RES: mcp help
Wilson A. Galafassi Jr.
wilson.galafassi at gmail.com
Mon May 28 19:27:25 IST 2007
Hello.
Thanks again in advance.
My file is readed: read file /etc/MailScanner/mcp/digital.cf
In digital.cf i have:
header MY_RULE_1 Subject =~ /block this phrase/i
score MY_RULE_1 100
body MY_RULE_2 /Block this too/i
score MY_RULE_2 100
body MY_RULE_3 /this\s*is\s*more\s*complicated/i
score MY_RULE_3 100
but when i send and email containing any matching rules i dont see marked as
mcp.
My complete debug above:
Starting MailScanner daemons:
incoming postfix: [ OK ]
outgoing postfix: [ OK ]
MailScanner: In Debugging mode, not forking...
[18193] dbg: logger: adding facilities: all
[18193] dbg: logger: logging level is DBG
[18193] dbg: generic: SpamAssassin version 3.2.0
[18193] dbg: config: score set 0 chosen.
[18193] dbg: util: running in taint mode? no
[18193] dbg: dns: no ipv6
[18193] dbg: dns: is Net::DNS::Resolver available? yes
[18193] dbg: dns: Net::DNS version: 0.59
[18193] dbg: logger: adding facilities: all
[18193] dbg: logger: logging level is DBG
[18193] dbg: generic: SpamAssassin version 3.2.0
[18193] dbg: config: score set 0 chosen.
[18193] dbg: dns: no ipv6
[18193] dbg: dns: is Net::DNS::Resolver available? yes
[18193] dbg: dns: Net::DNS version: 0.59
Use of uninitialized value in concatenation (.) or string at
/usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1087.
Use of uninitialized value in concatenation (.) or string at
/usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1089.
[18193] dbg: config: read_scoreonly_config: cannot open "": No such file or
directory
[18203] dbg: config: using "/etc/MailScanner/mcp" for site rules pre files
[18203] dbg: config: using "/etc/MailScanner/mcp" for sys rules pre files
[18203] dbg: config: using "/etc/MailScanner/mcp" for default rules dir
[18203] dbg: config: read file /etc/MailScanner/mcp/digital.cf
[18203] dbg: config: using "/etc/MailScanner/mcp" for site rules dir
[18203] dbg: config: read file /etc/MailScanner/mcp/digital.cf
[18203] dbg: config: using
"/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf" for user prefs file
[18203] dbg: config: read file
/etc/MailScanner/mcp/mcp.spam.assassin.prefs.conf
[18203] dbg: conf: finish parsing
[18203] dbg: bayes: no dbs present, cannot tie DB R/O:
/home/postfix/.spamassassin/bayes_toks
[18203] dbg: config: score set 1 chosen.
[18203] dbg: message: main message type: multipart/alternative
[18203] dbg: message: ---- MIME PARSER START ----
[18203] dbg: message: parsing multipart, got boundary:
----=_NextPart_000_009B_01C7A13B.DBA3DC80
[18203] dbg: message: found part of type text/plain, boundary:
----=_NextPart_000_009B_01C7A13B.DBA3DC80
[18203] dbg: message: added part, type: text/plain
[18203] dbg: message: found part of type text/html, boundary:
----=_NextPart_000_009B_01C7A13B.DBA3DC80
[18203] dbg: message: added part, type: text/html
[18203] dbg: message: parsing normal part
[18203] dbg: message: parsing normal part
[18203] dbg: message: ---- MIME PARSER END ----
[18203] dbg: bayes: no dbs present, cannot tie DB R/O:
/home/postfix/.spamassassin/bayes_toks
check: no loaded plugin implements 'check_main': cannot scan! at
/usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgStatus.pm line 164.
