On Fri, Aug 22, 2003 at 04:11:45PM -0700, Justin Mason is rumored to have said:
>
> Tim Buck writes:
> > I installed 2.60 rc1 (upgraded from 2.55) yesterday afternoon. Two
> > of my users today reported several very obvious spam messages got
> > through; none has on my account. I looked at the offending messages,
> > and they had no SpamAssassin headers whatsoever; they, for whatever
> > reason, were not even processed through SA (we use Procmail on an
> > individual by individual basis to filter mail through SA).
> >
> > I couldn't find any reason for this change in behavior, and out of
> > 28 people who use SpamAssassin, only 2 reported this. I looked at
> > their .procmailrc and .spamassassin/user_prefs files and didn't
> > see anything out of the ordinary.
> >
> > I even had one user switch back to running spamassassin (the
> > standalone version) instead of spamc (the client-daemon version),
> > but it made no difference.
> >
> > So I've reverted back to SA 2.55. Anyone else see this behavior?
>
> Sounds like the Dns.pm undefined value problem as well. that will
> crash if DNS lookups timeout it seems :(
> will be fixed in rc2,
>
I'm seeing the same thing. I was using a CVS version from about 6 weeks ago (give or
take a couple weeks) with great success, now I'm not seeing any headers added
whatsoever. Nothing with my local.cf, user_prefs or .procmailrc has changed - this
started happening as soon as I installed RC1.
Here's an example of log entries from spamd (syslog) and procmail for one of these
messages:
procmail: Assigning "TIMEOUT=120"
procmail: Assigning "LOCKTIMEOUT=500"
procmail: Assigning "DROPPRIVS=NO"
procmail: Assigning "PATH=/bin:/usr/bin:/usr/local/bin:/usr/bin/X11:/etc/smrsh"
procmail: No match on "^subject:.*e-mail viruses detected"
procmail: No match on "^subject:.*{virus"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on "^subject:.*cnn breaking news"
procmail: No match on "X-Loopy"
procmail: Executing "/usr/bin/formail,-a,X-Loopy: Been here before"
procmail: No match on "^subject:.*\[mailman"
procmail: No match on "^subject:.*\[exim"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on "^subject:.*\[satalk"
procmail: No match on "^subject:.*\[fightlist\]"
procmail: No match on "^subject:.*FrysForum"
procmail: No match on "^subject:.*\[blueplanes\]"
procmail: No match on "^subject:.*\[pwei\]"
procmail: No match on "^(to|cc):.*nanog"
procmail: No match on
"((^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)|for
<)[EMAIL PROTECTED]"
procmail: Match on "< 100000"
procmail: Locking "spamc.lock"
procmail: Executing "/usr/bin/spamc"
procmail: [11420] Fri Aug 22 16:47:14 2003
procmail: Unlocking "spamc.lock"
procmail: No match on "^X-Spam-Status: Yes"
procmail: No match on "^^rom[ ]"
procmail: No match on "^subject:.*fry's feedback"
procmail: No match on "^from: commissionjunction"
procmail: No match on "frysmail"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on "^subject:.*\{Virus\?\}"
procmail: No match on "^(to|cc):.*(steve|sthomas)@pager"
procmail: No match on "^from:.*(datek|ameritrade)\."
procmail: No match on "^from:.*providianservices"
procmail: No match on "^from:.*bigzoo"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on "^subject:.*get_time"
procmail: No match on
"(^((Original-)?(Resent-)?(To|Cc|Bcc)|(X-Envelope|Apparently(-Resent)?)-To):(.*[^-a-zA-Z0-9_.])?)[EMAIL
PROTECTED]"
procmail: No match on "^from:[EMAIL PROTECTED]"
procmail: Locking "/var/spool/mail/sthomas.lock"
procmail: Assigning "LASTFOLDER=/var/spool/mail/sthomas"
procmail: Opening "/var/spool/mail/sthomas"
procmail: Acquiring kernel-lock
procmail: Unlocking "/var/spool/mail/sthomas.lock"
procmail: Notified comsat: "[EMAIL PROTECTED]:/var/spool/mail/sthomas"
>From [EMAIL PROTECTED] Fri Aug 22 16:47:09 2003
Subject: testing
Folder: /var/spool/mail/sthomas 793
-------------------------------------------------------------------------------
ug 22 16:47:09 chips spamd[11022]: logmsg: connection from localhost [127.0.0.1] at
port 57236
Aug 22 16:47:09 chips spamd[11022]: connection from localhost [127.0.0.1] at port
57236
Aug 22 16:47:09 chips spamd[11425]: logmsg: info: setuid to sthomas succeeded
Aug 22 16:47:09 chips spamd[11425]: info: setuid to sthomas succeeded
Aug 22 16:47:09 chips spamd[11425]: debug: user has changed
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing
Aug 22 16:47:09 chips spamd[11425]: debug: using "/home/sthomas/.spamassassin" for
user state dir
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 tie-ing to DB file R/O
/home/sthomas/.spamassassin/bayes_toks
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 tie-ing to DB file R/O
/home/sthomas/.spamassassin/bayes_seen
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: found bayes db version 2
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: Not available for scanning, only 48
ham(s) in Bayes DB < 200
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing db_toks
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing db_seen
Aug 22 16:47:09 chips spamd[11425]: debug: Score set 1 chosen.
