SpamAssassin 3.2.5 woes

Steffan Henke henker at evendi.de
Fri Jun 27 15:27:09 IST 2008


Martin,

I changed the  %org-name% for one test run, which resulted in no changes.
The problem is, I have several users who filter for the X-MailScanner 
Header, which contains a "." - so I would like to correct that once I have 
MS up and running again...

MailScanner -v looks good to me:

This is CentOS release 4.5 (Final)
This is Perl version 5.008005 (5.8.5)

This is MailScanner version 4.67.6
Module versions are:
1.00    AnyDBM_File
1.23    Archive::Zip
1.03    Carp
2.008   Compress::Zlib
1.119   Convert::BinHex
2.27    Date::Parse
1.00    DirHandle
1.05    Fcntl
2.73    File::Basename
2.08    File::Copy
2.01    FileHandle
1.06    File::Path
0.20    File::Temp
0.90    Filesys::Df
1.35    HTML::Entities
3.56    HTML::Parser
2.37    HTML::TokeParser
1.23    IO
1.14    IO::File
1.13    IO::Pipe
2.02    Mail::Header
1.86    Math::BigInt
3.05    MIME::Base64
5.425   MIME::Decoder
5.425   MIME::Decoder::UU
5.425   MIME::Head
5.425   MIME::Parser
3.03    MIME::QuotedPrint
5.425   MIME::Tools
0.11    Net::CIDR
1.08    POSIX
1.19    Scalar::Util
1.77    Socket
1.4     Sys::Hostname::Long
0.18    Sys::Syslog
1.9707  Time::HiRes
1.02    Time::localtime

Optional module versions are:
1.38    Archive::Tar
0.21    bignum
1.84    Business::ISBN
1.14    Business::ISBN::Data
1.08    Data::Dump
1.809   DB_File
1.13    DBD::SQLite
1.56    DBI
1.08    Digest
1.01    Digest::HMAC
2.33    Digest::MD5
2.07    Digest::SHA1
1.00    Encode::Detect
0.17008 Error
0.22    ExtUtils::CBuilder
2.18    ExtUtils::ParseXS
2.36    Getopt::Long
0.44    Inline
1.08    IO::String
1.09    IO::Zlib
2.23    IP::Country
0.22    Mail::ClamAV
3.002004        Mail::SpamAssassin
v2.005  Mail::SPF
1.999001        Mail::SPF::Query
0.2808  Module::Build
0.20    Net::CIDR::Lite
0.63    Net::DNS
0.002.2 Net::DNS::Resolver::Programmable
missing Net::LDAP
  4.004  NetAddr::IP
1.94    Parse::RecDescent
missing SAVI
3.10    Test::Harness
1.17    Test::Manifest
1.95    Text::Balanced
1.30    URI
0.7203  version
0.66    YAML



Regards,

Steffan

On Fri, 27 Jun 2008, Martin.Hepworth wrote:

