<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=US-ASCII;">
<META content="MSHTML 5.50.4919.2200" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=847425812-29082002><FONT face=Arial color=#0000ff size=2>I have
a RedHat 7.3 with no upgrades to sendmail, and Mailscanner is great with
spamassassin.</FONT></SPAN></DIV>
<DIV> </DIV>
<P><FONT size=2>Matt Doherty<BR>IT Dept<BR>Datawatch Corp<BR><BR>>>In a
world without walls or fences, who needs Windows and Gates?<<</FONT> </P>
<BLOCKQUOTE>
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Brandon Friedman
[mailto:brandonf@BFCONSULT.CO.ZA]<BR><B>Sent:</B> Thursday, August 29, 2002
4:05 AM<BR><B>To:</B> MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Re: SA
problem since MS upgrade<BR><BR></FONT></DIV>Hi Julian <BR><BR>I haven't done
very much messing around on the box as it is our main <BR>production server. I
have been testing on a test server but I can't seem <BR>to replicate the
problem <BR><BR>BTW it a RH7.3 box with sendmail <BR><BR>I also edited the
whitelist and added the From and To statements. What I <BR>can gather is that
this was more an issue with whitelist members be <BR>tagged as spammers?
<BR><BR>The rest seem to be genuine spam alerts. <BR><BR>Julian Field wrote:
<BR><BR>> First off, has anyone else seen this problem? <BR>> I haven't
heard any reports of this from anyone else, so it may be a Perl <BR>>
oddity in your setup. <BR>> <BR>> What version of Perl are you using?
And on what operating system? <BR>> <BR>> Are you getting the spam
report in the log for these messages as well as <BR>> the subject-line tag?
(you might need to turn on spam logging first) <BR>> <BR>> Please try
changing lines 442-443 of sendmail.pl from <BR>> $IsSpam->{$mID} = 1 if
$ThisIsSpam; <BR>> $IsSpam->{$mID} = 'high' if $ThisIsHigh; <BR>> to
<BR>> $IsSpam->{"$mID"} = 1 if $ThisIsSpam; <BR>>
$IsSpam->{"$mID"} = 'high' if $ThisIsHigh; <BR>> <BR>> If you aren't
getting the log entries as well, then for some reason <BR>> $ThisIsHigh is
being set without $ThisIsSpam being set (which shouldn't be <BR>>
possible). <BR>> <BR>> Let's see what happens now (and see what other
responses we get from anyone <BR>> else), then I'll dig further. <BR>>
<BR>> I've just done a diff between 3.22-10 and 3.22-12. All the spam
detection <BR>> code is in sendmail.pl and here's the diff between the 2
versions of it: <BR>> <BR>>> 4c4 <BR>>> < # $Id:
sendmail.pl,v 1.99.2.22 2002/07/17 15:27:02 jkf Exp $ <BR>>> ---
<BR>>> > # $Id: sendmail.pl,v 1.99.2.28 2002/07/30 15:51:46 jkf Exp $
<BR>> <BR>> In other words, none of that code has changed, so the change
in behaviour <BR>> has got to be something a lot more subtle... <BR>>
<BR>> Keep me posted. <BR>> Jules <BR>> At 20:30 27/08/2002, you
wrote: <BR>> <BR>>> Hi folks <BR>>> <BR>>> I upgrade my
mailscanner to mailscanner-3.22-12 from mailscanner-3.22-10. <BR>>>
<BR>>> The problem is that some e-mail message....(HTML) are being
tagged as <BR>>> spam in the subject line but I looked at the message
source and it <BR>>> indicates that it isn't spam: <BR>>>
<BR>>> X-MailScanner: Found to be clean <BR>>>
X-MailScanner-SpamCheck: not spam (whitelisted), SpamAssassin (score=4.7,
<BR>>> required 8, SUBJ_HAS_Q_MARK, DEAR_SOMEBODY, CLICK_BELOW,
<BR>>> DOUBLE_CAPSWORD, EMAIL_MARKETING, SUPERLONG_LINE, <BR>>>
HTML_WITH_BGCOLOR, <BR>>> MAILTO_LINK, FREQ_SPAM_PHRASE, AWL)
<BR>>> <BR>>> <BR>>> Any ideas? <BR>>> As a matter of
fact I see that this is actually whitelisted! <BR>>> -- <BR>>>
<BR>>> Regards <BR>>> Brandon Friedman <BR>>> Cell:083 408
7840 <BR>>> E-mail: brandonf@bfconsult.co.za <BR>>>
www.bfconsult.co.za <BR>> <BR>> <BR>> -- <BR>> Julian Field
Teaching Systems Manager <BR>> jkf@ecs.soton.ac.uk Dept. of Electronics
& Computer Science <BR>> Tel. 023 8059 2817 University of Southampton
<BR>> Southampton SO17 1BJ <BR>> <BR><BR><BR>-- <BR><BR>Regards
<BR>Brandon Friedman <BR>Cell:083 408 7840 <BR>E-mail:
brandonf@bfconsult.co.za <BR>www.bfconsult.co.za
<BR><BR></BLOCKQUOTE></BODY></HTML>