Hi,
I recently upgraded from spamassassin 3.0 to 3.1 and right away the amount
of false negatives increased. I thought at first that it was because of the
loss of dcc and razor (which surely is a factor), but on further
investigation it appears that it is more related to the Bayes system.
I have looked through the archives, but I am not finding what I need
although it seems like this question has been asked more than once in
different ways.
I get almost no BAYES_xx or AWL scores on headers. I got one BAYES_00 tag
betweem 18 December and 22 December and it is my understanding that I should
see them on almost all emails. When I run spamassassin manually on a piece
of spam, it applys a BAYES_xx score. Yet as far as I can tell the spamd
daemon skips BAYES_xx scoring. It seems like this implies a simple *cf file
issue. Spamassassin -D --lint shows no rules errors and the site directory
shows up as /etc/mail/spamassassin which is where the local.cf file is. This
is a sitewide installation.
Among other things, debug output is included for both spamd and
spamassassin- this may be a bit overkill, but I am trying to anticipate what
things the group will ask for based on previous posts so I have included
debugging as well a sample headers of a false negative that was clearly
spam, the local.cf file from /etc/mail/spamassassin, permissions on the
bayes db files, etc.
Vital stats:
Upgraded recently from spamassasin 3.0 to 3.1
mailscanner 4.48
Rules-de-jour *.cf files under /etc/mail/spamassassin
Used sitewide in conjunction with Mailscanner
perl 5.8.0
running on solaris 5.8
####Here is sa-learn --dump magic:
This shows that I have more than enough spam and ham
0.000 0 3 0 non-token data: bayes db version
0.000 0 3754 0 non-token data: nspam
0.000 0 220 0 non-token data: nham
0.000 0 312279 0 non-token data: ntokens
0.000 0 1051829432 0 non-token data: oldest atime
0.000 0 1135374012 0 non-token data: newest atime
0.000 0 0 0 non-token data: last journal sync
atime
0.000 0 1135373049 0 non-token data: last expiry atime
0.000 0 0 0 non-token data: last expire atime
delta
0.000 0 0 0 non-token data: last expire
reduction count
####spamd runs as such:
# ps -efa |grep spamd
root 22145 21420 0 13:42:37 ? 0:00 /usr/local/bin/perl -T
/usr/local/bin/spamd -d -x -l -c --syslog-socket=inet
####/etc/mail/spamassassin/local.cf
score ALL_TRUSTED 0 0 0 0
use_bayes 1
use_bayes_rules 1
use_auto_whitelist 1
bayes_auto_learn 1
bayes_auto_expire 1
bayes_expiry_max_db_size 200000
bayes_file_mode 0777
auto_whitelist_path /extra/system/spamassassin/autoDB/auto-whitelist
auto_whitelist_file_mode 0666
bayes_path /extra/system/spamassassin/autoDB/bayes
bayes_ignore_header X-MailScanner
bayes_ignore_header X-MailScanner-SpamCheck
bayes_ignore_header X-MailScanner-SpamScore
bayes_ignore_header X-MailScanner-Information
# ls -lsag /extra/system/spamassassin/autoDB/
total 65893
3 drwxr-xr-x 3 root root 3072 Dec 23 11:16 ./
1 drwxr-xr-x 6 root other 512 Nov 9 2004 ../
16 -rw-rw-rw- 1 root other 24576 Dec 23 13:42 auto-whitelist
1 -rw------- 1 root other 6 Dec 23 13:42
auto-whitelist.mutex
23 -rw------- 1 root other 22572 Dec 23 14:13 bayes.mutex
312 -rw-rw-rw- 1 root other 352256 Dec 23 14:13 bayes_seen
8224 -rw-rw-rw- 1 root other 10502144 Dec 23 14:13 bayes_toks
