seems like a bug in the spam cache thing

Dave Strydom strydom.dave at gmail.com
Tue Feb 28 14:14:33 GMT 2006 

This may help you:
I'm using perl-5.8.7
---------------------
Cerberus ~ # perl -V
Summary of my perl5 (revision 5 version 8 subversion 7) configuration:
  Platform:
    osname=linux, osvers=2.6.11-hardened-r15, archname=i686-linux
    uname='linux cerberus.xxxxxx.co.za 2.6.11-hardened-r15 #2 smp sun
oct 16 16:02:15 sast 2005 i686 intel(r) xeon(tm) cpu 2.80ghz
genuineintel gnulinux '
    config_args='-des -Darchname=i686-linux -Dcccdlflags=-fPIC
-Dccdlflags=-rdynamic -Dcc=i686-pc-linux-gnu-gcc -Dprefix=/usr
-Dvendorprefix=/usr -Dsiteprefix=/usr -Dlocincpth= 
-Doptimize=-march=pentium4 -O3 -pipe -fomit-frame-pointer -fforce-addr
-Duselargefiles -Dd_semctl_semun -Dscriptdir=/usr/bin
-Dman1dir=/usr/share/man/man1 -Dman3dir=/usr/share/man/man3
-Dinstallman1dir=/usr/share/man/man1
-Dinstallman3dir=/usr/share/man/man3 -Dman1ext=1 -Dman3ext=3pm
-Dinc_version_list=5.8.0 5.8.0/i686-linux 5.8.2 5.8.2/i686-linux 5.8.4
5.8.4/i686-linux 5.8.5 5.8.5/i686-linux 5.8.6 5.8.6/i686-linux 
-Dcf_by=Gentoo -Ud_csh -Di_ndbm -Di_gdbm -Di_db'
    hint=recommended, useposix=true, d_sigaction=define
    usethreads=undef use5005threads=undef useithreads=undef
usemultiplicity=undef
    useperlio=define d_sfio=undef uselargefiles=define usesocks=undef
    use64bitint=undef use64bitall=undef uselongdouble=undef
    usemymalloc=n, bincompat5005=undef
  Compiler:
    cc='i686-pc-linux-gnu-gcc', ccflags ='-fno-strict-aliasing -pipe
-D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64',
    optimize='-march=pentium4 -O3 -pipe -fomit-frame-pointer -fforce-addr',
    cppflags='-fno-strict-aliasing -pipe'
    ccversion='', gccversion='3.3.6 (Gentoo Hardened 3.3.6,
ssp-3.3.6-1.0, pie-8.7.8)', gccosandvers=''
    intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234
    d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12
    ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t',
lseeksize=8
    alignbytes=4, prototype=define
  Linker and Libraries:
    ld='i686-pc-linux-gnu-gcc', ldflags =' -L/usr/local/lib'
    libpth=/usr/local/lib /lib /usr/lib
    libs=-lpthread -lnsl -lndbm -lgdbm -ldb -ldl -lm -lcrypt -lutil -lc
    perllibs=-lpthread -lnsl -ldl -lm -lcrypt -lutil -lc
    libc=/lib/libc-2.3.5.so, so=so, useshrplib=false, libperl=libperl.a
    gnulibc_version='2.3.5'
  Dynamic Linking:
    dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic'
    cccdlflags='-fPIC', lddlflags='-shared -L/usr/local/lib'


Characteristics of this binary (from libperl):
  Compile-time options: USE_LARGE_FILES
  Built under linux
  Compiled at Feb 19 2006 06:03:03
  @INC:
    /etc/perl
    /usr/lib/perl5/site_perl/5.8.7/i686-linux
    /usr/lib/perl5/site_perl/5.8.7
    /usr/lib/perl5/site_perl/5.8.6
    /usr/lib/perl5/site_perl/5.8.6/i686-linux
    /usr/lib/perl5/site_perl
    /usr/lib/perl5/vendor_perl/5.8.7/i686-linux
    /usr/lib/perl5/vendor_perl/5.8.7
    /usr/lib/perl5/vendor_perl
    /usr/lib/perl5/5.8.7/i686-linux
    /usr/lib/perl5/5.8.7
    /usr/local/lib/site_perl
    .
Cerberus ~ #
--------------------------





