<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-15">
<META content="MSHTML 6.00.2900.3562" name=GENERATOR></HEAD>
<BODY style="MARGIN: 4px 4px 1px; FONT: 10pt Segoe UI">Was really hoping to get an answer to the question below!<BR><BR>>>> "Gary Faith" <gafaith@asdm.net> 6/29/2009 9:25 AM >>><BR>
<DIV>When Spamassassin returns it's scores, where are you pulling the data from? Is it in the header from X-Spam-Status: returned from Spamassassin</DIV>
<DIV> </DIV>
<DIV>X-Spam-Status: No, score=-0.5 required=5.0 tests=BAYES_00 shortcircuit=no autolearn=unavailable version=3.2.5<BR></DIV>
<DIV>or in the body somewhere?</DIV>
<DIV><BR>Gary</DIV>
<DIV><BR>>>> Julian Field <MailScanner@ecs.soton.ac.uk> 6/29/2009 4:46 AM >>><BR><BR><BR>On 26/06/2009 19:18, Gary Faith wrote:<BR>> After turning it on, I do get a Spam Report now.<BR>As expected.<BR>> Spam: Y Action(s): store, deliver, header, "X-Spam-Status:, Yes" <BR>> High Scoring Spam: N SpamAssassin Spam: N Listed in RBL: Y SBL+XBL <BR>> Spam Whitelisted: N Spam Blacklisted: N SpamAssassin Autolearn: N <BR>> SpamAssassin Score:0.92 Spam Report:<BR>> Score Matching Rule Description<BR>> -0.50 BAYES_00 Bayesian spam probability is 0 to 1%<BR>> 1.42 SARE_ADULT2 Contains adult material<BR>><BR>> Steve Freegard, just posted an message that "Always Include <BR>> SpamAssassin Report" = on would cause it to run even for whitelisted <BR>> and blacklisted recipients. I agree it would be inefficient to have <BR>> SA run on whitelisted & blacklisted recipients.<BR>Absolutely correct. You don't want the inefficiency of always generating <BR>the report, which involves always running SA, so don't be surprised when <BR>you don't get the report.<BR>> Could there still be a problem in the patched Message.pm where it is <BR>> returning some of the spam report but not all?<BR>Don't think so.<BR>> Gary<BR>><BR>> >>> "Gary Faith" <gafaith@asdm.net> 6/26/2009 1:18 PM >>><BR>> Julian,<BR>> Always Include SpamAssassin Report was set to off. I just turned it <BR>> on and will see if that changes things. I wasn't sure if that setting <BR>> would be a problem because it seems that there was a report even if <BR>> the message was clean like the one below. It just seems like the <BR>> Spam Report is included with every message except when the isspam =1 & <BR>> isrblspam =1 and the other two flags = 0.<BR>> Spam: N Action(s): store, deliver, header, "X-Spam-Status:, No" High <BR>> Scoring Spam: N SpamAssassin Spam: N Listed in RBL: N Spam <BR>> Whitelisted: N Spam Blacklisted: N SpamAssassin Autolearn: N <BR>> SpamAssassin Score:3.28 Spam Report:<BR>> Score Matching Rule Description<BR>> cached not <BR>><BR>> score=3.281 <BR>> 3.5 required <BR>> -0.50 BAYES_00 Bayesian spam probability is 0 to 1%<BR>> 2.17 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/)<BR>> 0.73 HTML_COMMENT_SHORT HTML comment is very short<BR>> 0.88 HTML_FONT_FACE_BAD HTML font face is not a word<BR>> 0.00 HTML_MESSAGE HTML included in message<BR>> -0.00 SPF_PASS SPF: sender matches SPF record<BR>><BR>><BR>> Gary<BR>><BR>> >>> Julian Field <MailScanner@ecs.soton.ac.uk> 6/26/2009 11:58 AM >>><BR>> Does your MailScanner.conf have "Always Include SpamAssassin Report"<BR>> switched on or off?<BR>><BR>> On 26/06/2009 16:31, Gary Faith wrote:<BR>> > Julian,<BR>> > Better. The spam report field is populated now but I don't think it<BR>> > is completely fixed. See below:<BR>> > Spam: Y Action(s): store, deliver, header, "X-Spam-Status:, Yes"<BR>> > High Scoring Spam: N<BR>> > SpamAssassin Spam: N<BR>> > Listed in RBL: Y<BR>> > Spam Whitelisted: N<BR>> > Spam Blacklisted: N<BR>> > SpamAssassin Autolearn: N<BR>> > SpamAssassin Score: 3.09<BR>> > Spam Report: spam, SBL+XBL<BR>> > I confirmed that the database shows spam, SBL+XBL only. Problem that<BR>> > I see is that there is nothing in the spamreport field to explain the<BR>> > 3.09 SpamAssassin score.<BR>> > Gary<BR>> ><BR>> ><BR>> > >>> Julian Field <MailScanner@ecs.soton.ac.uk> 6/26/2009 4:41 AM >>><BR>> > Aha, well done for tracking down that case, I've been looking for that<BR>> > bug for ages.<BR>> > Due to your diagnostics I now have what should fix it.<BR>> ><BR>> > Please try the attached patch to<BR>> > /usr/lib/MailScanner/MailScanner/Message.pm and then restart <BR>> MailScanner.<BR>> ><BR>> > Thanks for helping!<BR>> > Jules.