27792 -rw-rw-rw- 1 daemon mail 28430177 Dec 14 19:05
blacklist_mailspool
1 drwxrwxr-x 2 root users 512 Dec 23 11:09 delete/
0 -rw-rw-rw- 1 daemon mail 0 Dec 23 10:56
unwhitelist_mailspool
29520 -rw-rw-rw- 1 daemon mail 30198420 Dec 20 14:24
whitelist_mailspool
####Example e-mail header of false negative:
Received: from i219-164-20-154.s02.a001.ap.plala.or.jp
(i219-164-20-154.s02.a001.ap.plala.or.jp [219.164.20.154])
by [SNIP] (8.12.9/8.12.9) with SMTP id jBMCSafX001397
for <[SNIP] >; Thu, 22 Dec 2005 04:28:37 -0800 (PST)
Received: from [192.168.178.219] (port=29858 helo=smncs)
by i219-164-20-154.s02.a001.ap.plala.or.jp with esmtp
id 1EpPYF-0002uW-U5
for [EMAIL PROTECTED]; Thu, 22 Dec 2005 09:28:07 -0300
Date: Thu, 22 Dec 2005 21:28:28 +0900
From: <[EMAIL PROTECTED]>
X-Mailer: The Bat! (v3.5) Professional
Reply-To: <[EMAIL PROTECTED]>
Organization: dyii
X-Priority: 3 (Normal)
Message-ID: <[EMAIL PROTECTED]>
To: <[SNIP]>
Subject: press release
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="=_869389e472dcb8f140f1bfe43211303b"
X-Spam: Not detected
X-TSS-MailScanner-Information: See www.mailscanner.info for information
X-TSS-MailScanner: Appears to be free of infection
X-TSS-MailScanner-SpamCheck: not spam, SpamAssassin (score=0, required 4,
autolearn=not spam)
X-TSS-MailScanner-From: [EMAIL PROTECTED]
####Sendmail syslog entries of same email showing it was autolearned as not
spam
Dec 22 04:28:36 [mailhost] sm-mta[1397]: [ID 801593 mail.info] NOQUEUE:
connect from i219-164-20-154.s02.a001.ap.
plala.or.jp [219.164.20.154]
Dec 22 04:28:36 [mailhost] sm-mta[1397]: [ID 801593 mail.info]
jBMCSafX001397: Milter: no active filter
Dec 22 04:28:38 [mailhost] sm-mta[1397]: [ID 801593 mail.info]
jBMCSafX001397: from=<[EMAIL PROTECTED]>, siz
e=17205, class=0, nrcpts=1,
msgid=<[EMAIL PROTECTED]>,
proto=SMTP,
daemon=MTA, relay=i219-164-20-154.s02.a001.ap.plala.or.jp [219.164.20.154]
Dec 22 04:28:41 [mailhost] MailScanner[29076]: New Batch: Scanning 1
messages, 17789 bytes
Dec 22 04:28:42 [mailhost] MailScanner[29076]: Spam Checks: Starting
Dec 22 04:28:52 [mailhost] MailScanner[29076]: Message jBMCSafX001397 from
219.164.20.154 ([EMAIL PROTECTED]
) to tomsawyer.com is not spam, SpamAssassin (score=0, required 4,
autolearn=not spam)
Dec 22 04:28:52 [mailhost] MailScanner[29076]: Virus and Content Scanning:
Starting
Dec 22 04:28:57 [mailhost] MailScanner[29076]: HTML Img tag found in message
jBMCSafX001397 from [EMAIL PROTECTED]
com.br
Dec 22 04:28:58 [mailhost] MailScanner[29076]: Uninfected: Delivered 1
messages
Dec 22 04:28:58 [mailhost] sendmail[1413]: [ID 801593 mail.info]
jBMCSafX001397: alias <[EMAIL PROTECTED]> => [EMAIL PROTECTED]
Dec 22 04:28:58 [mailhost] sendmail[1413]: [ID 801593 mail.info]
jBMCSafX001397: to=<[EMAIL PROTECTED]>, delay=00:00:21, xdelay=00:00:00,
mailer=local, pri=120626, dsn=2.0.0, stat=Sent
Dec 22 04:28:58 [mailhost] sendmail[1413]: [ID 801593 mail.info]
jBMCSafX001397: done; delay=00:00:21, ntries=1
##########Manually running spamassassin -D:
spamassassin -D < spam5.htm
[19915] dbg: logger: adding facilities: all
[19915] dbg: logger: logging level is DBG
[19915] dbg: generic: SpamAssassin version 3.1.0
[19915] dbg: config: score set 0 chosen.
