Hi,
We have just implemented SA in a site wide configuration. In debug
mode, I am not seeing any RBL checks in the list of tests, but when I
run spamc on the same message they show up just fine. The final scores
also do not match. Here are parts of the log files.
debug: running raw-body-text per-line regexp tests; score so far=3.51
spamd[28929]: debug: running uri tests; score so far=3.51
spamd[28929]: debug: uri tests: Done uriRE
spamd[28929]: debug: running full-text regexp tests; score so far=6.51
spamd[28929]: debug: Razor2 is not available
spamd[28929]: debug: Pyzor is not available: pyzor not found
spamd[28929]: debug: DCCifd is not available: no r/w dccifd socket found.
spamd[28929]: debug: DCC is not available: no executable dccproc found.
spamd[28929]: debug: all '*To' addrs: [EMAIL PROTECTED]
spamd[28929]: debug: DNS MX records found: 2
spamd[28929]: debug: RBL: success for 1 of 1 queries
spamd[28929]: debug: running meta tests; score so far=6.51
spamd[28929]: debug: auto-learn? ham=0.1, spam=12, body-hits=5.689,
head-hits=0.821
spamd[28929]: debug: auto-learn: currently using scoreset 3.
recomputing score based on scoreset 1.
spamd[28929]: debug: Score set 1 chosen.
spamd[28929]: debug: auto-learn: original score: 6.51, recomputed score:
6.866
spamd[28929]: debug: Score set 3 chosen.
spamd[28929]: debug: auto-learn? no: inside auto-learn thresholds
spamd[28929]: debug: is spam? score=8.167 required=4.5
tests=BAYES_80,BigEvilList_162,HTML_COMMENT_SAVED_URL,HTML_IMAGE_ONLY_02,HTML_MESSAGE,MIME_HTML_ONLY,SUBJ_YOUR_DEBT
spamd[28929]: logmsg: identified spam (8.2/4.5) for (unknown):60001 in
1.0 seconds, 1306 bytes.
spamd[28929]: identified spam (8.2/4.5) for (unknown):60001 in 1.0
seconds, 1306 bytes.
990spamc -R 121.msg
Content analysis details: (8.9 points, 4.5 required)
pts rule name description
--
--
0.8 SUBJ_YOUR_DEBT Subject contains Your Bills or similar
0.1 HTML_MESSAGE BODY: HTML included in message
0.0 BAYES_50 BODY: Bayesian spam probability is 50 to 56%
[score: 0.5294]
1.0 HTML_COMMENT_SAVED_URL BODY: HTML message is a saved web page
0.3 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.2 HTML_IMAGE_ONLY_02 BODY: HTML: images with 0-200 bytes of words
3.0 BigEvilList_162URI: Generated BigEvilList_162
1.1 RCVD_IN_SBLRBL: Received via a relay in Spamhaus Block List
[http://www.spamhaus.org/SBL/sbl.lasso?query=SBL6636]
0.1 RCVD_IN_NJABL RBL: Received via a relay in dnsbl.njabl.org
[69.6.29.201 listed in dnsbl.njabl.org]
1.2 RCVD_IN_NJABL_SPAM RBL: NJABL: sender is confirmed spam source
[69.6.29.201 listed in dnsbl.njabl.org]
There is a line for a RBL query, but shouldn't the RBL tests shop up in
the tests line in the debug log? If RBL is not running site wide, any
ideas why?
Thanks.
--
Dave
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
___
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