> Steffan
>
> Well I'd fix the %org-name% issues while you're fixing other stuff..
>
> What does
>
> "MailScanner -v" give, could be there's a bad perl module somewhere.
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info
>> [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf
>> Of Steffan Henke
>> Sent: 27 June 2008 10:16
>> To: MailScanner discussion
>> Subject: RE: SpamAssassin 3.2.5 woes
>>
>> On Fri, 27 Jun 2008, Martin.Hepworth wrote:
>>
>>> Steffan
>>>
>>> Run mailscaner in debug mode and see what's going on...
>>>
>>> MailScanner -debug -debug-sa
>>>
>>> How did you install spamassassin??? RPM? Jules's handy
>> installer, CPAN??
>>
>> Martin,
>>
>> I've built SA using rpmbuild -tb
>> Mail-SpamAssassin-3.2.4.tar.gz and installed the two rpms
>> after that - that way has worked for ages.
>> The whole debug output:
>>
>> In Debugging mode, not forking...
>>
>> **************************************************************
>> **********
>> In MailScanner.conf, your "%org-name%" or "Mail Header"
>> setting contains spaces and/or other illegal characters.
>>
>> Including any spaces will break all your mail system (but do
>> not worry, MailScanner will fix this for you on the fly).
>>
>> Otherwise, it should only contain characters from the set
>> a-z, A-Z, 0-9, "-" and "_". While theoretically some other
>> characters are allowed, some commercial mail systems fail to
>> handle them correctly.
>>
>> This is clearly noted in the MailScanner.conf file,
>> immediately above the %org-name% setting. Please read the
>> documentation!
>> **************************************************************
>> **********
>>
>> Trying to setlogsock(unix)
>> 11:09:52 SpamAssassin temp dir =
>> /var/spool/MailScanner/incoming/SpamAssassin-Temp
>> 11:09:53 [19482] dbg: logger: adding facilities: all
>> 11:09:53 [19482] dbg: logger: logging level is DBG
>> 11:09:53 [19482] dbg: generic: SpamAssassin version 3.2.4
>> 11:09:53 [19482] dbg: config: score set 0 chosen.
>> 11:09:53 [19482] dbg: util: running in taint mode? no
>> 11:09:53 [19482] dbg: dns: is Net::DNS::Resolver available? yes
>> 11:09:53 [19482] dbg: dns: Net::DNS version: 0.63
>> 11:09:53 [19482] dbg: ignore: test message to precompile
>> patterns and load modules
>> 11:09:53 [19482] dbg: config: using "/etc/mail/spamassassin"
>> for site rules pre files
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/init.pre
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/v310.pre
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/v312.pre
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/v320.pre
>> 11:09:53 [19482] dbg: config: using "/usr/share/spamassassin"
>> for sys rules pre files
>> 11:09:53 [19482] dbg: config: using "/usr/share/spamassassin"
>> for default rules dir
>> 11:09:53 [19482] dbg: config: read file
>> /usr/share/spamassassin/72_removed.cf
>> 11:09:53 [19482] dbg: config: using "/etc/mail/spamassassin"
>> for site rules dir
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/bogus-virus-warnings.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/custom.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/kauftipp.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/local.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/mailscanner.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/pdfinfo.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/popcorn.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/sagrey.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/stocks.cf
>> 11:09:53 [19482] dbg: config: read file
>> /etc/mail/spamassassin/weeds.cf
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::RelayCountry from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::URIDNSBL
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::Hashcash
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::SPF from @INC
>> 11:09:53 [19482] dbg: config: fixed relative path:
>> /etc/mail/spamassassin/PDFInfo.pm
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::PDFInfo
>> from /etc/mail/spamassassin/PDFInfo.pm
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::DCC from @INC
>> 11:09:53 [19482] dbg: dcc: network tests on, registering DCC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::Razor2
>> from @INC
>> 11:09:53 [19482] dbg: razor2: razor2 is available, version 2.84
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::SpamCop
>> from @INC
>> 11:09:53 [19482] dbg: reporter: network tests on, attempting SpamCop
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::AWL from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::MIMEHeader from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::ReplaceTags from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::DKIM from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::Check from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::HTTPSMismatch from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::URIDetail from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::Bayes from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::BodyEval