[18204] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[18204] dbg: config: read file /etc/mail/spamassassin/init.pre
[18204] dbg: config: read file /etc/mail/spamassassin/v310.pre
[18204] dbg: config: read file /etc/mail/spamassassin/v312.pre
[18204] dbg: config: read file /etc/mail/spamassassin/v320.pre
[18204] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[18204] dbg: config: using "/usr/share/spamassassin" for default rules dir
[18204] dbg: config: read file /usr/share/spamassassin/10_default_prefs.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_dynrdns.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_imageinfo.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[18204] dbg: config: read file /usr/share/spamassassin/20_vbounce.cf
[18204] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_asn.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[18204] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[18204] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[18204] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[18204] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[18204] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[18204] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[18204] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[18204] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[18204] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[18204] dbg: config: read file /usr/share/spamassassin/60_shortcircuit.cf
[18204] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[18204] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
[18204] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
[18204] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[18204] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[18204] dbg: config: read file /usr/share/spamassassin/72_active.cf
[18204] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[18204] dbg: config: read file /etc/mail/spamassassin/local.cf
[18204] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[18204] dbg: razor2: razor2 is not available
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::ASN from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[18204] dbg: pyzor: network tests on, attempting Pyzor
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[18204] dbg: razor2: razor2 is not available
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::Razor2=HASH(0xb0a97d8), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[18204] dbg: reporter: network tests on, attempting SpamCop
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xafc78c4), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::SPF=HASH(0xb0ce618), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xb000478), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::ASN from @INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::ASN=HASH(0xafbc9b0), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTTPSMismatch from
@INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDetail from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Bayes from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::BodyEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::DNSEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTMLEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval from
@INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::WLBLEval from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from @INC
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb425ddc), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::SPF=HASH(0xb0ceb10), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xafc7dc8), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[18204] dbg: razor2: razor2 is not available
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::Razor2=HASH(0xafc7f6c), already registered
[18204] dbg: plugin: loading Mail::SpamAssassin::Plugin::ASN from @INC
[18204] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::ASN=HASH(0xafe6e10), already registered
[18204] dbg: config: allowing user rules!
[18204] dbg: rules: __MO_OL_9B90B merged duplicates: __MO_OL_C65FA
[18204] dbg: rules: __XM_OL_22B61 merged duplicates: __XM_OL_A842E
[18204] dbg: rules: __MO_OL_07794 merged duplicates: __MO_OL_8627E
__MO_OL_F3B05
[18204] dbg: rules: __XM_OL_07794 merged duplicates: __XM_OL_25340
__XM_OL_3857F __XM_OL_4F240 __XM_OL_58CB5 __XM_OL_6554A __XM_OL_812FF
__XM_OL_C65FA __XM_OL_CF0C0 __XM_OL_F475E __XM_OL_F6D01
[18204] dbg: rules: FH_MSGID_01C67 merged duplicates: __MSGID_VGA
[18204] dbg: rules: FS_NEW_SOFT_UPLOAD merged duplicates:
HS_SUBJ_NEW_SOFTWARE
[18204] dbg: rules: __FH_HAS_XMSMAIL merged duplicates: __HAS_MSMAIL_PRI
[18204] dbg: rules: __MO_OL_015D5 merged duplicates: __MO_OL_6554A
[18204] dbg: rules: __MO_OL_91287 merged duplicates: __MO_OL_B30D1
__MO_OL_CF0C0
[18204] dbg: rules: __XM_OL_015D5 merged duplicates: __XM_OL_4BF4C
__XM_OL_4EEDB __XM_OL_5B79A __XM_OL_9B90B __XM_OL_ADFF7 __XM_OL_B30D1
__XM_OL_B4B40 __XM_OL_BC7E6 __XM_OL_F3B05 __XM_OL_FF5C8
[18204] dbg: rules: __XM_OL_5E7ED merged duplicates: __XM_OL_D03AB
[18204] dbg: rules: __MO_OL_22B61 merged duplicates: __MO_OL_4F240
__MO_OL_ADFF7
[18204] dbg: rules: __MO_OL_812FF merged duplicates: __MO_OL_BC7E6
[18204] dbg: rules: __MO_OL_25340 merged duplicates: __MO_OL_4EEDB
__MO_OL_7533E
[18204] dbg: rules: __MO_OL_58CB5 merged duplicates: __MO_OL_B4B40
[18204] dbg: rules: __DOS_HAS_ANY_URI merged duplicates: __HAS_ANY_URI
[18204] dbg: rules: __XM_OL_C7C33 merged duplicates: __XM_OL_C9068
__XM_OL_EF20B
[18204] dbg: rules: __MO_OL_72641 merged duplicates: __MO_OL_A842E
[18204] dbg: rules: __MO_OL_5E7ED merged duplicates: __MO_OL_C7C33
[18204] dbg: rules: __MO_OL_F475E merged duplicates: __MO_OL_FF5C8
[18204] dbg: rules: __MO_OL_4BF4C merged duplicates: __MO_OL_F6D01
[18204] dbg: conf: finish parsing
[18204] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0xafc7840)
implements 'finish_parsing_end', priority 0
[18204] dbg: replacetags: replacing tags
[18204] dbg: replacetags: done replacing tags
[18204] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_toks
[18204] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_seen
[18204] dbg: bayes: found bayes db version 3
[18204] dbg: bayes: DB journal sync: last sync: 0
[18204] dbg: bayes: not available for scanning, only 7 spam(s) in bayes DB <
200
[18204] dbg: bayes: untie-ing
[18204] dbg: config: score set 1 chosen.
