9335] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[9335] info: config: failed to parse line, skipping: dcc_path
/usr/local/bin/dccproc
[9335] info: config: failed to parse line, skipping: razor_timeout 10
[9335] info: config: failed to parse line, skipping: dcc_path
/usr/local/bin/dccproc
[9335] info: config: failed to parse line, skipping: razor_timeout 10
[9335] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x96175ac) implements
'finish_parsing_end'
[9335] dbg: replacetags: replacing tags
[9335] dbg: replacetags: done replacing tags
[9335] dbg: bayes: using username: root
[9335] dbg: config: score set 1 chosen.
[9335] dbg: message: ---- MIME PARSER START ----
[9335] dbg: message: main message type: text/plain
[9335] dbg: message: parsing normal part
[9335] dbg: message: added part, type: text/plain
[9335] dbg: message: ---- MIME PARSER END ----
[9335] dbg: dns: dns_available set to yes in config file, skipping test
[9335] dbg: metadata: X-Spam-Relays-Trusted:
[9335] dbg: metadata: X-Spam-Relays-Untrusted:
[9335] dbg: message: no encoding detected
[9335] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9409a94)
implements 'parsed_metadata'
[9335] dbg: uridnsbl: domains to query:
[9335] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[9335] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[9335] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[9335] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[9335] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[9335] dbg: dns: checking RBL combined.njabl.org., set njabl
[9335] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois
[9335] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[9335] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[9335] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[9335] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois-notfirsthop
[9335] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[9335] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[9335] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[9335] dbg: check: running tests for priority: 0
[9335] dbg: rules: running header regexp tests; score so far=0
[9335] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[9335] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<1129916616.66707 at spamassassin_spamd_init>
[9335] dbg: rules: "
[9335] dbg: rules: ran header rule NO_REAL_NAME ======> got hit:
"ignore at compiling.spamassassin.taint.org
[9335] dbg: rules: "
[9335] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@spamassassin_spamd_init>"
[9335] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"1129916616"
[9335] dbg: plugin: registering glue method for
check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9428ff4))
[9335] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: spf: message was delivered entirely via trusted relays, not
required
[9335] dbg: eval: all '*From' addrs: ignore at compiling.spamassassin.taint.org
[9335] dbg: plugin: registering glue method for
check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9458274))
[9335] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x9428ff4))
[9335] dbg: eval: all '*To' addrs:
[9335] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: spf: message was delivered entirely via trusted relays, not
required
[9335] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[9335] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: plugin: registering glue method for
check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: spf: cannot get Envelope-From, cannot use SPF
[9335] dbg: spf: def_spf_whitelist_from: could not find useable envelope
sender
[9335] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[9335] dbg: plugin: registering glue method for
check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9458274))
[9335] dbg: rules: ran eval rule MISSING_HEADERS ======> got hit
[9335] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0x943e08c))
[9335] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[9335] dbg: rules: running body-text per-line regexp tests; score so
far=0.738
[9335] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I"
[9335] dbg: uri: running uri tests; score so far=0.738
[9335] dbg: plugin: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9409a94))
[9335] dbg: rules: running raw-body-text per-line regexp tests; score so
far=0.738
[9335] dbg: rules: running full-text regexp tests; score so far=0.738
[9335] dbg: plugin: registering glue method for check_pyzor
(Mail::SpamAssassin::Plugin::Pyzor=HASH(0x944bf1c))
[9335] dbg: pyzor: pyzor is not available: no pyzor executable found
[9335] dbg: pyzor: no pyzor found, disabling Pyzor
[9335] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9409a94)
implements 'check_tick'
[9335] dbg: check: running tests for priority: 500
[9335] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x9409a94)
implements 'check_post_dnsbl'
[9335] dbg: rules: running meta tests; score so far=0.738
[9335] dbg: rules: running header regexp tests; score so far=2.216
[9335] dbg: rules: running body-text per-line regexp tests; score so
far=2.216
[9335] dbg: uri: running uri tests; score so far=2.216
[9335] dbg: rules: running raw-body-text per-line regexp tests; score so
far=2.216
[9335] dbg: rules: running full-text regexp tests; score so far=2.216
[9335] dbg: check: running tests for priority: 1000
[9335] dbg: rules: running meta tests; score so far=2.216
