{Spam?} Re: Spam but no randomly no Spam Report
Gary Faith
gafaith at asdm.net
Fri Jul 3 14:34:48 IST 2009
Was really hoping to get an answer to the question below!
>>> "Gary Faith" <gafaith at asdm.net> 6/29/2009 9:25 AM >>>
When Spamassassin returns it's scores, where are you pulling the data from? Is it in the header from X-Spam-Status: returned from Spamassassin
X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_00 shortcircuit=no autolearn=unavailable version=3.2.5
or in the body somewhere?
Gary
>>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/29/2009 4:46 AM >>>
On 26/06/2009 19:18, Gary Faith wrote:
> After turning it on, I do get a Spam Report now.
As expected.
> Spam: Y Action(s): store, deliver, header, "X-Spam-Status:, Yes"
> High Scoring Spam: N SpamAssassin Spam: N Listed in RBL: Y SBL+XBL
> Spam Whitelisted: N Spam Blacklisted: N SpamAssassin Autolearn: N
> SpamAssassin Score:0.92 Spam Report:
> Score Matching Rule Description
> -0.50 BAYES_00 Bayesian spam probability is 0 to 1%
> 1.42 SARE_ADULT2 Contains adult material
>
> Steve Freegard, just posted an message that "Always Include
> SpamAssassin Report" = on would cause it to run even for whitelisted
> and blacklisted recipients. I agree it would be inefficient to have
> SA run on whitelisted & blacklisted recipients.
Absolutely correct. You don't want the inefficiency of always generating
the report, which involves always running SA, so don't be surprised when
you don't get the report.
> Could there still be a problem in the patched Message.pm where it is
> returning some of the spam report but not all?
Don't think so.
> Gary
>
> >>> "Gary Faith" <gafaith at asdm.net> 6/26/2009 1:18 PM >>>
> Julian,
> Always Include SpamAssassin Report was set to off. I just turned it
> on and will see if that changes things. I wasn't sure if that setting
> would be a problem because it seems that there was a report even if
> the message was clean like the one below. It just seems like the
> Spam Report is included with every message except when the isspam =1 &
> isrblspam =1 and the other two flags = 0.
> Spam: N Action(s): store, deliver, header, "X-Spam-Status:, No" High
> Scoring Spam: N SpamAssassin Spam: N Listed in RBL: N Spam
> Whitelisted: N Spam Blacklisted: N SpamAssassin Autolearn: N
> SpamAssassin Score:3.28 Spam Report:
> Score Matching Rule Description
> cached not
>
> score=3.281
> 3.5 required
> -0.50 BAYES_00 Bayesian spam probability is 0 to 1%
> 2.17 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)
> 0.73 HTML_COMMENT_SHORT HTML comment is very short
> 0.88 HTML_FONT_FACE_BAD HTML font face is not a word
> 0.00 HTML_MESSAGE HTML included in message
> -0.00 SPF_PASS SPF: sender matches SPF record
>
>
> Gary
>
> >>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/26/2009 11:58 AM >>>
> Does your MailScanner.conf have "Always Include SpamAssassin Report"
> switched on or off?
>
> On 26/06/2009 16:31, Gary Faith wrote:
> > Julian,
> > Better. The spam report field is populated now but I don't think it
> > is completely fixed. See below:
> > Spam: Y Action(s): store, deliver, header, "X-Spam-Status:, Yes"
> > High Scoring Spam: N
> > SpamAssassin Spam: N
> > Listed in RBL: Y
> > Spam Whitelisted: N
> > Spam Blacklisted: N
> > SpamAssassin Autolearn: N
> > SpamAssassin Score: 3.09
> > Spam Report: spam, SBL+XBL
> > I confirmed that the database shows spam, SBL+XBL only. Problem that
> > I see is that there is nothing in the spamreport field to explain the
> > 3.09 SpamAssassin score.
> > Gary
> >
> >
> > >>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/26/2009 4:41 AM >>>
> > Aha, well done for tracking down that case, I've been looking for that
> > bug for ages.
> > Due to your diagnostics I now have what should fix it.
> >
> > Please try the attached patch to
> > /usr/lib/MailScanner/MailScanner/Message.pm and then restart
> MailScanner.
> >
> > Thanks for helping!
> > Jules.
> >
> > On 26/06/2009 05:08, Gary Faith wrote:
> > > Follow Up! After doing more digging, I believe that I have found the
> > > common thread when the problem occurs. The spamreport field only
> > > seems to be blank when isspam & isrblspam flags are set. If issaspam
> > > and/or ishighspam are set then spamreport has data.
> > > isspam tinyint(1) =1
> > > ishighspam tinyint(1) =0
> > > issaspam tinyint(1) =0
> > > isrblspam tinyint(1) =1
> > > spamwhitelisted tinyint(1) =0
> > > spamblacklisted tinyint(1) =0
> > > sascore decimal(7,2) some value
> > > spamreport text {Empty}
> > > I hope this helps shine light on my problem. Any ideas why this is
> > > happening?
> > > Thanks,
> > >
> > > Gary
> > >
> > > >>> "Gary Faith" <gafaith at asdm.net> 6/25/2009 11:14 PM >>>
> > > Running MailScanner 4.75.11 on SLES 10 SP2 X86_64. When viewing the
> > > information via MailWatch, I see the following on the details page:
> > > SpamAssassin Spam: Y Action(s): store, deliver, header,
> > > "X-Spam-Status:, Yes"
> > > High Scoring Spam: N
> > > SpamAssassin Spam: N
> > > Listed in RBL: N
> > > Spam Whitelisted: N
> > > Spam Blacklisted: N
> > > SpamAssassin Autolearn: N
> > > SpamAssassin Score:1.66
> > > The problem is Spam Report is blank. This happens on a few seemingly
> > > random messages while most have something in the spamreport field. I
> > > have verified this in the database that it definitely null. Any
> > > reason why all the data except the spam report would be logged to
> > > mysql? Could this be a spamassassin timeout problem?
> > > Thanks,
> > >
> > > Gary Faith
> >
> > Jules
> >
> > --
> > Julian Field MEng CITP CEng
> > www.MailScanner.info
> > Buy the MailScanner book at www.MailScanner.info/store
> >
> > Need help customising MailScanner?
> > Contact me!
> > Need help fixing or optimising your systems?
> > Contact me!
> > Need help getting you started solving new requirements from your boss?
> > Contact me!
> >
> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> > Follow me at twitter.com/JulesFM and twitter.com/MailScanner
> >
> >
> > --
> > This message has been scanned for viruses and
> > dangerous content by MailScanner, and is
> > believed to be clean.
> >
>
> Jules
>
> --
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from your boss?
> Contact me!
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> Follow me at twitter.com/JulesFM and twitter.com/MailScanner
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
Jules
--
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store
Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!
PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090703/f89b036d/attachment.html
More information about the MailScanner
mailing list