[18204] dbg: message: main message type: multipart/alternative
[18204] dbg: message: ---- MIME PARSER START ----
[18204] dbg: message: parsing multipart, got boundary:
----=_NextPart_000_009B_01C7A13B.DBA3DC80
[18204] dbg: message: found part of type text/plain, boundary:
----=_NextPart_000_009B_01C7A13B.DBA3DC80
[18204] dbg: message: added part, type: text/plain
[18204] dbg: message: found part of type text/html, boundary:
----=_NextPart_000_009B_01C7A13B.DBA3DC80
[18204] dbg: message: added part, type: text/html
[18204] dbg: message: parsing normal part
[18204] dbg: message: parsing normal part
[18204] dbg: message: ---- MIME PARSER END ----
[18204] dbg: plugin: Mail::SpamAssassin::Plugin::DNSEval=HASH(0xb2e6dcc)
implements 'check_start', priority 0
[18204] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_toks
[18204] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_seen
[18204] dbg: bayes: found bayes db version 3
[18204] dbg: bayes: DB journal sync: last sync: 0
[18204] dbg: bayes: not available for scanning, only 7 spam(s) in bayes DB <
200
[18204] dbg: bayes: untie-ing
[18204] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0xb2cb8a4)
implements 'check_main', priority 0
[18204] dbg: conf: trusted_networks are not configured; it is recommended
that you configure trusted_networks manually
[18204] dbg: received-header: parsed as [ ip=192.168.0.1 rdns= helo=sdxp
by=netserver.ftpmanager.com ident= envfrom= intl=0 id=7F1861086FB auth=
msa=0 ]
[18204] dbg: received-header: 'from' 192.168.0.1 has private IP
[18204] dbg: received-header: relay 192.168.0.1 trusted? yes internal? yes
msa? no
[18204] dbg: metadata: X-Spam-Relays-Trusted: [ ip=192.168.0.1 rdns=
helo=sdxp by=netserver.ftpmanager.com ident= envfrom= intl=1 id=7F1861086FB
auth= msa=0 ]
[18204] dbg: metadata: X-Spam-Relays-Untrusted:
[18204] dbg: metadata: X-Spam-Relays-Internal: [ ip=192.168.0.1 rdns=
helo=sdxp by=netserver.ftpmanager.com ident= envfrom= intl=1 id=7F1861086FB
auth= msa=0 ]
[18204] dbg: metadata: X-Spam-Relays-External:
[18204] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb00a13c) implements
'extract_metadata', priority 0
[18204] dbg: metadata: X-Relay-Countries:
[18204] dbg: message: decoding quoted-printable
[18204] dbg: message: decoding quoted-printable
[18204] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xafbc6d4)
implements 'parsed_metadata', priority 0
[18204] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb00a13c) implements
'parsed_metadata', priority 0
[18204] dbg: plugin: Mail::SpamAssassin::Plugin::ASN=HASH(0xafe4c68)
implements 'parsed_metadata', priority 0
[18204] dbg: dns: dns_available set to yes in config file, skipping test
[18204] dbg: uridnsbl: domains to query:
[18204] dbg: asn: could not parse IP from first external relay, skipping ASN
check
[18204] dbg: check: running tests for priority: -1000
[18204] dbg: rules: running head tests; score so far=0
[18204] dbg: rules: compiled head tests
[18204] dbg: eval: all '*From' addrs: wilson at ftpmanager.com
[18204] dbg: eval: all '*To' addrs: wilson.galafassi at gmail.com
[18204] dbg: rules: running body tests; score so far=0
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: running uri tests; score so far=0
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: running rawbody tests; score so far=0
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: running full tests; score so far=0
[18204] dbg: rules: compiled full tests
[18204] dbg: rules: running meta tests; score so far=0
[18204] dbg: rules: compiled meta tests
[18204] dbg: check: running tests for priority: -950
[18204] dbg: rules: running head tests; score so far=0
[18204] dbg: rules: compiled head tests
[18204] dbg: rules: ran eval rule ALL_TRUSTED ======> got hit (1)
[18204] dbg: rules: running body tests; score so far=-1.44
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: running uri tests; score so far=-1.44
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: running rawbody tests; score so far=-1.44
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: running full tests; score so far=-1.44
