Re: URIDNSBL Scores

2005-05-17 Thread Scott Schaffer
OK, I uninstalled SA 3.0.0 and did a clean install of 3.0.3, downloaded new 
SARE rules and tried again. I am still not getting any URI results. Can any one 
explain what happens in the 

debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements 
'check_post_dnsbl'

section below. The 'check_tick section seems to show that, yes, this url is 
listed in 4 of the SBL's. Does the 'check_post_dnsbl" do a second lookup, which 
seems to be failing (even when I increase the time for the lookup to complete)?

Scott
-
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::U
RIDNSBL=HASH(0x2982e68))
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements '
check_tick'
debug: URIDNSBL: domain "kogko.com" listed (URIBL_AB_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_WS_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_OB_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_SC_SURBL): 127.0.0.118
debug: URIDNSBL: query for kogko.com took 2 seconds to look up 
(multi.surbl..org.
:kogko.com)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Mon May 16 14:34:15 2005
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Mon May 16 14:34:15 2005
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements '
check_post_dnsbl'
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:15 2005
debug: waiting 30 seconds for URIDNSBL lookups to complete
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:15 2005
debug: running meta tests; score so far=7
debug: running header regexp tests; score so far=7
debug: running body-text per-line regexp tests; score so far=7
debug: running uri tests; score so far=7
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: Running tests for priority: 1000
debug: running meta tests; score so far=7
debug: running header regexp tests; score so far=7
debug: running body-text per-line regexp tests; score so far=7
debug: running uri tests; score so far=7
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:16 2005
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: auto-learn: currently using scoreset 3, recomputing score based on scores
et 1.
debug: auto-learn: message score: 7, computed score for autolearn: 0
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0, learned-point
s=7
debug: auto-learn? no: scored as ham but learner indicated spam (7 > 1)
debug: is spam? score=7 required=7
debug: tests=BAYES_99
debug: subtests=__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__HAS_SUBJECT,__
MIME_VERSION,__SARE_BODY_BLNK_5_100,__SARE_HTML_HAS_MSG,__SARE_HTML_HAS_TO,__SAR
E_META_MURTY3,__SARE_URI_ANY
MAIL FROM: <[EMAIL PROTECTED]>
RCPT TO: <[EMAIL PROTECTED]>
X-GWIA: Mon, 16 May 2005 13:47:48 -0600; pcp916103pcs.brndml01.va.comcast.net([1
92.168.100.100])
Received: from pcp916103pcs.brndml01.va.comcast.net
([192.168.100.100])
by owzw.com; Mon, 16 May 2005 13:47:48 -0600
X-MIME-Autoconverted: Yes
Discarded-X400-MTS-Extensions: Yes
Alternate-Recipient: Allowed
Xref: efzhwexjrrmcpmbcwair
Reply-To: "Mckinley Olga" <[EMAIL PROTECTED]>
From: "Mckinley Olga" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *SPAM* Someone has requested a date
Date: Mon, 16 May 2005 20:50:49 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--ISFZPFFBLWQAYUTQT"
X-Spam-Prev-Subject: Someone has requested a date
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on Guinevere
X-Spam-Level: ***
X-Spam-Status: Yes, score=7.0 required=7.0 tests=BAYES_99 autolearn=no version=3
..0.3
X-Spam-Report:  *  7.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% *
 [score: 1.]

ISFZPFFBLWQAYUTQT
Content-Type: text/plain;
charset="iso-1898-6"
Content-Transfer-Encoding: 7Bit


Meet hot dates today.

Free signup:
 - http://www.kogko.com/go.html



if you like to be lonely, then :
 - http://www.kogko.com/nothanks/nothanks.php

ISFZPFFBLWQAYUTQT--
Spam detection software, running on the system "Guinevere", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If yo

Re: URIDNSBL Scores

2005-05-17 Thread Scott Schaffer
OK, I uninstalled SA 3.0.0 and did a clean install of 3.0.3, downloaded new 
SARE rules and tried again. I am still not getting any URI results. Can any one 
explain what happens in the 

debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements 
'check_post_dnsbl'

section below. The 'check_tick section seems to show that, yes, this url is 
listed in 4 of the SBL's. Does the 'check_post_dnsbl" do a second lookup, which 
seems to be failing (even when I increase the time for the lookup to complete)?

