Re: XPRIO - Can you help me?

2016-04-12 Thread Reindl Harald



Am 12.04.2016 um 17:47 schrieb Richard Mealing:


-Original Message-
From: Reindl Harald [mailto:h.rei...@thelounge.net]
Sent: 12 April 2016 16:15
To: users@spamassassin.apache.org
Subject: Re: XPRIO - Can you help me?

Am 12.04.2016 um 16:40 schrieb John Hardin:

On Tue, 12 Apr 2016, Richard Mealing wrote:


I have come across a strange issue where I need some guidance to debug.

I just can't understand why one of the servers will not fire on my
XPRIO rule. Both the headers have the same information pretty much.

I've checked the spamassassin debug and they both have the same
LOCAL_STATE_DIR=/var/db/spamassassin.

The machine that does not fire the rule has this rule in the
/var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf
file.
The machine that works and fires the rule has it set in this file -
/var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf


That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule...


it *is* there


what is "it"?

just *show* what you are talking about
cat and copy exists

that below is what i posted - so your quoting is weird


/var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf
just contains "header __XPRIO exists:X-Priority" and the same for 
/usr/share/spamassassin/10_hasbase.cf

/var/lib/spamassassin/3.004001/updates_spamassassin_org]$ find.sh XPRIO cf 
/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf




signature.asc
Description: OpenPGP digital signature


RE: XPRIO - Can you help me?

2016-04-12 Thread Richard Mealing

-Original Message-
From: Reindl Harald [mailto:h.rei...@thelounge.net] 
Sent: 12 April 2016 16:15
To: users@spamassassin.apache.org
Subject: Re: XPRIO - Can you help me?



Am 12.04.2016 um 16:40 schrieb John Hardin:
> On Tue, 12 Apr 2016, Richard Mealing wrote:
>
>> I have come across a strange issue where I need some guidance to debug.
>>
>> I just can't understand why one of the servers will not fire on my 
>> XPRIO rule. Both the headers have the same information pretty much.
>>
>> I've checked the spamassassin debug and they both have the same 
>> LOCAL_STATE_DIR=/var/db/spamassassin.
>>
>> The machine that does not fire the rule has this rule in the 
>> /var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf
>> file.
>> The machine that works and fires the rule has it set in this file - 
>> /var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf
>
> That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule...

it *is* there

/var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf
just contains "header __XPRIO exists:X-Priority" and the same for 
/usr/share/spamassassin/10_hasbase.cf

/var/lib/spamassassin/3.004001/updates_spamassassin_org]$ find.sh XPRIO cf 
/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf


--

I'm learning as I go here! Thanks so much for your help. It makes so much sense 
now - the server that was working did not have the DKIM plugin enabled, so 
actually it was scoring way too high! I'm surprised it did that, but now I have 
enabled it I probably won't see this rule hit a lot going forward. It will 
certainly fix some fp's.

Thanks again.
Rich


Re: XPRIO - Can you help me?

2016-04-12 Thread Reindl Harald



Am 12.04.2016 um 16:40 schrieb John Hardin:

On Tue, 12 Apr 2016, Richard Mealing wrote:


I have come across a strange issue where I need some guidance to debug.

I just can't understand why one of the servers will not fire on my
XPRIO rule. Both the headers have the same information pretty much.

I've checked the spamassassin debug and they both have the same
LOCAL_STATE_DIR=/var/db/spamassassin.

The machine that does not fire the rule has this rule in the
/var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf
file.
The machine that works and fires the rule has it set in this file -
/var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf


That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule...


it *is* there

/var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf 
just contains "header __XPRIO exists:X-Priority" and the same for 
/usr/share/spamassassin/10_hasbase.cf


/var/lib/spamassassin/3.004001/updates_spamassassin_org]$ find.sh XPRIO cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf
/var/lib/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf



signature.asc
Description: OpenPGP digital signature


Re: XPRIO - Can you help me?

2016-04-12 Thread John Hardin

On Tue, 12 Apr 2016, Richard Mealing wrote:


I have come across a strange issue where I need some guidance to debug.

I just can't understand why one of the servers will not fire on my XPRIO rule. 
Both the headers have the same information pretty much.

I've checked the spamassassin debug and they both have the same 
LOCAL_STATE_DIR=/var/db/spamassassin.

The machine that does not fire the rule has this rule in the 
/var/db/spamassassin/3.004001/updates_spamassassin_org/10_hasbase.cf file.
The machine that works and fires the rule has it set in this file - 
/var/db/spamassassin/3.004000/updates_spamassassin_org/10_hasbase.cf


That's odd. XPRIO should be in 72_active.cf as it's a sandbox rule...

The second example has DKIM_VALID, which suppresses XPRIO. Check the DKIM
configuration on the first server. I would assume the same message should 
get the same DKIM result on both servers.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  If guns kill people, then...
-- pencils miss spel words.
-- cars make people drive drunk.
-- spoons make people fat.
---
 Tomorrow: Thomas Jefferson's 273rd Birthday


Re: XPRIO - Can you help me?

2016-04-12 Thread Reindl Harald



Am 12.04.2016 um 16:23 schrieb Richard Mealing:

I just can’t understand why one of the servers will not fire on my XPRIO
rule. Both the headers have the same information pretty much


look at /var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf

XPRIO is by far not just a simple "header exists"

metaXPRIO  __XPRIO_MINFP && !DKIM_SIGNED && 
!__DKIM_DEPENDABLE && !DKIM_VALID && !DKIM_VALID_AU && !RCVD_IN_DNSWL_NONE




signature.asc
Description: OpenPGP digital signature