On 2/28/06, Julian Field <MailScanner at ecs.soton.ac.uk> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
>
> This seems to be dependent on Perl version. In my version it works
> fine, the amount of spam tagged is the same regardless of whether I
> use the cache or not.
> This is not the first time I have seen this sort of problem, far from
> it. I just don't know where to apply the workaround for it (you add
> 0.0 to the variable to coerce it to a number).
>
> On 28 Feb 2006, at 12:38, Dave Strydom wrote:
>
> > Gentoo Linux and Version 4.50.15-1 with spamassassin 3.1.0
> >
> > I have two other scanning servers using an older version with
> > spamassassin 3.0 and they are fine. This has only started happening
> > since this release of MailScanner, and it seems to only happen with
> > emails that get a hit in the spamassassin cache.
> >
> > Dave
> >
> >
> > On 2/28/06, Julian Field <MailScanner at ecs.soton.ac.uk> wrote:
> >> -----BEGIN PGP SIGNED MESSAGE-----
> >>
> >> What OS and release are you using?
> >>
> >> On 28 Feb 2006, at 11:30, Dave Strydom wrote:
> >>
> >>> its not the difference in score, it's the fact that it's scoring 19
> >>> from the spamassassin cache but is not being treated as spam, it's
> >>> being treated as clean mail.
> >>>
> >>> Dave
> >>>
> >>> On 2/28/06, Ramprasad <ram at netcore.co.in> wrote:
> >>>>
> >>>>
> >>>> On Tue, 2006-02-28 at 10:58 +0200, Dave Strydom wrote:
> >>>>> Hi,
> >>>>>
> >>>>> please refer to the attached picture, if not, let me know and
> >>>>> i'll put
> >>>>> it on the web.
> >>>>>
> >>>>> Basically an email gets picked up as spam with a spam score of
> >>>>> like
> >>>>> 19, the next message the comes in, has this message:
> >>>>>
> >>>>
> >>>>
> >>>> Look at the maillog for both the mails. See what rules hit the
> >>>> second
> >>>> mail and missed the first.
> >>>>
> >>>> Most likely these are dns checks. all the RCVD_IN_* checks
> >>>>
> >>>> Even on my server I get same mails with different scores and
> >>>> they are
> >>>> because of inconsistent scores by the dns checks, though we run a
> >>>> caching nameserver. I think these dns servers are not always
> >>>> available
> >>>> so that makes the difference.
> >>>>
> >>>> Thanks
> >>>> Ram
> >>>>
> >>>>
> >>>>
> >>>> --
> >>>> MailScanner mailing list
> >>>> mailscanner at lists.mailscanner.info
> >>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>>
> >>>> Before posting, read http://wiki.mailscanner.info/posting
> >>>>
> >>>> Support MailScanner development - buy the book off the website!
> >>>>
> >>> --
> >>> MailScanner mailing list
> >>> mailscanner at lists.mailscanner.info
> >>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>>
> >>> Before posting, read http://wiki.mailscanner.info/posting
> >>>
> >>> Support MailScanner development - buy the book off the website!
> >>
> >> - --
> >> Julian Field
> >> www.MailScanner.info
> >> Buy the MailScanner book at www.MailScanner.info/store
> >> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> >>
> >>
> >> -----BEGIN PGP SIGNATURE-----
> >> Version: PGP Desktop 9.0.5 (Build 5050)
> >>
> >> iQEVAwUBRAQ4+Pw32o+k+q+hAQFA1QgAj9SX7h301Ovwxu6xSOJknSj7a4gPMben
> >> 4ibfY6Vb34IeCiNTvmbi4ghgejgZp6OWWNo6EcO69NV1EPZ9XcQhynOm0VtFmd5u
> >> R233keGwQv9t88XVor34/BPKhAk/aGzT6rV5SS1K2zsSWk810rPRPdyL8ePyQ7tX
> >> SVd4BSO5oRGY+QYUIsq/lfoK3O+e6CAsEZ9hl2uIKgglyCxPlGbu4qdgu4ZrR7ov
> >> Q0x9WlMUf/V9NgDTyDXRaksXfZTsfM7b7tVt2EzOfNZp2h7XKoAWjrd/kqfOE6Ij
> >> kVS8KW1f7Vg30xf/B6pjiPTVPu5epUDXWVj6cD+iT+i38/NscWQJkg==
> >> =QiAm
> >> -----END PGP SIGNATURE-----
> >>
> >> --
> >> This message has been scanned for viruses and
> >> dangerous content by MailScanner, and is
> >> believed to be clean.
> >>
> >> --
> >> MailScanner mailing list
> >> mailscanner at lists.mailscanner.info
> >> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >>
> >> Before posting, read http://wiki.mailscanner.info/posting
> >>
> >> Support MailScanner development - buy the book off the website!
> >>
> > --
> > MailScanner mailing list
> > mailscanner at lists.mailscanner.info
> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
> >
> > Before posting, read http://wiki.mailscanner.info/posting
> >
> > Support MailScanner development - buy the book off the website!
>
> - --
> Julian Field
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>
>
> -----BEGIN PGP SIGNATURE-----
> Version: PGP Desktop 9.0.5 (Build 5050)
>
> iQEVAwUBRARVo/w32o+k+q+hAQFyAgf+Pg8qGBuGAIulLozO2lmkdzzLxEyfZW3M
> ndRq0UsEtaWfPHlV6n2dt1u96HAJiVd/tzAaMbdG6DYty2Yj0x2rXZVqSF1kbKuI
> LB4Htrwojmd316U/NL0WK2DHdFZx2uivnZSF77Q+Urkt1ajFJpXiGyUJCDSpJImX
> GLHi9OK5DbYxMC7r2WjH4Tg2ydrfaI9pvmft6megii1buTWLsnF1uZ54XY2L19xN
> XTWxlG1rvAaD3YdPtv0oOHviFPsgdgjZNtj+BJoUtukjFPGzAekrjcMKnoO5VjYW
> FhwX7qoBVtng7a1jCjXUCOvH3c8ib1oGVaDt0hQ4ErsLAQeA3n2mSw==
> =uZAh
> -----END PGP SIGNATURE-----
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

More information about the MailScanner mailing list