SpamAssassin 3.2.5 woes

Martin.Hepworth martinh at solidstatelogic.com
Fri Jun 27 13:59:27 IST 2008


Steffan

Well I'd fix the %org-name% issues while you're fixing other stuff..

What does

"MailScanner -v" give, could be there's a bad perl module somewhere.

--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300

> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info
> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
> Of Steffan Henke
> Sent: 27 June 2008 10:16
> To: MailScanner discussion
> Subject: RE: SpamAssassin 3.2.5 woes
>
> On Fri, 27 Jun 2008, Martin.Hepworth wrote:
>
> > Steffan
> >
> > Run mailscaner in debug mode and see what's going on...
> >
> > MailScanner -debug -debug-sa
> >
> > How did you install spamassassin??? RPM? Jules's handy
> installer, CPAN??
>
> Martin,
>
> I've built SA using rpmbuild -tb
> Mail-SpamAssassin-3.2.4.tar.gz and installed the two rpms
> after that - that way has worked for ages.
> The whole debug output:
>
> In Debugging mode, not forking...
>
> **************************************************************
> **********
> In MailScanner.conf, your "%org-name%" or "Mail Header"
> setting contains spaces and/or other illegal characters.
>
> Including any spaces will break all your mail system (but do
> not worry, MailScanner will fix this for you on the fly).
>
> Otherwise, it should only contain characters from the set
> a-z, A-Z, 0-9, "-" and "_". While theoretically some other
> characters are allowed, some commercial mail systems fail to
> handle them correctly.
>
> This is clearly noted in the MailScanner.conf file,
> immediately above the %org-name% setting. Please read the
> documentation!
> **************************************************************
> **********
>
> Trying to setlogsock(unix)
> 11:09:52 SpamAssassin temp dir =
> /var/spool/MailScanner/incoming/SpamAssassin-Temp
> 11:09:53 [19482] dbg: logger: adding facilities: all
> 11:09:53 [19482] dbg: logger: logging level is DBG
> 11:09:53 [19482] dbg: generic: SpamAssassin version 3.2.4
> 11:09:53 [19482] dbg: config: score set 0 chosen.
> 11:09:53 [19482] dbg: util: running in taint mode? no
> 11:09:53 [19482] dbg: dns: is Net::DNS::Resolver available? yes
> 11:09:53 [19482] dbg: dns: Net::DNS version: 0.63
> 11:09:53 [19482] dbg: ignore: test message to precompile
> patterns and load modules
> 11:09:53 [19482] dbg: config: using "/etc/mail/spamassassin"
> for site rules pre files
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/init.pre
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/v310.pre
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/v312.pre
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/v320.pre
> 11:09:53 [19482] dbg: config: using "/usr/share/spamassassin"
> for sys rules pre files
> 11:09:53 [19482] dbg: config: using "/usr/share/spamassassin"
> for default rules dir
> 11:09:53 [19482] dbg: config: read file
> /usr/share/spamassassin/72_removed.cf
> 11:09:53 [19482] dbg: config: using "/etc/mail/spamassassin"
> for site rules dir
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/bogus-virus-warnings.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/custom.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/kauftipp.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/local.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/mailscanner.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/pdfinfo.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/popcorn.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/sagrey.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/stocks.cf
> 11:09:53 [19482] dbg: config: read file
> /etc/mail/spamassassin/weeds.cf
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::RelayCountry from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::URIDNSBL
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::Hashcash
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::SPF from @INC
> 11:09:53 [19482] dbg: config: fixed relative path:
> /etc/mail/spamassassin/PDFInfo.pm
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::PDFInfo
> from /etc/mail/spamassassin/PDFInfo.pm
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::DCC from @INC
> 11:09:53 [19482] dbg: dcc: network tests on, registering DCC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::Razor2
> from @INC
> 11:09:53 [19482] dbg: razor2: razor2 is available, version 2.84
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::SpamCop
> from @INC
> 11:09:53 [19482] dbg: reporter: network tests on, attempting SpamCop