Scott
-
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::U
RIDNSBL=HASH(0x2982e68))
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements '
check_tick'
debug: URIDNSBL: domain "kogko.com" listed (URIBL_AB_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_WS_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_OB_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_SC_SURBL): 127.0.0.118
debug: URIDNSBL: query for kogko.com took 2 seconds to look up 
(multi.surbl..org.
:kogko.com)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Mon May 16 14:34:15 2005
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Mon May 16 14:34:15 2005
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements '
check_post_dnsbl'
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:15 2005
debug: waiting 30 seconds for URIDNSBL lookups to complete
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:15 2005
debug: running meta tests; score so far=7
debug: running header regexp tests; score so far=7
debug: running body-text per-line regexp tests; score so far=7
debug: running uri tests; score so far=7
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: Running tests for priority: 1000
debug: running meta tests; score so far=7
debug: running header regexp tests; score so far=7
debug: running body-text per-line regexp tests; score so far=7
debug: running uri tests; score so far=7
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:16 2005
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: auto-learn: currently using scoreset 3, recomputing score based on scores
et 1.
debug: auto-learn: message score: 7, computed score for autolearn: 0
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0, learned-point
s=7
debug: auto-learn? no: scored as ham but learner indicated spam (7 > 1)
debug: is spam? score=7 required=7
debug: tests=BAYES_99
debug: subtests=__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__HAS_SUBJECT,__
MIME_VERSION,__SARE_BODY_BLNK_5_100,__SARE_HTML_HAS_MSG,__SARE_HTML_HAS_TO,__SAR
E_META_MURTY3,__SARE_URI_ANY
MAIL FROM: <[EMAIL PROTECTED]>
RCPT TO: <[EMAIL PROTECTED]>
X-GWIA: Mon, 16 May 2005 13:47:48 -0600; pcp916103pcs.brndml01.va.comcast.net([1
92.168.100.100])
Received: from pcp916103pcs.brndml01.va.comcast.net
([192.168.100.100])
by owzw.com; Mon, 16 May 2005 13:47:48 -0600
X-MIME-Autoconverted: Yes
Discarded-X400-MTS-Extensions: Yes
Alternate-Recipient: Allowed
Xref: efzhwexjrrmcpmbcwair
Reply-To: "Mckinley Olga" <[EMAIL PROTECTED]>
From: "Mckinley Olga" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *SPAM* Someone has requested a date
Date: Mon, 16 May 2005 20:50:49 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--ISFZPFFBLWQAYUTQT"
X-Spam-Prev-Subject: Someone has requested a date
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on Guinevere
X-Spam-Level: ***
X-Spam-Status: Yes, score=7.0 required=7.0 tests=BAYES_99 autolearn=no version=3
..0.3
X-Spam-Report:  *  7.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% *
 [score: 1.]

ISFZPFFBLWQAYUTQT
Content-Type: text/plain;
charset="iso-1898-6"
Content-Transfer-Encoding: 7Bit


Meet hot dates today.

Free signup:
 - http://www.kogko.com/go.html



if you like to be lonely, then :
 - http://www.kogko.com/nothanks/nothanks.php

ISFZPFFBLWQAYUTQT--
Spam detection software, running on the system "Guinevere", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If yo

Re: URIDNSBL Scores

2005-05-17 Thread Scott Schaffer
OK, I uninstalled SA 3.0.0 and did a clean install of 3.0.3, downloaded new 
SARE rules and tried again. I am still not getting any URI results. Can any one 
explain what happens in the 

debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements 
'check_post_dnsbl'

section below. The 'check_tick section seems to show that, yes, this url is 
listed in 4 of the SBL's. Does the 'check_post_dnsbl" do a second lookup, which 
seems to be failing (even when I increase the time for the lookup to complete)?

