{Disarmed} X-Relay-Countries

[Martin.Hepworth]

Dimitri

Some on the IRC channel was having a similar problem a couple of days
ago - you??

MailScanner will NOT insert SA headers into the email

It will put the info in the MailScanner-SpamScore header if you tell to
be verbose.

Given running SA on its own doesn't insert info either I suggest you
lint check the SA config and fix any issues first..

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
> bounces at lists.mailscanner.info] On Behalf Of Dimitri Volski
> Sent: 08 February 2007 09:10
> To: mailscanner at lists.mailscanner.info
> Subject: {Disarmed} X-Relay-Countries
>
> Hi All,
>
> I am having troubles getting the SpamAssassin scores based on Relay
> Countries.
>
> A snip of the log:
>
> debug: received-header: relay MailScanner warning: numerical links are
> often malicious: 84.56.164.42 <http://84.56.164.42>  trusted? no
internal?
> no
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted: [ ip=MailScanner warning:
> numerical links are often malicious: 84.56.164.42
<http://84.56.164.42>
> rdns=dslb-084-056-164-042.pools.arcor-ip.net helo=callaria.com
> by=mx.google.com ident= envfrom= intl=0
> id=p4si1743305qba.2007.02.05.02.02.53 auth= ]
> debug: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x931059c)
> implements 'extract_metadata'
> debug: metadata: X-Relay-Countries: DE
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99dd4c8)
> implements 'parsed_metadata'
>
> Here I can see that the country is detected as Denmark, but when I
insert
>
> header RELAY_DE X-Relay-Countries =~/\bDE\b/
> describe RELAY_DE       Relayed through Germany
> score RELAY_DE 1.0
>
> into /etc/MailScanner/spam.assassin.prefs.conf , I cannot see it in
> theSpamAssassin report (if run manually on source of the message
above) or
> the MailScanner report.
>
> If run manually, SpamAssassin gives this header in the end:
>
> X-Spam-Flag: NO
> X-Spam-Checker-Version: SpamAssassin 3.0.5 (2005-11-28) on exmail
> X-Spam-Level: ****
> X-Spam-Status: No, score=4.4 required= 5.0
> tests=FORGED_RCVD_HELO,RCVD_BY_IP,
>         RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL autolearn=no
>         version=3.0.5
>
> In which I cannot see the RELAY_DE
>
> Please help !  :)
>
> Cheers,
> dim
>





**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.

Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.

Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 

Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************