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::AWL from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::MIMEHeader from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::ReplaceTags from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::DKIM from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::Check from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::HTTPSMismatch from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::URIDetail from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::Bayes from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::BodyEval
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::DNSEval
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::HTMLEval
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::HeaderEval from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::MIMEEval
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::RelayEval from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::URIEval
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::WLBLEval
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::VBounce
> from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::Rule2XSBody from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::ASN from @INC
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::ImageInfo from @INC
> 11:09:53 [19482] dbg: config: fixed relative path:
> /etc/mail/spamassassin/sagrey.pm
> 11:09:53 [19482] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::SAGrey
> from /etc/mail/spamassassin/sagrey.pm
> 11:09:53 [19482] dbg: rules: AXB_RCVD_ZOOBSEND merged duplicates:
> BROKEN_RATWARE_BOM DEAR_HOMEOWNER DIV_CENTER_A_HREF DRUG_RA_PRICE
> FM_DDDD_TIMES_2 FM_SEX_HOSTDDDD HS_PHARMA_1
> HS_UPLOADED_SOFTWARE OEBOUND STOX_RCVD_N_NN_N URIBL_RHS_ABUSE
> URIBL_RHS_BOGUSMX URIBL_RHS_DSN URIBL_RHS_POST
> URIBL_RHS_TLD_WHOIS URIBL_RHS_WHOIS URIBL_XS_SURBL URI_L_PHP
> XMAILER_MIMEOLE_OL_5E7ED XMAILER_MIMEOLE_OL_C7C33
> XMAILER_MIMEOLE_OL_D03AB X_LIBRARY YOUR_CRD_RATING
> 11:09:53 [19482] dbg: rules: VIRUS_WARNING123 merged duplicates:
> VIRUS_WARNING37
> 11:09:53 [19482] dbg: rules: VIRUS_WARNING103 merged duplicates:
> VIRUS_WARNING52
> 11:09:53 [19482] dbg: conf: finish parsing
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0xb3813f4)
> implements 'finish_parsing_end', priority 0
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
> implements 'finish_parsing_end', priority 0
> 11:09:53 [19482] dbg: replacetags: replacing tags
> 11:09:53 [19482] dbg: replacetags: done replacing tags
> 11:09:53 [19482] dbg: zoom: loading compiled ruleset from
> /var/lib/compiled/3.002004
> 11:09:53 [19482] dbg: zoom: no compiled ruleset found for
> Mail::SpamAssassin::CompiledRegexps::body_0
> 11:09:53 [19482] dbg: bayes: using username: root
> 11:09:53 [19482] dbg: bayes: database connection established
> 11:09:53 [19482] dbg: bayes: found bayes db version 3
> 11:09:53 [19482] dbg: bayes: Using userid: 2
> 11:09:53 [19482] dbg: config: score set 3 chosen.
> 11:09:53 [19482] dbg: message: main message type: text/plain
> 11:09:53 [19482] dbg: message: ---- MIME PARSER START ----
> 11:09:53 [19482] dbg: message: parsing normal part
> 11:09:53 [19482] dbg: message: ---- MIME PARSER END ----
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::DNSEval=HASH(0xb9ac10c)
> implements 'check_start', priority 0
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
> implements 'check_start', priority 0
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::Check=HASH(0xb372e68) implements
> 'check_main', priority 0
> 11:09:53 [19482] dbg: conf: trusted_networks are not
> configured; it is recommended that you configure
> trusted_networks manually
> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-Trusted:
> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-Untrusted:
> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-Internal:
> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-External:
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb050b6c)
> implements 'extract_metadata', priority 0
> 11:09:53 [19482] dbg: metadata: X-Relay-Countries:
> 11:09:53 [19482] dbg: message: no encoding detected
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb050b6c)
> implements 'parsed_metadata', priority 0
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xb34da88)
> implements 'parsed_metadata', priority 0
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::ASN=HASH(0xb373030) implements
> 'parsed_metadata', priority 0
> 11:09:53 [19482] dbg: dns: is Net::DNS::Resolver available? yes
> 11:09:53 [19482] dbg: dns: Net::DNS version: 0.63
> 11:09:53 [19482] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0
> 11:09:53 [19482] dbg: dns: dns_available set to yes in config
> file, skipping test
> 11:09:53 [19482] dbg: uridnsbl: domains to query:
> 11:09:53 [19482] dbg: asn: no asn_lookup configured, skipping
> ASN lookups
> 11:09:53 [19482] dbg: check: running tests for priority: 0