[18204] dbg: rules: compiled full tests
[18204] dbg: rules: running meta tests; score so far=-1.44
[18204] dbg: rules: compiled meta tests
[18204] dbg: check: running tests for priority: -900
[18204] dbg: rules: running head tests; score so far=-1.44
[18204] dbg: rules: compiled head tests
[18204] dbg: rules: running body tests; score so far=-1.44
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: running uri tests; score so far=-1.44
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: running rawbody tests; score so far=-1.44
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: running full tests; score so far=-1.44
[18204] dbg: rules: compiled full tests
[18204] dbg: rules: running meta tests; score so far=-1.44
[18204] dbg: rules: compiled meta tests
[18204] dbg: check: running tests for priority: -400
[18204] dbg: rules: running head tests; score so far=-1.44
[18204] dbg: rules: compiled head tests
[18204] dbg: rules: running body tests; score so far=-1.44
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: running uri tests; score so far=-1.44
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: running rawbody tests; score so far=-1.44
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: running full tests; score so far=-1.44
[18204] dbg: rules: compiled full tests
[18204] dbg: rules: running meta tests; score so far=-1.44
[18204] dbg: rules: compiled meta tests
[18204] dbg: check: running tests for priority: 0
[18204] dbg: rules: running head tests; score so far=-1.44
[18204] dbg: rules: compiled head tests
[18204] dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got hit:
"multipart/alternative"
[18204] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got hit:
"boundary"
[18204] dbg: rules: ran header rule __CT ======> got hit: "m"
[18204] dbg: rules: ran header rule __MISSING_REF ======> got hit: "UNSET"
[18204] dbg: rules: ran header rule __FH_HAS_XPRIORITY ======> got hit: "3"
[18204] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[18204] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[18204] dbg: rules: ran header rule __DOS_RCVD_MON ======> got hit: " Mon, "
[18204] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "<"
[18204] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@sdxp>"
[18204] dbg: rules: ran header rule __MSGID_OK_HEX ======> got hit:
"010b5340"
[18204] dbg: rules: ran header rule __MIMEOLE_MS ======> got hit: "Produced
By Microsoft MimeOLE"
[18204] dbg: rules: ran header rule __HDR_ORDER_FTSDMCXXXX ======> got hit:
"
[18204] dbg: rules: From: "Wilson - FTP" <wilson at ftpmanager.com>
[18204] dbg: rules: To: <wilson.galafassi at gmail.com>
[18204] dbg: rules: Subject: Fw: block this phrase
[18204] dbg: rules: Date: Mon, 28 May 2007 15:21:26 -0300
[18204] dbg: rules: MIME-Version: 1.0
[18204] dbg: rules: Content-Type: multipart/alternative;
boundary="----=_NextPart_000_009B_01C7A13B.DBA3DC80"
[18204] dbg: rules: X-Priority: 3
[18204] dbg: rules: X-MSMail-Priority: Normal
[18204] dbg: rules: X-Mailer: Microsoft Outlook Express 6.00.2900.3028
[18204] dbg: rules: X-MimeOLE:"
[18204] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[18204] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<009e01c7a155$010b5340$0100a8c0 at sdxp>
[18204] dbg: rules: "
[18204] dbg: rules: ran header rule __MSGID_DOLLARS_MAYBE ======> got hit:
"<009e01c7a155$010b5340$0100a8c0 at sdxp>"
[18204] dbg: rules: ran header rule __MSGID_DOLLARS_OK ======> got hit:
"<009e01c7a155$010b5340$0100a8c0 at sdxp>"
[18204] dbg: rules: ran header rule __OE_MSGID_2 ======> got hit:
"<009e01c7a155$010b5340$0100a8c0 at sdxp>"
[18204] dbg: rules: ran header rule __FH_HAS_XMSMAIL ======> got hit: "N"
[18204] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "F"
[18204] dbg: rules: ran header rule __XM_MS_IN_GENERAL ======> got hit:
"Microsoft Outlook"
[18204] dbg: rules: ran header rule __XM_OUTLOOK_EXPRESS ======> got hit:
"Microsoft Outlook Express 6"
[18204] dbg: rules: ran header rule __ANY_OUTLOOK_MUA ======> got hit:
"Microsoft Outlook"
[18204] dbg: rules: ran header rule __OE_MUA ======> got hit: "Outlook
Express 6."
