<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">No.<div class=""><br class=""></div><div class="">spamassassin -p /etc/MailScanner/spam.assassin.prefs.conf -D &lt; msg<br class=""><div apple-content-edited="true" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class="Apple-interchange-newline">-</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">Jerry Benton</div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><a href="http://www.mailborder.com" class="">www.mailborder.com</a></div><div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""><div><blockquote type="cite" class=""><div class="">On Mar 2, 2015, at 10:45 PM, Jeremy McSpadden &lt;<a href="mailto:jeremy@fluxlabs.net" class="">jeremy@fluxlabs.net</a>&gt; wrote:</div><br class="Apple-interchange-newline"><div class="">

<meta http-equiv="Content-Type" content="text/html; charset=us-ascii" class="">

<div dir="auto" class="">
<div class="">Not sure what you mean. MS is calling spamassassin ... Shouldn't it be the same scan ? Why would NOT including my prefs.conf file change ?&nbsp;<br class="">
<br class="">
<span style="background-color: rgba(255, 255, 255, 0);" class="">--<br class="">
Jeremy McSpadden<br class="">
Flux Labs |&nbsp;<a href="http://www.fluxlabs.net/" class="">http://www.fluxlabs.net</a>&nbsp;| Endless Solutions<br class="">
Office :&nbsp;<a href="tel:850-250-5590;501" class="">850-250-5590x501</a>&nbsp;| Cell :&nbsp;<a href="tel:850-890-2543" class="">850-890-2543</a>&nbsp;| Fax :&nbsp;<a href="tel:850-254-2955" class="">850-254-2955</a></span></div>
<div class=""><br class="">
On Feb 27, 2015, at 1:46 AM, Jerry Benton &lt;<a href="mailto:jerry.benton@mailborder.com" class="">jerry.benton@mailborder.com</a>&gt; wrote:<br class="">
<br class="">
</div>
<blockquote type="cite" class="">
<div class="">You need to include your /etc/MailScanner/ spam.assassin.prefs.conf in your command to get the same results.&nbsp;<br class="">
<div apple-content-edited="true" class="">
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br class="Apple-interchange-newline">
-</div>
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
Jerry Benton</div>
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<a href="http://www.mailborder.com/" class="">www.mailborder.com</a></div>
<div style="font-family: Helvetica; font-size: 12px; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<br class="">
</div>
<br class="Apple-interchange-newline">
</div>
<br class="">
<div class="">
<blockquote type="cite" class="">
<div class="">On Feb 26, 2015, at 9:12 PM, Jeremy McSpadden &lt;<a href="mailto:jeremy@fluxlabs.net" class="">jeremy@fluxlabs.net</a>&gt; wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
What would cause an cli scan (spamassassin -D &lt; msg) to have different results than mailscanner scan ?
<div class=""><br class="">
</div>
<div class="">via cli</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">Content analysis details: &nbsp; (26.1 points, 5.0 required)</div>
<div class=""><br class="">
</div>
<div class="">&nbsp;pts rule name &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;description</div>
<div class="">---- ---------------------- --------------------------------------------------</div>
<div class="">&nbsp;3.3 RCVD_IN_SBL_CSS &nbsp; &nbsp; &nbsp; &nbsp;RBL: Received via a relay in Spamhaus SBL-CSS</div>
<div class="">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [46.105.49.218 listed in <a href="http://zen.spamhaus.org/" class="">
zen.spamhaus.org</a>]</div>
<div class="">&nbsp;5.0 URIBL_BLACK &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Contains an URL listed in the URIBL blacklist</div>
<div class="">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [URIs: <a href="http://karefon.eu/" class="">
karefon.eu</a>]</div>
<div class="">&nbsp;5.0 URIBL_DBL_SPAM &nbsp; &nbsp; &nbsp; &nbsp; Contains a spam URL listed in the DBL blocklist</div>
<div class="">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [URIs: <a href="http://karefon.eu/" class="">
karefon.eu</a>]</div>
<div class="">-2.0 SPF_HELO_PASS &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;SPF: HELO matches SPF record</div>
<div class="">-0.0 SPF_PASS &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; SPF: sender matches SPF record</div>
<div class="">&nbsp;0.0 HTML_MESSAGE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; BODY: HTML included in message</div>
<div class="">&nbsp;1.5 BAYES_50 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; BODY: Bayes spam probability is 40 to 60%</div>
<div class="">&nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; [score: 0.4995]</div>
<div class="">&nbsp;0.5 KAM_EU &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; RAW: Prevalent use of .eu in spam/malware</div>
<div class="">&nbsp;5.0 KAM_GRABBAG2 &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; Grabbag of Spams hitting EU domains and other indicators</div>
<div class="">&nbsp;0.8 RDNS_NONE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;Delivered to internal network by a host with no rDNS</div>