Scott
-
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::U
RIDNSBL=HASH(0x2982e68))
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements '
check_tick'
debug: URIDNSBL: domain "kogko.com" listed (URIBL_AB_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_WS_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_OB_SURBL): 127.0.0.118
debug: URIDNSBL: domain "kogko.com" listed (URIBL_SC_SURBL): 127.0.0.118
debug: URIDNSBL: query for kogko.com took 2 seconds to look up 
(multi.surbl..org.
:kogko.com)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Mon May 16 14:34:15 2005
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Mon May 16 14:34:15 2005
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2982e68) implements '
check_post_dnsbl'
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:15 2005
debug: waiting 30 seconds for URIDNSBL lookups to complete
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:15 2005
debug: running meta tests; score so far=7
debug: running header regexp tests; score so far=7
debug: running body-text per-line regexp tests; score so far=7
debug: running uri tests; score so far=7
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: Running tests for priority: 1000
debug: running meta tests; score so far=7
debug: running header regexp tests; score so far=7
debug: running body-text per-line regexp tests; score so far=7
debug: running uri tests; score so far=7
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: DNSBL=2 at Mon May 16 14:34:16 2005
debug: running raw-body-text per-line regexp tests; score so far=7
debug: running full-text regexp tests; score so far=7
debug: auto-learn: currently using scoreset 3, recomputing score based on scores
et 1.
debug: auto-learn: message score: 7, computed score for autolearn: 0
debug: auto-learn? ham=0.1, spam=12, body-points=0, head-points=0, learned-point
s=7
debug: auto-learn? no: scored as ham but learner indicated spam (7 > 1)
debug: is spam? score=7 required=7
debug: tests=BAYES_99
debug: subtests=__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__HAS_SUBJECT,__
MIME_VERSION,__SARE_BODY_BLNK_5_100,__SARE_HTML_HAS_MSG,__SARE_HTML_HAS_TO,__SAR
E_META_MURTY3,__SARE_URI_ANY
MAIL FROM: <[EMAIL PROTECTED]>
RCPT TO: <[EMAIL PROTECTED]>
X-GWIA: Mon, 16 May 2005 13:47:48 -0600; pcp916103pcs.brndml01.va.comcast.net([1
92.168.100.100])
Received: from pcp916103pcs.brndml01.va.comcast.net
([192.168.100.100])
by owzw.com; Mon, 16 May 2005 13:47:48 -0600
X-MIME-Autoconverted: Yes
Discarded-X400-MTS-Extensions: Yes
Alternate-Recipient: Allowed
Xref: efzhwexjrrmcpmbcwair
Reply-To: "Mckinley Olga" <[EMAIL PROTECTED]>
From: "Mckinley Olga" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: *SPAM* Someone has requested a date
Date: Mon, 16 May 2005 20:50:49 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--ISFZPFFBLWQAYUTQT"
X-Spam-Prev-Subject: Someone has requested a date
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on Guinevere
X-Spam-Level: ***
X-Spam-Status: Yes, score=7.0 required=7.0 tests=BAYES_99 autolearn=no version=3
..0.3
X-Spam-Report:  *  7.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% *
 [score: 1.]

ISFZPFFBLWQAYUTQT
Content-Type: text/plain;
charset="iso-1898-6"
Content-Transfer-Encoding: 7Bit


Meet hot dates today.

Free signup:
 - http://www.kogko.com/go.html



if you like to be lonely, then :
 - http://www.kogko.com/nothanks/nothanks.php

ISFZPFFBLWQAYUTQT--
Spam detection software, running on the system "Guinevere", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If yo

Re: URIDNSBL Scores

2005-05-13 Thread Scott Schaffer
So why do they work on one machine and not the other? Both machines are SA 
3.0.0. and are virtually identical in setup.

>>> Jeff Chan <[EMAIL PROTECTED]> 05/13/05 09:34AM >>>
On Friday, May 13, 2005, 8:19:57 AM, Scott Schaffer wrote:
> SA 3.0.0 on both machines

One thing to note is that the URIDNSBL rules in 3.0.0 are type
"header" while they're type "body" in later versions.  If you're
using rules quoted for URIDNSBL for example on the SURBL site,
they usually mention type "body" which won't work with 3.0.0 .

