Hmm, then I must have something wrong because I have the URIDNSBL plugin
installed and my network tests are active (not using -L on command line)
and amavisd-new has $SALocalTestsOnly = 0;
When I run this email against commandline spamassassin, I get this (can
anyone point out what I may have wrong?):
$ /usr/bin/spamassassin -D -t < ~jason/message.txt
debug: SpamAssassin version 3.0.2
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting
PATH
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/usr/X11R6/bin', which doesn't exist, dropping.
debug: PATH included '/opt/bin', keeping.
debug: Final PATH set to: /bin:/usr/bin:/opt/bin
debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/mail/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
debug: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_header.cf
debug: config: read file /etc/mail/spamassassin/70_sare_random.cf
debug: config: read file /etc/mail/spamassassin/70_sare_ratware.cf
debug: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
debug: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
debug: config: read file /etc/mail/spamassassin/99_sare_fraud_post25x.cf
debug: config: read file /etc/mail/spamassassin/bogus-virus-warnings.cf
debug: config: read file /etc/mail/spamassassin/german.cf
debug: config: read file /etc/mail/spamassassin/local.cf
debug: config: read file /etc/mail/spamassassin/tripwire.cf
debug: using "/usr/local/amavisd/.spamassassin" for user state dir
debug: using "/usr/local/amavisd/.spamassassin/user_prefs" for user
prefs file
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb766c)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cb5998)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb766c)
implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cb5998)
implements 'parse_config'
debug: rewrite_header: ignoring 1, not From, Subject, or To
debug: bayes: 27672 tie-ing to DB file R/O
/usr/local/amavisd/.spamassassin/bayes_toks
debug: bayes: 27672 tie-ing to DB file R/O
/usr/local/amavisd/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: Score set 3 chosen.
debug: dns_available set to yes in config file, skipping test
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.49
debug: IP is reserved, not looking up PTR: 172.16.112.6
debug: received-header: parsed as [ ip=172.16.112.6 rdns=
helo=calgty1.forzani.com by=CALMAIL01.fglcorporate.net ident= envfrom=
intl=0 id= auth= ]
debug: IP is reserved, not looking up PTR: 127.0.0.1
debug: received-header: parsed as [ ip=127.0.0.1 rdns= helo=localhost
by=calgty1.forzani.com ident= envfrom= intl=0 id=778C057C auth= ]
debug: IP is reserved, not looking up PTR: 127.0.0.1
debug: received-header: parsed as [ ip=127.0.0.1 rdns=
helo=calgty1.forzani.com by=localhost ident= envfrom= intl=0 id=06187-08
auth= ]
debug: received-header: parsed as [ ip=80.219.248.164
rdns=80-219-248-164.dclient.hispeed.ch
helo=80-219-248-164.dclient.hispeed.ch by=calgty1.forzani.com ident=
envfrom= intl=0 id=945A557B auth= ]
debug: received-header: parsed as [ ip=157.71.161.242
rdns=sjzxpkl.dnaco.net helo=VAKVD by=vdrkmeuww.dnaco.net ident=
[EMAIL PROTECTED] intl=0 id=4S2R2Q9636 auth= ]
debug: looking up A records for 'CALMAIL01.fglcorporate.net'
debug: A records for 'CALMAIL01.fglcorporate.net':
debug: received-header: 'from' 172.16.112.6 has reserved IP
debug: looking up A records for 'CALMAIL01.fglcorporate.net'
debug: A records for 'CALMAIL01.fglcorporate.net':
debug: received-header: relay 172.16.112.6 trusted? yes internal? no
debug: received-header: 'from' 127.0.0.1 has reserved IP
debug: looking up A records for 'calgty1.forzani.com'
debug: A records for 'calgty1.forzani.com': 66.11.77.222
debug: received-header: 'by' calgty1.forzani.com has public IP
66.11.77.222
debug: received-header: relay 127.0.0.1 trusted? yes internal? no