<BR>> ><BR>> > On 26/06/2009 05:08, Gary Faith wrote:<BR>> > > Follow Up! After doing more digging, I believe that I have found the<BR>> > > common thread when the problem occurs. The spamreport field only<BR>> > > seems to be blank when isspam & isrblspam flags are set. If issaspam<BR>> > > and/or ishighspam are set then spamreport has data.<BR>> > > isspam tinyint(1) =1<BR>> > > ishighspam tinyint(1) =0<BR>> > > issaspam tinyint(1) =0<BR>> > > isrblspam tinyint(1) =1<BR>> > > spamwhitelisted tinyint(1) =0<BR>> > > spamblacklisted tinyint(1) =0<BR>> > > sascore decimal(7,2) some value<BR>> > > spamreport text {Empty}<BR>> > > I hope this helps shine light on my problem. Any ideas why this is<BR>> > > happening?<BR>> > > Thanks,<BR>> > ><BR>> > > Gary<BR>> > ><BR>> > > >>> "Gary Faith" <gafaith@asdm.net> 6/25/2009 11:14 PM >>><BR>> > > Running MailScanner 4.75.11 on SLES 10 SP2 X86_64. When viewing the<BR>> > > information via MailWatch, I see the following on the details page:<BR>> > > SpamAssassin Spam: Y Action(s): store, deliver, header,<BR>> > > "X-Spam-Status:, Yes"<BR>> > > High Scoring Spam: N<BR>> > > SpamAssassin Spam: N<BR>> > > Listed in RBL: N<BR>> > > Spam Whitelisted: N<BR>> > > Spam Blacklisted: N<BR>> > > SpamAssassin Autolearn: N<BR>> > > SpamAssassin Score:1.66<BR>> > > The problem is Spam Report is blank. This happens on a few seemingly<BR>> > > random messages while most have something in the spamreport field. I<BR>> > > have verified this in the database that it definitely null. Any<BR>> > > reason why all the data except the spam report would be logged to<BR>> > > mysql? Could this be a spamassassin timeout problem?<BR>> > > Thanks,<BR>> > ><BR>> > > Gary Faith<BR>> ><BR>> > Jules<BR>> ><BR>> > --<BR>> > Julian Field MEng CITP CEng<BR>> > www.MailScanner.info<BR>> > Buy the MailScanner book at www.MailScanner.info/store<BR>> ><BR>> > Need help customising MailScanner?<BR>> > Contact me!<BR>> > Need help fixing or optimising your systems?<BR>> > Contact me!<BR>> > Need help getting you started solving new requirements from your boss?<BR>> > Contact me!<BR>> ><BR>> > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<BR>> > Follow me at twitter.com/JulesFM and twitter.com/MailScanner<BR>> ><BR>> ><BR>> > --<BR>> > This message has been scanned for viruses and<BR>> > dangerous content by MailScanner, and is<BR>> > believed to be clean.<BR>> ><BR>><BR>> Jules<BR>><BR>> -- <BR>> Julian Field MEng CITP CEng<BR>> www.MailScanner.info<BR>> Buy the MailScanner book at www.MailScanner.info/store<BR>><BR>> Need help customising MailScanner?<BR>> Contact me!<BR>> Need help fixing or optimising your systems?<BR>> Contact me!<BR>> Need help getting you started solving new requirements from your boss?<BR>> Contact me!<BR>><BR>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<BR>> Follow me at twitter.com/JulesFM and twitter.com/MailScanner<BR>><BR>><BR>> -- <BR>> This message has been scanned for viruses and<BR>> dangerous content by MailScanner, and is<BR>> believed to be clean.<BR>><BR>> -- <BR>> MailScanner mailing list<BR>> mailscanner@lists.mailscanner.info<BR>> <A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR>><BR>> Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR>><BR>> Support MailScanner development - buy the book off the website!<BR><BR>Jules<BR><BR>-- <BR>Julian Field MEng CITP CEng<BR>www.MailScanner.info<BR>Buy the MailScanner book at www.MailScanner.info/store<BR><BR>Need help customising MailScanner?<BR>Contact me!<BR>Need help fixing or optimising your systems?<BR>Contact me!<BR>Need help getting you started solving new requirements from your boss?<BR>Contact me!<BR><BR>PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654<BR>Follow me at twitter.com/JulesFM and twitter.com/MailScanner<BR><BR><BR>-- <BR>This message has been scanned for viruses and<BR>dangerous content by MailScanner, and is<BR>believed to be clean.<BR><BR>-- <BR>MailScanner mailing list<BR>mailscanner@lists.mailscanner.info<BR><A href="http://lists.mailscanner.info/mailman/listinfo/mailscanner">http://lists.mailscanner.info/mailman/listinfo/mailscanner</A><BR><BR>Before posting, read <A href="http://wiki.mailscanner.info/posting">http://wiki.mailscanner.info/posting</A><BR><BR>Support MailScanner development - buy the book off the website! <BR></DIV></BODY></HTML>