Spam but no randomly no Spam Report

Martin Hepworth maxsec at gmail.com
Fri Jun 26 17:38:48 IST 2009


2009/6/26 Gary Faith <gafaith at asdm.net>:
> Julian,
>
> Better.  The spam report field is populated now but I don't think it is
> completely fixed.  See below:
>
> Spam: Y   Action(s): store, deliver, header, "X-Spam-Status:, Yes"
> High Scoring Spam: N
> SpamAssassin Spam: N
> Listed in RBL: Y
> Spam Whitelisted: N
> Spam Blacklisted: N
> SpamAssassin Autolearn: N
> SpamAssassin Score: 3.09
> Spam Report: spam, SBL+XBL
>
> I confirmed that the database shows spam, SBL+XBL only.  Problem that I see
> is that there is nothing in the spamreport field to explain the 3.09
> SpamAssassin score.
>
> Gary
>
>>>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/26/2009 4:41 AM >>>
> Aha, well done for tracking down that case, I've been looking for that
> bug for ages.
> Due to your diagnostics I now have what should fix it.
>
> Please try the attached patch to
> /usr/lib/MailScanner/MailScanner/Message.pm and then restart MailScanner.
>
> Thanks for helping!
> Jules.
>
> On 26/06/2009 05:08, Gary Faith wrote:
>> Follow Up!  After doing more digging, I believe that I have found the
>> common thread when the problem occurs.  The spamreport field only
>> seems to be blank when isspam & isrblspam flags are set.  If issaspam
>> and/or ishighspam are set then spamreport has data.
>> isspam    tinyint(1)            =1
>> ishighspam  tinyint(1)       =0
>> issaspam  tinyint(1)          =0
>> isrblspam  tinyint(1)         =1
>> spamwhitelisted  tinyint(1)    =0
>> spamblacklisted  tinyint(1)    =0
>> sascore  decimal(7,2)      some value
>> spamreport  text   {Empty}
>> I hope this helps shine light on my problem.  Any ideas why this is
>> happening?
>> Thanks,
>>
>> Gary
>>
>> >>> "Gary Faith" <gafaith at asdm.net> 6/25/2009 11:14 PM >>>
>> Running MailScanner 4.75.11 on SLES 10 SP2 X86_64.  When viewing the
>> information via MailWatch, I see the following on the details page:
>> SpamAssassin Spam: Y   Action(s): store, deliver, header,
>> "X-Spam-Status:, Yes"
>> High Scoring Spam: N
>> SpamAssassin Spam: N
>> Listed in RBL: N
>> Spam Whitelisted: N
>> Spam Blacklisted: N
>> SpamAssassin Autolearn: N
>> SpamAssassin Score:1.66
>> The problem is Spam Report is blank.  This happens on a few seemingly
>> random messages while most have something in the spamreport field.  I
>> have verified this in the database that it definitely null.  Any
>> reason why all the data except the spam report would be logged to
>> mysql?  Could this be a spamassassin timeout problem?
>> Thanks,
>>
>> Gary Faith
>
> Jules
>
> --
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from your boss?
> Contact me!
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> Follow me at twitter.com/JulesFM and twitter.com/MailScanner
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>


It's listing this as spam as mailScanner is using the SBL+XBL RBL as a
definite source of spam. ie MailScanner is calling the RBL (not
spamassassin) and is it therefor saying it's spam.

Spamassassin is saying it's only scoring 3.09 which isn;t enough for
SA to classify this as spam as far as SA is concerned.

-- 
Martin Hepworth
Oxford, UK


More information about the MailScanner mailing list