debug: received-header: 'from' 127.0.0.1 has reserved IP
debug: looking up A records for 'localhost'
debug: A records for 'localhost':
debug: received-header: relay 127.0.0.1 trusted? yes internal? no
debug: looking up A records for 'calgty1.forzani.com'
debug: A records for 'calgty1.forzani.com': 66.11.77.222
debug: received-header: 'by' calgty1.forzani.com has public IP
66.11.77.222
debug: received-header: relay 80.219.248.164 trusted? no internal? no
debug: received-header: relay 157.71.161.242 trusted? no internal? no
debug: metadata: X-Spam-Relays-Trusted: [ ip=172.16.112.6 rdns=
helo=calgty1.forzani.com by=CALMAIL01.fglcorporate.net ident= envfrom=
intl=0 id= auth= ] [ ip=127.0.0.1 rdns= helo=localhost
by=calgty1.forzani.com ident= envfrom= intl=0 id=778C057C auth= ] [
ip=127.0.0.1 rdns= helo=calgty1.forzani.com by=localhost ident= envfrom=
intl=0 id=06187-08 auth= ]
debug: metadata: X-Spam-Relays-Untrusted: [ ip=80.219.248.164
rdns=80-219-248-164.dclient.hispeed.ch
helo=80-219-248-164.dclient.hispeed.ch by=calgty1.forzani.com ident=
envfrom= intl=0 id=945A557B auth= ] [ ip=157.71.161.242
rdns=sjzxpkl.dnaco.net helo=VAKVD by=vdrkmeuww.dnaco.net ident=
[EMAIL PROTECTED] intl=0 id=4S2R2Q9636 auth= ]
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb766c)
implements 'parsed_metadata'
debug: ---- MIME PARSER START ----
debug: main message type: multipart/related
debug: parsing multipart, got boundary:
----=_Part_27857750_19531241.1741543703695
debug: found part of type multipart/alternative, boundary:
----=_Part_24499137_16233341.1132971202644
debug: parsing multipart, got boundary:
----=_Part_24499137_16233341.1132971202644
debug: found part of type text/plain, boundary:
----=_Part_24499137_16233341.1132971202644
debug: parsing normal part
debug: added part, type: text/plain
debug: found part of type text/html, boundary:
----=_Part_24499137_16233341.1132971202644
debug: parsing normal part
debug: added part, type: text/html
debug: added part, type: multipart/alternative
debug: found part of type image/gif, boundary:
----=_Part_27857750_19531241.1741543703695
debug: parsing normal part
debug: added part, type: image/gif
debug: ---- MIME PARSER END ----
debug: decoding: other encoding type (7bit), ignoring
debug: decoding: other encoding type (7bit), ignoring
debug: URIDNSBL: domains to query:
debug: Return-Path header found after 1 or more Received lines, cannot
trust envelope-from
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cb5998))
debug: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50))
debug: SPF: checking HELO (helo=80-219-248-164.dclient.hispeed.ch,
ip=80.219.248.164)
debug: SPF: trimmed HELO down to 'hispeed.ch'
debug: SPF: query for /80.219.248.164/hispeed.ch: result: none, comment:
SPF: domain of sender hispeed.ch does not designate mailers
debug: all '*From' addrs: [EMAIL PROTECTED]
debug: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cb5998))
debug: all '*To' addrs: [EMAIL PROTECTED]
debug: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50))
debug: SPF: relayed through one or more trusted relays, cannot use
header-based Envelope-From, skipping
debug: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50))
debug: registering glue method for check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50))
debug: forged-HELO: from=dclient.hispeed.ch helo=dclient.hispeed.ch
by=forzani.com
debug: forged-HELO: from=dnaco.net helo=vakvd by=dnaco.net
debug: forged-HELO: mismatch on from: 'dclient.hispeed.ch' !=
'dnaco.net'
debug: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50))
debug: registering glue method for check_for_spf_helo_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8cfce50))
debug: running body-text per-line regexp tests; score so far=3.496
debug: running uri tests; score so far=3.496
