Re Help with spamassassin+mailscanner
vinayan KP
mailwatch.kp at gmail.com
Mon Jun 16 07:32:42 IST 2008
Sir,
I sent the following reply 12 days back and I was wondering why I was
not getting any reply. Noticed the bounced messages saying my mail
exceeded the limit and I guess it was because of the attachement to
show how my existing mailscanner before my posftix server.
Hope some one will have time to go through it and guide me...
Regards
Vinau
---------- Forwarded message ----------
From: vinayan KP <mailwatch.kp at gmail.com>
Date: Thu, Jun 5, 2008 at 3:59 PM
Subject: Re: Help with spamassassin+mailscanner
To: MailScanner discussion <mailscanner at lists.mailscanner.info>
Sir,
Sorry for the delayed response. I could work on the issue only day
before afte I received your suggestions and I did the fillowing as per
your mails. But still Mails with low SA Score gets through as clean
mail.
(I get to knwo this because of the following : For us the mails are
received by a system that runs mailscanner, which was installed more
than 4 years back by a private party and they charge for configuring
and maintaining it. Earlier we were using a qmail system and the
private party could not configure mailscanner for qmail on the mail
server (again managed by another private party on contract). So they
installed it on a separate system which would receive all the mails
for our domain and do the spam check, tag the subject line and then
forward it to the mail server. This old mailscanner still works well
and catches low and high scoring mails properly. About 18 months back
the old qmail server had a problem and I installed a new mail server
using postfix. Now the old mailscanner system is started showing
problems which made me to install mailscanner, clamave and
spamassassin on the new postfix server. My new mailscanner on the new
postfix (for which i am asking my doubts) system catchs only those
mails where SA score is > Required SpamAssassin Score (i set is as
3). But I can see the old mailscanner catches mails where SA score is
< Required SpamAssassin Score = 3
and tags it as {Spam?} and when that mails reaches the new postfix
server, the mailscanner on it lets the mail go as clean!!! I am
attaching a screen shot of the mailwatch which shows this).
I did the followign as per your mail:
(1)
Installed pysor
------------------------------------------------------------------------------------------------------------------------------------
(2) set the bays path and permissions:
I set the bayes_pasth in /etc/MailScanner/spam.assassin.prefs.conf
and restarted spamd and MailScanner:
bayes_path /var/spool/MailScanner/spamassassin/bayes
This created the bayes_* files in
/var/spool/MailScanner/spamassassin/ and the permissions are ass
follows, where spamassing is run by spamuser :
mail:/var/spool/MailScanner # ls -l
total 12
drwx------ 7 postfix postfix 4096 Jun 5 14:30 incoming
drwx------ 113 postfix www 4096 Jun 5 06:14 quarantine
drwxr-xr-x 2 postfix postfix 4096 Jun 4 15:49 spamassassin
mail:/var/spool/MailScanner/spamassassin # ls -l
total 11732
-rw------- 1 spamuser postfix 1134 Jun 5 14:30 bayes.mutex
-rw-rw---- 1 spamuser postfix 104928 Jun 5 14:30 bayes_journal
-rw------- 1 spamuser postfix 10416128 Jun 5 13:59 bayes_seen
-rw-rw---- 1 spamuser postfix 5455872 Jun 5 14:30 bayes_toks
------------------------------------------------------------------------------------------------------------------------------------
(3) Trained spamassassin+mailscaner
Ran the sa-learn as follows :
mail:/ # sa-learn --no-sync --spam /home/user1/Maildir/.spam/cur/
Learned tokens from 1388 message(s) (1388 message(s) examined)
mail:/ # sa-learn --no-sync --ham /home/user1/Maildir/cur/
Learned tokens from 438 message(s) (459 message(s) examined)
------------------------------------------------------------------------------------------------------------------------------------
Ran spamassassin -D - - lint and didnt show any error or warning :
mail:/etc/MailScanner # spamassassin -D --lint
[23477] dbg: logger: adding facilities: all
[23477] dbg: logger: logging level is DBG
[23477] dbg: generic: SpamAssassin version 3.1.6
[23477] dbg: config: score set 0 chosen.
[23477] dbg: util: running in taint mode? yes
[23477] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[23477] dbg: util: PATH included '/sbin', keeping
[23477] dbg: util: PATH included '/usr/sbin', keeping
[23477] dbg: util: PATH included '/usr/local/sbin', keeping
[23477] dbg: util: PATH included '/opt/gnome/sbin', keeping
[23477] dbg: util: PATH included '/root/bin', keeping
[23477] dbg: util: PATH included '/usr/local/bin', keeping
[23477] dbg: util: PATH included '/usr/bin', keeping
[23477] dbg: util: PATH included '/usr/X11R6/bin', keeping
[23477] dbg: util: PATH included '/bin', keeping
[23477] dbg: util: PATH included '/usr/games', keeping
[23477] dbg: util: PATH included '/opt/gnome/bin', keeping
[23477] dbg: util: PATH included '/opt/kde3/bin', keeping
[23477] dbg: util: PATH included '/usr/lib/jvm/jre/bin', keeping
[23477] dbg: util: PATH included '/usr/lib/mit/bin', keeping
[23477] dbg: util: PATH included '/usr/lib/mit/sbin', keeping
[23477] dbg: util: PATH included '/usr/lib/qt3/bin', keeping
[23477] dbg: util: final PATH set to:
/sbin:/usr/sbin:/usr/local/sbin:/opt/gnome/sbin:/root/bin:/usr/local/bin:/usr/bin:/usr/X11R6/bin:/bin:/usr/games:/opt/gnome/bin:/opt/kde3/bin:/usr/lib/jvm/jre/bin:/usr/lib/mit/bin:/usr/lib/mit/sbin:/usr/lib/qt3/bin
[23477] dbg: message: ---- MIME PARSER START ----
[23477] dbg: message: main message type: text/plain
[23477] dbg: message: parsing normal part
[23477] dbg: message: added part, type: text/plain
[23477] dbg: message: ---- MIME PARSER END ----
[23477] dbg: dns: is Net::DNS::Resolver available? yes
[23477] dbg: dns: Net::DNS version: 0.59
[23477] dbg: diag: perl platform: 5.008008 linux
[23477] dbg: diag: module installed: Digest::SHA1, version 2.11
[23477] dbg: diag: module installed: HTML::Parser, version 3.55
[23477] dbg: diag: module installed: MIME::Base64, version 3.07
[23477] dbg: diag: module installed: DB_File, version 1.814
[23477] dbg: diag: module installed: Net::DNS, version 0.59
[23477] dbg: diag: module installed: Net::SMTP, version 2.29
[23477] dbg: diag: module not installed: Mail::SPF::Query ('require' failed)
[23477] dbg: diag: module not installed: IP::Country::Fast ('require' failed)
[23477] dbg: diag: module not installed: Razor2::Client::Agent
('require' failed)
[23477] dbg: diag: module not installed: Net::Ident ('require' failed)
[23477] dbg: diag: module not installed: IO::Socket::INET6 ('require' failed)
[23477] dbg: diag: module not installed: IO::Socket::SSL ('require' failed)
[23477] dbg: diag: module installed: Time::HiRes, version 1.86
[23477] dbg: diag: module installed: DBI, version 1.52
