MailScanner totally missing SA rules...

[Daniel Maher]

Hello all,

 

I, too, am experiencing a similar problem to another member of the list; specifically, MailScanner seems to be totally missing (or, at best, randomly using) SpamAssassin rules.  This is a fairly serious issue, since the amount of un-tagged spam now getting through the filters is becoming problematic.

 

For example, consider the following email message:

 

Subject: test

From: wahtever <hihi at gmail.com>

To: daniel.maher at ubisoft.com

Content-Type: text/plain

Message-Id: <1154034241.23136.34.camel at localhost.localdomain>

Mime-Version: 1.0

X-Mailer: Evolution 2.6.1 

Date: Fri, 15 Sep 2006 14:54:44 -0400

X-Evolution-Format: text/plain

Content-Transfer-Encoding: 8bit

 

PHxxARMACY V1xxAGRA C1xxALIS lose weight now, melt the extra pounds.

 

 

The exact message, passed through MailScanner via SMTP (Postfix):

 

Nov 14 15:16:15 ad-postfix MailScanner[14220]: Message 2EAFC1A65DB.C9579 from 127.0.0.1 (hihi at gmail.com) to ubisoft.com is not spam, SpamAssassin (score=1.572, required 6, DATE_IN_PAST_96_XX 1.57)

 

 

Now passed through SpamAssassin via the commandline, as the MTA user:

 

Content analysis details:   (12.1 points, 5.0 required)

 

 pts rule name              description

---- ---------------------- --------------------------------------------------

-0.0 NO_RELAYS              Informational: message was not relayed via SMTP

 6.0 UBI_PHARMSTRNG01       BODY: Pharmacy string (01)

 0.1 UBI_FINDME             BODY: test string

 3.0 UBI_LOSEFAT10          BODY: Weightloss hits (string) (10)

 2.0 UBI_PHARMPILL02        Pharmacy hits (02)

 1.0 UBI_LOSEFAT01          Weightloss hits (01)

-0.0 NO_RECEIVED            Informational: message has no Received headers

 

 

As you can see, the triggered rules are completely different, which is worrisome.  I have tested numerous examples where MS would trigger some SA rules, but not others (very bizarre).  I recently upgraded to MailScanner 4.57.3 and SpamAssassin 3.1.7 .  Before the upgrade, everything worked perfectly.  I didn't change any config files, with the exception of the following line in mailscanner.conf :

 

Max SpamAssassin Size = 80000 trackback

 

 

Does anybody have any ideas or insight?  Thanks!

 

--

  _
 °v°  Daniel Maher
/(_)\ Administrateur Système Unix

 ^ ^  Unix System Administrator

 

Sentio aliquos togatos contra me conspirare.

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20061114/3e709736/attachment.html