Re: trusted_networks use

Tue, 27 Sep 2005 16:03:25 -0700 

NFN Smith wrote:

Thanks for the ongoing feedback....

Bowie Bailey wrote:



Now that you've made those changes, post the headers from another
example email so we can see if anything changed.



See below.



Also, you may want to save your email into a file and manually run it
through SA to see what happens.  Just add '-t -D' to the option list



I did that, and found a couple of things.  I'm closer, but not there yet.
In reading the debugging output, I realized that I was putting my work in /etc/mail/sa-mimedefang.cf, and all my other local config settings are in /etc/mail/spamassassin/local.cf. When I moved this work to local.cf, debug showed me getting further.
I also found that Net::DNS wasn't installed -- up until now, I haven't needed it, because I haven't been doing stuff that requires DNS queries. I installed that, and am making further progress.
With the two changes, I'm getting correct designation of which hosts are trusted or not (which I wasn't getting before), but still not getting the ALL_TRUSTED rule.
By the way, I've also made sure that the $HOME/.spamassassin/user_prefs doesn't have any user-specific settings that may be interfering. 

Debug output shows:


debug: using "/usr/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/home/test-user/.spamassassin" for user state dir
debug: using "/home/test-user/.spamassassin/user_prefs" for user prefs file debug: Failed to parse line in SpamAssassin configuration, skipping: internal_networks 64.65.180.91 debug: Failed to parse line in SpamAssassin configuration, skipping: internal_networks 10.10.10.141 
debug: Score set 1 chosen.
debug: Initialising learner
debug: received-header: parsed as [ ip=68.99.120.79 rdns=lakecmmtao05.coxmail.com helo=lakecmmtao05.coxmail.com by=pulsar.lfa.com ident= ] debug: received-header: parsed as [ ip=24.249.175.20 rdns=really helo=!192.168.1.100! by=lakecmmtao05.coxmail.com ident= ] 
debug: received-header: relay 68.99.120.79 trusted? yes
debug: received-header: relay 24.249.175.20 trusted? no
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0
debug: running raw-body-text per-line regexp tests; score so far=5.733
debug: running uri tests; score so far=6.536
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=6.573
debug: Current PATH is: /usr/kerberos/bin:/usr/local/bin:/bin:/usr/bin:/usr/X11R6/bin 
debug: all '*From' addrs: [EMAIL PROTECTED]
debug: all '*To' addrs: [EMAIL PROTECTED] [EMAIL PROTECTED]
debug: is Net::DNS::Resolver available? yes
debug: trying (3) kernel.org...
debug: looking up MX for 'kernel.org'
debug: MX for 'kernel.org' exists? 1
debug: MX lookup of kernel.org succeeded => Dns available (set dns_available to hardcode) 
debug: is DNS available? 1
debug: DNS MX records found: 1
debug: forged-HELO: from=really helo=!192.168.1.100! by=coxmail.com
debug: running meta tests; score so far=6.573
debug: is spam? score=7.673 required=4 tests=CLICK_BELOW,EXCUSE_3,FREE_CONSULTATION,MAILTO_TO_REMOVE,MIME_MISSING_BOUNDARY,NO_OBLIGATION,ONE_TIME_MAILING,REMOVE_IN_QUOTES,REMOVE_SUBJ,RISK_FREE 
From [EMAIL PROTECTED]  Tue Sep 27 15:22:19 2005
Received: from localhost by pulsar.lfa.com
    with SpamAssassin (2.64 2004-01-11);
    Tue, 27 Sep 2005 15:24:16 -0700
From: NFN Smith <[EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: *****SPAM***** Sequential test #12a
Date: Tue, 27 Sep 2005 15:21:15 -0700
Message-Id: <[EMAIL PROTECTED]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.64 (2004-01-11) on pulsar.lfa.com
X-Spam-Level: *******
X-Spam-Status: Yes, hits=7.7 required=4.0 tests=CLICK_BELOW,EXCUSE_3,
    FREE_CONSULTATION,MAILTO_TO_REMOVE,MIME_MISSING_BOUNDARY,
NO_OBLIGATION,ONE_TIME_MAILING,REMOVE_IN_QUOTES,REMOVE_SUBJ,RISK_FREE autolearn=no version=2.64 
MIME-Version: 1.0



Anything else obvious that I might be missing?  I think I'm close....

Smith
If I'm not mistaken (and I could be, it's been awhile since I've used the 2.6x series), the ALL_TRUSTED rule wasn't introduced until the 3.0x series. your headers show you're using 2.64. also your debug output shows that spamassassin wasn't able to parse the "internal_network" settings (which also weren't introduced until the 3.0x series).
So, you either have some misconceptions about 2.64's capabilities, or you have 2 copies of spamassassin running in 2 different locations on your machine and the one in your path is 2.64, and causing you headaches. 

HTH

alan

Reply via email to