<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<TITLE>Message</TITLE>
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2>Looks like Bayes isn't configured
properly...</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2>This FAQ might help:</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2> <A
href="http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/102.html">http://www.sng.ecs.soton.ac.uk/mailscanner/serve/cache/102.html</A></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2>Cheers,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004><FONT face=Arial
color=#0000ff size=2>Phil</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=872572015-27052004></SPAN><FONT
size=2>----<BR>Phil Randal<BR>Network Engineer<BR>Herefordshire
Council<BR>Hereford, UK </FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> MailScanner mailing list
[mailto:MAILSCANNER@JISCMAIL.AC.UK] <B>On Behalf Of </B>Rob<BR><B>Sent:</B> 27
May 2004 16:06<BR><B>To:</B> MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Re:
SPam getting through....<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT face=Arial size=2>I get this???</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>[root@mx3 spamassassin]# spamassassin -D --lint
-p /etc/MailScanner/spam.assassin.prefs.conf<BR>debug: Score set 0
chosen.<BR>debug: running in taint mode? yes<BR>debug: Running in taint mode,
removing unsafe env vars, and resetting PATH<BR>debug: PATH included
'/usr/local/bin', keeping.<BR>debug: PATH included '/bin', keeping.<BR>debug:
PATH included '/usr/bin', keeping.<BR>debug: PATH included '/usr/X11R6/bin',
keeping.<BR>debug: PATH included '/home/rob/bin', which doesn't exist,
dropping.<BR>debug: Final PATH set to:
/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin<BR>debug: ignore: using a test
message to lint rules<BR>debug: using "/usr/share/spamassassin" for default
rules dir<BR>debug: using "/etc/mail/spamassassin" for site rules
dir<BR>debug: using "/root/.spamassassin" for user state dir<BR>debug: using
"/etc/MailScanner/spam.assassin.prefs.conf" for user prefs file<BR>debug:
using "/root/.spamassassin" for user state dir<BR>debug: bayes: 5168 tie-ing
to DB file R/O /root/.spamassassin/bayes_toks<BR>Cannot open bayes databases
/root/.spamassassin/bayes_* R/O: tie failed: Inappropriate ioctl for
device<BR>debug: Score set 1 chosen.<BR>debug: Initialising learner<BR>debug:
using "/root/.spamassassin" for user state dir<BR>debug: bayes: 5168 tie-ing
to DB file R/O /root/.spamassassin/bayes_toks<BR>Cannot open bayes databases
/root/.spamassassin/bayes_* R/O: tie failed: Inappropriate ioctl for
device<BR>debug: is Net::DNS::Resolver available? yes<BR>debug: trying (3)
yahoo.de...<BR>debug: looking up MX for 'yahoo.de'<BR>debug: MX for 'yahoo.de'
exists? 1<BR>debug: MX lookup of yahoo.de succeeded => Dns available (set
dns_available to hardcode)<BR>debug: is DNS available? 1<BR>debug: all '*From'
addrs: <A
href="mailto:ignore@compiling.spamassassin.taint.org">ignore@compiling.spamassassin.taint.org</A><BR>debug:
running header regexp tests; score so far=0<BR>debug: running body-text
per-line regexp tests; score so far=1.27<BR>debug: Razor2 is not
available<BR>debug: running raw-body-text per-line regexp tests; score so
far=1.27<BR>debug: running uri tests; score so far=1.27<BR>debug: uri tests:
Done uriRE<BR>debug: running full-text regexp tests; score so
far=1.27<BR>debug: Razor2 is not available<BR>debug: Current PATH is:
/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin<BR>debug: Pyzor is not available:
pyzor not found<BR>debug: DCCifd is not available: no r/w dccifd socket
found.<BR>debug: DCC is not available: no executable dccproc found.<BR>debug:
all '*To' addrs: <BR>debug: RBL: success for 1 of 1 queries<BR>debug: running
meta tests; score so far=1.27<BR>debug: is spam? score=1.27 required=5
tests=DATE_MISSING,NO_REAL_NAME</FONT></DIV>
<DIV><BR>Rob....</DIV>
<DIV> </DIV>
<DIV><BR> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=prandal@HEREFORDSHIRE.GOV.UK
href="mailto:prandal@HEREFORDSHIRE.GOV.UK">Randal, Phil</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, May 27, 2004 10:53
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: SPam getting
through....</DIV>
<DIV><BR></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
color=#0000ff size=2><FONT color=#000000> /etc/init.d/MailScanner
reload</FONT></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>will do it.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>Do a </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2> spamassassin -D --lint -p
/etc/MailScanner/spam.assassin.prefs.conf</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>first to make sure the rules lint OK.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>Cheers,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>Phil</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004></SPAN><FONT
size=2>----<BR>Phil Randal<BR>Network Engineer<BR>Herefordshire
Council<BR>Hereford, UK </FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> MailScanner mailing list
[mailto:MAILSCANNER@JISCMAIL.AC.UK] <B>On Behalf Of
</B>Rob<BR><B>Sent:</B> 27 May 2004 15:41<BR><B>To:</B>
MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Re: SPam getting
through....<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT face=Arial size=2>So I downloaded and added to
/etc/mail/spamassisain a few custom cf files I got from a site mentioned
here... do I have to do anything to make SA see them? Just restart MS
/etc/init.d/Mailscanner restart ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks for everyone's
help!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT><BR>Rob....</DIV>
<DIV> </DIV>
<DIV><BR> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=rob@THEHOSTMASTERS.COM
href="mailto:rob@THEHOSTMASTERS.COM">Rob</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, May 27, 2004 9:02
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: SPam getting
through....</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial size=2>It has 100's of the token.expire files. I
can delete these right? I mean up to a recent date? But funny enough
this morning I had about 300 of them that filled up my root partition
and all were dated May 25th & 26th</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>And I am running 2.63</FONT></DIV>
<DIV><BR>Rob....</DIV>
<DIV> </DIV>
<DIV><BR> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=jburzenski@AMERICANHM.COM
href="mailto:jburzenski@AMERICANHM.COM">Jason Burzenski</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, May 25, 2004 4:01
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: SPam getting
through....</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=210560320-25052004><FONT face=Arial color=#0000ff
size=2>I had a similar problem a few weeks back. It turns out it
was due to the large size of my bayes database (~150MB). The fix
for me was to upgrade to SA 2.63 and recreate the bayes set.