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::DNSEval
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::HTMLEval
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::HeaderEval from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::MIMEEval
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::RelayEval from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::URIEval
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::WLBLEval
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::VBounce
>> from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::Rule2XSBody from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::ASN from @INC
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::ImageInfo from @INC
>> 11:09:53 [19482] dbg: config: fixed relative path:
>> /etc/mail/spamassassin/sagrey.pm
>> 11:09:53 [19482] dbg: plugin: loading
>> Mail::SpamAssassin::Plugin::SAGrey
>> from /etc/mail/spamassassin/sagrey.pm
>> 11:09:53 [19482] dbg: rules: AXB_RCVD_ZOOBSEND merged duplicates:
>> BROKEN_RATWARE_BOM DEAR_HOMEOWNER DIV_CENTER_A_HREF DRUG_RA_PRICE
>> FM_DDDD_TIMES_2 FM_SEX_HOSTDDDD HS_PHARMA_1
>> HS_UPLOADED_SOFTWARE OEBOUND STOX_RCVD_N_NN_N URIBL_RHS_ABUSE
>> URIBL_RHS_BOGUSMX URIBL_RHS_DSN URIBL_RHS_POST
>> URIBL_RHS_TLD_WHOIS URIBL_RHS_WHOIS URIBL_XS_SURBL URI_L_PHP
>> XMAILER_MIMEOLE_OL_5E7ED XMAILER_MIMEOLE_OL_C7C33
>> XMAILER_MIMEOLE_OL_D03AB X_LIBRARY YOUR_CRD_RATING
>> 11:09:53 [19482] dbg: rules: VIRUS_WARNING123 merged duplicates:
>> VIRUS_WARNING37
>> 11:09:53 [19482] dbg: rules: VIRUS_WARNING103 merged duplicates:
>> VIRUS_WARNING52
>> 11:09:53 [19482] dbg: conf: finish parsing
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0xb3813f4)
>> implements 'finish_parsing_end', priority 0
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
>> implements 'finish_parsing_end', priority 0
>> 11:09:53 [19482] dbg: replacetags: replacing tags
>> 11:09:53 [19482] dbg: replacetags: done replacing tags
>> 11:09:53 [19482] dbg: zoom: loading compiled ruleset from
>> /var/lib/compiled/3.002004
>> 11:09:53 [19482] dbg: zoom: no compiled ruleset found for
>> Mail::SpamAssassin::CompiledRegexps::body_0
>> 11:09:53 [19482] dbg: bayes: using username: root
>> 11:09:53 [19482] dbg: bayes: database connection established
>> 11:09:53 [19482] dbg: bayes: found bayes db version 3
>> 11:09:53 [19482] dbg: bayes: Using userid: 2
>> 11:09:53 [19482] dbg: config: score set 3 chosen.
>> 11:09:53 [19482] dbg: message: main message type: text/plain
>> 11:09:53 [19482] dbg: message: ---- MIME PARSER START ----
>> 11:09:53 [19482] dbg: message: parsing normal part
>> 11:09:53 [19482] dbg: message: ---- MIME PARSER END ----
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::DNSEval=HASH(0xb9ac10c)
>> implements 'check_start', priority 0
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
>> implements 'check_start', priority 0
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::Check=HASH(0xb372e68) implements
>> 'check_main', priority 0
>> 11:09:53 [19482] dbg: conf: trusted_networks are not
>> configured; it is recommended that you configure
>> trusted_networks manually
>> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-Trusted:
>> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-Untrusted:
>> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-Internal:
>> 11:09:53 [19482] dbg: metadata: X-Spam-Relays-External:
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb050b6c)
>> implements 'extract_metadata', priority 0
>> 11:09:53 [19482] dbg: metadata: X-Relay-Countries:
>> 11:09:53 [19482] dbg: message: no encoding detected
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xb050b6c)
>> implements 'parsed_metadata', priority 0
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xb34da88)
>> implements 'parsed_metadata', priority 0
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::ASN=HASH(0xb373030) implements
>> 'parsed_metadata', priority 0
>> 11:09:53 [19482] dbg: dns: is Net::DNS::Resolver available? yes
>> 11:09:53 [19482] dbg: dns: Net::DNS version: 0.63
>> 11:09:53 [19482] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0
>> 11:09:53 [19482] dbg: dns: dns_available set to yes in config
>> file, skipping test
>> 11:09:53 [19482] dbg: uridnsbl: domains to query:
>> 11:09:53 [19482] dbg: asn: no asn_lookup configured, skipping
>> ASN lookups
>> 11:09:53 [19482] dbg: check: running tests for priority: 0
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
>> implements 'check_rules_at_priority', priority 0
>> 11:09:53 [19482] dbg: rules: running one_line_body tests;
>> score so far=0
>> 11:09:53 [19482] dbg: rules: compiled one_line_body tests
