Different SA scan results

[Jerry Benton]

No.

spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf -D < msg

-
Jerry Benton
www.mailborder.com



> On Mar 2, 2015, at 10:45 PM, Jeremy McSpadden <jeremy at fluxlabs.net> wrote:
> 
> Not sure what you mean. MS is calling spamassassin ... Shouldn't it be the same scan ? Why would NOT including my prefs.conf file change ? 
> 
> --
> Jeremy McSpadden
> Flux Labs | http://www.fluxlabs.net <http://www.fluxlabs.net/> | Endless Solutions
> Office : 850-250-5590x501 <tel:850-250-5590;501> | Cell : 850-890-2543 <tel:850-890-2543> | Fax : 850-254-2955 <tel:850-254-2955>
> 
> On Feb 27, 2015, at 1:46 AM, Jerry Benton <jerry.benton at mailborder.com <mailto:jerry.benton at mailborder.com>> wrote:
> 
>> You need to include your /etc/MailScanner/ spam.assassin.prefs.conf in your command to get the same results. 
>> 
>> -
>> Jerry Benton
>> www.mailborder.com <http://www.mailborder.com/>
>> 
>> 
>> 
>>> On Feb 26, 2015, at 9:12 PM, Jeremy McSpadden <jeremy at fluxlabs.net <mailto:jeremy at fluxlabs.net>> wrote:
>>> 
>>> What would cause an cli scan (spamassassin -D < msg) to have different results than mailscanner scan ?
>>> 
>>> via cli
>>> 
>>> Content analysis details:   (26.1 points, 5.0 required)
>>> 
>>>  pts rule name              description
>>> ---- ---------------------- --------------------------------------------------
>>>  3.3 RCVD_IN_SBL_CSS        RBL: Received via a relay in Spamhaus SBL-CSS
>>>                             [46.105.49.218 listed in zen.spamhaus.org <http://zen.spamhaus.org/>]
>>>  5.0 URIBL_BLACK            Contains an URL listed in the URIBL blacklist
>>>                             [URIs: karefon.eu <http://karefon.eu/>]
>>>  5.0 URIBL_DBL_SPAM         Contains a spam URL listed in the DBL blocklist
>>>                             [URIs: karefon.eu <http://karefon.eu/>]
>>> -2.0 SPF_HELO_PASS          SPF: HELO matches SPF record
>>> -0.0 SPF_PASS               SPF: sender matches SPF record
>>>  0.0 HTML_MESSAGE           BODY: HTML included in message
>>>  1.5 BAYES_50               BODY: Bayes spam probability is 40 to 60%
>>>                             [score: 0.4995]
>>>  0.5 KAM_EU                 RAW: Prevalent use of .eu in spam/malware
>>>  5.0 KAM_GRABBAG2           Grabbag of Spams hitting EU domains and other indicators
>>>  0.8 RDNS_NONE              Delivered to internal network by a host with no rDNS
>>>  2.0 HTML_OFF_PAGE          HTML element rendered well off the displayed page
>>>  0.0 UNPARSEABLE_RELAY      Informational: message has unparseable relay lines
>>>  5.0 KAM_VERY_BLACK_DBL     Email that hits both URIBL Black and Spamhaus DBL
>>>  0.0 T_REMOTE_IMAGE         Message contains an external image
>>> 
>>> 
>>> via ms
>>> 1.50
>>> BAYES_50
>>> Bayes spam probability is 40 to 60%
>>> 0.00
>>> HTML_MESSAGE
>>> HTML included in message
>>> 2.00
>>> HTML_OFF_PAGE
>>> HTML element rendered well off the displayed page
>>> 0.50
>>> KAM_EU
>>> Prevalent use of .eu in spam/malware
>>> 0.79
>>> RDNS_NONE
>>> Delivered to internal network by a host with no rDNS
>>> -2.00
>>> SPF_HELO_PASS
>>> SPF: HELO matches SPF record
>>> -0.00
>>> SPF_PASS
>>> SPF: sender matches SPF record
>>> 0.01
>>> T_REMOTE_IMAGE
>>> 0.00
>>> UNPARSEABLE_RELAY
>>> Informational: message has unparseable relay lines
>>> --
>>> Jeremy McSpadden
>>> Flux Labs, Inc | http://www.fluxlabs.net <http://www.fluxlabs.net/> | Endless Solutions
>>> Office : 850-250-5590 x 501 | Cell : 850-890-2543 | Fax : 850-254-2955
>>> 
>>> -- 
>>> MailScanner mailing list
>>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>>> 
>>> Before posting, read http://wiki.mailscanner.info/posting <http://wiki.mailscanner.info/posting>
>>> 
>>> Support MailScanner development - buy the book off the website! 
>> 
>> -- 
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info <mailto:mailscanner at lists.mailscanner.info>
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner <http://lists.mailscanner.info/mailman/listinfo/mailscanner>
>> 
>> Before posting, read http://wiki.mailscanner.info/posting <http://wiki.mailscanner.info/posting>
>> 
>> Support MailScanner development - buy the book off the website! 
> -- 
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
> 
> Before posting, read http://wiki.mailscanner.info/posting
> 
> Support MailScanner development - buy the book off the website! 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20150302/a34dba49/attachment.html