debug: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb766c))
debug: bayes corpus size: nspam = 1283, nham = 6353
debug: tokenize: header tokens for *F = "U*Pvqgcm D*dnaco.net D*net"
debug: tokenize: header tokens for To = "U*nova4 D*forzani.com D*com"
debug: tokenize: header tokens for *M = " 6113D5A39232BFE dnaco net "
debug: tokenize: header tokens for MIME-Version = " "
debug: tokenize: header tokens for *c = " multipart/related; ----=_
PHrt _ HHHHHHHH _ HHHHHHHH . HHHHHHHHHHHHH"
debug: tokenize: header tokens for X-Filtered-With = " renattach 1.2.2"
debug: tokenize: header tokens for X-RenAttach-Info = " mode=badlist
action=rename count=0"
debug: tokenize: header tokens for *p = "U*Gbgufbl D*acadiapolymers.com
D*com"
debug: tokenize: header tokens for *RT = " [ ip=172.16.112.6 rdns=
helo=calgty1.forzani.com by=CALMAIL01.fglcorporate.net ident= envfrom=
intl=0 id= auth= ] [ ip=127.0.0.1 rdns= helo=localhost
by=calgty1.forzani.com ident= envfrom= intl=0 id=778C057C auth= ] [
ip=127.0.0.1 rdns= helo=calgty1.forzani.com by=localhost ident= envfrom=
intl=0 id=06187-08 auth= ]"
debug: tokenize: header tokens for *RU = " [ ip=80.219.248.164
rdns=80-219-248-164.dclient.hispeed.ch
helo=80-219-248-164.dclient.hispeed.ch by=calgty1.forzani.com ident=
envfrom= intl=0 id=945A557B auth= ] [ ip=157.71.161.242
rdns=sjzxpkl.dnaco.net helo=VAKVD by=vdrkmeuww.dnaco.net ident=
[EMAIL PROTECTED] intl=0 id=4S2R2Q9636 auth= ]"
debug: tokenize: header tokens for *r = " VAKVD
(sjzxpkl.dnaco.net[157.71.161 ip*157.71.161.242 ]) by
vdrkmeuww.dnaco.net (Postfix) <[EMAIL PROTECTED]>; envelope-
[EMAIL PROTECTED])"
debug: tokenize: header tokens for *r = " VAKVD
(sjzxpkl.dnaco.net[157.71.161 ip*157.71.161.242 ]) by
vdrkmeuww.dnaco.net (Postfix) <[EMAIL PROTECTED]>; envelope-
[EMAIL PROTECTED]) 80-219-248-164.dclient.hispeed.ch
(80-219-248-164.dclient.hispeed.ch [80.219.248 ip*80.219.248.164 ]) by
calgty1.forzani.com (Postfix) ; "
debug: bayes token 'H*RU:sk:calgty1' => 0.00223236514522822
debug: bayes token 'HX-RenAttach-Info:rename' => 0.00232900432900433
debug: bayes token 'H*RT:intl' => 0.00533045897345336
debug: bayes token 'H*RT:helo' => 0.00533045897345336
debug: bayes token 'H*RT:auth' => 0.00533045897345336
debug: bayes token 'H*RT:envfrom' => 0.00533045897345336
debug: bayes token 'H*RT:rdns' => 0.00533045897345336
debug: bayes token 'H*RT:ident' => 0.00533045897345336
debug: bayes token 'H*Ad:D*forzani.com' => 0.0489090909090909
debug: bayes token 'HX-RenAttach-Info:count' => 0.0588796535457774
debug: bayes token 'HX-RenAttach-Info:action' => 0.0588796535457774
debug: bayes token 'HX-RenAttach-Info:badlist' => 0.0588796535457774
debug: bayes token 'HX-Filtered-With:renattach' => 0.0588796535457774
debug: bayes token 'HX-RenAttach-Info:mode' => 0.0588796535457774
debug: bayes token 'H*c:related' => 0.937863372877991
debug: bayes token 'H*M:net' => 0.902313012263157
debug: bayes token 'H*Ad:D*com' => 0.104331247900097
debug: bayes token 'H*p:D*com' => 0.870947568925904
debug: bayes token 'H*r:envelope' => 0.870659558993958
debug: bayes token 'H*MI:net' => 0.863232868845365
debug: bayes: score = 0.02844591636399
cannot write to /usr/local/amavisd/.spamassassin/bayes_journal, Bayes db
update ignored: Permission denied
debug: bayes: 27672 untie-ing
debug: bayes: 27672 untie-ing db_toks
debug: bayes: 27672 untie-ing db_seen
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: Computed razorhome from env: /usr/local/amavisd/.razor
Razor-Log: Found razorhome: /usr/local/amavisd/.razor
Razor-Log: read_file: 16 items read from
/usr/local/amavisd/.razor/razor-agent.conf
May 27 20:18:40.510345 check[27672]: [ 2] [bootup] Logging initiated
LogDebugLevel=9 to stdout
May 27 20:18:40.510777 check[27672]: [ 5] computed
razorhome=/usr/local/amavisd/.razor,
conf=/usr/local/amavisd/.razor/razor-agent.conf,
