Re: XPRIO - Can you help me?
Am 12.04.2016 um 17:47 schrieb Richard Mealing: -Original Message- From: Reindl Harald [mailto:h.rei...@thelounge.net] Sent: 12 April 2016 16:15 To: users@spamassassin.apache.org Subject: Re: XPRIO - Can you help me? Am 12.04.2016 um 16:40 schrieb John Hardin: On Tue, 12 Apr 2016, Richard Mealing wrote: I have come across a strange issue where I need some guidance to debug. I just can't understand why one of the servers will not fire on my XPRIO rule. Both the headers have the same information pretty much. I've checked the spamassassin debug and they both have the same LOCAL_STATE_DIR=/var/db/spamassassin. The machine that does not fire the rule has this rule in the /var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf file. The machine that works and fires the rule has it set in this file - /var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule... it *is* there what is "it"? just *show* what you are talking about cat and copy&paste exists that below is what i posted - so your quoting is weird /var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf just contains "header __XPRIO exists:X-Priority" and the same for /usr/share/spamassassin/10_hasbase.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org]$ find.sh XPRIO cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf signature.asc Description: OpenPGP digital signature
RE: XPRIO - Can you help me?
-Original Message- From: Reindl Harald [mailto:h.rei...@thelounge.net] Sent: 12 April 2016 16:15 To: users@spamassassin.apache.org Subject: Re: XPRIO - Can you help me? Am 12.04.2016 um 16:40 schrieb John Hardin: > On Tue, 12 Apr 2016, Richard Mealing wrote: > >> I have come across a strange issue where I need some guidance to debug. >> >> I just can't understand why one of the servers will not fire on my >> XPRIO rule. Both the headers have the same information pretty much. >> >> I've checked the spamassassin debug and they both have the same >> LOCAL_STATE_DIR=/var/db/spamassassin. >> >> The machine that does not fire the rule has this rule in the >> /var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf >> file. >> The machine that works and fires the rule has it set in this file - >> /var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf > > That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule... it *is* there /var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf just contains "header __XPRIO exists:X-Priority" and the same for /usr/share/spamassassin/10_hasbase.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org]$ find.sh XPRIO cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf -- I'm learning as I go here! Thanks so much for your help. It makes so much sense now - the server that was working did not have the DKIM plugin enabled, so actually it was scoring way too high! I'm surprised it did that, but now I have enabled it I probably won't see this rule hit a lot going forward. It will certainly fix some fp's. Thanks again. Rich
Re: XPRIO - Can you help me?
Am 12.04.2016 um 16:40 schrieb John Hardin: On Tue, 12 Apr 2016, Richard Mealing wrote: I have come across a strange issue where I need some guidance to debug. I just can't understand why one of the servers will not fire on my XPRIO rule. Both the headers have the same information pretty much. I've checked the spamassassin debug and they both have the same LOCAL_STATE_DIR=/var/db/spamassassin. The machine that does not fire the rule has this rule in the /var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf file. The machine that works and fires the rule has it set in this file - /var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule... it *is* there /var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf just contains "header __XPRIO exists:X-Priority" and the same for /usr/share/spamassassin/10_hasbase.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org]$ find.sh XPRIO cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf /var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf signature.asc Description: OpenPGP digital signature
Re: XPRIO - Can you help me?
On Tue, 12 Apr 2016, Richard Mealing wrote: I have come across a strange issue where I need some guidance to debug. I just can't understand why one of the servers will not fire on my XPRIO rule. Both the headers have the same information pretty much. I've checked the spamassassin debug and they both have the same LOCAL_STATE_DIR=/var/db/spamassassin. The machine that does not fire the rule has this rule in the /var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf file. The machine that works and fires the rule has it set in this file - /var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule... The second example has DKIM_VALID, which suppresses XPRIO. Check the DKIM configuration on the first server. I would assume the same message should get the same DKIM result on both servers. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- If guns kill people, then... -- pencils miss spel words. -- cars make people drive drunk. -- spoons make people fat. --- Tomorrow: Thomas Jefferson's 273rd Birthday
Re: XPRIO - Can you help me?
Am 12.04.2016 um 16:23 schrieb Richard Mealing: I just can’t understand why one of the servers will not fire on my XPRIO rule. Both the headers have the same information pretty much look at /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf XPRIO is by far not just a simple "header exists" metaXPRIO __XPRIO_MINFP && !DKIM_SIGNED && !__DKIM_DEPENDABLE && !DKIM_VALID && !DKIM_VALID_AU && !RCVD_IN_DNSWL_NONE signature.asc Description: OpenPGP digital signature
XPRIO - Can you help me?
Hi everyone, I have come across a strange issue where I need some guidance to debug. I have 2 servers and when an email filters through 1 of them, I get this back - (not cached, score=5.403,required 4, BAYES_50 0.80, HTML_IMAGE_ONLY_28 1.40, HTML_MESSAGE 0.30, HTML_MIME_NO_HTML_TAG 0.38, LOCAL_MARKETING_RULE 0.30, LOCAL_MARKETING_RULE2 1.00, MIME_HTML_ONLY 0.72, RCVD_IN_DNSWL_NONE -0.00, SPF_CHECK_PASS -1.50, XPRIO 2.00 Then when I send a similar email with the same x-priority header through the second server I get this back - (not cached,score=0.2, required 4 BAYES_20 -0.00, DKIM_SIGNED 0.10,DKIM_VALID -0.10, DKIM_VALID_AU -0.10, HTML_IMAGE_ONLY_32 0.00, HTML_MESSAGE 0.30, HTML_MIME_NO_HTML_TAG 0.38, LOCAL_FAX4_RULE 0.10, LOCAL_MARKETING_RULE 0.30, LOCAL_MARKETING_RULE2 1.00, MIME_HTML_ONLY 0.72, RCVD_IN_DNSWL_NONE -0.00, SPF_CHECK_PASS -1.50, SPF_PASS -1.00 I just can't understand why one of the servers will not fire on my XPRIO rule. Both the headers have the same information pretty much. I've checked the spamassassin debug and they both have the same LOCAL_STATE_DIR=/var/db/spamassassin. The machine that does not fire the rule has this rule in the /var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf file. The machine that works and fires the rule has it set in this file - /var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf The machine that works - grep " XPRIO " /var/log/maillog | wc -l 630 The machine that does not work - grep " XPRIO " /var/log/maillog # (so nothing) Can you tell me how I can debug this? I don't see any mention of this rule in the debug output, which I have sent to a file. I can provide this output on paste bin or something if you need it. I can't really see any problems. The machine that works has an older version of sa installed. I'm stumped! Thanks, Rich