[18204] dbg: rules: ran header rule __HAS_X_MAILER ======> got hit: "M"
[18204] dbg: rules: ran header rule __XM_MSOE6 ======> got hit: "Microsoft
Outlook Express 6"
[18204] dbg: rules: ran header rule __HAS_MIMEOLE ======> got hit: "P"
[18204] dbg: spf: checking to see if the message has a Received-SPF header
that we can use
[18204] dbg: spf: using Mail::SPF for SPF checks
[18204] dbg: spf: no suitable relay for spf use found, skipping SPF-helo
check
[18204] dbg: spf: already checked for Received-SPF headers, proceeding with
DNS based checks
[18204] dbg: spf: no suitable relay for spf use found, skipping SPF check
[18204] dbg: spf: def_spf_whitelist_from: already checked spf and didn't get
pass, skipping whitelist check
[18204] dbg: spf: whitelist_from_spf: already checked spf and didn't get
pass, skipping whitelist check
[18204] dbg: rules: running body tests; score so far=-1.44
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: ran body rule __DOS_BODY_MON ======> got hit: "Monday"
[18204] dbg: rules: ran body rule __HAS_ANY_EMAIL ======> got hit:
"i at gmail.c"
[18204] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "F"
[18204] dbg: rules: running uri tests; score so far=-1.44
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "m"
[18204] dbg: rules: ran eval rule __HTML_LENGTH_1024_1536 ======> got hit
(1)
[18204] dbg: https_http_mismatch: anchors 0
[18204] dbg: eval: stock info total: 0
[18204] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1)
[18204] dbg: eval: text words: 20, html words: 20
[18204] dbg: eval: madiff: left: 0, orig: 20, max-difference: 0.00%
[18204] dbg: rules: ran eval rule __MIME_HTML ======> got hit (1)
[18204] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1)
[18204] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1)
[18204] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1)
[18204] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit (1)
[18204] dbg: rules: running rawbody tests; score so far=-1.439
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: ran eval rule __MIME_QP ======> got hit (2)
[18204] dbg: rules: running full tests; score so far=-1.439
[18204] dbg: rules: compiled full tests
[18204] dbg: pyzor: use_pyzor option not enabled, disabling Pyzor
[18204] dbg: rules: running meta tests; score so far=-1.439
[18204] dbg: rules: compiled meta tests
[18204] dbg: check: running tests for priority: 500
[18204] dbg: rules: running head tests; score so far=-1.439
[18204] dbg: rules: compiled head tests
[18204] dbg: rules: running body tests; score so far=-1.439
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: running uri tests; score so far=-1.439
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: running rawbody tests; score so far=-1.439
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: running full tests; score so far=-1.439
[18204] dbg: rules: compiled full tests
[18204] dbg: rules: running meta tests; score so far=-1.439
[18204] dbg: rules: meta test DIGEST_MULTIPLE has undefined dependency
'DCC_CHECK'
[18204] info: rules: meta test HS_PHARMA_1 has dependency
'HS_SUBJ_ONLINE_PHARMACEUTICAL' with a zero score
[18204] dbg: rules: compiled meta tests
[18204] dbg: check: running tests for priority: 1000
[18204] dbg: rules: running head tests; score so far=-1.439
[18204] dbg: rules: compiled head tests
[18204] dbg: rules: running body tests; score so far=-1.439
[18204] dbg: rules: compiled body tests
[18204] dbg: rules: running uri tests; score so far=-1.439
[18204] dbg: rules: compiled uri tests
[18204] dbg: rules: running rawbody tests; score so far=-1.439
[18204] dbg: rules: compiled rawbody tests
[18204] dbg: rules: running full tests; score so far=-1.439
[18204] dbg: rules: compiled full tests
[18204] dbg: rules: running meta tests; score so far=-1.439
[18204] dbg: rules: compiled meta tests
[18204] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xafc50c8) implements
'autolearn_discriminator', priority 0
[18204] dbg: learn: auto-learn: currently using scoreset 1
[18204] dbg: learn: auto-learn: message score: -1.439, computed score for
autolearn: 0.001
[18204] dbg: learn: auto-learn? ham=-1, spam=12, body-points=0.001,
head-points=0.001, learned-points=0
[18204] dbg: learn: auto-learn? no: inside auto-learn thresholds, not
considered ham or spam
[18204] dbg: check: is spam? score=-1.439 required=5
[18204] dbg: check: tests=ALL_TRUSTED,HTML_MESSAGE
[18204] dbg: check:
subtests=__ANY_OUTLOOK_MUA,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,_
_DOS_BODY_MON,__DOS_HAS_ANY_URI,__DOS_RCVD_MON,__DOS_REF_TODAY,__FH_HAS_XMSM
AIL,__FH_HAS_XPRIORITY,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_MIMEOLE,__HAS_MSG
ID,__HAS_MSMAIL_PRI,__HAS_RCVD,__HAS_SUBJECT,__HAS_X_MAILER,__HDR_ORDER_FTSD
MCXXXX,__HTML_LENGTH_1024_1536,__MIMEOLE_MS,__MIME_HTML,__MIME_QP,__MIME_VER
SION,__MISSING_REF,__MSGID_DOLLARS_MAYBE,__MSGID_DOLLARS_OK,__MSGID_OK_HEX,_
_MSGID_OK_HOST,__NONEMPTY_BODY,__NO_INR_YES_REF,__OE_MSGID_2,__OE_MUA,__SANE
_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_ME
TA,__TOCC_EXISTS,__XM_MSOE6,__XM_MS_IN_GENERAL,__XM_OUTLOOK_EXPRESS
[18204] dbg: learn: auto-learn? ham=-1, spam=12, body-points=0.001,
head-points=0.001, learned-points=0
[18204] dbg: learn: auto-learn? no: inside auto-learn thresholds, not
considered ham or spam
Ignore errors about failing to find EOCD signature
format error: can't find EOCD signature
at /usr/sbin/MailScanner line 832
format error: file is too short
at /usr/sbin/MailScanner line 832
in maillog:
May 28 15:25:08 netserver postfix/smtpd[18264]: connect from
unknown[192.168.0.1]
May 28 15:25:08 netserver postfix/smtpd[18264]: AF8251086E9:
client=unknown[192.168.0.1]
May 28 15:25:08 netserver postfix/cleanup[18267]: AF8251086E9: hold: header
Received: from sdxp (unknown [192.168.0.1])??by netserver.ftpmanager.com
(Postfix) with SMTP id AF8251086E9??for <wilson.galafassi at gmail.com>; Mon,
28 May 2007 15:25:08 -0300 (BRT) from unknown[192.168.0.1];
from=<wilson at ftpmanager.com> to=<wilson.galafassi at gmail.com> proto=SMTP
helo=<sdxp>
May 28 15:25:08 netserver postfix/cleanup[18267]: AF8251086E9:
message-id=<00a501c7a155$8015e880$0100a8c0 at sdxp>
May 28 15:25:08 netserver postfix/smtpd[18264]: disconnect from
unknown[192.168.0.1]
May 28 15:25:12 netserver MailScanner[18258]: New Batch: Scanning 1
messages, 1924 bytes
May 28 15:25:12 netserver MailScanner[18258]: Created attachment dirs for 1
messages
May 28 15:25:12 netserver MailScanner[18258]: MCP Checks: Starting
May 28 15:25:12 netserver MailScanner[18258]: Message Content Protection
SpamAssassin returned 512
May 28 15:25:14 netserver MailScanner[18258]: SpamAssassin returned 0
May 28 15:25:14 netserver MailScanner[18258]: Virus and Content Scanning:
Starting
May 28 15:25:14 netserver MailScanner[18258]: Commencing scanning by
clamav...
May 28 15:25:22 netserver MailScanner[18258]: Completed scanning by clamav
May 28 15:25:22 netserver MailScanner[18258]: Completed checking by
/usr/bin/file
May 28 15:25:22 netserver MailScanner[18258]: Requeue: AF8251086E9.6F306 to
788411086FD
May 28 15:25:22 netserver MailScanner[18258]: About to deliver 1 messages
May 28 15:25:22 netserver MailScanner[18258]: Uninfected: Delivered 1
messages
May 28 15:25:22 netserver MailScanner[18258]: Logging message
AF8251086E9.6F306 to SQL
May 28 15:25:22 netserver MailScanner[18258]: Config: calling custom end
function SQLBlacklist
May 28 15:25:22 netserver MailScanner[18258]: Closing down by-domain spam
blacklist
May 28 15:25:22 netserver MailScanner[18258]: Config: calling custom end
function MailWatchLogging
May 28 15:25:22 netserver MailScanner[18258]: Config: calling custom end
function SQLWhitelist
May 28 15:25:22 netserver MailScanner[18258]: Closing down by-domain spam
whitelist
May 28 15:25:22 netserver MailScanner[18258]: MailScanner child dying of old
age
May 28 15:25:22 netserver MailScanner[18261]: AF8251086E9.6F306: Logged to
MailWatch SQL
May 28 15:25:22 netserver postfix/qmgr[18177]: 788411086FD:
from=<wilson at ftpmanager.com>, size=1406, nrcpt=1 (queue active)
May 28 15:25:26 netserver postfix/smtp[18279]: 788411086FD:
to=<wilson.galafassi at gmail.com>, relay=ftpmanager.com[72.232.196.114]:25,
delay=18, delays=14/0.01/3.3/0.77, dsn=2.0.0, status=sent (250 OK
id=1HsjuI-0008N5-Dk)
May 28 15:25:26 netserver postfix/qmgr[18177]: 788411086FD: removed
-----Mensagem original-----
De: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] Em nome de --[ UxBoD ]--
Enviada em: segunda-feira, 28 de maio de 2007 13:24
Para: mailscanner at lists.mailscanner.info
Assunto: Re: mcp help
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Wilson,
I think you need to concentrate on your SA perms and configuration.
Get them right first and then re-check.
UxBoD
On Mon, 28 May 2007 12:34:05 -0300
"Wilson A. Galafassi Jr." <wilson.galafassi at gmail.com> wrote:
> Fixed. But mcp still don't working. Any suggestion?