ident=/usr/local/amavisd/.razor/[EMAIL PROTECTED]
May 27 20:18:40.511040 check[27672]: [ 8] Client supported_engines: 4 8
May 27 20:18:40.512134 check[27672]: [ 8] prep_mail done: mail 1
headers=1622, mime0=120, mime1=111, mime2=163
May 27 20:18:40.512519 check[27672]: [ 5] read_file: 1 items read from
/usr/local/amavisd/.razor/servers.discovery.lst
May 27 20:18:40.512805 check[27672]: [ 5] read_file: 2 items read from
/usr/local/amavisd/.razor/servers.nomination.lst
May 27 20:18:40.513048 check[27672]: [ 5] read_file: 1 items read from
/usr/local/amavisd/.razor/servers.catalogue.lst
May 27 20:18:40.513366 check[27672]: [ 9] Assigning defaults to
folly.cloudmark.com
May 27 20:18:40.513533 check[27672]: [ 9] Assigning defaults to
joy.cloudmark.com
May 27 20:18:40.513687 check[27672]: [ 9] Assigning defaults to
shock.cloudmark.com
May 27 20:18:40.514400 check[27672]: [ 5] read_file: 13 items read from
/usr/local/amavisd/.razor/server.joy.cloudmark.com.conf
May 27 20:18:40.514916 check[27672]: [ 5] read_file: 13 items read from
/usr/local/amavisd/.razor/server.joy.cloudmark.com.conf
May 27 20:18:40.515472 check[27672]: [ 5] read_file: 14 items read from
/usr/local/amavisd/.razor/server.folly.cloudmark.com.conf
May 27 20:18:40.515878 check[27672]: [ 5] read_file: 14 items read from
/usr/local/amavisd/.razor/server.folly.cloudmark.com.conf
May 27 20:18:40.516323 check[27672]: [ 5] read_file: 17 items read from
/usr/local/amavisd/.razor/server.pride.cloudmark.com.conf
May 27 20:18:40.516727 check[27672]: [ 5] read_file: 17 items read from
/usr/local/amavisd/.razor/server.pride.cloudmark.com.conf
May 27 20:18:40.517140 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.wonder.cloudmark.com.conf
May 27 20:18:40.517548 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.wonder.cloudmark.com.conf
May 27 20:18:40.517962 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.thrill.cloudmark.com.conf
May 27 20:18:40.518371 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.thrill.cloudmark.com.conf
May 27 20:18:40.518940 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.shock.cloudmark.com.conf
May 27 20:18:40.519463 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.shock.cloudmark.com.conf
May 27 20:18:40.519915 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.tension.cloudmark.com.conf
May 27 20:18:40.520336 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.tension.cloudmark.com.conf
May 27 20:18:40.520753 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.robust.cloudmark.com.conf
May 27 20:18:40.521161 check[27672]: [ 5] read_file: 16 items read from
/usr/local/amavisd/.razor/server.robust.cloudmark.com.conf
May 27 20:18:40.521411 check[27672]: [ 5] 169080 seconds before closest
server discovery
May 27 20:18:40.521596 check[27672]: [ 6] shock.cloudmark.com is a
Catalogue Server srl 5081; computed min_cf=6, Server se: C8
May 27 20:18:40.521805 check[27672]: [ 8] Computed supported_engines: 4
8
May 27 20:18:40.521946 check[27672]: [ 8] Using next closest server
shock.cloudmark.com:2703, cached info srl 5081
May 27 20:18:40.522126 check[27672]: [ 8] mail 1 Subject: leeryq
Saccharin Miscells
May 27 20:18:40.522465 check[27672]: [ 6] preproc: mail 1.0 went from
120 bytes to 84
May 27 20:18:40.522810 check[27672]: [ 6] preproc: mail 1.1 went to all
whitespace, erasing
May 27 20:18:40.523286 check[27672]: [ 6] preproc: mail 1.2 went from
163 bytes to 0, erasing
May 27 20:18:40.523472 check[27672]: [ 6] computing sigs for mail 1.0,
len 84
May 27 20:18:40.525096 check[27672]: [ 6] Engine (8) didn't produce a
signature for mail 1.0
May 27 20:18:40.525589 check[27672]: [ 6] skipping whitelist file
(empty?): /usr/local/amavisd/.razor/razor-whitelist
May 27 20:18:40.525796 check[27672]: [ 5] Connecting to
shock.cloudmark.com ...