[23477] dbg: diag: module installed: Getopt::Long, version 2.35
[23477] dbg: diag: module installed: LWP::UserAgent, version 2.033
[23477] dbg: diag: module installed: HTTP::Date, version 1.47
[23477] dbg: diag: module installed: Archive::Tar, version 1.30
[23477] dbg: diag: module installed: IO::Zlib, version 1.04
[23477] dbg: ignore: using a test message to lint rules
[23477] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[23477] dbg: config: read file /etc/mail/spamassassin/init.pre
[23477] dbg: config: read file /etc/mail/spamassassin/v310.pre
[23477] dbg: config: read file /etc/mail/spamassassin/v312.pre
[23477] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[23477] dbg: config: using "/usr/share/spamassassin" for default rules dir
[23477] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[23477] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[23477] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[23477] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[23477] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[23477] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[23477] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[23477] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[23477] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[23477] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[23477] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[23477] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[23477] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[23477] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
[23477] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
[23477] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[23477] dbg: config: read file /usr/share/spamassassin/60_whitelist_subject.cf
[23477] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[23477] dbg: config: read file /etc/mail/spamassassin/local.cf
[23477] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f04c)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x90d728c)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[23477] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x90fa404)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[23477] dbg: pyzor: local tests only, disabling Pyzor
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x9110c64)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[23477] dbg: razor2: local tests only, skipping Razor
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Razor2=HASH(0x90dcecc)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[23477] dbg: reporter: local tests only, disabling SpamCop
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0x90df794)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[23477] dbg: plugin: registered Mail::SpamAssassin::Plugin::AWL=HASH(0x916a478)
[23477] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x917971c)
[23477] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9185ed4)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9192b04)
[23477] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
[23477] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x918b86c)
[23477] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[23477] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[23477] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[23477] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[23477] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[23477] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
[23477] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[23477] dbg: config: adding redirector regex:
m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
[23477] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
[23477] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
[23477] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
[23477] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
[23477] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x918b86c) implements
'finish_parsing_end'
[23477] dbg: replacetags: replacing tags
[23477] dbg: replacetags: done replacing tags
[23477] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_toks
[23477] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_seen
[23477] dbg: bayes: found bayes db version 3
[23477] dbg: bayes: DB journal sync: last sync: 1212657053
[23477] dbg: config: score set 2 chosen.
[23477] dbg: message: ---- MIME PARSER START ----
[23477] dbg: message: main message type: text/plain
[23477] dbg: message: parsing normal part
[23477] dbg: message: added part, type: text/plain
[23477] dbg: message: ---- MIME PARSER END ----
[23477] dbg: dns: is DNS available? 0
[23477] dbg: metadata: X-Spam-Relays-Trusted:
[23477] dbg: metadata: X-Spam-Relays-Untrusted:
[23477] dbg: metadata: X-Spam-Relays-Internal:
[23477] dbg: metadata: X-Spam-Relays-External:
[23477] dbg: message: no encoding detected
[23477] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f04c) implements
'parsed_metadata'
[23477] dbg: rules: local tests only, ignoring RBL eval
[23477] dbg: check: running tests for priority: 0
[23477] dbg: rules: running header regexp tests; score so far=0
[23477] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[23477] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"1212657279"
[23477] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<1212657279 at lint_rules>
[23477] dbg: rules: "
[23477] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@lint_rules>"
[23477] dbg: eval: all '*From' addrs: ignore at compiling.spamassassin.taint.org
[23477] dbg: eval: all '*To' addrs:
[23477] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[23477] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[23477] dbg: rules: running body-text per-line regexp tests; score so far=-0.001
[23477] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I"
[23477] dbg: uri: running uri tests; score so far=-0.001
[23477] dbg: bayes: DB journal sync: last sync: 1212657053
[23477] dbg: bayes: corpus size: nspam = 32262, nham = 41823
[23477] dbg: bayes: score = 0.155182683190695
[23477] dbg: bayes: DB expiry: tokens in DB: 145489, Expiry max size:
150000, Oldest atime: 1211879603, Newest atime: 1212656437, Last
expire: 1212572821, Current time: 1212657280
[23477] dbg: bayes: DB journal sync: last sync: 1212657053
[23477] dbg: bayes: untie-ing
[23477] dbg: bayes: untie-ing db_toks
[23477] dbg: bayes: untie-ing db_seen
[23477] dbg: rules: ran eval rule BAYES_20 ======> got hit
[23477] dbg: rules: running raw-body-text per-line regexp tests; score
so far=-0.741
[23477] dbg: rules: running full-text regexp tests; score so far=-0.741
[23477] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f04c) implements
'check_tick'
[23477] dbg: check: running tests for priority: 500
[23477] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f04c) implements
