Hi,

I have with great luck been using Exim and Spamassassin for a while, but
recently I discovered something very weird. Look at this (excerpt from
the headers):

X-Spam-Score: 3.0
X-Spam-Status: No, score=2.9 required=3.0 tests=LONGWORDS autolearn=no 
version=3.1.0
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on buick.jordet.net

How on earth can it claim in the second line that the score is 2.9 when
it just has said 3.0? This is from my config file:

SPAM_ACL = ${lookup ldap 
{LDAPTYPE://LDAPSERVER/ou=People,dc=jordet?uid?sub?(&(objectClass=inetLocalMailRecipient)\
             (mailLocalAddress=${quote_ldap:${sg{$recipients}{\N(\+.*?\@)[EMAIL 
PROTECTED]))}{$value}{\
           ${lookup ldap 
{LDAPTYPE://LDAPSERVER/ou=Virtual,dc=jordet?cn?sub?(&(objectClass=inetLocalMailRecipient)\
           (mailLocalAddress=${quote_ldap:${sg{$recipients}{\N(\+.*?\@)[EMAIL 
PROTECTED]))}{$value}{\
           ${lookup ldap 
{LDAPTYPE://LDAPSERVER/ou=People,dc=jordet?uid?sub?(&(objectClass=inetLocalMailRecipient)\
           (mailLocalAddress=${quote_ldap:@[EMAIL 
PROTECTED]))}{$value}{nobody}}}}}}


warn message = X-Spam-Score: $spam_score
  condition = ${if <{$message_size}{500k}{1}{0}}
  spam = SPAM_ACL/defer_ok

warn message = X-Spam-Status: $spam_report
  condition = ${if <{$message_size}{500k}{1}{0}}
  spam = SPAM_ACL:true/defer_ok

warn message = X-Spam-Flag: YES
  condition = ${if <{$message_size}{500k}{1}{0}}
  spam = SPAM_ACL/defer_ok
  log_message = Spam: $spam_score

warn message = X-Spam-Checker-Version: SpamAssassin ${perl{version}} 
(${perl{subversion}}) on $primary_hostname
  spam = SPAM_ACL:true/defer_ok

When looking at the mail log, I can see the SA only scanned the message
once:

Nov 21 21:49:20 buick exim[3474]: 2005-11-21 21:49:20 SMTP connection from 
[209.132.176.167]:54638 I=[217.8.143.72]:25 (TCP/IP connection count = 1)
Nov 21 21:49:21 buick spamd[3408]: spamd: got connection over 
/var/run/spamd.sock
Nov 21 21:49:21 buick spamd[3408]: spamd: checking message <[EMAIL PROTECTED]> 
for stianj:0
Nov 21 21:49:22 buick spamd[3408]: spamd: clean message (3.0/3.0) for stianj:0 
in 0.5 seconds, 6448 bytes.
Nov 21 21:49:22 buick spamd[3408]: spamd: result: .  2 - LONGWORDS 
scantime=0.5,size=6448,user=stianj,uid=0,required_score=3.0,rhost=localhost,raddr=127.0.0.1,rport=/var/run/spamd.sock,mid=<[EMAIL
 PROTECTED]>,autolearn=no
Nov 21 21:49:22 buick exim[26251]: 2005-11-21 21:49:22 1EeIbJ-0006pP-BY 
H=vger.kernel.org [209.132.176.167]:54638 I=[217.8.143.72]:25 Warning: Spam: 3.0
Nov 21 21:49:22 buick spamd[3365]: prefork: child states: II
Nov 21 21:49:23 buick exim[26251]: 2005-11-21 21:49:23 1EeIbJ-0006pP-BY <= 
[EMAIL PROTECTED] H=vger.kernel.org [209.132.176.167]:54638 I=[217.8.143.72]:25 
P=esmtp S=6536 [EMAIL PROTECTED] from <[EMAIL PROTECTED]> for [EMAIL PROTECTED]
Nov 21 21:49:23 buick exim[26257]: 2005-11-21 21:49:23 1EeIbJ-0006pP-BY => 
stianj <[EMAIL PROTECTED]> F=<[EMAIL PROTECTED]> P=<[EMAIL PROTECTED]> 
R=procmail T=procmail_pipe S=6799 QT=2s DT=0s
Nov 21 21:49:23 buick exim[26257]: 2005-11-21 21:49:23 1EeIbJ-0006pP-BY 
Completed QT=2s
Nov 21 21:49:23 buick exim[26251]: 2005-11-21 21:49:23 SMTP connection from 
vger.kernel.org [209.132.176.167]:54638 I=[217.8.143.72]:25 closed by QUIT

Last, this is from my /etc/spamassassin/local.cf:

clear_report_template
report _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS(,)_ 
autolearn=_AUTOLEARN_ version=_VERSION_

Could this be a problem with my setup, a bug in exim or a bug in SA?
Hope someone can share some insight on this.

Best regards,
Stian


-- 
## List details at http://www.exim.org/mailman/listinfo/exim-users 
## Exim details at http://www.exim.org/
## Please use the Wiki with this list - http://www.exim.org/eximwiki/

Reply via email to