> On Fri, Feb 11, 2005 at 10:37:06AM -0500, Chris Santerre wrote:
> >
> > >
> > >> > 4) Can you share the output from a --lint with us?
> > >> $ spamassassin --lint
> > >> [EMAIL PROTECTED]:~$
> > >
> > >What about spamassassin -D --lint?
> > >
> > >Kind Regards,
> > >Sander Holthaus
> >
> > LOL, yeah I need to start typing exactly what I mean :)
> >
> > Can we get the output from the "spamassassin -D --lint" please?
>
> I should have read what you meant! Ok. Here it is ( have
> since added a few more rules ) :
>
> debug: SpamAssassin version 3.0.2
> debug: Score set 0 chosen.
> debug: running in taint mode? yes
> debug: Running in taint mode, removing unsafe env vars, and
> resetting PATH
> debug: PATH included '/home/spamd/bin', keeping.
> debug: PATH included '/usr/local/bin', keeping.
> debug: PATH included '/usr/bin', keeping.
> debug: PATH included '/bin', keeping.
> debug: PATH included '/usr/bin/X11', which doesn't exist, dropping.
> debug: PATH included '/usr/games', keeping.
> debug: Final PATH set to:
> /home/spamd/bin:/usr/local/bin:/usr/bin:/bin:/usr/games
> debug: diag: module installed: DBI, version 1.21
> debug: diag: module installed: DB_File, version 1.75
> debug: diag: module installed: Digest::SHA1, version 2.00
> debug: diag: module installed: IO::Socket::UNIX, version 1.20
> debug: diag: module installed: MIME::Base64, version 2.12
You should upgrade that one
> debug: diag: module installed: Net::DNS, version 0.48
> debug: diag: module not installed: Net::LDAP ('require' failed)
> debug: diag: module not installed: Razor2::Client::Agent
> ('require' failed)
> debug: diag: module installed: Storable, version 1.014
> debug: diag: module installed: URI, version 1.18
You should probably upgrade this one as well
> debug: ignore: using a test message to lint rules
> debug: using "/etc/spamassassin/init.pre" for site rules init.pre
> debug: config: read file /etc/spamassassin/init.pre
> debug: using "/usr/share/spamassassin" for default rules dir
> debug: config: read file /usr/share/spamassassin/10_misc.cf
> debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
> debug: config: read file /usr/share/spamassassin/20_body_tests.cf
> debug: config: read file /usr/share/spamassassin/20_compensate.cf
> debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
> debug: config: read file /usr/share/spamassassin/20_drugs.cf
> debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
> debug: config: read file /usr/share/spamassassin/20_head_tests.cf
> debug: config: read file /usr/share/spamassassin/20_html_tests.cf
> debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
> debug: config: read file /usr/share/spamassassin/20_phrases.cf
> debug: config: read file /usr/share/spamassassin/20_porn.cf
> debug: config: read file /usr/share/spamassassin/20_ratware.cf
> debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
> debug: config: read file /usr/share/spamassassin/23_bayes.cf
> debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
> debug: config: read file /usr/share/spamassassin/25_hashcash.cf
> debug: config: read file /usr/share/spamassassin/25_spf.cf
> debug: config: read file /usr/share/spamassassin/25_uribl.cf
> debug: config: read file /usr/share/spamassassin/30_text_de.cf
> debug: config: read file /usr/share/spamassassin/30_text_fr.cf
> debug: config: read file /usr/share/spamassassin/30_text_nl.cf
> debug: config: read file /usr/share/spamassassin/30_text_pl.cf
> debug: config: read file /usr/share/spamassassin/50_scores.cf
> debug: config: read file /usr/share/spamassassin/60_whitelist.cf
> debug: config: read file /usr/share/spamassassin/65_debian.cf
> debug: using "/etc/spamassassin" for site rules dir
> debug: config: read file /etc/spamassassin/70_sare_bayes_poison_nxm.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj0.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj1.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj3.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj_arc.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj_eng.cf
> debug: config: read file /etc/spamassassin/70_sare_genlsubj_x30.cf
> debug: config: read file /etc/spamassassin/70_sare_header.cf
> debug: config: read file /etc/spamassassin/70_sare_header0.cf
> debug: config: read file /etc/spamassassin/70_sare_header1.cf
> debug: config: read file /etc/spamassassin/70_sare_header2.cf
> debug: config: read file /etc/spamassassin/70_sare_header3.cf
> debug: config: read file /etc/spamassassin/70_sare_header_arc.cf
> debug: config: read file /etc/spamassassin/70_sare_header_eng.cf
> debug: config: read file /etc/spamassassin/70_sare_header_x264_x30.cf
This one is not intended for 3.x, already included in the base distribution.