>
> May 28 12:31:37 netserver MailScanner[13591]: New Batch: Scanning 1
> messages, 1885 bytes May 28 12:31:37 netserver MailScanner[13591]:
> Created attachment dirs for 1 messages May 28 12:31:37 netserver
> MailScanner[13591]: MCP Checks: Starting May 28 12:31:37 netserver
> MailScanner[13591]: Message Content Protection SpamAssassin returned
> 512 May 28 12:31:39 netserver MailScanner[13591]: SpamAssassin
> returned 0 May 28 12:31:39 netserver MailScanner[13591]: Virus and
> Content
> Scanning: Starting
> May 28 12:31:39 netserver MailScanner[13591]: Commencing scanning by
> clamav...
> May 28 12:31:47 netserver MailScanner[13591]: Completed scanning by
> clamav May 28 12:31:47 netserver MailScanner[13591]: Completed
> checking by /usr/bin/file May 28 12:31:47 netserver
> MailScanner[13591]: Requeue:
> 46CF01086FB.48D13 to 6438F1086FD
> May 28 12:31:47 netserver MailScanner[13591]: About to deliver 1
> messages May 28 12:31:47 netserver postfix/qmgr[13574]: 6438F1086FD:
> from=<wilson at ftpmanager.com>, size=1367, nrcpt=1 (queue active) May 28
> 12:31:47 netserver MailScanner[13591]: Uninfected: Delivered 1
> messages May 28 12:31:47 netserver MailScanner[13591]: Logging message
> 46CF01086FB.48D13 to SQL
> May 28 12:31:47 netserver MailScanner[13594]: 46CF01086FB.48D13:
> Logged to MailWatch SQL
> May 28 12:31:47 netserver MailScanner[13591]: Config: calling custom
> end function SQLBlacklist May 28 12:31:47 netserver
> MailScanner[13591]: Closing down by-domain spam blacklist May 28
> 12:31:47 netserver MailScanner[13591]: Config: calling custom end
> function MailWatchLogging May 28 12:31:47 netserver
> MailScanner[13591]: Config: calling custom end function SQLWhitelist
> May 28 12:31:47 netserver MailScanner[13591]: Closing down by-domain
> spam whitelist May 28 12:31:47 netserver MailScanner[13591]:
> MailScanner child dying of old age May 28 12:31:51 netserver
> postfix/smtp[13631]: 6438F1086FD:
> to=<wilson.galafassi at gmail.com>,
> relay=ftpmanager.com[65.132.196.114]:25, delay=20,
> delays=16/0.02/3.2/0.85, dsn=2.0.0, status=sent (250 OK
> id=1HshCI-0007g4-TE) May 28 12:31:51 netserver postfix/qmgr[13574]:
> 6438F1086FD: removed
>
> -----Mensagem original-----
> De: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] Em nome de Julian
> Field Enviada em: segunda-feira, 28 de maio de 2007 12:11
> Para: MailScanner discussion
> Assunto: Re: RES: RES: mcp help
>
> Make sure that the account you are using for MailScanner (set in "Run
> As User =" in MailScanner.conf) can write to its home directory. If it
> doesn't have a home directory, then create one. Looks like you are
> using Postfix or Exim and their home dir is set in /etc/passwd to
> "/no/where".
>
> Wilson A. Galafassi Jr. wrote:
> > Running in debug mode i see:
> > [7297] dbg: config: mkdir /no/where/.spamassassin failed: mkdir /no:
> > Permission denied
> > at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin.pm line 1578
> >
> > I can't find where to change this setting.
> > This is related to my mcp problem?
> >
> > -----Mensagem original-----
> > De: mailscanner-bounces at lists.mailscanner.info
> > [mailto:mailscanner-bounces at lists.mailscanner.info] Em nome de
> > Julian
> Field
> > Enviada em: segunda-feira, 28 de maio de 2007 11:39
> > Para: MailScanner discussion
> > Assunto: Re: RES: mcp help
> >
> > What is the name and location of this cf file?
> > Is it being read when MailScanner starts?
> > Do 'ls -lu /etc/MailScanner/mcp'
> > Then wait a minute or two
> > Then 'MailScanner -debug'
> > Then 'ls -lu /etc/MailScanner/mcp'
> > The 'last used' date stamp on the file should have changed. If it
> > hasn't then the file isn't being read, and there's your problem.
> >
> > Wilson A. Galafassi Jr. wrote:
> >
> >> I have only a cf file with this content:
> >>
> >> body SAMPLE_RULE3 /test/i
> >> describe SAMPLE_RULE3 Banned body text
> >> score SAMPLE_RULE3 5
> >>
> >> what i need to have in rules file?
