MailScanner totally missing SA rules...

[Steve Campbell]

Daniel,

I only set this last week as I was seeing some of the more popular spams 
slipping through. I added Sare stocks, thinking it would resolve the 
problem, but realized that it was even using the new rule set. Mailwatch 
would update the rule list as though it were, so I had a false sense of 
security. It was only after trying a report in mailwatch showing all mail 
that was triggering the stock rule that I discovered it was using it. I 
guess the blank config line was added during an update and I assumed blank 
was OK, much like the sendmail lock config option that has caused so much 
trouble.

I also set the Site Rules option the same. You may try that.

Steve

----- Original Message ----- 
From: "Daniel Maher" <daniel.maher at ubisoft.com>
To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
Sent: Tuesday, November 14, 2006 4:46 PM
Subject: RE: MailScanner totally missing SA rules...


> Hi Steve,
>
> Thanks for the tip - unfortunately, this did not help the issue.  It is 
> worth noting that /downgrading/ to the previous version I was running 
> (4.51), in fact, totally solves the problem.
>
> There would appear to be a bug afoot...
>
> --
>  _
> °v°  Daniel Maher
> /(_)\ Administrateur Système Unix
> ^ ^  Unix System Administrator
>
> Sentio aliquos togatos contra me conspirare.
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Steve Campbell
>> Sent: November 14, 2006 4:31 PM
>> To: MailScanner discussion
>> Subject: Re: MailScanner totally missing SA rules...
>>
>> Daniel,
>>
>> Setting the MailScanner.conf set as below resolved all of my problems:
>>
>> SpamAssassin Local Rules Dir = /etc/mail/spamassassin
>>
>> I am running an old 4.52.2 version that is completely functioning
>> properly.
>>
>> Steve
>>
>> ----- Original Message -----
>> From: "Daniel Maher" <daniel.maher at ubisoft.com>
>> To: "MailScanner discussion" <mailscanner at lists.mailscanner.info>
>> Sent: Tuesday, November 14, 2006 3:27 PM
>> Subject: MailScanner totally missing SA rules...
>>
>>
>> Hello all,
>>
>>
>>
>> I, too, am experiencing a similar problem to another member of the list;
>> specifically, MailScanner seems to be totally missing (or, at best,
>> randomly
>> using) SpamAssassin rules.  This is a fairly serious issue, since the
>> amount
>> of un-tagged spam now getting through the filters is becoming 
>> problematic.
>>
>>
>>
>> For example, consider the following email message:
>>
>>
>>
>> Subject: test
>>
>> From: wahtever <hihi at gmail.com>
>>
>> To: daniel.maher at ubisoft.com
>>
>> Content-Type: text/plain
>>
>> Message-Id: <1154034241.23136.34.camel at localhost.localdomain>
>>
>> Mime-Version: 1.0
>>
>> X-Mailer: Evolution 2.6.1
>>
>> Date: Fri, 15 Sep 2006 14:54:44 -0400
>>
>> X-Evolution-Format: text/plain
>>
>> Content-Transfer-Encoding: 8bit
>>
>>
>>
>> PHxxARMACY V1xxAGRA C1xxALIS lose weight now, melt the extra pounds.
>>
>>
>>
>>
>>
>> The exact message, passed through MailScanner via SMTP (Postfix):
>>
>>
>>
>> Nov 14 15:16:15 ad-postfix MailScanner[14220]: Message 2EAFC1A65DB.C9579
>> from 127.0.0.1 (hihi at gmail.com) to ubisoft.com is not spam, SpamAssassin
>> (score=1.572, required 6, DATE_IN_PAST_96_XX 1.57)
>>
>>
>>
>>
>>
>> Now passed through SpamAssassin via the commandline, as the MTA user:
>>
>>
>>
>> Content analysis details:   (12.1 points, 5.0 required)
>>
>>
>>
>>  pts rule name              description
>>
>> ---- ---------------------- ----------------------------------------------
>> ----
>>
>> -0.0 NO_RELAYS              Informational: message was not relayed via
>> SMTP
>>
>>  6.0 UBI_PHARMSTRNG01       BODY: Pharmacy string (01)
>>
>>  0.1 UBI_FINDME             BODY: test string
>>
>>  3.0 UBI_LOSEFAT10          BODY: Weightloss hits (string) (10)
>>
>>  2.0 UBI_PHARMPILL02        Pharmacy hits (02)
>>
>>  1.0 UBI_LOSEFAT01          Weightloss hits (01)
>>
>> -0.0 NO_RECEIVED            Informational: message has no Received 
>> headers
>>
>>
>>
>>
>>
>> As you can see, the triggered rules are completely different, which is
>> worrisome.  I have tested numerous examples where MS would trigger some 
>> SA
>> rules, but not others (very bizarre).  I recently upgraded to MailScanner
>> 4.57.3 and SpamAssassin 3.1.7 .  Before the upgrade, everything worked
>> perfectly.  I didn't change any config files, with the exception of the
>> following line in mailscanner.conf :
>>
>>
>>
>> Max SpamAssassin Size = 80000 trackback
>>
>>
>>
>>
>>
>> Does anybody have any ideas or insight?  Thanks!
>>
>>
>>
>> --
>>
>>   _
>>  °v°  Daniel Maher
>> /(_)\ Administrateur Système Unix
>>
>>  ^ ^  Unix System Administrator
>>
>>
>>
>> Sentio aliquos togatos contra me conspirare.
>>
>>
>>
>>
>>
>>
>> --------------------------------------------------------------------------
>> ------
>>
>>
>> > --
>> > MailScanner mailing list
>> > mailscanner at lists.mailscanner.info
>> > http://lists.mailscanner.info/mailman/listinfo/mailscanner
>> >
>> > Before posting, read http://wiki.mailscanner.info/posting
>> >
>> > Support MailScanner development - buy the book off the website!
>> >
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>