_____
From: ashok [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 30, 2007 3:40 PM
To: [email protected]
Subject: RE: [qmailtoaster] Spamassassin has problem in scanning
-----Original Message-----
From: Alexey Loukianov [mailto:[EMAIL PROTECTED]
Sent: Tuesday, January 30, 2007 5:09 AM
To: [email protected]
Subject: Re: [qmailtoaster] Spamassassin has problem in scanning
ashok wrote:
>
> My qmail server allow all IMAGE SPAM to users mail box. [ without even
> marking as ****SPAM*****]
> I manually scanned one of the IMAGE SPAM message in my mail server using
> below .
> It scans and gives the 14.7 points --- BUT this message never marks as
> spam in user box.
>
> #spamassassin -d -t <
>
1170113064.M652531P11894V0000000000000902I001DF638.mail.ek.com\,S\=15349\:2\
,
> Content analysis details: (14.7 points, 5.0 required)
> pts rule name description
> ---- ----------------------
--------------------------------------------------
> 0.3 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
> 0.0 HTML_MESSAGE BODY: HTML included in message
> 0.9 SPAMPIC_SUSPECT BODY: Suspect image found
> image/gif (GIF)
> 12 SPAMPIC_WORDS_5 BODY: Contains inline spam picture (5+)
> 1.0 SPAMPIC_ALPHA_2 BODY: Image contains many alphanumeric chars
> 0.7 MY_CID_AND_STYLE SARE cid and style
> -0.1 AWL AWL: From: address is in the auto white-list
>
> # cat local.cf
> required_hits 5
>
> Pls Suggest how do I make my qmail server 2 mark these messages as SPAM
Do you have simscan-toaster installed?
What are the contents of /etc/tcprules.d/tcp.smtp?
Did you check the /var/log/qmail/spamd/current logfile for log entries
telling about any incoming mesasge being scanned?
Does your incoming mails that drop to your QT-hosted mailbox contain any
"X-Spam-Checked:" header lines?
What are the contents of /var/qmail/control/simcontrol file?
--
Best regards,
Alexey Loukianov mailto:[EMAIL PROTECTED]
System Engineer,
IT Department,
Lavtech Corp.
Dear Alexey,,
I did not install simscan-toaster bcoz it gave me some problems ,, So I
have used openprotect with my qmail toaster.
www.openprotect.com <http://www.openprotect.com/> [ include SPAM + Virus
filtering ] which can be easily integrated to qmail toaster.
Every thing was working fine -- these days my users has started getting
IMAGE SPAM so I tought I will control it ... so I referred the below site
and integrated OCR Plugin.
http://www.nabble.com/GIF-Spam----Setting-up-the-'OCR-scanner-and-image-vali
dator-SA-plugin'-t2042373.html
[EMAIL PROTECTED] spamassassin]# cat /var/log/qmail/spamd/current
@4000000045bec34b31c11174 [22423] info: config: failed to parse line,
skipping: gocr_path /usr/bin/gocr
@4000000045bec34b31c6b2dc [22423] info: config: failed to parse line,
skipping: pnmtools_path /usr/bin
@4000000045bec34b31cad95c [22423] info: config: failed to parse line,
skipping: ocrtext_dscore 15
@4000000045bec34b31d0b174 [22423] info: config: failed to parse line,
skipping: ocrtext_words
realtime;alert;actquick;announce;headline;charts;increase;below;rating;takeo
ff;resource;ready::0.1;profit;news::0.1;wallstreet;free::0;pick::0.1;breakin
g;explosive;strong;spotlight;watch;symbol;stock;investor;offer;international
;company;money::0;million;thousand;loose;buy;price::0.1;trade;worldtrade;tar
get::0.1;higher;banking;service;recommendation;viagra;soma::0.1;cialis::0.1;
xanax;valium;meridia::0.1;zanaflex;levitra;herbal::0.1;medicine;doctor;pills
;legal;penis::0;erection::0.1;supplement;medication;weightloss;growth;drugs;
pharmacy;prescription;click::0.1;here::0;software;kunde;volksbank;sparkasse;
master;degree;bachelor;diploma;removal;visit;browser;readmore;type::0.1;chea
p;shipping;quality;sideeffects;size::0.1;focused;replica::0.1;sale::0.1;bags
::0.1;development;technology;expect;long-term;quick::0.1;afford;tradeout;com
pensate
@4000000045bec34b31d587bc [22423] info: config: failed to parse line,
skipping: ocrtext_pwords information
@4000000045bec34c10cfc3ac [22423] warn: rules: failed to run SPAMPIC_BROKEN
test, skipping:
@4000000045bec34c10d1c74c [22423] warn: (Can't locate object method
"ocrtext_eval" via package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/vendor_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2626.