'check_post_dnsbl'
[23477] dbg: rules: running meta tests; score so far=-0.741
[23477] info: rules: meta test DIGEST_MULTIPLE has undefined
dependency 'DCC_CHECK'
[23477] dbg: rules: running header regexp tests; score so far=1.416
[23477] dbg: rules: running body-text per-line regexp tests; score so far=1.416
[23477] dbg: uri: running uri tests; score so far=1.416
[23477] dbg: rules: running raw-body-text per-line regexp tests; score
so far=1.416
[23477] dbg: rules: running full-text regexp tests; score so far=1.416
[23477] dbg: check: running tests for priority: 1000
[23477] dbg: rules: running meta tests; score so far=1.416
[23477] dbg: rules: running header regexp tests; score so far=1.416
[23477] dbg: rules: running body-text per-line regexp tests; score so far=1.416
[23477] dbg: uri: running uri tests; score so far=1.416
[23477] dbg: rules: running raw-body-text per-line regexp tests; score
so far=1.416
[23477] dbg: rules: running full-text regexp tests; score so far=1.416
[23477] dbg: check: is spam? score=1.416 required=3
[23477] dbg: check:
tests=BAYES_20,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
[23477] dbg: check:
subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__UNUSABLE_MSGID
---------------------------------------------------------------------------------------------------------------------------------
Then I set the following in /etc/MailScanner/MailScanner.conf and
restarted MailScanner:
Spam Checks = yes
Spam List = spamhaus.org SBL+XBL
Spam Lists To Be Spam = 1
Spam Lists To Reach High Score = 2
--------------------------------------------------------------------------------------------------------------------------------
My /etc/MailScanner/MailScanner.conf is as follows:
%org-name% = < This i am not giving>
%org-long-name% = < this i am not giving >
%web-site% = www.your-organisation.com
%etc-dir% = /etc/MailScanner
%report-dir% = /etc/MailScanner/reports/en
%rules-dir% = /etc/MailScanner/rules
%mcp-dir% = /etc/MailScanner/mcp
Max Children = 5
Run As User = postfix
Run As Group = postfix
Queue Scan Interval = 6
Incoming Queue Dir = /var/spool/postfix/hold
Outgoing Queue Dir = /var/spool/postfix/incoming
Incoming Work Dir = /var/spool/MailScanner/incoming
Quarantine Dir = /var/spool/MailScanner/quarantine
PID file = /var/run/MailScanner.pid
Restart Every = 14400
MTA = postfix
Sendmail = /usr/sbin/sendmail
Sendmail2 = /usr/sbin/sendmail
Incoming Work User =
Incoming Work Group =
Incoming Work Permissions = 0600
Quarantine User = root
Quarantine Group = www
Quarantine Permissions = 0660
Max Unscanned Bytes Per Scan = 100m
Max Unsafe Bytes Per Scan = 50m
Max Unscanned Messages Per Scan = 30
Max Unsafe Messages Per Scan = 30
Max Normal Queue Size = 800
Scan Messages = yes
Reject Message = no
Maximum Attachments Per Message = 200
Expand TNEF = yes
Use TNEF Contents = replace
Deliver Unparsable TNEF = no
TNEF Expander = /usr/bin/tnef --maxsize=100000000
TNEF Timeout = 120
File Command = /usr/bin/file
File Timeout = 20
Gunzip Command = /bin/gunzip
Gunzip Timeout = 50
Unrar Command = /usr/bin/unrar
Unrar Timeout = 50
Find UU-Encoded Files = no
Maximum Message Size = %rules-dir%/max.message.size.rules
Maximum Attachment Size = -1
Minimum Attachment Size = -1
Maximum Archive Depth = 2
Find Archives By Content = yes
Virus Scanning = yes
Virus Scanners = clamav
Virus Scanner Timeout = 300
Deliver Disinfected Files = yes
Silent Viruses = HTML-IFrame All-Viruses
Still Deliver Silent Viruses = no
Non-Forging Viruses = Joke/ OF97/ WM97/ W97M/ eicar
Block Encrypted Messages = no
Block Unencrypted Messages = no
Allow Password-Protected Archives = no
Allowed Sophos Error Messages =
Sophos IDE Dir = /usr/local/Sophos/ide
Sophos Lib Dir = /usr/local/Sophos/lib
Monitors For Sophos Updates = /usr/local/Sophos/ide/*ides.zip
Monitors for ClamAV Updates = /usr/local/share/clamav/*.cvd
ClamAVmodule Maximum Recursion Level = 8
ClamAVmodule Maximum Files = 1000
ClamAVmodule Maximum Compression Ratio = 250
Dangerous Content Scanning = yes
Allow Partial Messages = no
Allow External Message Bodies = no
Find Phishing Fraud = yes
Also Find Numeric Phishing = yes
Use Stricter Phishing Net = yes
Highlight Phishing Fraud = yes
Phishing Safe Sites File = %etc-dir%/phishing.safe.sites.conf
Country Sub-Domains List = %etc-dir%/country.domains.conf
Allow IFrame Tags = disarm
Allow Form Tags = disarm
Allow Script Tags = disarm
Allow WebBugs = disarm
Ignored Web Bug Filenames = spacer pixel.gif pixel.png gap
Web Bug Replacement =
http://www.sng.ecs.soton.ac.uk/mailscanner/images/1x1spacer.gif
Allow Object Codebase Tags = disarm
Convert Dangerous HTML To Text = no
Convert HTML To Text = no
Allow Filenames =
Deny Filenames =
Filename Rules = %etc-dir%/filename.rules.conf
Allow Filetypes =
Deny Filetypes =
Filetype Rules = %etc-dir%/filetype.rules.conf
Quarantine Infections = yes
Quarantine Silent Viruses = no
Quarantine Modified Body = no
Quarantine Whole Message = yes
Quarantine Whole Messages As Queue Files = no
Keep Spam And MCP Archive Clean = no
Language Strings = %report-dir%/languages.conf
Rejection Report = %report-dir%/rejection.report.txt
Deleted Bad Content Message Report = %report-dir%/deleted.content.message.txt
Deleted Bad Filename Message Report = %report-dir%/deleted.filename.message.txt
Deleted Virus Message Report = %report-dir%/deleted.virus.message.txt
Deleted Size Message Report = %report-dir%/deleted.size.message.txt
Stored Bad Content Message Report = %report-dir%/stored.content.message.txt
Stored Bad Filename Message Report = %report-dir%/stored.filename.message.txt
Stored Virus Message Report = %report-dir%/stored.virus.message.txt
Stored Size Message Report = %report-dir%/stored.size.message.txt
Disinfected Report = %report-dir%/disinfected.report.txt
Inline HTML Signature = %report-dir%/inline.sig.html
Inline Text Signature = %report-dir%/inline.sig.txt
Inline HTML Warning = %report-dir%/inline.warning.html
Inline Text Warning = %report-dir%/inline.warning.txt
Sender Content Report = %report-dir%/sender.content.report.txt
Sender Error Report = %report-dir%/sender.error.report.txt
Sender Bad Filename Report = %report-dir%/sender.filename.report.txt
Sender Virus Report = %report-dir%/sender.virus.report.txt
Sender Size Report = %report-dir%/sender.size.report.txt
Hide Incoming Work Dir = yes
Include Scanner Name In Reports = yes
Mail Header = X-%org-name%-MailScanner:
Spam Header = X-%org-name%-MailScanner-SpamCheck:
Spam Score Header = X-%org-name%-MailScanner-SpamScore:
Information Header = X-%org-name%-MailScanner-Information:
Add Envelope From Header = yes
Add Envelope To Header = no
Envelope From Header = X-%org-name%-MailScanner-From:
Envelope To Header = X-%org-name%-MailScanner-To:
Spam Score Character = s
SpamScore Number Instead Of Stars = no