[9335] dbg: rules: running header regexp tests; score so far=2.216
[9335] dbg: plugin: registering glue method for
check_from_in_auto_whitelist
(Mail::SpamAssassin::Plugin::AWL=HASH(0x94b80bc))
[9335] dbg: rules: running body-text per-line regexp tests; score so
far=2.216
[9335] dbg: uri: running uri tests; score so far=2.216
[9335] dbg: rules: running raw-body-text per-line regexp tests; score so
far=2.216
[9335] dbg: rules: running full-text regexp tests; score so far=2.216
[9335] dbg: check: is spam? score=2.216 required=5
[9335] dbg: check:
tests=MISSING_HEADERS,MISSING_SUBJECT,NO_REAL_NAME,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
[9335] dbg: check:
subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__UNUSABLE_MSGID
[9337] dbg: message: ---- MIME PARSER START ----
[9337] dbg: message: main message type: multipart/alternative
[9337] dbg: message: parsing multipart, got boundary:
- ----=_NextPart_000_0007_01C5D657.42F5A1E0
[9337] dbg: message: found part of type text/plain, boundary:
- ----=_NextPart_000_0007_01C5D657.42F5A1E0
[9337] dbg: message: parsing normal part
[9337] dbg: message: added part, type: text/plain
[9337] dbg: message: found part of type text/html, boundary:
- ----=_NextPart_000_0007_01C5D657.42F5A1E0
[9337] dbg: message: parsing normal part
[9337] dbg: message: added part, type: text/html
[9337] dbg: message: ---- MIME PARSER END ----
[9337] dbg: dns: name server: 212.210.251.2, family: 2, ipv6: 0
[9337] dbg: received-header: parsed as [ ip=82.53.230.146
rdns=host146-230.pool8253.interbusiness.it helo=portatile
by=mailgw1.videobank.it ident= envfrom= intl=0 id=72803152107 auth= ]
[9337] dbg: received-header: relay 82.53.230.146 trusted? no internal? no
[9337] dbg: metadata: X-Spam-Relays-Trusted:
[9337] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=82.53.230.146
rdns=host146-230.pool8253.interbusiness.it helo=portatile
by=mailgw1.videobank.it ident= envfrom= intl=0 id=72803152107 auth= ]
[9337] dbg: message: decoding quoted-printable
[9337] dbg: message: decoding quoted-printable
[9337] dbg: uri: html uri found, cid:editdata.mso
[9337] dbg: uri: cleaned html uri, cid:editdata.mso
[9337] dbg: uri: html uri found, cid:filelist.xml at 01C5D657.426F33D0
[9337] dbg: uri: cleaned html uri, cid:filelist.xml at 01C5D657.426F33D0
[9337] dbg: uri: parsed uri found, mailto:omniagricolae at omniagricolae.it
[9337] dbg: uri: cleaned parsed uri, mailto:omniagricolae at omniagricolae.it
[9337] dbg: uri: parsed domain, omniagricolae.it
[9337] dbg: uri: parsed uri found, mailto:omniagricolae at omniagricolae.it
[9337] dbg: uri: parsed domain, omniagricolae.it
[9337] dbg: uri: parsed uri found, mailto:'jardin at maltanet.ne
[9337] dbg: uri: cleaned parsed uri, mailto:'jardin at maltanet.ne
[9337] dbg: uri: parsed domain, maltanet.ne
[9337] dbg: uri: parsed uri found, mailto:omniagricolae at omniagricolae.it
[9337] dbg: uri: parsed domain, omniagricolae.it
[9337] dbg: uri: parsed uri found, mailto:omniagricolae at omniagricolae.it
[9337] dbg: uri: parsed domain, omniagricolae.it
[9337] dbg: uri: parsed uri found, mailto:'jardin at maltanet.ne
[9337] dbg: uri: parsed domain, maltanet.ne
[9337] dbg: uridnsbl: domains to query:
[9337] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS A query for
146.230.53.82.sbl-xbl.spamhaus.org. in background
[9337] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS A query for
146.230.53.82.sa-accredit.habeas.com. in background
[9337] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs:
[9337] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS A query for
146.230.53.82.combined.njabl.org. in background
[9337] dbg: dns: checking RBL combined.njabl.org., set njabl
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS A query for
146.230.53.82.combined-HIB.dnsiplists.completewhois.com. in background
[9337] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS TXT query for
146.230.53.82.list.dsbl.org. in background
[9337] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS TXT query for
146.230.53.82.bl.spamcop.net. in background
[9337] dbg: dns: _check_rbl_addresses RBL blackhole.securitysage.com.,
set securitysage
[9337] dbg: dns: launching DNS A query for
omniagricolae.it.blackhole.securitysage.com. in background
[9337] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS TXT query for
146.230.53.82.sa-trusted.bondedsender.org. in background
[9337] dbg: dns: checking RBL
combined-HIB.dnsiplists.completewhois.com., set whois-notfirsthop
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: _check_rbl_addresses RBL rhsbl.ahbl.org., set ahbl
[9337] dbg: dns: launching DNS A query for
omniagricolae.it.rhsbl.ahbl.org. in background
[9337] dbg: dns: checking A and MX for host omniagricolae.it
[9337] dbg: dns: launching DNS A query for omniagricolae.it in background
[9337] dbg: dns: launching DNS MX query for omniagricolae.it in background
[9337] dbg: dns: _check_rbl_addresses RBL fulldom.rfc-ignorant.org., set
rfci_envfrom
[9337] dbg: dns: launching DNS A query for
omniagricolae.it.fulldom.rfc-ignorant.org. in background
[9337] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS A query for
146.230.53.82.dnsbl.sorbs.net. in background
[9337] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[9337] dbg: dns: IPs found: full-external: 82.53.230.146 untrusted:
82.53.230.146 originating:
[9337] dbg: dns: only inspecting the following IPs: 82.53.230.146
[9337] dbg: dns: launching DNS A query for 146.230.53.82.iadb.isipp.com.
