Upgrade to 4.79.11

[derek.winkler at algorithmics.com]

Solved.

 

When running SpamAssassin debug from MailScanner,

 

16:34:39 Jul 21 16:34:39.138 [20343] dbg: generic: Perl 5.008005,
PREFIX=/usr, DEF_RULES_DIR=/usr/share/spamassassin,
LOCAL_RULES_DIR=/etc/mail/spamassassin, LOCAL_STATE_DIR=/var/lib

 

When running SpamAssassin debug from command line,

 

Jul 21 13:34:40.776 [23659] dbg: generic: Perl 5.008005, PREFIX=/usr,
DEF_RULES_DIR=/usr/share/spamassassin,
LOCAL_RULES_DIR=/etc/mail/spamassassin,
LOCAL_STATE_DIR=/var/lib/spamassassin

 

Had to modify MailScanner.conf,

 

SpamAssassin Local State Dir = /var/lib

 

To

 

SpamAssassin Local State Dir = /var/lib/spamassassin

 

Did I jump too many versions for upgrade_MailScanner_conf to handle? Or
does it need special case handling since its commented out by default?

 

 

From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
derek.winkler at algorithmics.com
Sent: Wednesday, July 21, 2010 3:15 PM
To: mailscanner at lists.mailscanner.info
Subject: Upgrade to 4.79.11

 

I just upgraded from 4.69.9 to 4.79.11, SA from 3.2.5 to SA 3.3.1.

 

Everything lints fine, can't find any problems.

 

I'm getting spam that when processed by MS scores quite low,

 

X-Algo-MailScanner-SpamCheck: not spam, SpamAssassin (score=0.5,

                required 4.5, autolearn=disabled, RCVD_IN_BRBL 0.50)

 

but when tested with SA within minutes on the same server scores quite
high,

 

Content analysis details:   (23.7 points, 5.0 required)

 

 pts rule name              description

---- ----------------------
--------------------------------------------------

 0.5 RCVD_IN_BRBL           RBL: Received via a relay in BRBL

                            [198.7.242.169 listed in
b.barracudacentral.org]

 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net

               [Blocked - see
<http://www.spamcop.net/bl.shtml?198.7.242.169>]

 1.6 RCVD_IN_BRBL_LASTEXT   RBL: RCVD_IN_BRBL_LASTEXT

                            [198.7.242.169 listed in
bb.barracudacentral.org]

 0.7 RCVD_IN_XBL            RBL: Received via a relay in Spamhaus XBL

                            [198.7.242.169 listed in zen.spamhaus.org]

 2.7 RCVD_IN_PSBL           RBL: Received via a relay in PSBL

                            [198.7.242.169 listed in psbl.surriel.com]

 4.5 URIBL_AB_SURBL         Contains an URL listed in the AB SURBL
blocklist

                            [URIs: erectgardiner81b.ru]

 1.7 URIBL_WS_SURBL         Contains an URL listed in the WS SURBL
blocklist

                            [URIs: erectgardiner81b.ru]

 1.9 URIBL_JP_SURBL         Contains an URL listed in the JP SURBL
blocklist

                            [URIs: erectgardiner81b.ru]

 1.7 URIBL_DBL_SPAM         Contains an URL listed in the DBL blocklist

                            [URIs: erectgardiner81b.ru]

-0.0 T_RP_MATCHES_RCVD      Envelope sender domain matches handover
relay

                            domain

 0.9 SPF_HELO_SOFTFAIL      SPF: HELO does not match SPF record
(softfail)

 0.6 URIBL_SBL              Contains an URL listed in the SBL blocklist

                            [URIs: erectgardiner81b.ru]

 0.0 HTML_IMAGE_ONLY_32     BODY: HTML: images with 2800-3200 bytes of
words

 0.6 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image
area

 0.0 HTML_MESSAGE           BODY: HTML included in message

 1.7 RAZOR2_CHECK           Listed in Razor2 (http://razor.sf.net/)

 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level

                            above 50%

                            [cf: 100]

 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%

                            [cf: 100]

 0.4 RDNS_DYNAMIC           Delivered to internal network by host with

                            dynamic-looking rDNS

 0.0 T_SURBL_MULTI2         T_SURBL_MULTI2

 0.0 T_SURBL_MULTI1         T_SURBL_MULTI1

 

Any ideas why?

 

Using Sendmail on RHEL4.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20100722/0c359cd9/attachment.html