Minimum Stars If On Spam List = 5
Clean Header Value = Found to be clean
Infected Header Value = Found to be infected
Disinfected Header Value = Disinfected
Information Header Value = Please contact the ISP for more information
Detailed Spam Report = yes
Include Scores In SpamAssassin Report = yes
Always Include SpamAssassin Report = yes
Multiple Headers = append
Hostname = the %org-name% ($HOSTNAME) MailScanner
Sign Messages Already Processed = no
Sign Clean Messages = yes
Mark Infected Messages = yes
Mark Unscanned Messages = yes
Unscanned Header Value = Not scanned: please contact your Internet
E-Mail Service Provider for details
Remove These Headers = X-Mozilla-Status: X-Mozilla-Status2:
Deliver Cleaned Messages = yes
Notify Senders = yes
Notify Senders Of Viruses = no
Notify Senders Of Blocked Filenames Or Filetypes = yes
Notify Senders Of Blocked Size Attachments = no
Notify Senders Of Other Blocked Content = yes
Never Notify Senders Of Precedence = list bulk
Scanned Subject Text = {Scanned}
Virus Modify Subject = start
Virus Subject Text = {Virus?}
Filename Modify Subject = start
Filename Subject Text = {Filename?}
Content Modify Subject = start
Content Subject Text = {Dangerous Content?}
Size Modify Subject = start
Size Subject Text = {Size}
Disarmed Modify Subject = start
Disarmed Subject Text = {Disarmed}
Phishing Modify Subject = no
Phishing Subject Text = {Fraud?}
Spam Modify Subject = start
Spam Subject Text = {Spam?}
High Scoring Spam Modify Subject = start
High Scoring Spam Subject Text = {Spam?}
Warning Is Attachment = yes
Attachment Warning Filename = %org-name%-Attachment-Warning.txt
Attachment Encoding Charset = ISO-8859-1
Archive Mail =
Send Notices = yes
Notices Include Full Headers = yes
Hide Incoming Work Dir in Notices = no
Notice Signature = -- \nMailScanner\nEmail Virus Scanner\nwww.mailscanner.info
Notices From = MailScanner
Notices To = postmaster
Local Postmaster = postmaster
Spam List Definitions = %etc-dir%/spam.lists.conf
Virus Scanner Definitions = %etc-dir%/virus.scanners.conf
Spam Checks = yes
Spam List = spamhaus.org SBL+XBL
Spam Domain List =
Spam Lists To Be Spam = 1
Spam Lists To Reach High Score = 2
Spam List Timeout = 10
Max Spam List Timeouts = 7
Spam List Timeouts History = 10
Is Definitely Not Spam = %rules-dir%/spam.whitelist.rules
Is Definitely Spam = no
Definite Spam Is High Scoring = no
Ignore Spam Whitelist If Recipients Exceed = 20
Max Spam Check Size = 150000
Use SpamAssassin = yes
Max SpamAssassin Size = 40k
Required SpamAssassin Score = 3
High SpamAssassin Score = 10
SpamAssassin Auto Whitelist = yes
SpamAssassin Timeout = 75
Max SpamAssassin Timeouts = 10
SpamAssassin Timeouts History = 30
Check SpamAssassin If On Spam List = yes
Spam Score = yes
Cache SpamAssassin Results = yes
SpamAssassin Cache Database File =
/var/spool/MailScanner/incoming/SpamAssassin.cache.db
Rebuild Bayes Every = 0
Wait During Bayes Rebuild = no
Use Custom Spam Scanner = no
Max Custom Spam Scanner Size = 20k
Custom Spam Scanner Timeout = 20
Max Custom Spam Scanner Timeouts = 10
Custom Spam Scanner Timeout History = 20
Spam Actions = deliver header "X-Spam-Status: Yes"
High Scoring Spam Actions = deliver header "X-Spam-Status: Yes"
Non Spam Actions = deliver header "X-Spam-Status: No"
Sender Spam Report = %report-dir%/sender.spam.report.txt
Sender Spam List Report = %report-dir%/sender.spam.rbl.report.txt
Sender SpamAssassin Report = %report-dir%/sender.spam.sa.report.txt
Inline Spam Warning = %report-dir%/inline.spam.warning.txt
Recipient Spam Report = %report-dir%/recipient.spam.report.txt
Enable Spam Bounce = %rules-dir%/bounce.rules
Bounce Spam As Attachment = no
Syslog Facility = mail
Log Speed = no
Log Spam = no
Log Non Spam = no
Log Permitted Filenames = no
Log Permitted Filetypes = no
Log Silent Viruses = no
Log Dangerous HTML Tags = no
SpamAssassin User State Dir = /var/spool/MailScanner/spamassassin
SpamAssassin Install Prefix =
SpamAssassin Site Rules Dir = /etc/mail/spamassassin
SpamAssassin Local Rules Dir =
SpamAssassin Default Rules Dir =
MCP Checks = no
First Check = mcp
MCP Required SpamAssassin Score = 1
MCP High SpamAssassin Score = 10
MCP Error Score = 1
MCP Header = X-%org-name%-MailScanner-MCPCheck:
Non MCP Actions = deliver
MCP Actions = deliver
High Scoring MCP Actions = deliver
Bounce MCP As Attachment = no
MCP Modify Subject = start
MCP Subject Text = {MCP?}
High Scoring MCP Modify Subject = start
High Scoring MCP Subject Text = {MCP?}
Is Definitely MCP = no
Is Definitely Not MCP = no
Definite MCP Is High Scoring = no
Always Include MCP Report = no
Detailed MCP Report = yes
Include Scores In MCP Report = no
Log MCP = no
MCP Max SpamAssassin Timeouts = 20
MCP Max SpamAssassin Size = 100k
MCP SpamAssassin Timeout = 10
MCP SpamAssassin Prefs File = %mcp-dir%/mcp.spam.assassin.prefs.conf
MCP SpamAssassin User State Dir =
MCP SpamAssassin Local Rules Dir = %mcp-dir%
MCP SpamAssassin Default Rules Dir = %mcp-dir%
MCP SpamAssassin Install Prefix = %mcp-dir%
Recipient MCP Report = %report-dir%/recipient.mcp.report.txt
Sender MCP Report = %report-dir%/sender.mcp.report.txt
Use Default Rules With Multiple Recipients = no
Spam Score Number Format = %d
MailScanner Version Number = 4.58.9
SpamAssassin Cache Timings = 1800,300,10800,172800,600
Debug = no
Debug SpamAssassin = no
Run In Foreground = no
Always Looked Up Last = &MailWatchLogging
Always Looked Up Last After Batch = no
Deliver In Background = yes
Delivery Method = batch
Split Exim Spool = no
Lockfile Dir = /tmp
Custom Functions Dir = /usr/lib/MailScanner/MailScanner/CustomFunctions
Lock Type =
Minimum Code Status = supported
--------------------------------------------------------------------------------------------------------------------------------------
My /etc/MailScanner/spam.assassin.prefs.conf is as follows:
dns_available yes
bayes_path /var/spool/MailScanner/spamassassin/bayes
bayes_file_mode 0770
bayes_ignore_header X-YOURDOMAIN-COM-MailScanner
bayes_ignore_header X-YOURDOMAIN-COM-MailScanner-SpamCheck
bayes_ignore_header X-YOURDOMAIN-COM-MailScanner-SpamScore
bayes_ignore_header X-YOURDOMAIN-COM-MailScanner-Information
lock_method flock
use_auto_whitelist 0
ifplugin Mail::SpamAssassin::Plugin::Pyzor
pyzor_path /usr/local/bin/pyzor
endif
ifplugin Mail::SpamAssassin::Plugin::DCC
dcc_path /usr/local/bin/dccproc
endif
score RCVD_IN_BL_SPAMCOP_NET 4
envelope_sender_header X-MailScanner-From
-------------------------------------------------------------------------------------------------------------------------------------
sa-learn --dump magic -D shows the follows:
mail:/var/spool/MailScanner/spamassassin # sa-learn --dump magic -D
[27360] dbg: logger: adding facilities: all
[27360] dbg: logger: logging level is DBG
[27360] dbg: generic: SpamAssassin version 3.1.6
[27360] dbg: config: score set 0 chosen.