May 27 20:18:40.681440 check[27672]: [ 8] Connection established
May 27 20:18:40.681572 check[27672]: [ 4] shock.cloudmark.com >> 36
server greeting: sn=C&srl=5081&a=l&a=cg&ep4=7542-10
May 27 20:18:40.681818 check[27672]: [ 4] shock.cloudmark.com << 25
May 27 20:18:40.681866 check[27672]: [ 6] cn=razor-agents&cv=2.67
May 27 20:18:40.682008 check[27672]: [ 6] shock.cloudmark.com is a
Catalogue Server srl 5081; computed min_cf=6, Server se: C8
May 27 20:18:40.682129 check[27672]: [ 8] Computed supported_engines: 4
8
May 27 20:18:40.682241 check[27672]: [ 8] mail 1.0 e4 sig:
jPVTbFlDwo2FP2ANqDv2GIEVTFIA
May 27 20:18:40.682326 check[27672]: [ 5] mail 1.0 e8 got no sig
May 27 20:18:40.682376 check[27672]: [ 8] mail 1.1 skipped in check
May 27 20:18:40.682415 check[27672]: [ 8] mail 1.2 skipped in check
May 27 20:18:40.682480 check[27672]: [ 8] preparing 1 queries
May 27 20:18:40.682590 check[27672]: [ 8] sending 1 batches
May 27 20:18:40.682673 check[27672]: [ 4] shock.cloudmark.com << 52
May 27 20:18:40.682714 check[27672]: [ 6]
a=c&e=4&ep4=7542-10&s=jPVTbFlDwo2FP2ANqDv2GIEVTFIA
May 27 20:18:40.835627 check[27672]: [ 4] shock.cloudmark.com >> 5
May 27 20:18:40.835691 check[27672]: [ 6] response to sent.2
p=0
May 27 20:18:40.835925 check[27672]: [ 6] mail 1.0 e=4
sig=jPVTbFlDwo2FP2ANqDv2GIEVTFIA: sig not found.
May 27 20:18:40.835999 check[27672]: [ 7] method 4: mail 1.0:
no-contention part, spam=0
May 27 20:18:40.836045 check[27672]: [ 7] method 4: mail 1: all
non-contention parts not spam, mail not spam
May 27 20:18:40.836091 check[27672]: [ 3] mail 1 is not known spam.
May 27 20:18:40.836143 check[27672]: [ 5] disconnecting from server
shock.cloudmark.com
May 27 20:18:40.836246 check[27672]: [ 4] shock.cloudmark.com << 5
May 27 20:18:40.836287 check[27672]: [ 6] a=q
debug: Using results from Razor v2.67
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
debug: Found Razor2 part: part=1 noresponse skipme=1
debug: Found Razor2 part: part=2 noresponse skipme=1
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb766c)
implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=3.083
debug: running full-text regexp tests; score so far=3.083
debug: Razor2 is available
debug: DCCifd is available: /var/dcc/dccifd
debug: entering helper-app run mode
debug: DCCifd: got response: X-DCC-sonic.net-Metrics: myhostname 1117;
Body=5
debug: leaving helper-app run mode
debug: Running tests for priority: 500
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8cb766c)
implements 'check_post_dnsbl'
debug: running meta tests; score so far=3.083
debug: running header regexp tests; score so far=3.083
debug: running body-text per-line regexp tests; score so far=3.083
debug: running uri tests; score so far=3.083
debug: running raw-body-text per-line regexp tests; score so far=3.083
debug: running full-text regexp tests; score so far=3.083
debug: Running tests for priority: 1000
debug: running meta tests; score so far=3.083
debug: running header regexp tests; score so far=3.083
