Upgrade to 4.79.11

derek.winkler at algorithmics.com derek.winkler at algorithmics.com
Wed Jul 21 20:15:15 IST 2010


I just upgraded from 4.69.9 to 4.79.11, SA from 3.2.5 to SA 3.3.1.

 

Everything lints fine, can't find any problems.

 

I'm getting spam that when processed by MS scores quite low,

 

X-Algo-MailScanner-SpamCheck: not spam, SpamAssassin (score=0.5,

                required 4.5, autolearn=disabled, RCVD_IN_BRBL 0.50)

 

but when tested with SA within minutes on the same server scores quite
high,

 

Content analysis details:   (23.7 points, 5.0 required)

 

 pts rule name              description

---- ----------------------
--------------------------------------------------

 0.5 RCVD_IN_BRBL           RBL: Received via a relay in BRBL

                            [198.7.242.169 listed in
b.barracudacentral.org]

 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

               [Blocked - see
<http://www.spamcop.net/bl.shtml?198.7.242.169>]

 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT

                            [198.7.242.169 listed in
bb.barracudacentral.org]

 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL

                            [198.7.242.169 listed in zen.spamhaus.org]

 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL

                            [198.7.242.169 listed in psbl.surriel.com]

 4.5 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL
blocklist

                            [URIs: erectgardiner81b.ru]

 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL
blocklist

                            [URIs: erectgardiner81b.ru]

 1.9 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL
blocklist

                            [URIs: erectgardiner81b.ru]

 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist

                            [URIs: erectgardiner81b.ru]

-0.0 T_RP_MATCHES_RCVD      Envelope sender domain matches handover
relay

                            domain

 0.9 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record
(softfail)

 0.6 URIBL_SBL              Contains an URL listed in the SBL blocklist

                            [URIs: erectgardiner81b.ru]

 0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of
words

 0.6 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image
area

 0.0 HTML_MESSAGE           BODY: HTML included in message

 1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)

 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

                            above 50%

                            [cf: 100]

 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

                            [cf: 100]

 0.4 RDNS_DYNAMIC           Delivered to internal network by host with

                            dynamic-looking rDNS

 0.0 T_SURBL_MULTI2         T_SURBL_MULTI2

 0.0 T_SURBL_MULTI1         T_SURBL_MULTI1

 

Any ideas why?

 

Using Sendmail on RHEL4.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100721/f4f5a96d/attachment.html


More information about the MailScanner mailing list