[27360] dbg: util: running in taint mode? yes
[27360] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[27360] dbg: util: PATH included '/sbin', keeping
[27360] dbg: util: PATH included '/usr/sbin', keeping
[27360] dbg: util: PATH included '/usr/local/sbin', keeping
[27360] dbg: util: PATH included '/opt/gnome/sbin', keeping
[27360] dbg: util: PATH included '/root/bin', keeping
[27360] dbg: util: PATH included '/usr/local/bin', keeping
[27360] dbg: util: PATH included '/usr/bin', keeping
[27360] dbg: util: PATH included '/usr/X11R6/bin', keeping
[27360] dbg: util: PATH included '/bin', keeping
[27360] dbg: util: PATH included '/usr/games', keeping
[27360] dbg: util: PATH included '/opt/gnome/bin', keeping
[27360] dbg: util: PATH included '/opt/kde3/bin', keeping
[27360] dbg: util: PATH included '/usr/lib/jvm/jre/bin', keeping
[27360] dbg: util: PATH included '/usr/lib/mit/bin', keeping
[27360] dbg: util: PATH included '/usr/lib/mit/sbin', keeping
[27360] dbg: util: PATH included '/usr/lib/qt3/bin', keeping
[27360] dbg: util: final PATH set to:
/sbin:/usr/sbin:/usr/local/sbin:/opt/gnome/sbin:/root/bin:/usr/local/bin:/usr/bin:/usr/X11R6/bin:/bin:/usr/games:/opt/gnome/bin:/opt/kde3/bin:/usr/lib/jvm/jre/bin:/usr/lib/mit/bin:/usr/lib/mit/sbin:/usr/lib/qt3/bin
[27360] dbg: message: ---- MIME PARSER START ----
[27360] dbg: message: main message type: text/plain
[27360] dbg: message: parsing normal part
[27360] dbg: message: added part, type: text/plain
[27360] dbg: message: ---- MIME PARSER END ----
[27360] dbg: dns: is Net::DNS::Resolver available? yes
[27360] dbg: dns: Net::DNS version: 0.59
[27360] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[27360] dbg: config: read file /etc/mail/spamassassin/init.pre
[27360] dbg: config: read file /etc/mail/spamassassin/v310.pre
[27360] dbg: config: read file /etc/mail/spamassassin/v312.pre
[27360] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[27360] dbg: config: using "/usr/share/spamassassin" for default rules dir
[27360] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[27360] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[27360] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[27360] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[27360] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[27360] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[27360] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[27360] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[27360] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[27360] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[27360] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[27360] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[27360] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[27360] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
[27360] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
[27360] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[27360] dbg: config: read file /usr/share/spamassassin/60_whitelist_subject.cf
[27360] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[27360] dbg: config: read file /etc/mail/spamassassin/local.cf
[27360] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f090)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e115ec)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[27360] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8e34804)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[27360] dbg: pyzor: network tests on, attempting Pyzor
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8e3a0bc)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[27360] dbg: razor2: razor2 is not available
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Razor2=HASH(0x8e13f68)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[27360] dbg: reporter: network tests on, attempting SpamCop
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0x8ed3f54)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[27360] dbg: plugin: registered Mail::SpamAssassin::Plugin::AWL=HASH(0x903b2d4)
[27360] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x9043ef8)
[27360] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9051f50)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9052c34)
[27360] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
[27360] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x9065fb0)
[27360] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[27360] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[27360] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[27360] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[27360] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[27360] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
[27360] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[27360] dbg: config: adding redirector regex:
m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
[27360] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
[27360] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
[27360] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
[27360] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
[27360] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x9065fb0) implements
'finish_parsing_end'
[27360] dbg: replacetags: replacing tags
[27360] dbg: replacetags: done replacing tags
[27360] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_toks
[27360] dbg: bayes: tie-ing to DB file R/O
/var/spool/MailScanner/spamassassin/bayes_seen
[27360] dbg: bayes: found bayes db version 3
[27360] dbg: bayes: DB journal sync: last sync: 1212657053
[27360] dbg: config: score set 3 chosen.
0.000 0 3 0 non-token data: bayes db version
0.000 0 32262 0 non-token data: nspam
0.000 0 41829 0 non-token data: nham
0.000 0 145597 0 non-token data: ntokens
0.000 0 1211879603 0 non-token data: oldest atime
0.000 0 1212660698 0 non-token data: newest atime
0.000 0 1212657053 0 non-token data: last journal sync atime
0.000 0 1212572821 0 non-token data: last expiry atime
0.000 0 691200 0 non-token data: last expire atime delta
0.000 0 59972 0 non-token data: last expire
reduction count
[27360] dbg: bayes: untie-ing
[27360] dbg: bayes: untie-ing db_toks
[27360] dbg: bayes: untie-ing db_seen
-------------------------------------------------------------------------------------------------------------------------------------
Please help me so that i can fix my mailscanner to catch low scoring
spams. Also please tell me how do i know whether mailscanner is using
and checking the lists specified in SPAM LIST. I can not see any
error in /var/log/mail.
I can see spamd entries getting logged only when our users send mails,
not when receiving mails from outside like the following:
-----------------------------------------
Jun 5 15:32:39 mail spamd[23430]: spamd: result: . -3 -
ALL_TRUSTED,BAYES_00
scantime=0.6,size=2036,user=spamuser,uid=3000,required_score=3.0,
rhost=localhost,raddr=127.0.0.1,rport=27589,mid=<1675.122.163.77.164.1212660155.
squirrel at mail.econdse.org>,bayes=5.55111512312578e-17,autolearn=ham
--------------------------------------------------------------------------------
Hope you would be kind enough to go through my mail and help me out.
Regards
vinu
On Tue, May 27, 2008 at 8:49 PM, Scott Silva <ssilva at sgvwater.com> wrote:
> Comments are inline ...
>
>> Dear all,
>> I am just a beginner to postfix,spamassassin,Mailscanner and
>> mailwatch. I recently installed a mail server with the following and
>> is working fine except for one problem that mailscanner+spamassassin
>> combination is not detecting mails with SA Score lower than the
>> Required Spamassassin score ( I use 3) as spam though they are
>> definitely spam. The mailscanner+spamassassin combination tags mails
>> with SA score greater than the Required Spamassassin score as spam.
>>
>> postfix.2.3.2-28
>> Spamassassin.3.1.6-15
>> MailScanner 4.58.9
>
> All older versions of the software. It might be adding to your problems.
>>
>> I have been reading different posts on mailscanner and about
>> spamassassin to understand why low scoring mails are not detected as
>> spam by mailscanner+spamassassin.