Aug 22 16:47:09 chips spamd[11425]: logmsg: processing message <[EMAIL PROTECTED]> for
sthomas:500.
Aug 22 16:47:09 chips spamd[11425]: processing message <[EMAIL PROTECTED]> for
sthomas:500.
Aug 22 16:47:09 chips spamd[11425]: debug: using "/home/sthomas/.spamassassin" for
user state dir
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 tie-ing to DB file R/O
/home/sthomas/.spamassassin/bayes_toks
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 tie-ing to DB file R/O
/home/sthomas/.spamassassin/bayes_seen
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: found bayes db version 2
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: Not available for scanning, only 48
ham(s) in Bayes DB < 200
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing db_toks
Aug 22 16:47:09 chips spamd[11425]: debug: bayes: 11425 untie-ing db_seen
Aug 22 16:47:09 chips spamd[11425]: debug: received-header: parsed as [ ip=64.52.111.5
rdns=frogger.apexvoice.com helo=frogger.apexvoice.com by=chips.sthomas.net ident= ]
Aug 22 16:47:09 chips spamd[11425]: debug: received-header: 'by' chips.sthomas.net has
public IP 24.199.24.165
Aug 22 16:47:09 chips spamd[11425]: debug: received-header: relay 64.52.111.5 trusted?
no
Aug 22 16:47:09 chips spamd[11425]: debug: is Net::DNS::Resolver available? yes
Aug 22 16:47:09 chips spamd[11425]: debug: all '*From' addrs: [EMAIL PROTECTED]
Aug 22 16:47:09 chips spamd[11425]: debug: running header regexp tests; score so far=0
Aug 22 16:47:09 chips spamd[11425]: debug: running body-text per-line regexp tests;
score so far=0
Aug 22 16:47:09 chips spamd[11425]: debug: Razor2 is available
Aug 22 16:47:09 chips spamd[11425]: debug: entering helper-app run mode
Aug 22 16:47:13 chips spamd[11425]: debug: Using results from Razor v2.22
Aug 22 16:47:13 chips spamd[11425]: debug: Found Razor2 part: part=0 engine=4 ct=0
cf=-62
Aug 22 16:47:13 chips spamd[11425]: debug: leaving helper-app run mode
Aug 22 16:47:13 chips spamd[11425]: debug: Razor2 results: spam? 0 highest cf score:
0
Aug 22 16:47:13 chips spamd[11425]: debug: running raw-body-text per-line regexp
tests; score so far=0
Aug 22 16:47:13 chips spamd[11425]: debug: running uri tests; score so far=0
Aug 22 16:47:13 chips spamd[11425]: debug: uri tests: Done uriRE
Aug 22 16:47:13 chips spamd[11425]: debug: running full-text regexp tests; score so
far=0
Aug 22 16:47:13 chips spamd[11425]: debug: Razor2 is available
Aug 22 16:47:13 chips spamd[11425]: debug: DCCifd is not available: no r/w dccifd
socket found.
Aug 22 16:47:13 chips spamd[11425]: debug: DCC is not available: no executable dccproc
found.
Aug 22 16:47:13 chips spamd[11425]: debug: Pyzor is not available: pyzor not found
Aug 22 16:47:13 chips spamd[11425]: debug: all '*To' addrs: [EMAIL PROTECTED]
Aug 22 16:47:13 chips spamd[11425]: debug: forged-HELO: from=apexvoice.com
helo=apexvoice.com by=sthomas.net
Aug 22 16:47:13 chips spamd[11425]: debug: DNS MX records found: 0
Aug 22 16:47:13 chips spamd[11425]: debug: DNS A records found: 1
Aug 22 16:47:14 chips spamd[11425]: debug: RBL: success for 10 of 11 queries
--
"There are people in the world so hungry, that God cannot appear to them except in the
form of bread."
- Mahatma Gandhi (1869-1948)
-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