>> 11:09:53 [19482] dbg: plugin:
>> Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0xb372fe8)
>> implements 'run_body_fast_scan', priority 0
>> 11:09:53 [19482] dbg: rules: running head tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled head tests
>> 11:09:53 [19482] dbg: rules: running body tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled body tests
>> 11:09:53 [19482] dbg: rules: running uri tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled uri tests
>> 11:09:53 [19482] dbg: rules: running rawbody tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled rawbody tests
>> 11:09:53 [19482] dbg: rules: running full tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled full tests
>> 11:09:53 [19482] dbg: rules: running meta tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled meta tests
>> 11:09:53 [19482] dbg: check: running tests for priority: 500
>> 11:09:53 [19482] dbg: dns: harvest_dnsbl_queries
>> 11:09:53 [19482] dbg: rules: running one_line_body tests;
>> score so far=0
>> 11:09:53 [19482] dbg: rules: compiled one_line_body tests
>> 11:09:53 [19482] dbg: rules: running head tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled head tests
>> 11:09:53 [19482] dbg: rules: running body tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled body tests
>> 11:09:53 [19482] dbg: rules: running uri tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled uri tests
>> 11:09:53 [19482] dbg: rules: running rawbody tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled rawbody tests
>> 11:09:53 [19482] dbg: rules: running full tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled full tests
>> 11:09:53 [19482] dbg: rules: running meta tests; score so far=0
>> 11:09:53 [19482] dbg: rules: meta test VIRUS_WARNING_DOOM_BNC
>> has undefined dependency 'VIRUS_WARNING_MYDOOM4'
>> 11:09:53 [19482] dbg: rules: compiled meta tests
>> 11:09:53 [19482] dbg: check: running tests for priority: 1001
>> 11:09:53 [19482] dbg: rules: running one_line_body tests;
>> score so far=0
>> 11:09:53 [19482] dbg: rules: compiled one_line_body tests
>> 11:09:53 [19482] dbg: rules: running head tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled head tests
>> 11:09:53 [19482] dbg: SAGrey: message score does not indicate
>> spam ...
>> ignoring
>> 11:09:53 [19482] dbg: rules: running body tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled body tests
>> 11:09:53 [19482] dbg: rules: running uri tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled uri tests
>> 11:09:53 [19482] dbg: rules: running rawbody tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled rawbody tests
>> 11:09:53 [19482] dbg: rules: running full tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled full tests
>> 11:09:53 [19482] dbg: rules: running meta tests; score so far=0
>> 11:09:53 [19482] dbg: rules: compiled meta tests
>> 11:09:53 [19482] dbg: check: is spam? score=0 required=5.5
>> 11:09:53 [19482] dbg: check: tests=
>> 11:09:53 [19482] dbg: check: subtests=
>> 11:09:53 Building a message batch to scan...
>>
>> I have temporarily removed KAM.cf and noticed that, when
>> enabled, Botnet.cf is the only test in "tests=" . However, I
>> have removed that plugin temporarily as well.
>>
>>
>> Regards,
>>
>> Steffan
>>
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>
>
>
>
> **********************************************************************
> Confidentiality : This e-mail and any attachments are intended for the
> addressee only and may be confidential. If they come to you in error
> you must take no action based on them, nor must you copy or show them
> to anyone. Please advise the sender by replying to this e-mail
> immediately and then delete the original from your computer.
> Opinion : Any opinions expressed in this e-mail are entirely those of
> the author and unless specifically stated to the contrary, are not
> necessarily those of the author's employer.
> Security Warning : Internet e-mail is not necessarily a secure
> communications medium and can be subject to data corruption. We advise
> that you consider this fact when e-mailing us.
> Viruses : We have taken steps to ensure that this e-mail and any
> attachments are free from known viruses but in keeping with good
> computing practice, you should ensure that they are virus free.
>
> Red Lion 49 Ltd T/A Solid State Logic
> Registered as a limited company in England and Wales
> (Company No:5362730)
> Registered Office: 25 Spring Hill Road, Begbroke, Oxford OX5 1RU,
> United Kingdom
> **********************************************************************
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>

-- 
No part of this message can be made available on any web page,
message board or newsgroup without the permission of the sender.


More information about the MailScanner mailing list