<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:p="urn:schemas-microsoft-com:office:powerpoint" xmlns:a="urn:schemas-microsoft-com:office:access" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:s="uuid:BDC6E3F0-6DA3-11d1-A2A3-00AA00C14882" xmlns:rs="urn:schemas-microsoft-com:rowset" xmlns:z="#RowsetSchema" xmlns:b="urn:schemas-microsoft-com:office:publisher" xmlns:ss="urn:schemas-microsoft-com:office:spreadsheet" xmlns:c="urn:schemas-microsoft-com:office:component:spreadsheet" xmlns:odc="urn:schemas-microsoft-com:office:odc" xmlns:oa="urn:schemas-microsoft-com:office:activation" xmlns:html="http://www.w3.org/TR/REC-html40" xmlns:q="http://schemas.xmlsoap.org/soap/envelope/" xmlns:rtc="http://microsoft.com/officenet/conferencing" xmlns:D="DAV:" xmlns:Repl="http://schemas.microsoft.com/repl/" xmlns:mt="http://schemas.microsoft.com/sharepoint/soap/meetings/" xmlns:x2="http://schemas.microsoft.com/office/excel/2003/xml" xmlns:ppda="http://www.passport.com/NameSpace.xsd" xmlns:ois="http://schemas.microsoft.com/sharepoint/soap/ois/" xmlns:dir="http://schemas.microsoft.com/sharepoint/soap/directory/" xmlns:ds="http://www.w3.org/2000/09/xmldsig#" xmlns:dsp="http://schemas.microsoft.com/sharepoint/dsp" xmlns:udc="http://schemas.microsoft.com/data/udc" xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:sub="http://schemas.microsoft.com/sharepoint/soap/2002/1/alerts/" xmlns:ec="http://www.w3.org/2001/04/xmlenc#" xmlns:sp="http://schemas.microsoft.com/sharepoint/" xmlns:sps="http://schemas.microsoft.com/sharepoint/soap/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:udcs="http://schemas.microsoft.com/data/udc/soap" xmlns:udcxf="http://schemas.microsoft.com/data/udc/xmlfile" xmlns:udcp2p="http://schemas.microsoft.com/data/udc/parttopart" xmlns:wf="http://schemas.microsoft.com/sharepoint/soap/workflow/" xmlns:dsss="http://schemas.microsoft.com/office/2006/digsig-setup" xmlns:dssi="http://schemas.microsoft.com/office/2006/digsig" xmlns:mdssi="http://schemas.openxmlformats.org/package/2006/digital-signature" xmlns:mver="http://schemas.openxmlformats.org/markup-compatibility/2006" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns:mrels="http://schemas.openxmlformats.org/package/2006/relationships" xmlns:spwp="http://microsoft.com/sharepoint/webpartpages" xmlns:ex12t="http://schemas.microsoft.com/exchange/services/2006/types" xmlns:ex12m="http://schemas.microsoft.com/exchange/services/2006/messages" xmlns:pptsl="http://schemas.microsoft.com/sharepoint/soap/SlideLibrary/" xmlns:spsl="http://microsoft.com/webservices/SharePointPortalServer/PublishedLinksService" xmlns:Z="urn:schemas-microsoft-com:" xmlns:st="" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 12 (filtered medium)">
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.EmailStyle18
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.Section1
{page:Section1;}
-->
</style>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang=EN-US link=blue vlink=purple>
<div class=Section1>
<p class=MsoNormal><span style='color:#1F497D'>Solved.<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>When running SpamAssassin debug
from MailScanner,<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>16:34:39 Jul 21 16:34:39.138
[20343] dbg: generic: Perl 5.008005, PREFIX=/usr,
DEF_RULES_DIR=/usr/share/spamassassin, LOCAL_RULES_DIR=/etc/mail/spamassassin,
LOCAL_STATE_DIR=/var/lib<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>When running SpamAssassin debug
from command line,<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Jul 21 13:34:40.776 [23659] dbg:
generic: Perl 5.008005, PREFIX=/usr, DEF_RULES_DIR=/usr/share/spamassassin,
LOCAL_RULES_DIR=/etc/mail/spamassassin, LOCAL_STATE_DIR=/var/lib/spamassassin<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Had to modify MailScanner.conf,<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>SpamAssassin Local State Dir =
/var/lib<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>To<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>SpamAssassin Local State Dir =
/var/lib/spamassassin<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'>Did I jump too many versions for
upgrade_MailScanner_conf to handle? Or does it need special case handling since
its commented out by default?<o:p></o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<p class=MsoNormal><span style='color:#1F497D'><o:p> </o:p></span></p>
<div style='border:none;border-left:solid blue 1.5pt;padding:0in 0in 0in 4.0pt'>
<div>
<div style='border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in'>