A newer version is probably better to use, BTW.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED] 
http://www.surbl.org/ 




Re: URIDNSBL Scores

2005-05-13 Thread Jeff Chan
On Friday, May 13, 2005, 8:19:57 AM, Scott Schaffer wrote:
> SA 3.0.0 on both machines

One thing to note is that the URIDNSBL rules in 3.0.0 are type
"header" while they're type "body" in later versions.  If you're
using rules quoted for URIDNSBL for example on the SURBL site,
they usually mention type "body" which won't work with 3.0.0 .

A newer version is probably better to use, BTW.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/



Re: URIDNSBL Scores

2005-05-13 Thread Scott Schaffer
SA 3.0.0 on both machines

>>> Matt Kettler <[EMAIL PROTECTED]> 05/13/05 08:06am >>>
At 06:14 PM 5/12/2005, Scott Schaffer wrote:
>I am migrating spamassassin from my perimeter firewall to another server 
>to lighten the load on the firewall. I have installed SA3.0 on the new 
>machine and have done some testing. I am getting different results on each 
>SA install.

Which EXACT version of SA 3.0 do you have on each? 3.0.0? or 3.0.3?


>debug: URIDNSBL: queries completed: 2 started: 2



>debug: URIDNSBL: queries completed: 1 started: 1



>debug: URIDNSBL: queries completed: 0 started: 0


The thing that's most suspicious is that the number of queries completed 
keeps going down on the machine behind the firewall.
The firewall itself seems to keep track of this correctly:

>debug: URIDNSBL: queries completed: 2 started: 2

>debug: URIDNSBL: queries completed: 2 started: 2


>debug: URIDNSBL: queries completed: 2 started: 0


If you're not on 3.0.3, I'd consider trying an upgrade.. that's a pretty 
weird and strange problem, almost certainly a bug in the code somewhere. 




Re: URIDNSBL Scores

2005-05-13 Thread Matt Kettler
At 06:14 PM 5/12/2005, Scott Schaffer wrote:
I am migrating spamassassin from my perimeter firewall to another server 
to lighten the load on the firewall. I have installed SA3.0 on the new 
machine and have done some testing. I am getting different results on each 
SA install.
Which EXACT version of SA 3.0 do you have on each? 3.0.0? or 3.0.3?

debug: URIDNSBL: queries completed: 2 started: 2

debug: URIDNSBL: queries completed: 1 started: 1

debug: URIDNSBL: queries completed: 0 started: 0

The thing that's most suspicious is that the number of queries completed 
keeps going down on the machine behind the firewall.
The firewall itself seems to keep track of this correctly:

debug: URIDNSBL: queries completed: 2 started: 2

debug: URIDNSBL: queries completed: 2 started: 2

debug: URIDNSBL: queries completed: 2 started: 0

If you're not on 3.0.3, I'd consider trying an upgrade.. that's a pretty 
weird and strange problem, almost certainly a bug in the code somewhere. 



Re: URIDNSBL Scores

2005-05-13 Thread Jeff Chan
On Thursday, May 12, 2005, 3:14:13 PM, Scott Schaffer wrote:
> Machine behind the firewall results
> -
> debug: bayes: score = 0.505530427067805
> debug: bayes: 276 untie-ing
> debug: bayes: 276 untie-ing db_toks
> debug: bayes: 276 untie-ing db_seen
> debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2954eac) 
> implements '
> check_tick'
> debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_AB_SURBL): 
> 127.0.0.10
> 2
> debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_WS_SURBL): 
> 127.0.0.10
> 2
> debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_SC_SURBL): 
> 127.0.0.10
> 2
> debug: URIDNSBL: query for blahblahcutie.info took 2 seconds to look up 
> (multi.s
> urbl.org.:blahblahcutie.info)
> debug: URIDNSBL: queries completed: 2 started: 2
> debug: URIDNSBL: queries active:  at Thu May 12 15:14:52 2005

queries completed: 2 looks ok to me, and the SURBL queries got
the right result, but they didn't get scored.  That's indeed odd.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/



URIDNSBL Scores

2005-05-12 Thread Scott Schaffer
Hi.