>>
>> The following are the things I could find out .
>>
>> 1. The headers of mails does not contain "autolearn=spam" in the mail
>> header and rest of the fields are there. (See below)
>>
>> X-econdse-MailScanner-SpamCheck: spam, SpamAssassin (not cached,
>> score=10.054, required 3, BAYES_99 3.50, EXTRA_MPART_TYPE 1.09,
>> HTML_IMAGE_ONLY_08 3.13, HTML_MESSAGE 0.00,
>> HTML_SHORT_LINK_IMG_1 0.95, HTML_TEXT_AFTER_BODY 0.12,
>> INFO_TLD 1.27)
>>
>> 2. the /root/.spamassassin folder does not contain any bayes related
>> database.
>
> When running with postfix, MailScanner runs as postfix and cannot access the
> /root directory. Maybe you missed some steps in the postfix howtos.
> http://www.mailscanner.info/postfix.html and
> http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:postfix:installation
> You need the bayes directory somewhere that the postfix user can access.
>
> Maybe Glenn will chime in here.
>
>
>>
>> 3. I could not see anything in /var/log/mail which says mailscanner
>> is checking the Spam Lists.
>>
>> ***********************************************
>> When I tried to test the spamassassin configuration with "spamassassin
>> -D --lint", I am getting "[4882] warn: lint: 1 issues detected, please
>> rerun with debug enabled for more information"
>>
>> Please see the result below. :
>>
>>
>> ---------------------------------------------------------------------------------------------
>> mail:/etc/MailScanner # spamassassin -D --lint
>>
>> [4882] dbg: logger: adding facilities: all
>> [4882] dbg: logger: logging level is DBG
>> [4882] dbg: generic: SpamAssassin version 3.1.6
>> [4882] dbg: config: score set 0 chosen.
>> [4882] dbg: util: running in taint mode? yes
>> [4882] dbg: util: taint mode: deleting unsafe environment variables,
>> resetting PATH
>> [4882] dbg: util: PATH included '/sbin', keeping
>> [4882] dbg: util: PATH included '/usr/sbin', keeping
>> [4882] dbg: util: PATH included '/usr/local/sbin', keeping
>> [4882] dbg: util: PATH included '/opt/gnome/sbin', keeping
>> [4882] dbg: util: PATH included '/root/bin', keeping
>> [4882] dbg: util: PATH included '/usr/local/bin', keeping
>> [4882] dbg: util: PATH included '/usr/bin', keeping
>> [4882] dbg: util: PATH included '/usr/X11R6/bin', keeping
>> [4882] dbg: util: PATH included '/bin', keeping
>> [4882] dbg: util: PATH included '/usr/games', keeping
>> [4882] dbg: util: PATH included '/opt/gnome/bin', keeping
>> [4882] dbg: util: PATH included '/opt/kde3/bin', keeping
>> [4882] dbg: util: PATH included '/usr/lib/jvm/jre/bin', keeping
>> [4882] dbg: util: PATH included '/usr/lib/mit/bin', keeping
>> [4882] dbg: util: PATH included '/usr/lib/mit/sbin', keeping
>> [4882] dbg: util: PATH included '/usr/lib/qt3/bin', keeping
>> [4882] dbg: util: final PATH set to:
>>
>> /sbin:/usr/sbin:/usr/local/sbin:/opt/gnome/sbin:/root/bin:/usr/local/bin:/usr/bin:/usr/X11R6/bin:/bin:/usr/games:/opt/gnome/bin:/opt/kde3/bin:/usr/lib/jvm/jre/bin:/usr/lib/mit/bin:/usr/lib/mit/sbin:/usr/lib/qt3/bin
>> [4882] dbg: message: ---- MIME PARSER START ----
>> [4882] dbg: message: main message type: text/plain
>> [4882] dbg: message: parsing normal part
>> [4882] dbg: message: added part, type: text/plain
>> [4882] dbg: message: ---- MIME PARSER END ----
>> [4882] dbg: dns: is Net::DNS::Resolver available? yes
>> [4882] dbg: dns: Net::DNS version: 0.59
>> [4882] dbg: diag: perl platform: 5.008008 linux
>> [4882] dbg: diag: module installed: Digest::SHA1, version 2.11
>> [4882] dbg: diag: module installed: HTML::Parser, version 3.55
>> [4882] dbg: diag: module installed: MIME::Base64, version 3.07
>> [4882] dbg: diag: module installed: DB_File, version 1.814
>> [4882] dbg: diag: module installed: Net::DNS, version 0.59
>> [4882] dbg: diag: module installed: Net::SMTP, version 2.29
>> [4882] dbg: diag: module not installed: Mail::SPF::Query ('require'
>> failed)
>> [4882] dbg: diag: module not installed: IP::Country::Fast ('require'
>> failed)
>> [4882] dbg: diag: module not installed: Razor2::Client::Agent ('require'
>> failed)
>> [4882] dbg: diag: module not installed: Net::Ident ('require' failed)
>> [4882] dbg: diag: module not installed: IO::Socket::INET6 ('require'
>> failed)
>> [4882] dbg: diag: module not installed: IO::Socket::SSL ('require' failed)
>> [4882] dbg: diag: module installed: Time::HiRes, version 1.86
>> [4882] dbg: diag: module installed: DBI, version 1.52
>> [4882] dbg: diag: module installed: Getopt::Long, version 2.35
>> [4882] dbg: diag: module installed: LWP::UserAgent, version 2.033
>> [4882] dbg: diag: module installed: HTTP::Date, version 1.47
>> [4882] dbg: diag: module installed: Archive::Tar, version 1.30
>> [4882] dbg: diag: module installed: IO::Zlib, version 1.04
>> [4882] dbg: ignore: using a test message to lint rules
>> [4882] dbg: config: using "/etc/mail/spamassassin" for site rules pre
>> files
>> [4882] dbg: config: read file /etc/mail/spamassassin/init.pre
>> [4882] dbg: config: read file /etc/mail/spamassassin/v310.pre
>> [4882] dbg: config: read file /etc/mail/spamassassin/v312.pre
>> [4882] dbg: config: using "/usr/share/spamassassin" for sys rules pre
>> files
>> [4882] dbg: config: using "/usr/share/spamassassin" for default rules dir
>> [4882] dbg: config: read file /usr/share/spamassassin/10_misc.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
>> [4882] dbg: config: read file
>> /usr/share/spamassassin/20_fake_helo_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_porn.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_replace.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_spf.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/50_scores.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/60_awl.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
>> [4882] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
>> [4882] dbg: config: read file
>> /usr/share/spamassassin/60_whitelist_subject.cf
>> [4882] dbg: config: using "/etc/mail/spamassassin" for site rules dir
>> [4882] dbg: config: read file /etc/mail/spamassassin/local.cf
>> [4882] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f044)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::Hashcash=HASH(0x90d6fcc)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::SPF=HASH(0x90fa144)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
>> [4882] dbg: pyzor: local tests only, disabling Pyzor
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::Pyzor=HASH(0x91109a4)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
>> [4882] dbg: razor2: local tests only, skipping Razor
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::Razor2=HASH(0x90dcc0c)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
>> [4882] dbg: reporter: local tests only, disabling SpamCop
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::SpamCop=HASH(0x90df4d4)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::AWL=HASH(0x916a1b8)
>> [4882] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x917945c)
>> [4882] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9185c14)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
>> @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9192844)
>> [4882] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
>> @INC
>> [4882] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x918b5ac)
>> [4882] dbg: config: adding redirector regex:
>> /^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
>> [4882] dbg: config: adding redirector regex:
>> /^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
>> [4882] dbg: config: adding redirector regex:
>> /^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
>> [4882] dbg: config: adding redirector regex:
>> /^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
>> [4882] dbg: config: adding redirector regex:
>> /^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
>> [4882] dbg: config: adding redirector regex:
>> m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
>> [4882] dbg: config: adding redirector regex:
>> m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
>> [4882] dbg: config: adding redirector regex:
>> m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
>> [4882] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
>> [4882] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
>> [4882] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
>> [4882] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
>> [4882] info: config: pyzor_path "/usr/bin/pyzor" isn't an executable
>> [4882] warn: config: SpamAssassin failed to parse line,
>> "/usr/bin/pyzor" is not valid for "pyzor_path", skipping: pyzor_path
>> /usr/bin/pyzor
>> [4882] dbg: plugin:
>> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x918b5ac) implements
>> 'finish_parsing_end'
>> [4882] dbg: replacetags: replacing tags
>> [4882] dbg: replacetags: done replacing tags
>> [4882] dbg: bayes: no dbs present, cannot tie DB R/O:
>> /root/.spamassassin/bayes_toks
>
> Here is your error. Mailscanner running as postfix cannot access /root
> directory. You need to set a bayes path somewhere that postfix has access,
> and then you will need to do some training.