in background
[9337] dbg: check: running tests for priority: 0
[9337] dbg: rules: running header regexp tests; score so far=0
[9337] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[9337] dbg: rules: ran header rule __CT ======> got hit: "m"
[9337] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[9337] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<20051021135113.72803152107 at mailgw1.videobank.it>
[9337] dbg: rules: "
[9337] dbg: rules: ran header rule __MIMEOLE_MS ======> got hit:
"Produced By Microsoft MimeOLE"
[9337] dbg: rules: ran header rule __NEXTPART_NORMAL ======> got hit:
"="----=_NextPart_000_0007_01C5D657.42F5A1E0""
[9337] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[9337] dbg: rules: ran header rule __NEXTPART_ALL ======> got hit:
"NextPart"
[9337] dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got
hit: "multipart/alternative"
[9337] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[9337] dbg: rules: ran header rule __HAS_MIMEOLE ======> got hit: "P"
[9337] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"2005102113"
[9337] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "p"
[9337] dbg: rules: ran header rule __HAS_OUTLOOK_IN_MAILER ======> got
hit: "Microsoft Office Outlook"
[9337] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit:
"boundary"
[9337] dbg: rules: ran header rule __HAS_X_MAILER ======> got hit: "M"
[9337] dbg: spf: checking HELO (helo=portatile, ip=82.53.230.146)
[9337] dbg: spf: cannot check HELO of 'portatile', skipping
[9337] dbg: eval: all '*From' addrs: omniagricolae at omniagricolae.it
[9337] dbg: rules: address omniagricolae at omniagricolae.it matches
whitelist or blacklist regexp: ^.*\@omniagricolae\.it$
[9337] dbg: rules: ran eval rule USER_IN_WHITELIST ======> got hit
[9337] dbg: eval: trying Received header date for real time:  21 Oct
2005 15:51:13 +0200
[9337] dbg: eval: time_t from date=1129902673, rcvd= 21 Oct 2005
15:51:13 +0200
[9337] dbg: eval: all '*To' addrs: jardin at maltanet.net
[9337] dbg: spf: checking EnvelopeFrom (helo=portatile,
ip=82.53.230.146, envfrom=omniagricolae at omniagricolae.it)
[9337] dbg: spf: query for
omniagricolae at omniagricolae.it/82.53.230.146/portatile: result: none,
comment: SPF: domain of sender omniagricolae at omniagricolae.it does not
designate mailers
[9337] dbg: rules: ran eval rule MSGID_FROM_MTA_ID ======> got hit
[9337] dbg: eval: forged-HELO: from=pool8253.interbusiness.it
helo=portatile by=mailgw1.videobank.it
[9337] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
[9337] dbg: spf: def_whitelist_from_spf: omniagricolae at omniagricolae.it
is not in DEF_WHITELIST_FROM_SPF
[9337] dbg: eval: date chosen from message: Fri Oct 21 15:51:13 2005
[9337] dbg: spf: whitelist_from_spf: omniagricolae at omniagricolae.it is
not in user's WHITELIST_FROM_SPF
[9337] dbg: rules: running body-text per-line regexp tests; score so
far=-99.073
[9337] dbg: rules: ran body rule __FRAUD_DBI ======> got hit: "euro"
[9337] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "p"
[9337] dbg: uri: running uri tests; score so far=-99.073
[9337] dbg: bayes: not scoring message, returning undef
[9337] dbg: bayes: opportunistic call attempt failed, DB not readable
[9337] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit
[9337] dbg: rules: ran eval rule __COMMENT_EXISTS ======> got hit
[9337] dbg: rules: ran eval rule __MIME_HTML ======> got hit
[9337] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit
[9337] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit
[9337] dbg: eval: text words: 46, html words: 45
[9337] dbg: eval: madiff: left: 0, orig: 45, max-difference: 0.00%
[9337] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit
[9337] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit
[9337] dbg: rules: running raw-body-text per-line regexp tests; score so