> >>
> >> -----Mensagem original-----
> >> De: mailscanner-bounces at lists.mailscanner.info
> >> [mailto:mailscanner-bounces at lists.mailscanner.info] Em nome de --[
> >> UxBoD
> > ]--
> >
> >> Enviada em: segunda-feira, 28 de maio de 2007 07:55
> >> Para: mailscanner at lists.mailscanner.info
> >> Assunto: Re: mcp help
> >>
> >> Hi,
> >>
> >> Would be useful to see what is in your configuration file with
> >> respect to MCP, and also what you have in your rules file.
> >>
> >> Thanks,
> >>
> >> On Mon, 28 May 2007 07:38:13 -0300
> >> "Wilson A. Galafassi Jr." <wilson.galafassi at gmail.com> wrote:
> >>
> >>
> >>
> >>> Hello to all.
> >>>
> >>>
> >>>
> >>> I'm configuring mailscanner and mcp settings don't working.
> >>>
> >>>
> >>>
> >>> When i send or receive a mail with containing in the body the
> >>> expression "test" the mail isn't mcp marked.
> >>>
> >>>
> >>>
> >>> Can someone tell me what i have to change?
> >>>
> >>>
> >>>
> >>> Very thanks.
> >>>
> >>>
> >>>
> >>> Wilson
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> I have this in my cf file:
> >>>
> >>>
> >>>
> >>> body SAMPLE_RULE3 /test/i
> >>>
> >>> describe SAMPLE_RULE3 Banned body text
> >>>
> >>> score SAMPLE_RULE3 5
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> in MailScanner.conf i have:
> >>>
> >>>
> >>>
> >>> MCP Checks = yes
> >>>
> >>>
> >>>
> >>> # Do the spam checks first, or the MCP checks first?
> >>>
> >>> # This cannot be the filename of a ruleset, only a fixed value.
> >>>
> >>> First Check = mcp
> >>>
> >>>
> >>>
> >>> # The rest of these options are clones of the equivalent spam
> >>> options MCP Required SpamAssassin Score = 1 MCP High SpamAssassin
> >>> Score = 10 MCP Error Score = 1
> >>>
> >>>
> >>>
> >>> MCP Header = X-%org-name%-MailScanner-MCPCheck:
> >>>
> >>> Non MCP Actions = deliver
> >>>
> >>> MCP Actions = deliver store
> >>>
> >>> High Scoring MCP Actions = store
> >>>
> >>> Bounce MCP As Attachment = no
> >>>
> >>>
> >>>
> >>> MCP Modify Subject = start
> >>>
> >>> MCP Subject Text = {MCP?}
> >>>
> >>> High Scoring MCP Modify Subject = start
> >>>
> >>> High Scoring MCP Subject Text = {MCP?}
> >>>
> >>>
> >>>
> >>> Is Definitely MCP = no
> >>>
> >>> Is Definitely Not MCP = no
> >>>
> >>> Definite MCP Is High Scoring = yes
> >>>
> >>> Always Include MCP Report = yes
> >>>
> >>> Detailed MCP Report = yes
> >>>
> >>> Include Scores In MCP Report = yes
> >>>
> >>> Log MCP = yes
> >>>
> >>>
> >>>
> >>> MCP Max SpamAssassin Timeouts = 20
> >>>
> >>> MCP Max SpamAssassin Size = 100k
> >>>
> >>> MCP SpamAssassin Timeout = 10
> >>>
> >>>
> >>>
> >>> MCP SpamAssassin Prefs File =
> >>> %mcp-dir%/mcp.spam.assassin.prefs.conf
> >>>
> >>> MCP SpamAssassin User State Dir =
> >>>
> >>> MCP SpamAssassin Local Rules Dir = %mcp-dir% MCP SpamAssassin
> >>> Default Rules Dir = %mcp-dir% MCP SpamAssassin Install Prefix =
> >>> %mcp-dir% Recipient MCP Report =
> >>> %report-dir%/recipient.mcp.report.txt
> >>>
> >>> Sender MCP Report = %report-dir%/sender.mcp.report.txt
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>>
> >>
> >>
> >
> > Jules
> >
> >
>
> Jules
>
- --
- --[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B //
Keyserver: www.keyserver.net Key-ID: 0x5DB5687B // Phone: +44 845 869 2749
SIP Phone: uxbod at sip.splatnix.net -----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.4 (GNU/Linux)
iD8DBQFGWwI5H7GwL121aHsRAkwMAJ9AT/ohhFUYY9l0jZg41dJ/ajXKPwCgrpsL
JJACR7i6g68vYDzClM7+JLI=
=ksEJ
-----END PGP SIGNATURE-----
--
This message has been scanned for viruses and dangerous content by
MailScanner, and is believed to be clean.
More information about the MailScanner
mailing list