Help debugging false positives with SURBL

[Alex Broens]

Would be very useful and even more appreciated if Julian could implement 
the vanilla SA responses which are two liners.

I've banged my head very often when trying to find out what URL was hit.

Alex

On 2/13/2007 11:16 AM, Ian wrote:
> Hi,
> 
> I am having trouble with the spamassassin SURBL tests and cron emails.  For some strange 
> reason I am getting this score on an email delivered via MailScanner:
> 
>  cached   
>  score=12.718   
> 6 required   
> -1.80 ALL_TRUSTED Passed through trusted hosts only via SMTP 
> -2.60 BAYES_00 Bayesian spam probability is 0 to 1% 
> -0.00 SPF_HELO_PASS SPF: HELO matches SPF record 
> 3.81 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist 
> 3.00 URIBL_BLACK   
> 3.01 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist 
> 2.80 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist 
> 4.50 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist 
> 
> When I run the message manually with the following command line, non of the SURBL tests 
> show up:
> 
> spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf  -t <message.txt
> 
> Content analysis details:   (-4.4 points, 5.0 required)
> 
>  pts rule name              description
> ---- ---------------------- --------------------------------------------------
> -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
> -1.8 ALL_TRUSTED            Passed through trusted hosts only via SMTP
> -2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
>                             [score: 0.0000]
> 
> I have tested all domain names (even partial ones) with the RulesEmporium SURBL checker 
> and none of them show up.  I have attached the email as a txt file.
> 
> Can someone point me the right direction to debug this.  I have switched on SpamAssassin 
> debugging in MailScanner but have no idea where to look for the debug output.  Also, am I 
> using the right command line to test this?
> 
> 
> Thanks
> 
> Ian
> 
> 
> ------------------------------------------------------------------------
> 
> The following section of this message contains a file attachment
> prepared for transmission using the Internet MIME message format.
> If you are using Pegasus Mail, or any other MIME-compliant system,
> you should be able to save it or view it from within your mailer.
> If you cannot, please ask your system administrator for assistance.
> 
>    ---- File information -----------
>      File:  message.txt
>      Date:  13 Feb 2007, 10:02
>      Size:  1146 bytes.
>      Type:  Text
>