<p>Hi Martin,</p>
<p>Thanks for your reply. No that wasn't me, I only ran into this problem yesterday, trying to implement some more spam blocking. </p>
<p>I understand that MailScanner does not put any SpamAssassin headers - I was actually looking at the SA log when I ran SA manually on the source of the spam message. </p>
<p>Both snips of log below belong to the same log produced by SA.</p>
<p>I understand that SA produces a Pseudo Header for X-Relay-Countries, which, even if you ran SA without MailScanner will still not be displayed. What I was loooking for though is the indication that it picked up the country of origin based on the rules that I created with SA.
</p>
<p>Thanks for your help,</p>
<p>dim</p>
<p>Date: Thu, 08 Feb 2007 09:38:04 +0000<br>From: "Martin.Hepworth" <<a href="mailto:martinh@solidstatelogic.com">martinh@solidstatelogic.com</a>><br>Subject: RE: {Disarmed} X-Relay-Countries<br>To: "MailScanner discussion" <
<a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a>><br>Message-ID: <<a href="mailto:c85ec94af9280b46a22f1f4087c57793@solidstatelogic.com">c85ec94af9280b46a22f1f4087c57793@solidstatelogic.com
</a>><br>Content-Type: text/plain; charset="us-ascii"</p>
<p>Dimitri</p>
<p>Some on the IRC channel was having a similar problem a couple of days<br>ago - you??</p>
<p>MailScanner will NOT insert SA headers into the email</p>
<p>It will put the info in the MailScanner-SpamScore header if you tell to<br>be verbose.</p>
<p>Given running SA on its own doesn't insert info either I suggest you<br>lint check the SA config and fix any issues first..</p>
<p>--<br>Martin Hepworth<br>Snr Systems Administrator<br>Solid State Logic<br>Tel: +44 (0)1865 842300</p>
<p>> -----Original Message-----<br>> From: <a href="mailto:mailscanner-bounces@lists.mailscanner.info">mailscanner-bounces@lists.mailscanner.info</a> [mailto:<a href="mailto:mailscanner-">mailscanner-</a><br>> <a href="mailto:bounces@lists.mailscanner.info">
bounces@lists.mailscanner.info</a>] On Behalf Of Dimitri Volski<br>> Sent: 08 February 2007 09:10<br>> To: <a href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>> Subject: {Disarmed} X-Relay-Countries
<br>><br>> Hi All,<br>><br>> I am having troubles getting the SpamAssassin scores based on Relay<br>> Countries.<br>><br>> A snip of the log:<br>><br>> debug: received-header: relay MailScanner warning: numerical links are
<br>> often malicious: <a href="http://84.56.164.42">84.56.164.42</a> <<a href="http://84.56.164.42/">http://84.56.164.42</a>> trusted? no<br>internal?<br>> no<br>> debug: metadata: X-Spam-Relays-Trusted:<br>
> debug: metadata: X-Spam-Relays-Untrusted: [ ip=MailScanner warning:<br>> numerical links are often malicious: <a href="http://84.56.164.42">84.56.164.42</a><br><<a href="http://84.56.164.42/">http://84.56.164.42
</a>><br>> rdns=<a href="http://dslb-084-056-164-042.pools.arcor-ip.net">dslb-084-056-164-042.pools.arcor-ip.net</a> helo=<a href="http://callaria.com">callaria.com</a><br>> by=<a href="http://mx.google.com">mx.google.com
</a> ident= envfrom= intl=0<br>> id=p4si1743305qba.2007.02.05.02.02.53 auth= ]<br>> debug: plugin:<br>Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x931059c)<br>> implements 'extract_metadata'<br>> debug: metadata: X-Relay-Countries: DE
<br>> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x99dd4c8)<br>> implements 'parsed_metadata'<br>><br>> Here I can see that the country is detected as Denmark, but when I<br>insert<br>>
<br>> header RELAY_DE X-Relay-Countries =~/\bDE\b/<br>> describe RELAY_DE Relayed through Germany<br>> score RELAY_DE 1.0<br>><br>> into /etc/MailScanner/spam.assassin.prefs.conf , I cannot see it in<br>
> theSpamAssassin report (if run manually on source of the message<br>above) or<br>> the MailScanner report.<br>><br>> If run manually, SpamAssassin gives this header in the end:<br>><br>> X-Spam-Flag: NO
<br>> X-Spam-Checker-Version: SpamAssassin 3.0.5 (2005-11-28) on exmail<br>> X-Spam-Level: ****<br>> X-Spam-Status: No, score=4.4 required= 5.0<br>> tests=FORGED_RCVD_HELO,RCVD_BY_IP,<br>> RCVD_IN_NJABL_DUL,RCVD_IN_SORBS_DUL,RCVD_IN_XBL autolearn=no
<br>> version=3.0.5<br>><br>> In which I cannot see the RELAY_DE<br>><br>> Please help ! :)<br>><br>> Cheers,<br>> dim<br>></p>