> debug: config: read file /etc/spamassassin/70_sare_header_x30.cf
This one is not intended for 3.x, already included in the base distribution.
> debug: config: read file /etc/spamassassin/70_sare_html0.cf
> debug: config: read file /etc/spamassassin/70_sare_html1.cf
> debug: config: read file /etc/spamassassin/70_sare_html2.cf
> debug: config: read file /etc/spamassassin/70_sare_html3.cf
> debug: config: read file /etc/spamassassin/70_sare_html_eng.cf
> debug: config: read file /etc/spamassassin/70_sare_specific.cf
> debug: config: read file /etc/spamassassin/70_sare_spoof.cf
> debug: config: read file /etc/spamassassin/99_sare_fraud_post25x.cf
> debug: config: read file /etc/spamassassin/evilnumbers.cf
> debug: config: read file /etc/spamassassin/local.cf
> debug: using "/home/spamd/.spamassassin" for user state dir
> debug: using "/home/spamd/.spamassassin/user_prefs" for user
> prefs file
> debug: config: read file /home/spamd/.spamassassin/user_prefs
> debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
> debug: plugin: registered
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8a565dc)
> debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
> debug: plugin: registered
> Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8a3f6ac)
> debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
> debug: plugin: registered
> Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c)
> debug: plugin:
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8a565dc)
> implements 'parse_config'
> debug: plugin:
> Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8a3f6ac)
> implements 'parse_config'
> debug: using "/home/spamd/.spamassassin" for user state dir
> debug: bayes: 31254 tie-ing to DB file R/O
> /home/spamd/.spamassassin/bayes_toks
> debug: bayes: 31254 tie-ing to DB file R/O
> /home/spamd/.spamassassin/bayes_seen
> debug: bayes: found bayes db version 3
> debug: using "/home/spamd/.spamassassin" for user state dir
> debug: Score set 3 chosen.
> debug: ---- MIME PARSER START ----
> debug: main message type: text/plain
> debug: parsing normal part
> debug: added part, type: text/plain
> debug: ---- MIME PARSER END ----
> debug: metadata: X-Spam-Relays-Trusted:
> debug: metadata: X-Spam-Relays-Untrusted:
> debug: plugin:
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8a565dc)
> implements 'parsed_metadata'
> debug: is Net::DNS::Resolver available? yes
> debug: Net::DNS version: 0.48
> debug: servers: localhost 146.232.128.10 146.232.128.1
> debug: Looking up NS records for user specified servers:
> localhost, 146.232.128.10, 146.232.128.1
> debug: trying (3) localhost...
