<html><body><div style="font-family: Helvetica; font-size: 12pt; color: #000000"><div>Hi guys,<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>After digging much much more deeper..... the problem was caused by a DNS timeout<br></div><div><br data-mce-bogus="1"></div><div>The weird thing was that running spamassassin with no config file I got a SPF_PASS but with in the configuration file "envelope_sender_header" set to something I got a dns timeout<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Solution was to install a local dns caching server on the mailserver.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>I would suggest that in the instructions how to install MailScanner installing a <!--StartFragment--> local dns caching server <!--EndFragment-->is included<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Thanks</div><div><br></div><div data-marker="__SIG_PRE__"><div>Met vriendelijke groet, Best regards,</div><div><br></div><div><br style="font-family:'helvetica'"><span style="font-family:'helvetica'">Thom van der Boon</span><br style="font-family:'helvetica'"><span style="font-family:'helvetica'">E-Mail: thom@vdb.nl</span></div><div><br data-mce-bogus="1"></div></div><div><br></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>Van: </b>"Shawn Iverson" <shawniverson@summitgrid.com><br><b>Aan: </b>"Thom van der Boon" <thom@vdb.nl>, "MailScanner Discussion" <mailscanner@lists.mailscanner.info><br><b>Verzonden: </b>Vrijdag 24 juli 2020 13:33:33<br><b>Onderwerp: </b>Re: mails with valid SPF sender don't get marked SPF_PASS<br></div><div><br></div><div data-marker="__QUOTED_TEXT__"><p><tt>You need to merge those two into just spamassassin.conf and
ditch spam.assassin.prefs.conf.</tt><br>
</p>
<div class="moz-cite-prefix">On 7/24/20 7:32 AM, Thom van der Boon
wrote:<br>
</div>
<blockquote>
<div style="font-family:'helvetica';font-size:12pt;color:#000000">
<div>MailScanner 5.3.3<br>
</div>
<div><br>
</div>
<div>root@mail:/etc/MailScanner# ls -l<br>
total 888<br>
(...)<br>
</div>
<div>-rw-r--r-- 1 root root 11404 Apr 30 2019
spamassassin.conf<br>
-rw-r--r-- 1 root root 1870 Jul 24 08:48
spam.assassin.prefs.conf<br>
</div>
<div>(...)<br>
</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>Met vriendelijke groet, Best regards,</div>
<div><br>
</div>
<div><br style="font-family:'helvetica'">
<span style="font-family:'helvetica'">Thom van der Boon</span><br style="font-family:'helvetica'">
<span style="font-family:'helvetica'">E-Mail: <a href="mailto:thom@vdb.nl" target="_blank" rel="nofollow noopener noreferrer">thom@vdb.nl</a></span><br data-mce-bogus="1"></div>
<div><br>
</div>
<div><br>
</div>
</div>
<div><br>
</div>
<hr id="zwchr">
<div><b>Van: </b>"MailScanner
Discussion" <a href="mailto:mailscanner@lists.mailscanner.info" target="_blank" rel="nofollow noopener noreferrer"><mailscanner@lists.mailscanner.info></a><br>
<b>Aan: </b>"MailScanner Discussion"
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank" rel="nofollow noopener noreferrer"><mailscanner@lists.mailscanner.info></a><br>
<b>Cc: </b>"Shawn Iverson"
<a href="mailto:shawniverson@summitgrid.com" target="_blank" rel="nofollow noopener noreferrer"><shawniverson@summitgrid.com></a><br>
<b>Verzonden: </b>Vrijdag 24 juli 2020 13:24:23<br>
<b>Onderwerp: </b>Re: mails with valid SPF sender don't get
marked SPF_PASS<br>
</div>
<div><br>
</div>
<div>
<p><tt>What version of MailScanner do you have?</tt></p>
<p><tt>And out of curiosity, do you have the following both
present?</tt></p>
<p><tt>/etc/MailScanner/spam.assassin.prefs.conf</tt></p>
<p><tt>/etc/MailScanner/spamassassin.conf<br>
</tt></p>
<div class="moz-cite-prefix">On 7/24/20 3:02 AM, Thom van der
Boon wrote:<br>
</div>
<blockquote>
<div style="font-family:'helvetica';font-size:12pt;color:#000000">
<div>Mark,<br>
</div>
<div><br>
</div>
<div>It is a MailScanner issue (I think)<br>
</div>
<div><br>
</div>
<div>When I run the message through SA directly by the
following command: </div>
<div><br>
</div>
<div>spamassassin -t -p
/etc/MailScanner/spam.assassin.prefs.conf <
message.txt<br>
</div>
<div><br>
</div>
<div>I get a SPF_PASS<br>
</div>
<div><br>
</div>
<div> pts rule name description<br>
---- ----------------------
--------------------------------------------------<br>
