Spam but no randomly no Spam Report
Martin Hepworth
maxsec at gmail.com
Fri Jun 26 17:38:48 IST 2009
2009/6/26 Gary Faith <gafaith at asdm.net>:
> Julian,
>
> Better. The spam report field is populated now but I don't think it is
> completely fixed. See below:
>
> Spam: Y Action(s): store, deliver, header, "X-Spam-Status:, Yes"
> High Scoring Spam: N
> SpamAssassin Spam: N
> Listed in RBL: Y
> Spam Whitelisted: N
> Spam Blacklisted: N
> SpamAssassin Autolearn: N
> SpamAssassin Score: 3.09
> Spam Report: spam, SBL+XBL
>
> I confirmed that the database shows spam, SBL+XBL only. Problem that I see
> is that there is nothing in the spamreport field to explain the 3.09
> SpamAssassin score.
>
> Gary
>
>>>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/26/2009 4:41 AM >>>
> Aha, well done for tracking down that case, I've been looking for that
> bug for ages.
> Due to your diagnostics I now have what should fix it.
>
> Please try the attached patch to
> /usr/lib/MailScanner/MailScanner/Message.pm and then restart MailScanner.
>
> Thanks for helping!
> Jules.
>
> On 26/06/2009 05:08, Gary Faith wrote:
>> Follow Up! After doing more digging, I believe that I have found the
>> common thread when the problem occurs. The spamreport field only
>> seems to be blank when isspam & isrblspam flags are set. If issaspam
>> and/or ishighspam are set then spamreport has data.
>> isspam tinyint(1) =1
>> ishighspam tinyint(1) =0
>> issaspam tinyint(1) =0
>> isrblspam tinyint(1) =1
>> spamwhitelisted tinyint(1) =0
>> spamblacklisted tinyint(1) =0
>> sascore decimal(7,2) some value
>> spamreport text {Empty}
>> I hope this helps shine light on my problem. Any ideas why this is
>> happening?
>> Thanks,
>>
>> Gary
>>
>> >>> "Gary Faith" <gafaith at asdm.net> 6/25/2009 11:14 PM >>>
>> Running MailScanner 4.75.11 on SLES 10 SP2 X86_64. When viewing the
>> information via MailWatch, I see the following on the details page:
>> SpamAssassin Spam: Y Action(s): store, deliver, header,
>> "X-Spam-Status:, Yes"
>> High Scoring Spam: N
>> SpamAssassin Spam: N
>> Listed in RBL: N
>> Spam Whitelisted: N
>> Spam Blacklisted: N
>> SpamAssassin Autolearn: N
>> SpamAssassin Score:1.66
>> The problem is Spam Report is blank. This happens on a few seemingly
>> random messages while most have something in the spamreport field. I
>> have verified this in the database that it definitely null. Any
>> reason why all the data except the spam report would be logged to
>> mysql? Could this be a spamassassin timeout problem?
>> Thanks,
>>
>> Gary Faith
>
> Jules
>
> --
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from your boss?
> Contact me!
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> Follow me at twitter.com/JulesFM and twitter.com/MailScanner
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
It's listing this as spam as mailScanner is using the SBL+XBL RBL as a
definite source of spam. ie MailScanner is calling the RBL (not
spamassassin) and is it therefor saying it's spam.
Spamassassin is saying it's only scoring 3.09 which isn;t enough for
SA to classify this as spam as far as SA is concerned.
--
Martin Hepworth
Oxford, UK
More information about the MailScanner
mailing list