>
>> [4882] dbg: config: score set 0 chosen.
>> [4882] dbg: message: ---- MIME PARSER START ----
>> [4882] dbg: message: main message type: text/plain
>> [4882] dbg: message: parsing normal part
>> [4882] dbg: message: added part, type: text/plain
>> [4882] dbg: message: ---- MIME PARSER END ----
>> [4882] dbg: bayes: no dbs present, cannot tie DB R/O:
>> /root/.spamassassin/bayes_toks
>> [4882] dbg: dns: is DNS available? 0
>> [4882] dbg: metadata: X-Spam-Relays-Trusted:
>> [4882] dbg: metadata: X-Spam-Relays-Untrusted:
>> [4882] dbg: metadata: X-Spam-Relays-Internal:
>> [4882] dbg: metadata: X-Spam-Relays-External:
>> [4882] dbg: message: no encoding detected
>> [4882] dbg: plugin:
>> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f044) implements
>> 'parsed_metadata'
>> [4882] dbg: rules: local tests only, ignoring RBL eval
>> [4882] dbg: check: running tests for priority: 0
>> [4882] dbg: rules: running header regexp tests; score so far=0
>> [4882] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
>> [4882] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
>> "1211883990"
>> [4882] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
>> "<1211883990 at lint_rules>
>> [4882] dbg: rules: "
>> [4882] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
>> "@lint_rules>"
>> [4882] dbg: eval: all '*From' addrs:
>> ignore at compiling.spamassassin.taint.org
>> [4882] dbg: eval: all '*To' addrs:
>> [4882] dbg: rules: ran eval rule NO_RELAYS ======> got hit
>> [4882] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
>> [4882] dbg: rules: running body-text per-line regexp tests; score so
>> far=-0.001
>> [4882] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I"
>> [4882] dbg: uri: running uri tests; score so far=-0.001
>> [4882] dbg: bayes: no dbs present, cannot tie DB R/O:
>> /root/.spamassassin/bayes_toks
>> [4882] dbg: bayes: not scoring message, returning undef
>> [4882] dbg: bayes: opportunistic call attempt failed, DB not readable
>> [4882] dbg: rules: running raw-body-text per-line regexp tests; score
>> so far=-0.001
>> [4882] dbg: rules: running full-text regexp tests; score so far=-0.001
>> [4882] dbg: plugin:
>> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f044) implements
>> 'check_tick'
>> [4882] dbg: check: running tests for priority: 500
>> [4882] dbg: plugin:
>> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835f044) implements
>> 'check_post_dnsbl'
>> [4882] dbg: rules: running meta tests; score so far=-0.001
>> [4882] info: rules: meta test DIGEST_MULTIPLE has undefined dependency
>> 'DCC_CHECK'
>> [4882] dbg: rules: running header regexp tests; score so far=1.866
>> [4882] dbg: rules: running body-text per-line regexp tests; score so
>> far=1.866
>> [4882] dbg: uri: running uri tests; score so far=1.866
>> [4882] dbg: rules: running raw-body-text per-line regexp tests; score
>> so far=1.866
>> [4882] dbg: rules: running full-text regexp tests; score so far=1.866
>> [4882] dbg: check: running tests for priority: 1000
>> [4882] dbg: rules: running meta tests; score so far=1.866
>> [4882] dbg: rules: running header regexp tests; score so far=1.866
>> [4882] dbg: rules: running body-text per-line regexp tests; score so
>> far=1.866
>> [4882] dbg: uri: running uri tests; score so far=1.866
>> [4882] dbg: rules: running raw-body-text per-line regexp tests; score
>> so far=1.866
>> [4882] dbg: rules: running full-text regexp tests; score so far=1.866
>> [4882] dbg: check: is spam? score=1.866 required=5
>> [4882] dbg: check: tests=MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
>> [4882] dbg: check:
>>
>> subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__UNUSABLE_MSGID
>> [4882] warn: lint: 1 issues detected, please rerun with debug enabled
>> for more information
>>
>>
>> ------------------------------------------------------------------------------------------------------------------------------------------------------
>>
>> Is the warning because of
>>
>> [4882] info: config: pyzor_path "/usr/bin/pyzor" isn't an executable
>> [4882] warn: config: SpamAssassin failed to parse line,
>> "/usr/bin/pyzor" is not valid for "pyzor_path", skipping: pyzor_path
>> /usr/bin/pyzor
>>
>> and can I ignore it?? ( I dont have pyzor installed. Is it a must to
>> have pyzor installed??)
>
> Either install pyzor, or disable the plugin line that tries to load it.
> Look in all your .pre files in /etc/mail/spamassassin
>>
>>
>> *******************************************************************************************************************
>>
>>
>> When I tried sa-learn --dump magic -D, I got the following error :
>>
>> ERROR: Bayes dump returned an error, please re-run with -D for more
>> information
>
> Again, no bayes db to dump.
