MailScanner increasing score over threshold but message passed as clean?

[Julian Field]

In /usr/lib/MailScanner/MailScanner/Message.pm, at line 567, you should 
find a line that looks like this:
      my($mshspam, $mshhigh) = MailScanner::SA::SATest_spam($this, 0.0, 
$this->{sascore}+0.0);
Immediately *after* this line, please add this line:
print STDERR "mshspam = $mshspam\nmshhigh = $mshhigh\n";

Then run "MailScanner --debug" on some test messages that should push 
the spam score over your spam threshold of 5, and mshspam should equal 
1. Please can you let me know what it outputs.

Thanks!

Edward Prendergast wrote:
> I've hiked up the score below:
>
> Treat Invalid Watermarks With No Sender as Spam = 3
>
> But when this pushes the spam score over 5 with the addition of SpamAssassin
> hits (my spam threshold is 5, high scoring spam is 10) the message gets
> passed as clean. It appears that the score is getting added but ignored.
>
> These are the hits from SpamAssassin:
> cached	not	 
> 	score=2.197	 
> 5	required	 
> 2.00	ANY_BOUNCE_MESSAGE	Message is some kind of bounce message
> -2.60	BAYES_00	Bayesian spam probability is 0 to 1%
> 0.10	BOUNCE_MESSAGE	MTA bounce message
> 2.70	FH_FROMEML_NOTLD	E-mail address doesn't have TLD (.com, etc.
>
> This is the total score (as reported in MailWatch):
> SpamAssassin Score:	5.20
>
> Am I doing something wrong here or is this a bug?
>
> MailScanner -v output:
> Running on
> Linux server10.netring.co.uk 2.6.18-53.1.4.el5 #1 SMP Wed Nov 14 10:37:33
> EST 2007 i686 i686 i386 GNU/Linux
> This is Red Hat Enterprise Linux Server release 5.1 (Tikanga)
> This is Perl version 5.008008 (5.8.8)
>
> This is MailScanner version 4.66.4
> Module versions are:
> 1.00    AnyDBM_File
> 1.16    Archive::Zip
> 1.04    Carp
> 1.119   Convert::BinHex
> 2.27    Date::Parse
> 1.00    DirHandle
> 1.05    Fcntl
> 2.74    File::Basename
> 2.09    File::Copy
> 2.01    FileHandle
> 1.08    File::Path
> 0.19    File::Temp
> 0.90    Filesys::Df
> 1.35    HTML::Entities
> 3.56    HTML::Parser
> 2.37    HTML::TokeParser
> 1.23    IO
> 1.14    IO::File
> 1.13    IO::Pipe
> 2.02    Mail::Header
> 1.86    Math::BigInt
> 3.07    MIME::Base64
> 5.425   MIME::Decoder
> 5.425   MIME::Decoder::UU
> 5.425   MIME::Head
> 5.425   MIME::Parser
> 3.07    MIME::QuotedPrint
> 5.425   MIME::Tools
> 0.11    Net::CIDR
> 1.09    POSIX
> 1.18    Scalar::Util
> 1.78    Socket
> 1.4     Sys::Hostname::Long
> 0.13    Sys::Syslog
> 1.86    Time::HiRes
> 1.02    Time::localtime
>
> Optional module versions are:
> 1.36    Archive::Tar
> 0.21    bignum
> 1.82    Business::ISBN
> 1.10    Business::ISBN::Data
> 0.17    Convert::TNEF
> 1.08    Data::Dump
> 1.814   DB_File
> 1.14    DBD::SQLite
> 1.56    DBI
> 1.15    Digest
> 1.01    Digest::HMAC
> 2.36    Digest::MD5
> 2.11    Digest::SHA1
> 1.00    Encode::Detect
> 0.17008 Error
> 0.18    ExtUtils::CBuilder
> 2.18    ExtUtils::ParseXS
> 0.44    Inline
> 1.08    IO::String
> 1.08    IO::Zlib
> 2.21    IP::Country
> 0.21    Mail::ClamAV
> 3.002004        Mail::SpamAssassin
> v2.004  Mail::SPF
> 1.999001        Mail::SPF::Query
> 0.19    Math::BigRat
> 0.2808  Module::Build
> 0.20    Net::CIDR::Lite
> 0.62    Net::DNS
> 0.002.2 Net::DNS::Resolver::Programmable
> missing Net::LDAP
>  4.004  NetAddr::IP
> 1.94    Parse::RecDescent
> missing SAVI
> 2.56    Test::Harness
> 0.95    Test::Manifest
> 1.98    Text::Balanced
> 1.35    URI
> 0.7203  version
> 0.62    YAML
>
>
> ************
> The information in this email is confidential and may be legally privileged.
> It is intended solely for the addressee. Access to this email by anyone else
> is unauthorised. If you are not the intended recipient, any action taken or
> omitted to be taken in reliance on it, any form of reproduction,
> dissemination, copying, disclosure, modification, distribution and/or
> publication of this E-mail message is strictly prohibited and may be
> unlawful. If you have received this E-mail message in error, please notify
> us immediately. Please also destroy and delete the message from your
> computer.
> ************
>
>   

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.