I am migrating spamassassin from my perimeter firewall to another server to 
lighten the load on the firewall. I have installed SA3.0 on the new machine and 
have done some testing. I am getting different results on each SA install.

Configuration for both machines: Windows 2000 all hotfixes and services packs 
installed, same amount of memory, cpu etc,. SA 3.0 on each. Spamassassin is 
called through Guinevere 2.17, the Groupwise Av scanner integration.

If I run the same email through each install, the firewall implementation will 
pick up scores from the URIDNSBL tests and add it to the total where the SA 
implementation behind the firewall will not. I have included the relevant 
portions of each SA run from the two installs. The first is the machine behind 
the firewall, and the second is the firewall machine. As you can see there is a 
large difference in the scores. Is this a timing issue, perhaps? If so, where 
do I increase the time for dnsbl look ups. What else could it be?

Thanks for any help anyone can give me.

Scott Schaffer

Machine behind the firewall results
-
debug: bayes: score = 0.505530427067805
debug: bayes: 276 untie-ing
debug: bayes: 276 untie-ing db_toks
debug: bayes: 276 untie-ing db_seen
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2954eac) implements '
check_tick'
debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_AB_SURBL): 127.0.0.10
2
debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_WS_SURBL): 127.0.0.10
2
debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_SC_SURBL): 127.0.0.10
2
debug: URIDNSBL: query for blahblahcutie.info took 2 seconds to look up (multi.s
urbl.org.:blahblahcutie.info)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Thu May 12 15:14:52 2005
debug: running raw-body-text per-line regexp tests; score so far=0.001
debug: running full-text regexp tests; score so far=0.001
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: URIDNSBL: queries completed: 1 started: 1
debug: URIDNSBL: queries active: A=1 at Thu May 12 15:14:52 2005
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x2954eac) implements '
check_post_dnsbl'
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: A=1 DNSBL=1 at Thu May 12 15:14:52 2005
debug: waiting 2 seconds for URIDNSBL lookups to complete
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: A=1 DNSBL=1 at Thu May 12 15:14:52 2005
debug: running meta tests; score so far=0.001
debug: running header regexp tests; score so far=0.001
debug: running body-text per-line regexp tests; score so far=0.001
debug: running uri tests; score so far=0.001
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: A=1 DNSBL=1 at Thu May 12 15:14:53 2005
debug: running raw-body-text per-line regexp tests; score so far=0.001
debug: running full-text regexp tests; score so far=0.001
debug: Running tests for priority: 1000
debug: running meta tests; score so far=0.001
debug: running header regexp tests; score so far=0.001
debug: running body-text per-line regexp tests; score so far=0.001
debug: running uri tests; score so far=0.001
debug: URIDNSBL: queries completed: 0 started: 0
debug: URIDNSBL: queries active: A=1 DNSBL=1 at Thu May 12 15:14:53 2005
debug: running raw-body-text per-line regexp tests; score so far=0.001
debug: running full-text regexp tests; score so far=0.001
-
firewall machine results
--
debug: bayes: score = 0.505912963129377
debug: bayes: 96 untie-ing
debug: bayes: 96 untie-ing db_toks
debug: bayes: 96 untie-ing db_seen
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x292e8b8) implements '
check_tick'
debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_AB_SURBL): 127.0.0.10
2
debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_WS_SURBL): 127.0.0.10
2
debug: URIDNSBL: domain "blahblahcutie.info" listed (URIBL_SC_SURBL): 127.0.0.10
2
debug: URIDNSBL: query for blahblahcutie.info took 3 seconds to look up (multi.s
urbl.org.:blahblahcutie.info)
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Thu May 12 15:13:53 2005
debug: running raw-body-text per-line regexp tests; score so far=0.001
debug: running full-text regexp tests; score so far=0.001
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: URIDNSBL: queries completed: 2 started: 2
debug: URIDNSBL: queries active:  at Thu May 12 15:13:53 2005
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x292e8b8) implements '
check_po