DCC and Razor checks are getting skipped by MailScanner.

Pravin Rane pravin.rane at gmail.com
Sun Jul 30 08:53:00 IST 2006


I have problem with spam checks in mailscanner. Following are the email
headers which passed through mailscanner(version 4.46.2) + spamassassin(
version 3.1.1)
In /etc/MailScanner/MailScanner.conf I am using
SpamAssassin Prefs File = %etc-dir%/spam.assassin.prefs.conf

+++++++++++++++++++++++++++++++++++++++++++++++++++++++
[root at ldap tmp]# cat 1154243669.14559.AOL

Return-Path: <dominickor at dkja.org>
Delivered-To: xxx
Received: (qmail 14538 invoked by uid 508); 30 Jul 2006 07:14:17 -0000
Received: from unknown (HELO dkja.org) (82.61.1.94)
  by 0 with SMTP; 30 Jul 2006 07:14:17 -0000
Received-SPF: none (0: domain at dkja.org does not designate permitted
sender hosts)
Message-ID: <000001c6b3a7$4135e800$54fda8c0 at pao41>
Reply-To: "Korey Dominick" <dominickor at dkja.org>
From: "Korey Dominick" <dominickor at dkja.org>
To: xxx
Subject: Re: jufeqVIAjAGRA
Date: Sun, 30 Jul 2006 00:10:36 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
        boundary="----=_NextPart_000_0001_01C6B36C.94D71000"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-MailScanner-Information: Please contact the ISP for more information
www.mailscanner.info
X-MailScanner-: Found to be clean
X-MailScanner-MCPCheck:
X-MailScanner-SpamCheck: spam,
        SpamAssassin (score=5.994, required 4, BAYES_50 0.00,
        HTML_MESSAGE 0.00, RCVD_IN_NJABL_DUL 1.95, RCVD_IN_SORBS_DUL 2.05,
        URIBL_SBL 2.00)
X-MailScanner-SpamScore: sssss
X-MailScanner-From: dominickor at dkja.org

++++++++++++++++++++++++++++++++++++++
When I manually scan the same message from command prompt I get score = 11.9

[root at ldap tmp]# spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf
< 1154243669.14559.AOL

Content preview:  Hi, VALjLIUM $1 . 25 AMjMBIEN VIAjAGRA $3 . 35 CIAjALIS
  $3 . 75 http://www.foinneritu.com [...]

Content analysis details:   (11.9 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 0.0 HTML_MESSAGE           BODY: HTML included in message
 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
                            above 50%
                            [cf: 100]
 0.5 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)
 0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
                            [cf: 100]
 1.4 DCC_CHECK              Listed in DCC (
http://rhyolite.com/anti-spam/dcc/)
 2.0 RCVD_IN_SORBS_DUL      RBL: SORBS: sent directly from dynamic IP
address
                            [82.61.1.94 listed in dnsbl.sorbs.net]
 1.7 RCVD_IN_NJABL_DUL      RBL: NJABL: dialup sender did non-local SMTP
                            [82.61.1.94 listed in combined.njabl.org]
 1.1 URIBL_SBL              Contains an URL listed in the SBL blocklist
                            [URIs: foinneritu.com]
 3.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
                            [URIs: foinneritu.com]
 0.2 DIGEST_MULTIPLE        Message hits more than one network digest check




Seems like  DCC and Razor checks are getting skipped when message passes
through MailScanner.


-- 
Regards

Pravin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060730/d8246ed0/attachment.html


More information about the MailScanner mailing list