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
> implements 'check_rules_at_priority', priority 0
> 11:09:53 [19482] dbg: rules: running one_line_body tests;
> score so far=0
> 11:09:53 [19482] dbg: rules: compiled one_line_body tests
> 11:09:53 [19482] dbg: plugin:
> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
> implements 'run_body_fast_scan', priority 0
> 11:09:53 [19482] dbg: rules: running head tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled head tests
> 11:09:53 [19482] dbg: rules: running body tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled body tests
> 11:09:53 [19482] dbg: rules: running uri tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled uri tests
> 11:09:53 [19482] dbg: rules: running rawbody tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled rawbody tests
> 11:09:53 [19482] dbg: rules: running full tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled full tests
> 11:09:53 [19482] dbg: rules: running meta tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled meta tests
> 11:09:53 [19482] dbg: check: running tests for priority: 500
> 11:09:53 [19482] dbg: dns: harvest_dnsbl_queries
> 11:09:53 [19482] dbg: rules: running one_line_body tests;
> score so far=0
> 11:09:53 [19482] dbg: rules: compiled one_line_body tests
> 11:09:53 [19482] dbg: rules: running head tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled head tests
> 11:09:53 [19482] dbg: rules: running body tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled body tests
> 11:09:53 [19482] dbg: rules: running uri tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled uri tests
> 11:09:53 [19482] dbg: rules: running rawbody tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled rawbody tests
> 11:09:53 [19482] dbg: rules: running full tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled full tests
> 11:09:53 [19482] dbg: rules: running meta tests; score so far=0
> 11:09:53 [19482] dbg: rules: meta test VIRUS_WARNING_DOOM_BNC
> has undefined dependency 'VIRUS_WARNING_MYDOOM4'
> 11:09:53 [19482] dbg: rules: compiled meta tests
> 11:09:53 [19482] dbg: check: running tests for priority: 1001
> 11:09:53 [19482] dbg: rules: running one_line_body tests;
> score so far=0
> 11:09:53 [19482] dbg: rules: compiled one_line_body tests
> 11:09:53 [19482] dbg: rules: running head tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled head tests
> 11:09:53 [19482] dbg: SAGrey: message score does not indicate
> spam ...
> ignoring
> 11:09:53 [19482] dbg: rules: running body tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled body tests
> 11:09:53 [19482] dbg: rules: running uri tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled uri tests
> 11:09:53 [19482] dbg: rules: running rawbody tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled rawbody tests
> 11:09:53 [19482] dbg: rules: running full tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled full tests
> 11:09:53 [19482] dbg: rules: running meta tests; score so far=0
> 11:09:53 [19482] dbg: rules: compiled meta tests
> 11:09:53 [19482] dbg: check: is spam? score=0 required=5.5
> 11:09:53 [19482] dbg: check: tests=
> 11:09:53 [19482] dbg: check: subtests=
> 11:09:53 Building a message batch to scan...
>
> I have temporarily removed KAM.cf and noticed that, when
> enabled, Botnet.cf is the only test in "tests=" . However, I
> have removed that plugin temporarily as well.
>
>
> Regards,
>
> Steffan
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>




**********************************************************************
Confidentiality : This e-mail and any attachments are intended for the 
addressee only and may be confidential. If they come to you in error 
you must take no action based on them, nor must you copy or show them 
to anyone. Please advise the sender by replying to this e-mail 
immediately and then delete the original from your computer.
Opinion : Any opinions expressed in this e-mail are entirely those of 
the author and unless specifically stated to the contrary, are not 
necessarily those of the author's employer.
Security Warning : Internet e-mail is not necessarily a secure 
communications medium and can be subject to data corruption. We advise 
that you consider this fact when e-mailing us. 
Viruses : We have taken steps to ensure that this e-mail and any 
attachments are free from known viruses but in keeping with good 
computing practice, you should ensure that they are virus free.

Red Lion 49 Ltd T/A Solid State Logic
Registered as a limited company in England and Wales 
(Company No:5362730)
Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU, 
United Kingdom
**********************************************************************



More information about the MailScanner mailing list