@4000000045bec34c10d2d0ec [22423] warn: )
@4000000045bec34c10ee7324 [22423] warn: rules: failed to run SPAMPIC_SUSPECT
test, skipping:
@4000000045bec34c10f0345c [22423] warn: (Can't locate object method
"ocrtext_eval" via package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/vendor_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2626.
@4000000045bec34c10f18064 [22423] warn: )
@4000000045bec34c10fc0b9c [22423] warn: rules: failed to run SPAMPIC_ALPHA_1
test, skipping:
@4000000045bec34c10fdccd4 [22423] warn: (Can't locate object method
"ocrtext_eval" via package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/vendor_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2626.
@4000000045bec34c10ff016c [22423] warn: )
@4000000045bec34c110527a4 [22423] warn: rules: failed to run SPAMPIC_UNKNOWN
test, skipping:
@4000000045bec34c1106cd84 [22423] warn: (Can't locate object method
"ocrtext_eval" via package "Mail::SpamAssassin::PerMsgStatus" at
/usr/lib/perl5/vendor_perl/5.8.5/Mail/SpamAssassin/PerMsgStatus.pm line
2626.
Im not getting any clue about these messages .
Pls suggest me /:-)\
Thanking You,,
Best Regards
ashok
Dear Alexey,,
I managed to fix the above error and now if I do run ..
Run spamassassin -D --lint
[EMAIL PROTECTED] spamassassin]# spamassassin -Debug --lint
[1021] info: rules: meta test SPAMPIC_MULTI_2 has undefined dependency
'IMPPYZOR_CHECK'
[1021] info: rules: meta test DIGEST_MULTIPLE has undefined dependency
'RAZOR2_CHECK'
[1021] info: rules: meta test DIGEST_MULTIPLE has undefined dependency
'DCC_CHECK'
[1021] info: rules: meta test SPAMPIC_MULTI_1 has undefined dependency
'IMPPYZOR_CHECK'
[1021] info: rules: meta test SPAMPIC_MULTI_4 has undefined dependency
'IMPPYZOR_CHECK'
[1021] info: rules: meta test SPAMPIC_MULTI_6 has undefined dependency
'IMPPYZOR_CHECK'
[1021] info: rules: meta test SPAMPIC_MULTI_3 has undefined dependency
'IMPPYZOR_CHECK'
[1021] info: rules: meta test SPAMPIC_MULTI_5 has undefined dependency
'IMPPYZOR_CHECK'
Manual Process
--------------
I manually scanned one of the IMAGE SPAM message in my mail server using
below .
It scans and gives the 14.7 points
#spamassassin -d -t <
1170113064.M652531P11894V0000000000000902I001DF638.mail.ek.com\,S\=15349\:2\
,
Content analysis details: (14.7 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
0.3 MAILTO_TO_SPAM_ADDR URI: Includes a link to a likely spammer email
0.0 HTML_MESSAGE BODY: HTML included in message
0.9 SPAMPIC_SUSPECT BODY: Suspect image found image/gif (GIF)
12 SPAMPIC_WORDS_5 BODY: Contains inline spam picture (5+)
1.0 SPAMPIC_ALPHA_2 BODY: Image contains many alphanumeric chars
0.7 MY_CID_AND_STYLE SARE cid and style
-0.1 AWL AWL: From: address is in the auto white-list
Final Test I made :-
--------------------
Sending a IMAGE SPAM Mail from yahoo id to my office id ,, I just Received
it as Normal Mail.
My qmail server allow all IMAGE SPAM to users mail box. [ without even
marking as ****SPAM*****] even after integrating OCR plugin..!!!
Pls Suggest J
Thanks in advance
Best Regards
ashok
--