debug: running body-text per-line regexp tests; score so far=3.083
debug: running uri tests; score so far=3.083
debug: running raw-body-text per-line regexp tests; score so far=3.083
debug: running full-text regexp tests; score so far=3.083
debug: is spam? score=3.083 required=10
debug: tests=BAYES_05,HELO_DYNAMIC_IPADDR2
debug:
subtests=__CT,__CTYPE_HAS_BOUNDARY,__HAS_MSGID,__HAS_SUBJECT,__MIME_BASE
64,__MIME_HTML,__MIME_VERSION,__MSGID_OK_HOST,__SANE_MSGID,__SARE_HEAD_H
DR_RCVD,__SARE_HEAD_SUBJ_RAND
Microsoft Mail Internet Headers Version 2.0
Received: from calgty1.forzani.com ([172.16.112.6]) by
CALMAIL01.fglcorporate.net with Microsoft SMTPSVC(5.0.2195.6713);
Fri, 27 May 2005 13:29:31 -0600
Received: by calgty1.forzani.com (Postfix, from userid 5001)
id 93DAC57D; Fri, 27 May 2005 13:29:09 -0600 (MDT)
Received: from localhost (unknown [127.0.0.1])
by calgty1.forzani.com (Postfix) with ESMTP id 778C057C;
Fri, 27 May 2005 13:29:09 -0600 (MDT)
Received: from calgty1.forzani.com ([127.0.0.1])
by localhost (calgty1.forzani.com [127.0.0.1]) (amavisd-new, port
10024)
with ESMTP id 06187-08; Fri, 27 May 2005 13:29:09 -0600 (MDT)
Received: from 80-219-248-164.dclient.hispeed.ch
(80-219-248-164.dclient.hispeed.ch [80.219.248.164])
by calgty1.forzani.com (Postfix) with SMTP id 945A557B;
Fri, 27 May 2005 13:28:22 -0600 (MDT)
Received: from VAKVD (sjzxpkl.dnaco.net[157.71.161.242])
by vdrkmeuww.dnaco.net (Postfix) with SMTP id 4S2R2Q9636
for <[EMAIL PROTECTED]>; Fri, 27 May 2005 15:25:15 -0500
(envelope-from [EMAIL PROTECTED])
From: "Neal Grant" <[EMAIL PROTECTED]>
To: "Nova4" <[EMAIL PROTECTED]>
Subject: leeryq Saccharin Miscells
Date: Fri, 27 May 2005 15:25:15 -0500
Message-ID: <[EMAIL PROTECTED]>
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=_Part_27857750_19531241.1741543703695"
X-Virus-Scanned: amavisd-new at forzani.com
X-Filtered-With: renattach 1.2.2
X-RenAttach-Info: mode=badlist action=rename count=0
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 27 May 2005 19:29:32.0020 (UTC)
FILETIME=[683A8340:01C562F2]
X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on
myhostname.mydomain.com
X-Spam-Level: ***
X-Spam-Status: No, score=3.1 required=10.0 tests=BAYES_05,
HELO_DYNAMIC_IPADDR2 autolearn=disabled version=3.0.2
------=_Part_27857750_19531241.1741543703695
Content-Type: multipart/alternative;
boundary="----=_Part_24499137_16233341.1132971202644"
------=_Part_24499137_16233341.1132971202644
Content-Type: text/plain;
charset=us-ascii
Content-Transfer-Encoding: 7bit
------=_Part_24499137_16233341.1132971202644
Content-Type: text/html;
charset=us-ascii
Content-Transfer-Encoding: 7Bit
------=_Part_24499137_16233341.1132971202644--
------=_Part_27857750_19531241.1741543703695
Content-Type: image/gif;
name="Gzq.GIF"
Content-Disposition: attachment;
filename="Gzq.GIF"
Content-Transfer-Encoding: base64
------=_Part_27857750_19531241.1741543703695--
<http://ereayfcoqcyr.org&ivfhniwthpifecjpedsoh%2Epictilpict4.com/>
bell, my compliments to Mr. Dick, and beg him to come down.