> debug: looking up NS for 'localhost'
> debug: NS lookup of localhost succeeded => Dns available (set
> dns_available to hardcode)
> debug: is DNS available? 1
> debug: decoding: no encoding detected
> debug: URIDNSBL: domains to query:
> debug: all '*From' addrs: [EMAIL PROTECTED]
> debug: Running tests for priority: 0
> debug: running header regexp tests; score so far=0
> debug: registering glue method for check_for_spf_fail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c))
> debug: SPF: message was delivered entirely via trusted
> relays, not required
> debug: registering glue method for check_for_spf_pass
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c))
> debug: all '*To' addrs:
> debug: registering glue method for check_hashcash_value
> (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8a3f6ac))
> debug: registering glue method for check_for_spf_helo_fail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c))
> debug: SPF: message was delivered entirely via trusted
> relays, not required
> debug: registering glue method for check_for_spf_helo_pass
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c))
> debug: registering glue method for
> check_hashcash_double_spend
> (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8a3f6ac))
> debug: registering glue method for check_for_spf_softfail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c))
> debug: registering glue method for
> check_for_spf_helo_softfail
> (Mail::SpamAssassin::Plugin::SPF=HASH(0x8a7098c))
> debug: running body-text per-line regexp tests; score so far=-3.174
> debug: running uri tests; score so far=-3.174
> debug: bayes corpus size: nspam = 14077, nham = 11189
> debug: tokenize: header tokens for *F = "U*ignore
> D*compiling.spamassassin.taint.org D*spamassassin.taint.org
> D*taint.org D*org"
> debug: tokenize: header tokens for *m = " 1108131719 lint_rules "
> debug: tokenize: header tokens for *RT = " "
> debug: tokenize: header tokens for *RU = " "
> debug: bayes token 'H*Ad:D*org' => 0.0265960935967279
> debug: bayes token 'H*F:D*org' => 0.122866698003445
> debug: bayes: score = 0.0908897859747465
> debug: bayes: 31254 untie-ing
> debug: bayes: 31254 untie-ing db_toks
> debug: bayes: 31254 untie-ing db_seen
> debug: registering glue method for check_uridnsbl
> (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8a565dc))
> debug: Razor2 is not available
> debug: plugin:
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8a565dc)
> implements 'check_tick'
> debug: running raw-body-text per-line regexp tests; score so
> far=-5.125
> debug: running full-text regexp tests; score so far=-5.125
> debug: Razor2 is not available
> debug: DCCifd is not available: no r/w dccifd socket found.
> debug: Current PATH is:
> /home/spamd/bin:/usr/local/bin:/usr/bin:/bin:/usr/games
> debug: DCC is not available: no executable dccproc found.
> debug: Pyzor is not available: pyzor not found
> debug: Running tests for priority: 500
> debug: RBL: success for 1 of 1 queries
> debug: plugin:
> Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8a565dc)
> implements 'check_post_dnsbl'
> debug: running meta tests; score so far=-5.125
> debug: running header regexp tests; score so far=-3.408
> debug: running body-text per-line regexp tests; score so far=-3.408
> debug: running uri tests; score so far=-3.408
> debug: running raw-body-text per-line regexp tests; score so
> far=-3.408
> debug: running full-text regexp tests; score so far=-3.408
> debug: Running tests for priority: 1000
> debug: running meta tests; score so far=-3.408
> debug: running header regexp tests; score so far=-3.408
> debug: running body-text per-line regexp tests; score so far=-3.408
> debug: running uri tests; score so far=-3.408
> debug: running raw-body-text per-line regexp tests; score so
> far=-3.408
> debug: running full-text regexp tests; score so far=-3.408
> debug: is spam? score=-3.408 required=8
> debug:
> tests=ALL_TRUSTED,BAYES_20,MISSING_HEADERS,MISSING_SUBJECT,NO_
REAL_NAME,SARE_TOCC_NONE
> debug:
> subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_
MSGID,__SARE_CC_NONE,__SARE_HTML_HAS_MSG,__SARE_TO_NONE,> __UNUSABLE_MSGID
In general, you might try replacing those SARE 2 and 3 rulesets will other
rulessets that will hit more on spam and less on ham. See
www.rulesemporium.com for more rulesets. Also, check you memory usage, spamd
will tend to get very large when using many rule-sets (50MB is not uncommon
if you're running with many extra rules-sets)
Also, consider using Razor (and if you have the resources, DCC and Pyzor).
They will hit on a lot of spam. For me at least, Razor the second best test
after Bayes.
Kind Regards,
Sander Holthaus