<div class="">&nbsp;2.0 HTML_OFF_PAGE &nbsp; &nbsp; &nbsp; &nbsp; &nbsp;HTML element rendered well off the displayed page</div>
<div class="">&nbsp;0.0 UNPARSEABLE_RELAY &nbsp; &nbsp; &nbsp;Informational: message has unparseable relay lines</div>
<div class="">&nbsp;5.0 KAM_VERY_BLACK_DBL &nbsp; &nbsp; Email that hits both URIBL Black and Spamhaus DBL</div>
<div class="">&nbsp;0.0 T_REMOTE_IMAGE &nbsp; &nbsp; &nbsp; &nbsp; Message contains an external image</div>
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">via ms</div>
<div class="">
<div class="grid_10 alpha drow">
<div class="grid_1">1.50</div>
<div class="omega grid_4">BAYES_50</div>
<div class="grid_5 omega">Bayes spam probability is 40 to 60%</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">0.00</div>
<div class="omega grid_4">HTML_MESSAGE</div>
<div class="grid_5 omega">HTML included in message</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">2.00</div>
<div class="omega grid_4">HTML_OFF_PAGE</div>
<div class="grid_5 omega">HTML element rendered well off the displayed page</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">0.50</div>
<div class="omega grid_4">KAM_EU</div>
<div class="grid_5 omega">Prevalent use of .eu in spam/malware</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">0.79</div>
<div class="omega grid_4">RDNS_NONE</div>
<div class="grid_5 omega">Delivered to internal network by a host with no rDNS</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">-2.00</div>
<div class="omega grid_4">SPF_HELO_PASS</div>
<div class="grid_5 omega">SPF: HELO matches SPF record</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">-0.00</div>
<div class="omega grid_4">SPF_PASS</div>
<div class="grid_5 omega">SPF: sender matches SPF record</div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">0.01</div>
<div class="omega grid_4">T_REMOTE_IMAGE</div>
<div class="grid_5 omega"></div>
</div>
<div class="grid_10 alpha drow">
<div class="grid_1">0.00</div>
<div class="omega grid_4">UNPARSEABLE_RELAY</div>
<div class="grid_5 omega">Informational: message has unparseable relay lines</div>
</div>
</div>
<div class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
<div style="font-variant: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-text-stroke-width: 0px;" class="">
<span dir="ltr" class=""><font size="3" class=""><span style="font-size: 12pt; background-color: white;" class=""><font class=""><font size="1" face="Arial" class=""><span style="font-size: 13px;" class=""><font class="">--</font><font class=""><br class="">
Jeremy McSpadden</font><font class=""><br class="">
</font><font class="">Flux Labs, Inc</font><font class="">&nbsp;|&nbsp;</font></span></font></font></span></font><a href="http://www.fluxlabs.net/" class="">http://www.fluxlabs.net</a><font size="3" class=""><span style="font-size: 12pt; background-color: white;" class=""><font class=""><font size="1" face="Arial" class=""><span style="font-size: 13px;" class=""><font class="">&nbsp;|&nbsp;Endless
 Solutions</font><font class=""><br class="">
</font><font class=""><b class="">Office</b></font><font class="">&nbsp;: 850-250-5590 x 501</font><font class="">&nbsp;|&nbsp;</font><font class=""><b class="">Cell</b></font><font class="">&nbsp;: 850-890-2543 |&nbsp;</font><font class=""><b class="">Fax</b></font><font class="">&nbsp;:
 850-254-2955</font></span></font></font></span></font></span></div>
</div>
</div>
</div>
</div>
</div>
</div>
<br class="">
</div>
</div>
-- <br class="">
MailScanner mailing list<br class="">
<a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" class="">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br class="">
<br class="">
Before posting, read <a href="http://wiki.mailscanner.info/posting" class="">http://wiki.mailscanner.info/posting</a><br class="">
<br class="">
Support MailScanner development - buy the book off the website! <br class="">
</div>
</blockquote>
</div>
<br class="">
</div>
</blockquote>
<blockquote type="cite" class="">
<div class=""><span class="">-- </span><br class="">
<span class="">MailScanner mailing list</span><br class="">
<span class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a></span><br class="">
<span class=""><a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" class="">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a></span><br class="">
<span class=""></span><br class="">
<span class="">Before posting, read <a href="http://wiki.mailscanner.info/posting" class="">http://wiki.mailscanner.info/posting</a></span><br class="">
<span class=""></span><br class="">
<span class="">Support MailScanner development - buy the book off the website! </span><br class="">
</div>
</blockquote>
</div>

-- <br class="">MailScanner mailing list<br class=""><a href="mailto:mailscanner@lists.mailscanner.info" class="">mailscanner@lists.mailscanner.info</a><br class="">http://lists.mailscanner.info/mailman/listinfo/mailscanner<br class=""><br class="">Before posting, read http://wiki.mailscanner.info/posting<br class=""><br class="">Support MailScanner development - buy the book off the website! <br class=""></div></blockquote></div><br class=""></div></body></html>