7w3x2o9m8a5r3o2r8h2m3j9g3v1q4g8w3i8y5z6b5n2r8r8x3k5i4v6u8o9h5s6y3k8q9o5d
3q8n3d2x8i3f8g8e9c9a3e5v7g5p8j8s2s8p
Old Soldier resignedly, that, of course, he gave up altogether,
9k9x5l8y1t9t4j3r9o7d8i5k5o6h9h3w6t5x4h4u7t4q9r8a1a7v2d5a6p8e8u7z5z7q3n8e
6e7u9k7c5y6y6z1l3o7g4s5r2a2z6x2r
darling from a portrait on the wall, as if it were even something
1v1h8x8e3j3r6g3z7c6n4r7x4v5o9c9f1p1z2j2j1i1z7u4t5z5y7r5p1s5s8c6w7k9r6e7c
4x3b5q8m2c5p3t2f9t4k5f5a6p7c7b7q6d
2a9e1b6t5a2n8h7f2r6p7x4x9s6c4q7i2r7o6n3b8w9j3g9c2b1u2i7o1t2c5b2d1v6c3c6b
8c2j9b4z3h1y3i5i2t4y1a1i7g3n
4r9t6d5u9h5c1z8j1u7c3a7j8o6f7z2v1i6z2i4d8n4r3w7u5a2g9b3w1m7q7y7a7f4v9r3x
9u6o9v8w7v5x5v9e1d4y8s8c2d5m7l3v8q4l7e
Why, he is a sort of monkish attorney, replied Steerforth. He
9i9g9i3e5d6d2q7j7x9y9m1e8r6z6v8d4s9t1p7q9u1r2e3i8h5c9n6x5k5y1h4w9l7s8g3c
8p4p6i1v4n8t1c5n8l4n9c1u1g7z5x7t2x
garments with which I had been decorated on the first day, and
4p5p8k6e7r6b1a8y9u2t7x5b8g4o1s5p2l5i8y7l8t9h4p7h4i5j6e1b7x2n3u1v2b4q1g6z
5c2l6f5k2n4d2b9q7r6k8c9o7s2z7v2n8r4t3s5y
me, too, and entertained the probability of my running away again
7l2k3a1k2b2l4t8p6q5x3h1c4o8q8o5s3k1k6x9y8n6r6z2k5u4d7s4s3d1g6r6f1a4z8c6i
8n9k1c5v8x5i1y8d5j8p9u6l6g4i3q4c2y7s3o7b2e7o4q1n1n5l7r4s
except that, in passing up or down stairs, I always found her close
1f5x9o8j5u2c5i4d7t8l5h6i1u5b7r7v4m1d6m3h9d9x8n7z9f4d7v6d4d4e1h4s9b9j5v5q
8r3l6u8t6t6y3y1h5q6o1e3n5g4x8a7u7p5c5p9g1l6c6z6m9x8m5r5l4a4q8w
intermingle, he continued. I am owing you an apology for an
6a8a1w9a1d8t9k1x2k7z4m8v7g9r2f8k6n1j5y8k9r9t8g4s9n9f2r4a7l3g5t1n2n1c5t2w
1l9o7u3y7k6x8o8j2w2c8j1r2e1j2x2w4j7q8k8z9t
thinking it was morning, and find that the family were not yet gone
5d9x1q8p2z6c9c4a8m1g1c4e6f3x4f2m6p8u2b9f6m1w7e6e2m7c3r3m2u8b9b4i7x6s8z3q
2s2n7t4h2c8l9j8c4c6o3o2e3c3h
Spam detection software, running on the system
"myhostname.mydomain.com", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: [...]
Content analysis details: (3.1 points, 10.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
3.5 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP
addr 2)
-0.4 BAYES_05 BODY: Bayesian spam probability is 1 to 5%
[score: 0.0284]
$
-----Original Message-----
From: Jeff Chan [mailto:[EMAIL PROTECTED]
Posted At: Friday, May 27, 2005 6:25 PM
Posted To: Spamassassin List
Conversation: [SPAM-TAG] Spam
Subject: Re: [SPAM-TAG] Spam
On Friday, May 27, 2005, 2:41:50 PM, Jason Bennett wrote:
> Can anyone help me out with the attached message? To me this is
obvious
> spam, but I don't know why it got through. I have my spamassassin
score
> set to 5, but when I run spamassassin -D on this, I only get a couple
> points. I'm wondering if I'm missing some important ruleset or
> something. The only thing that seems to fire on this is BAYES_50.
Please consider using SURBLs:
http://www.surbl.org/
The spam advertised domain is heavily listed on SURBLs:
pictilpict4 .com
giving me the score:
X-Spam-Status: Yes, hits=10.1 tagged_above=2.0 required=4.0
tests=AB_URI_RBL,
BAYES_00, HTML_MESSAGE, HTML_TAG_BALANCE_A, HTTP_ESCAPED_HOST,
JP_URI_RBL,
OB_URI_RBL, SPAMCOP_URI_RBL, WS_URI_RBL
Jeff C.
--
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/