>>
>>
>>
>> -----------------------------------------------------------------------------------------
>> mail:/etc/mail/spamassassin # sa-learn --dump magic -D
>> [2675] dbg: logger: adding facilities: all
>> [2675] dbg: logger: logging level is DBG
>> [2675] dbg: generic: SpamAssassin version 3.1.6
>> [2675] dbg: config: score set 0 chosen.
>> [2675] dbg: util: running in taint mode? yes
>> [2675] dbg: util: taint mode: deleting unsafe environment variables,
>> resetting PATH
>> [2675] dbg: util: PATH included '/sbin', keeping
>> [2675] dbg: util: PATH included '/usr/sbin', keeping
>> [2675] dbg: util: PATH included '/usr/local/sbin', keeping
>> [2675] dbg: util: PATH included '/opt/gnome/sbin', keeping
>> [2675] dbg: util: PATH included '/root/bin', keeping
>> [2675] dbg: util: PATH included '/usr/local/bin', keeping
>> [2675] dbg: util: PATH included '/usr/bin', keeping
>> [2675] dbg: util: PATH included '/usr/X11R6/bin', keeping
>> [2675] dbg: util: PATH included '/bin', keeping
>> [2675] dbg: util: PATH included '/usr/games', keeping
>> [2675] dbg: util: PATH included '/opt/gnome/bin', keeping
>> [2675] dbg: util: PATH included '/opt/kde3/bin', keeping
>> [2675] dbg: util: PATH included '/usr/lib/jvm/jre/bin', keeping
>> [2675] dbg: util: PATH included '/usr/lib/mit/bin', keeping
>> [2675] dbg: util: PATH included '/usr/lib/mit/sbin', keeping
>> [2675] dbg: util: PATH included '/usr/lib/qt3/bin', keeping
>> [2675] dbg: util: final PATH set to:
>>
>> /sbin:/usr/sbin:/usr/local/sbin:/opt/gnome/sbin:/root/bin:/usr/local/bin:/usr/bin:/usr/X11R6/bin:/bin:/usr/games:/opt/gnome/bin:/opt/kde3/bin:/usr/lib/jvm/jre/bin:/usr/lib/mit/bin:/usr/lib/mit/sbin:/usr/lib/qt3/bin
>> [2675] dbg: message: ---- MIME PARSER START ----
>> [2675] dbg: message: main message type: text/plain
>> [2675] dbg: message: parsing normal part
>> [2675] dbg: message: added part, type: text/plain
>> [2675] dbg: message: ---- MIME PARSER END ----
>> [2675] dbg: dns: is Net::DNS::Resolver available? yes
>> [2675] dbg: dns: Net::DNS version: 0.59
>> [2675] dbg: config: using "/etc/mail/spamassassin" for site rules pre
>> files
>> [2675] dbg: config: read file /etc/mail/spamassassin/init.pre
>> [2675] dbg: config: read file /etc/mail/spamassassin/v310.pre
>> [2675] dbg: config: read file /etc/mail/spamassassin/v312.pre
>> [2675] dbg: config: using "/usr/share/spamassassin" for sys rules pre
>> files
>> [2675] dbg: config: using "/usr/share/spamassassin" for default rules dir
>> [2675] dbg: config: read file /usr/share/spamassassin/10_misc.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
>> [2675] dbg: config: read file
>> /usr/share/spamassassin/20_fake_helo_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_porn.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_replace.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_spf.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/50_scores.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/60_awl.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
>> [2675] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
>> [2675] dbg: config: read file
>> /usr/share/spamassassin/60_whitelist_subject.cf
>> [2675] dbg: config: using "/etc/mail/spamassassin" for site rules dir
>> [2675] dbg: config: read file /etc/mail/spamassassin/local.cf
>> [2675] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x835ef70)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e113dc)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::SPF=HASH(0x8e345f4)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
>> [2675] dbg: pyzor: network tests on, attempting Pyzor
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8e39eac)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
>> [2675] dbg: razor2: razor2 is not available
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::Razor2=HASH(0x8e13d58)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
>> [2675] dbg: reporter: network tests on, attempting SpamCop
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::SpamCop=HASH(0x8ed3d44)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::AWL=HASH(0x903b0e0)
>> [2675] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x9043d14)
>> [2675] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x9051f04)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
>> @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x9052be8)
>> [2675] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
>> @INC
>> [2675] dbg: plugin: registered
>> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x90432d8)
>> [2675] dbg: config: adding redirector regex:
>> /^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
>> [2675] dbg: config: adding redirector regex:
>> /^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
>> [2675] dbg: config: adding redirector regex:
>> /^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
>> [2675] dbg: config: adding redirector regex:
>> /^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
>> [2675] dbg: config: adding redirector regex:
>> /^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
>> [2675] dbg: config: adding redirector regex:
>> m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
>> [2675] dbg: config: adding redirector regex:
>> m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
>> [2675] dbg: config: adding redirector regex:
>> m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
>> [2675] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
>> [2675] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
>> [2675] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
>> [2675] dbg: config: adding redirector regex:
>>
>> m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
>> [2675] info: config: pyzor_path "/usr/bin/pyzor" isn't an executable
>> [2675] info: config: SpamAssassin failed to parse line,
>> "/usr/bin/pyzor" is not valid for "pyzor_path", skipping: pyzor_path
>> /usr/bin/pyzor
>> [2675] dbg: plugin:
>> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x90432d8) implements
>> 'finish_parsing_end'
>> [2675] dbg: replacetags: replacing tags
>> [2675] dbg: replacetags: done replacing tags
>> [2675] dbg: bayes: no dbs present, cannot tie DB R/O:
>> /root/.spamassassin/bayes_toks
>> [2675] dbg: config: score set 1 chosen.
>> [2675] dbg: bayes: no dbs present, cannot tie DB R/O:
>> /root/.spamassassin/bayes_toks
>> ERROR: Bayes dump returned an error, please re-run with -D for more
>> information
>>
>> -------------------------------------------------------------------------------------------------------------------------------------------------------------------------
>>
>> --> Am I getting this error because there are no bayes related files
>> in the /root/.spamassassin directory?? (its empty now)
>>
>> --> If yes, should I use the following command to create them??
>>
>> # sa-learn --showdots --spam
>> /home/<username>/Maildir/cur (this is my inbox)
>>
>>
>> # sa-learn --showdots --ham /home/Maildir/.spam/cur
>> (this is where i filter all my {spam?} tagged mails)
>>
>>
>> ---> After this if i restart spamassassin, will
>> spamassassin+mailscanner start doing the bayes autolearn and check the
>> lists specified in Spam Lists option of the mailscanner? If not, what
>> should I do to get my spamassassin+mailscanner start doing the bayes
>> autolearn and check the lists specified in Spam Lists option of the
>> mailscanner?
>>
>>
>> Hope someone would be kind enough to help me.
>>
>> Expecting an early reply
>>
>> sincerely yours
>
>
> --
> MailScanner is like deodorant...
> You hope everybody uses it, and
> you notice quickly if they don't!!!!
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
More information about the MailScanner
mailing list