</FONT></SPAN></DIV>
<DIV><SPAN class=210560320-25052004><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=210560320-25052004><FONT face=Arial color=#0000ff
size=2>What does your /root/.spamassassin directory look like?
</FONT></SPAN></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> Rob
[mailto:rob@THEHOSTMASTERS.COM] <BR><B>Sent:</B> Tuesday, May 25,
2004 11:56 AM<BR><B>To:</B>
MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> SPam getting
through....<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>I seem to be getting allot of spam in
the last 2 weeks, here is an example of headers from a popular
one... it seems like it was not even scanned for spam or that
mailscanner did not see it as spam at all??</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am using SA 2.63 and MS
4.28.6-1</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Any help appreciated....</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Return-Path: <<A
href="mailto:unoalia@clickforadate.com">unoalia@clickforadate.com</A>><BR>Received:
from clickforadate.com ([222.65.41.83])<BR> by
localhost.localdomain (8.12.11/8.12.5) with SMTP id
i4P8klDQ013184;<BR> Tue, 25 May 2004 04:46:59
-0400<BR>Message-ID: <<A
href="mailto:883e01c44248$5c25dbc0$38c986cf@unoalia">883e01c44248$5c25dbc0$38c986cf@unoalia</A>><BR>From:
"garrett lovato" <<A
href="mailto:unoalia@clickforadate.com">unoalia@clickforadate.com</A>><BR>To:
"adrian hurl" <<A
href="mailto:candi@stupidguytalk.org">candi@stupidguytalk.org</A>><BR>Cc:
"quinn alston" <<A
href="mailto:rob@stupidguytalk.org">rob@stupidguytalk.org</A>>,<BR>
"victor jacoby" <<A
href="mailto:adult-jokes@stupidguytalk.org">adult-jokes@stupidguytalk.org</A>><BR>Subject:
Ppbykdbg your prescripti0n source<BR>Date: Tue, 25 May 2004 01:06:42
-1000<BR>MIME-Version: 1.0<BR>Content-Type:
text/plain;<BR> charset="us-ascii"<BR>Content-Transfer-Encoding:
7bit<BR>X-MSMail-Priority: Normal<BR>X-Mailer: Microsoft Outlook
Express 5.00.2919.6700<BR>X-MimeOLE: Produced By Microsoft MimeOLE
V5.00.2919.6700<BR>X-MailScanner-Information: Please contact <A
href="mailto:info@thehostmasters.com">info@thehostmasters.com</A>
for more info<BR>X-MailScanner: Found to be
clean<BR>X-MailScanner-From: <A
href="mailto:unoalia@clickforadate.com">unoalia@clickforadate.com</A><BR>X-UIDL:
#,A"!RS)#!53("!>S+"!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>hexdigtoint nrl-mag
nesheiwa </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV><FONT face=Arial
size=2>
<DIV><BR>We are your your convenient, safe and private online source
for FDA<BR>a`p`p`roved pharmacy prescriptions. <BR></DIV>
<DIV> </DIV>
<DIV>---------------------------------------------------------------------------</DIV>
<DIV>the rest was cut, no need to see crude...</DIV></FONT><FONT
face=Arial size=2>
<DIV> </DIV>
<DIV><BR></FONT> </DIV>-------------------------- MailScanner
list ----------------------<BR>To leave, send leave mailscanner to
<A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave
mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave
mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave
mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave mailscanner
to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave mailscanner to
<A href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A> and
the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE></BODY></HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>