0.0 RCVD_IN_MSPIKE_H4 RBL: Very Good reputation
(+4)<br>
[185.201.16.36 listed in
wl.mailspike.net]<br>
-0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at <a href="https://www.dnswl.org/" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank">https://www.dnswl.org/</a>,<br>
no trust<br>
[185.201.16.36 listed in
list.dnswl.org]<br>
-1.9 BAYES_00 BODY: Bayes spam probability
is 0 to 1%<br>
[score: 0.0000]<br>
0.0 SPF_HELO_NONE SPF: HELO does not publish
an SPF Record<br>
-0.0 SPF_PASS SPF: sender matches SPF
record<br>
0.1 MIME_HTML_ONLY BODY: Message only has
text/html MIME parts<br>
0.0 HTML_MESSAGE BODY: HTML included in
message<br>
0.0 RCVD_IN_MSPIKE_WL Mailspike good senders<br>
0.0 KAM_DMARC_STATUS Test Rule for DKIM or SPF
Failure with Strict<br>
Alignment<br>
</div>
<div><br>
</div>
<div>but as stated before; the "live" message that went
through my mailscanner<br>
</div>
<div><br>
</div>
<div>
<pre>X-vdbeu-MailScanner-SpamCheck: not spam, SpamAssassin (not cached,
score=-1.786, required 5, BAYES_00 -1.90, HTML_MESSAGE 0.00,
KAM_DMARC_STATUS 0.01, MIME_HTML_ONLY 0.10, RCVD_IN_DNSWL_NONE -0.00,
RCVD_IN_MSPIKE_H4 0.00, RCVD_IN_MSPIKE_WL 0.00, SPF_HELO_NONE 0.00)</pre>
</div>
<div><br>
</div>
<div>So, I don't get it<br>
</div>
<div><br>
</div>
<div>MailScanner --link reports nothing weird<br>
</div>
<div><br>
</div>
<div>
<div>Met vriendelijke groet, Best regards,</div>
<div><br>
</div>
<div><br style="font-family:'helvetica'">
<span style="font-family:'helvetica'">Thom van der
Boon</span><br style="font-family:'helvetica'">
<span style="font-family:'helvetica'">E-Mail: <a href="mailto:thom@vdb.nl" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank">thom@vdb.nl</a></span><br>
</div>
</div>
<div><br>
</div>
<hr id="zwchr">
<div><b>Van: </b>"Mark Sapiro" <a href="mailto:mark@msapiro.net" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank"><mark@msapiro.net></a><br>
<b>Aan: </b>"MailScanner Discussion" <a href="mailto:mailscanner@lists.mailscanner.info" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank"><mailscanner@lists.mailscanner.info></a><br>
<b>Verzonden: </b>Donderdag 23 juli 2020 22:38:17<br>
<b>Onderwerp: </b>Re: mails with valid SPF sender don't
get marked SPF_PASS<br>
</div>
<div><br>
</div>
<div>On 7/23/20 1:39 AM, Thom van der Boon wrote:<br>
> Hi guys,<br>
> <br>
> I have something weird. Most mails with valid SPF
record are marked<br>
> correctly (SPF_FAIL or SPF_PASS), but I see some
messages which should<br>
> be marked as SPF_PASS get no SPF_PASS<br>
<br>
<br>
Assuming you are talking about the SPF_PASS rule in the
SpamAssassin<br>
report in the X-vdbeu-MailScanner-SpamCheck: header,
this is a<br>
SpamAssassin question, not a MailScanner question per
se. You might do<br>
better on a SpamAssassin list. See<br>
<a href="https://cwiki.apache.org/confluence/display/SPAMASSASSIN/MailingLists" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank"><https://cwiki.apache.org/confluence/display/SPAMASSASSIN/MailingLists></a>.<br>
<br>
-- <br>
Mark Sapiro <a href="mailto:mark@msapiro.net" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank"><mark@msapiro.net></a>
The highway is for gamblers,<br>
San Francisco Bay Area, California better use your
sense - B. Dylan<br>
<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
</blockquote>
<div class="moz-signature">-- <br>
<img src="http://mailserver.summitgrid.org/logo_text_sig.png"><br>
Shawn Iverson<br>
<a href="mailto:shawniverson@summitgrid.com" rel="nofollow noopener noreferrer nofollow noopener noreferrer" target="_blank">shawniverson@summitgrid.com</a><br>
</div>
<br>
<br>
<br>
-- <br>
MailScanner mailing list<br>
<a href="mailto:mailscanner@lists.mailscanner.info" target="_blank" rel="nofollow noopener noreferrer">mailscanner@lists.mailscanner.info</a><br>
<a href="http://lists.mailscanner.info/mailman/listinfo/mailscanner" target="_blank" rel="nofollow noopener noreferrer">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
</div>
</div>
</blockquote>
<div class="moz-signature">-- <br>
<img src="http://mailserver.summitgrid.org/logo_text_sig.png"><br>
Shawn Iverson<br>
<a href="mailto:shawniverson@summitgrid.com" target="_blank" rel="nofollow noopener noreferrer">shawniverson@summitgrid.com</a><br>
</div><br></div></div></body></html>