far=-99.072
[9337] dbg: rules: ran eval rule __MIME_QP ======> got hit
[9337] dbg: rules: running full-text regexp tests; score so far=-99.072
[9337] dbg: pyzor: pyzor is not available: no pyzor executable found
[9337] dbg: pyzor: no pyzor found, disabling Pyzor
[9337] dbg: check: running tests for priority: 500
[9337] dbg: dns: success for 14 of 14 queries
[9337] dbg: rules: running meta tests; score so far=-90.106
[9337] dbg: rules: running header regexp tests; score so far=-90.106
[9337] dbg: rules: running body-text per-line regexp tests; score so
far=-90.106
[9337] dbg: uri: running uri tests; score so far=-90.106
[9337] dbg: rules: running raw-body-text per-line regexp tests; score so
far=-90.106
[9337] dbg: rules: running full-text regexp tests; score so far=-90.106
[9337] dbg: check: running tests for priority: 1000
[9337] dbg: rules: running meta tests; score so far=-90.106
[9337] dbg: rules: running header regexp tests; score so far=-90.106
[9337] dbg: rules: running body-text per-line regexp tests; score so
far=-90.106
[9337] dbg: uri: running uri tests; score so far=-90.106
[9337] dbg: rules: running raw-body-text per-line regexp tests; score so
far=-90.106
[9337] dbg: rules: running full-text regexp tests; score so far=-90.106
[9337] dbg: check: is spam? score=-90.106 required=5
[9337] dbg: check:
tests=HTML_MESSAGE,MSGID_FROM_MTA_ID,RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_WHOIS_INVALID,RCVD_IN_XBL,USER_IN_WHITELIST
[9337] dbg: check:
subtests=__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__ENV_AND_HDR_FROM_MATCH,__FRAUD_DBI,__HAS_MIMEOLE,__HAS_MSGID,__HAS_OUTLOOK_IN_MAILER,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__MIMEOLE_MS,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MSGID_OK_DIGITS,__NEXTPART_ALL,__NEXTPART_NORMAL,__NONEMPTY_BODY,__RCVD_IN_NJABL,__RCVD_IN_SBL_XBL,__RCVD_IN_SORBS,__RCVD_IN_WHOIS,__SANE_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TOCC_EXISTS
Stopping now as you are debugging me.

Dhawal Doshy wrote:
> Luca Palazzo wrote:
> 
>> Hi,
>> today i'm experiencing a really strange problem. A customer sends a
>> mail, spamassassin is confugured to whitelist the sender (and does it)
>> but the message is tagged as spam.
>> When I look at log files the line seems to be truncated:
>>
>> Oct 21 18:29:34 spamflt1 MailScanner[26731]: Message 72803152107.6D15A
>> from 82.53.230.146 (omniagricolae at omniagricolae.it) to maltanet.net is
>>
>> The output of mailscanner (configured in debug,foreground and
>> spamassassin debug) seem to be right.
>>
>> Any idea
>> Luca
> 
> 
> 82.53.230.146 is listed in spamhaus, cbl and others.. are you using the
> "Spam List" option in MailScanner.conf? if yes, then most likely this is
> the cause for marking the mail as spam.
> 
> Also your spamassassin setup seems to be missing the Mail::SPF plugin
> and you've not yet commented out the DCC and RAZOR related parts in
> v310.pre.. If you do not intend on using them then comment the related
> entries in spam.assassin.prefs.conf
> 
> - dhawal
> 
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the Wiki (http://wiki.mailscanner.info/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
> 
> Support MailScanner development - buy the book off the website!

- --

Luca Palazzo
System Engineer

N.C.E.  Network Consulting Engineering s.r.l.
Via Etnea, 52 - 95028 Valverde (CT) - ITALY
Tel/Fax: +39 095 524190
Mobile: +39 340 4608689
web: www.nce-ict.it
mail: luca.palazzo at nce-ict.it
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDWSi+FU0TB0V8iHsRAub9AKDhzDbEG3jRQZL3jFFY2O9nvl/E9ACgvIUU
toNRgeXF/I6kIf0Vtl1V9s4=
=SV1f
-----END PGP SIGNATURE-----

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the Wiki (http://wiki.mailscanner.info/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!