Thanks for the help everyone. Here is the new spam log running against the same email now using the solution given below in the local.cf file. Is there anything else you see that might be causing any other issues?
Thanks Robert -----Original Message----- From: Martin Hepworth [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 23, 2005 8:33 AM To: [EMAIL PROTECTED] Cc: 'Matt Kettler'; users@spamassassin.apache.org Subject: Re: Low scoring spam Robert set the score to zero in local.cf score ALL_TRUSTED 0 -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Robert Bartlett wrote: > Do you suggest until resolved disable this? If to disable it what exactly do > I need to disable? > > Thanks again! > Robert > > -----Original Message----- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Wednesday, February 23, 2005 8:28 AM > To: [EMAIL PROTECTED]; users@spamassassin.apache.org > Subject: Re: Low scoring spam > > > At 10:09 AM 2/23/2005, Robert Bartlett wrote: > >>I have one client who gets 15-20 spam emails a day. Currently Im using SA >>3.0.1. I had auto whitelist and auto learn on and since turned this off. I >>ran spamd -D on one of the emails that got through that should of been >>marked spam. > > > > From your log: > > >>debug: metadata: X-Spam-Relays-Trusted: >>debug: metadata: X-Spam-Relays-Untrusted: > > > > Looks like SA can't parse your received headers and thus assumes "all > trusted" because there's no untrusted... > > Yet another reason why 3949 needs fixing. > > http://bugzilla.spamassassin.org/show_bug.cgi?id=3949 > > ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. **********************************************************************
debug: SpamAssassin version 3.0.1 debug: Score set 0 chosen. debug: Storable module v2.09 found debug: Preloading modules with HOME=/tmp/spamd-8541-init debug: ignore: test message to precompile patterns and load modules debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre debug: config: read file /etc/mail/spamassassin/init.pre debug: using "/usr/share/spamassassin" for default rules dir debug: config: read file /usr/share/spamassassin/10_misc.cf debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf debug: config: read file /usr/share/spamassassin/20_body_tests.cf debug: config: read file /usr/share/spamassassin/20_compensate.cf debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf debug: config: read file /usr/share/spamassassin/20_drugs.cf debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf debug: config: read file /usr/share/spamassassin/20_head_tests.cf debug: config: read file /usr/share/spamassassin/20_html_tests.cf debug: config: read file /usr/share/spamassassin/20_meta_tests.cf debug: config: read file /usr/share/spamassassin/20_phrases.cf debug: config: read file /usr/share/spamassassin/20_porn.cf debug: config: read file /usr/share/spamassassin/20_ratware.cf debug: config: read file /usr/share/spamassassin/20_uri_tests.cf debug: config: read file /usr/share/spamassassin/23_bayes.cf debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf debug: config: read file /usr/share/spamassassin/25_hashcash.cf debug: config: read file /usr/share/spamassassin/25_spf.cf debug: config: read file /usr/share/spamassassin/25_uribl.cf debug: config: read file /usr/share/spamassassin/30_text_de.cf debug: config: read file /usr/share/spamassassin/30_text_fr.cf debug: config: read file /usr/share/spamassassin/30_text_nl.cf debug: config: read file /usr/share/spamassassin/30_text_pl.cf debug: config: read file /usr/share/spamassassin/50_scores.cf debug: config: read file /usr/share/spamassassin/60_whitelist.cf debug: using "/etc/mail/spamassassin" for site rules dir debug: config: read file /etc/mail/spamassassin/70_sare_adult.cf debug: config: read file /etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf debug: config: read file /etc/mail/spamassassin/70_sare_header.cf debug: config: read file /etc/mail/spamassassin/70_sare_highrisk.cf debug: config: read file /etc/mail/spamassassin/70_sare_html.cf debug: config: read file /etc/mail/spamassassin/70_sare_oem.cf debug: config: read file /etc/mail/spamassassin/70_sare_random.cf debug: config: read file /etc/mail/spamassassin/70_sare_specific.cf debug: config: read file /etc/mail/spamassassin/70_sare_spoof.cf debug: config: read file /etc/mail/spamassassin/70_sare_unsub.cf debug: config: read file /etc/mail/spamassassin/70_sare_uri.cf debug: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf debug: config: read file /etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf debug: config: read file /etc/mail/spamassassin/99_FVGT_Tripwire.cf debug: config: read file /etc/mail/spamassassin/99_sare_fraud_post25x.cf debug: config: read file /etc/mail/spamassassin/bogus-virus-warnings.cf debug: config: read file /etc/mail/spamassassin/chickenpox.cf debug: config: read file /etc/mail/spamassassin/evilnumbers.cf debug: config: read file /etc/mail/spamassassin/local.cf debug: config: read file /etc/mail/spamassassin/random.current.cf debug: config: read file /etc/mail/spamassassin/weeds2.cf debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0xaa4c540) debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0xaa9fbe4) debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) implements 'parse_config' debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0xaa4c540) implements 'parse_config' debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) inhibited further callbacks debug: bayes: no dbs present, cannot tie DB R/O: /tmp/spamd-8541-init/.spamassassin/bayes_toks debug: Score set 1 chosen. debug: ---- MIME PARSER START ---- debug: main message type: text/plain debug: parsing normal part debug: added part, type: text/plain debug: ---- MIME PARSER END ---- debug: bayes: no dbs present, cannot tie DB R/O: /tmp/spamd-8541-init/.spamassassin/bayes_toks debug: metadata: X-Spam-Relays-Trusted: debug: metadata: X-Spam-Relays-Untrusted: debug: decoding: no encoding detected debug: Loading languages file... debug: Language possibly: en,sco debug: metadata: X-Languages: en sco debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) implements 'parsed_metadata' debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.48 debug: trying (3) motorola.com... debug: looking up NS for 'motorola.com' debug: NS lookup of motorola.com succeeded => Dns available (set dns_available to hardcode) debug: is DNS available? 1 debug: URIDNSBL: domains to query: debug: all '*From' addrs: [EMAIL PROTECTED] debug: Running tests for priority: 0 debug: running header regexp tests; score so far=0 debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0xaa4c540)) debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0xaa9fbe4)) debug: SPF: message was delivered entirely via trusted relays, not required debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0xaa4c540)) debug: all '*To' addrs: debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0xaa9fbe4)) debug: SPF: message was delivered entirely via trusted relays, not required debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0xaa9fbe4)) debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0xaa9fbe4)) debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0xaa9fbe4)) debug: running body-text per-line regexp tests; score so far=0.197 debug: running uri tests; score so far=0.197 debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68)) debug: Razor2 is not available debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) implements 'check_tick' debug: running raw-body-text per-line regexp tests; score so far=0.197 debug: running full-text regexp tests; score so far=0.197 debug: Razor2 is not available debug: Current PATH is: /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/usr/X11R6/bin debug: Pyzor is not available: pyzor not found debug: DCCifd is not available: no r/w dccifd socket found. debug: executable for dccproc was found at /usr/local/bin/dccproc debug: DCC is available: /usr/local/bin/dccproc debug: entering helper-app run mode debug: setuid: helper proc 8543: ruid=0 euid=0 debug: DCC: got response: X-DCC-Misty-Metrics: milkyway.digitalphx.com 1170; Body=17084 Fuz1=3312948 Fuz2=3312821 debug: leaving helper-app run mode debug: DCC: Listed! BODY: 17084 of 999999 FUZ1: 3312948 of 999999 FUZ2: 3312821 of 999999 debug: Running tests for priority: 500 debug: RBL: success for 1 of 1 queries debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xaa4dc68) implements 'check_post_dnsbl' debug: running meta tests; score so far=1.57 debug: running header regexp tests; score so far=3.14 debug: running body-text per-line regexp tests; score so far=3.14 debug: running uri tests; score so far=3.14 debug: running raw-body-text per-line regexp tests; score so far=3.14 debug: running full-text regexp tests; score so far=3.14 debug: Running tests for priority: 1000 debug: running meta tests; score so far=3.14 debug: running header regexp tests; score so far=3.14 debug: running body-text per-line regexp tests; score so far=3.14 debug: running uri tests; score so far=3.14 debug: running raw-body-text per-line regexp tests; score so far=3.14 debug: running full-text regexp tests; score so far=3.14 debug: is spam? score=3.14 required=5 debug: tests=DCC_CHECK,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_