<p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span
style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>
mailscanner-bounces@lists.mailscanner.info
[mailto:mailscanner-bounces@lists.mailscanner.info] <b>On Behalf Of </b>derek.winkler@algorithmics.com<br>
<b>Sent:</b> Wednesday, July 21, 2010 3:15 PM<br>
<b>To:</b> mailscanner@lists.mailscanner.info<br>
<b>Subject:</b> Upgrade to 4.79.11<o:p></o:p></span></p>
</div>
</div>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I just upgraded from 4.69.9 to 4.79.11, SA from 3.2.5 to SA
3.3.1.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Everything lints fine, can’t find any problems.<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>I’m getting spam that when processed by MS scores quite low,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>X-Algo-MailScanner-SpamCheck: not spam, SpamAssassin
(score=0.5,<o:p></o:p></p>
<p class=MsoNormal>
required 4.5, autolearn=disabled, RCVD_IN_BRBL 0.50)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>but when tested with SA within minutes on the same server
scores quite high,<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Content analysis details: (23.7 points, 5.0
required)<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal> pts rule
name
description<o:p></o:p></p>
<p class=MsoNormal>---- ----------------------
--------------------------------------------------<o:p></o:p></p>
<p class=MsoNormal> 0.5
RCVD_IN_BRBL RBL:
Received via a relay in BRBL<o:p></o:p></p>
<p class=MsoNormal>
[198.7.242.169 listed in b.barracudacentral.org]<o:p></o:p></p>
<p class=MsoNormal> 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay
in bl.spamcop.net<o:p></o:p></p>
<p class=MsoNormal>
[Blocked - see <http://www.spamcop.net/bl.shtml?198.7.242.169>]<o:p></o:p></p>
<p class=MsoNormal> 1.6 RCVD_IN_BRBL_LASTEXT RBL:
RCVD_IN_BRBL_LASTEXT<o:p></o:p></p>
<p class=MsoNormal>
[198.7.242.169 listed in bb.barracudacentral.org]<o:p></o:p></p>
<p class=MsoNormal> 0.7
RCVD_IN_XBL
RBL: Received via a relay in Spamhaus XBL<o:p></o:p></p>
<p class=MsoNormal>
[198.7.242.169 listed in zen.spamhaus.org]<o:p></o:p></p>
<p class=MsoNormal> 2.7
RCVD_IN_PSBL RBL:
Received via a relay in PSBL<o:p></o:p></p>
<p class=MsoNormal>
[198.7.242.169 listed in psbl.surriel.com]<o:p></o:p></p>
<p class=MsoNormal> 4.5 URIBL_AB_SURBL
Contains an URL listed in the AB SURBL blocklist<o:p></o:p></p>
<p class=MsoNormal>
[URIs: erectgardiner81b.ru]<o:p></o:p></p>
<p class=MsoNormal> 1.7
URIBL_WS_SURBL Contains an URL
listed in the WS SURBL blocklist<o:p></o:p></p>
<p class=MsoNormal>
[URIs: erectgardiner81b.ru]<o:p></o:p></p>
<p class=MsoNormal> 1.9 URIBL_JP_SURBL
Contains an URL listed in the JP SURBL blocklist<o:p></o:p></p>
<p class=MsoNormal>
[URIs: erectgardiner81b.ru]<o:p></o:p></p>
<p class=MsoNormal> 1.7
URIBL_DBL_SPAM Contains an URL
listed in the DBL blocklist<o:p></o:p></p>
<p class=MsoNormal>
[URIs: erectgardiner81b.ru]<o:p></o:p></p>
<p class=MsoNormal>-0.0 T_RP_MATCHES_RCVD
Envelope sender domain matches handover relay<o:p></o:p></p>
<p class=MsoNormal>
domain<o:p></o:p></p>
<p class=MsoNormal> 0.9 SPF_HELO_SOFTFAIL
SPF: HELO does not match SPF record (softfail)<o:p></o:p></p>
<p class=MsoNormal> 0.6
URIBL_SBL
Contains an URL listed in the SBL blocklist<o:p></o:p></p>
<p class=MsoNormal>
[URIs: erectgardiner81b.ru]<o:p></o:p></p>
<p class=MsoNormal> 0.0 HTML_IMAGE_ONLY_32 BODY:
HTML: images with 2800-3200 bytes of words<o:p></o:p></p>
<p class=MsoNormal> 0.6 HTML_IMAGE_RATIO_04 BODY: HTML
has a low ratio of text to image area<o:p></o:p></p>
<p class=MsoNormal> 0.0
HTML_MESSAGE BODY:
HTML included in message<o:p></o:p></p>
<p class=MsoNormal> 1.7
RAZOR2_CHECK Listed
in Razor2 (http://razor.sf.net/)<o:p></o:p></p>
<p class=MsoNormal> 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8
confidence level<o:p></o:p></p>
<p class=MsoNormal>
above 50%<o:p></o:p></p>
<p class=MsoNormal>
[cf: 100]<o:p></o:p></p>
<p class=MsoNormal> 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence
level above 50%<o:p></o:p></p>
<p class=MsoNormal>
[cf: 100]<o:p></o:p></p>
<p class=MsoNormal> 0.4
RDNS_DYNAMIC
Delivered to internal network by host with<o:p></o:p></p>
<p class=MsoNormal>
dynamic-looking rDNS<o:p></o:p></p>
<p class=MsoNormal> 0.0
T_SURBL_MULTI2 T_SURBL_MULTI2<o:p></o:p></p>
<p class=MsoNormal> 0.0 T_SURBL_MULTI1
T_SURBL_MULTI1<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Any ideas why?<o:p></o:p></p>
<p class=MsoNormal><o:p> </o:p></p>
<p class=MsoNormal>Using Sendmail on RHEL4.<span style='color:#1F497D'><o:p></o:p></span></p>
</div>
</div>
</body>
</html>