Spam but no randomly no Spam Report

Gary Faith gafaith at asdm.net
Fri Jun 26 19:18:05 IST 2009


After turning it on, I do get a Spam Report now.
 
Spam: Y   Action(s): store, deliver, header, "X-Spam-Status:, Yes"
High Scoring Spam: N 
SpamAssassin Spam: N 
Listed in RBL: Y   SBL+XBL
Spam Whitelisted: N 
Spam Blacklisted: N 
SpamAssassin Autolearn: N 
SpamAssassin Score:0.92
Spam Report:

ScoreMatching RuleDescription
-0.50BAYES_00Bayesian spam probability is 0 to 1%
1.42SARE_ADULT2Contains adult material
Steve Freegard, just posted an message that "Always Include SpamAssassin Report" = on would cause it to run even for whitelisted and blacklisted recipients.  I agree it would be inefficient to have SA run on whitelisted & blacklisted recipients.  Could there still be a problem in the patched Message.pm where it is returning some of the spam report but not all?
 
Gary

>>> "Gary Faith" <gafaith at asdm.net> 6/26/2009 1:18 PM >>>
Julian,
 
Always Include SpamAssassin Report was set to off.  I just turned it on and will see if that changes things.  I wasn't sure if that setting would be a problem because it seems that there was a report even if the message was clean like the one below.   It just seems like the Spam Report is included with every message except when the isspam =1 & isrblspam =1 and the other two flags = 0.
 
Spam: N   Action(s): store, deliver, header, "X-Spam-Status:, No"
High Scoring Spam: N 
SpamAssassin Spam: N 
Listed in RBL: N 
Spam Whitelisted: N 
Spam Blacklisted: N 
SpamAssassin Autolearn: N 
SpamAssassin Score:3.28
Spam Report:
ScoreMatching RuleDescription
cachednot 
score=3.281 
3.5required 
-0.50BAYES_00Bayesian spam probability is 0 to 1%
2.17DCC_CHECKListed in DCC (http://rhyolite.com/anti-spam/dcc/)
0.73HTML_COMMENT_SHORTHTML comment is very short
0.88HTML_FONT_FACE_BADHTML font face is not a word
0.00HTML_MESSAGEHTML included in message
-0.00SPF_PASSSPF: sender matches SPF record

Gary

>>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/26/2009 11:58 AM >>>
Does your MailScanner.conf have "Always Include SpamAssassin Report" 
switched on or off?

On 26/06/2009 16:31, Gary Faith wrote:
> Julian,
> Better.  The spam report field is populated now but I don't think it 
> is completely fixed.  See below:
> Spam: Y   Action(s): store, deliver, header, "X-Spam-Status:, Yes"
> High Scoring Spam: N
> SpamAssassin Spam: N
> Listed in RBL: Y
> Spam Whitelisted: N
> Spam Blacklisted: N
> SpamAssassin Autolearn: N
> SpamAssassin Score: 3.09
> Spam Report: spam, SBL+XBL
> I confirmed that the database shows spam, SBL+XBL only.  Problem that 
> I see is that there is nothing in the spamreport field to explain the 
> 3.09 SpamAssassin score.
> Gary
>
>
> >>> Julian Field <MailScanner at ecs.soton.ac.uk> 6/26/2009 4:41 AM >>>
> Aha, well done for tracking down that case, I've been looking for that
> bug for ages.
> Due to your diagnostics I now have what should fix it.
>
> Please try the attached patch to
> /usr/lib/MailScanner/MailScanner/Message.pm and then restart MailScanner.
>
> Thanks for helping!
> Jules.
>
> On 26/06/2009 05:08, Gary Faith wrote:
> > Follow Up!  After doing more digging, I believe that I have found the
> > common thread when the problem occurs.  The spamreport field only
> > seems to be blank when isspam & isrblspam flags are set.  If issaspam
> > and/or ishighspam are set then spamreport has data.
> > isspam    tinyint(1)            =1
> > ishighspam  tinyint(1)       =0
> > issaspam  tinyint(1)          =0
> > isrblspam  tinyint(1)         =1
> > spamwhitelisted  tinyint(1)    =0
> > spamblacklisted  tinyint(1)    =0
> > sascore  decimal(7,2)      some value
> > spamreport  text   {Empty}
> > I hope this helps shine light on my problem.  Any ideas why this is
> > happening?
> > Thanks,
> >
> > Gary
> >
> > >>> "Gary Faith" <gafaith at asdm.net> 6/25/2009 11:14 PM >>>
> > Running MailScanner 4.75.11 on SLES 10 SP2 X86_64.  When viewing the
> > information via MailWatch, I see the following on the details page:
> > SpamAssassin Spam: Y   Action(s): store, deliver, header,
> > "X-Spam-Status:, Yes"
> > High Scoring Spam: N
> > SpamAssassin Spam: N
> > Listed in RBL: N
> > Spam Whitelisted: N
> > Spam Blacklisted: N
> > SpamAssassin Autolearn: N
> > SpamAssassin Score:1.66
> > The problem is Spam Report is blank.  This happens on a few seemingly
> > random messages while most have something in the spamreport field.  I
> > have verified this in the database that it definitely null.  Any
> > reason why all the data except the spam report would be logged to
> > mysql?  Could this be a spamassassin timeout problem?
> > Thanks,
> >
> > Gary Faith
>
> Jules
>
> -- 
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> Need help customising MailScanner?
> Contact me!
> Need help fixing or optimising your systems?
> Contact me!
> Need help getting you started solving new requirements from your boss?
> Contact me!
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> Follow me at twitter.com/JulesFM and twitter.com/MailScanner
>
>
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

Need help customising MailScanner?
Contact me!
Need help fixing or optimising your systems?
Contact me!
Need help getting you started solving new requirements from your boss?
Contact me!

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
Follow me at twitter.com/JulesFM and twitter.com/MailScanner


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-- 
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20090626/05b00874/attachment.html


More information about the MailScanner mailing list