[19915] dbg: util: running in taint mode? yes
[19915] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[19915] dbg: util: PATH included '/usr/local/frame/bin', keeping
[19915] dbg: util: PATH included '/usr/local/adabas/bin', which doesn't
exist, dropping
[19915] dbg: util: PATH included '/usr/local/adabas/pgm', which doesn't
exist, dropping
[19915] dbg: util: PATH included '.', which is not absolute, dropping
[19915] dbg: util: PATH included '/usr/local/gcc/bin', keeping
[19915] dbg: util: PATH included '/usr/openwin/bin', keeping
[19915] dbg: util: PATH included '/usr/lib/nis', keeping
[19915] dbg: util: PATH included '/usr/bin', keeping
[19915] dbg: util: PATH included '/usr/sbin', keeping
[19915] dbg: util: PATH included '/opt/flexlm/lmgr/sun4/sunOS5', which
doesn't exist, dropping
[19915] dbg: util: PATH included '/opt/SUNWspro/bin', keeping
[19915] dbg: util: PATH included '/opt/SUNWppro/bin', keeping
[19915] dbg: util: PATH included '/usr/sadm/bin', keeping
[19915] dbg: util: PATH included '/usr/ucb', keeping
[19915] dbg: util: PATH included '/usr/local/bin', keeping
[19915] dbg: util: PATH included '/usr/ccs/bin', keeping
[19915] dbg: util: PATH included
'/usr/local/xemacs/bin/sparc-sun-solaris2.4', keeping
[19915] dbg: util: PATH included
'/usr/local/xemacs/lib/xemacs-19.11/sparc-sun-solaris2.4', which doesn't
exist, dropping
[19915] dbg: util: final PATH set to:
/usr/local/frame/bin:/usr/local/gcc/bin:/usr/openwin/bin:/usr/lib/nis:/usr/b
in:/usr/sbin:/opt/SUNWspro/bin:/opt/SUNWppro/bin:/usr/sadm/bin:/usr/ucb:/usr
/local/bin:/usr/ccs/bin:/usr/local/xemacs/bin/sparc-sun-solaris2.4
[19915] dbg: dns: is Net::DNS::Resolver available? yes
[19915] dbg: dns: Net::DNS version: 0.54
[19915] dbg: dns: name server: xxx.xxx.xxx.xxx, family: 2, ipv6: 0
[19915] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[19915] dbg: config: read file /etc/mail/spamassassin/init.pre
[19915] dbg: config: read file /etc/mail/spamassassin/v310.pre
[19915] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[19915] dbg: config: using "/usr/share/spamassassin" for default rules dir
[19915] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[19915] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[19915] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[19915] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[19915] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[19915] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[19915] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[19915] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[19915] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[19915] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[19915] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/70_sare_genlsubj_eng.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_header.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_html0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_specific.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_uri_eng.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
[19915] dbg: config: read file /etc/mail/spamassassin/70_sc_top200.cf
[19915] dbg: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[19915] dbg: config: read file
/etc/mail/spamassassin/99_sare_fraud_post25x.cf
[19915] dbg: config: read file /etc/mail/spamassassin/local.cf
[19915] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[19915] dbg: config: read file /etc/mail/spamassassin/tripwire.cf
[19915] dbg: config: read file /etc/mail/spamassassin/user_prefs.cf
[19915] dbg: config: using "//.spamassassin" for user state dir
[19915] dbg: config: using "//.spamassassin/user_prefs" for user prefs file
[19915] dbg: config: read file //.spamassassin/user_prefs
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xbad918)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbcfd44)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[19915] dbg: pyzor: network tests on, attempting Pyzor
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x15ee690)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[19915] dbg: reporter: network tests on, attempting SpamCop
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0xd0d438)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AntiVirus from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd1d1dc)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0xcd494c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xcd59e4)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::TextCat from @INC
[19915] dbg: textcat: loading languages file...
[19915] dbg: textcat: loaded 73 language models
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::AccessDB from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AccessDB=HASH(0x12cba8c)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x12cf010)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x12d4bf0)
[19915] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[19915] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x12dcf98)
[19915] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[19915] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[19915] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[19915] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x12dcf98)
implements 'finish_parsing_end'
[19915] dbg: replacetags: replacing tags
[19915] dbg: replacetags: done replacing tags
[19915] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_toks
[19915] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_seen
[19915] dbg: bayes: found bayes db version 3
[19915] dbg: bayes: DB journal sync: last sync: 1105811470
[19915] dbg: config: score set 3 chosen.
[19915] dbg: dns: dns_available set to yes in config file, skipping test
[19915] dbg: metadata: X-Spam-Relays-Trusted:
[19915] dbg: metadata: X-Spam-Relays-Untrusted:
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xbad918)
implements 'extract_metadata'
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118)
implements 'extract_metadata'
[19915] dbg: metadata: X-Relay-Countries:
[19915] dbg: message: ---- MIME PARSER START ----
[19915] dbg: message: main message type: text/plain
[19915] dbg: message: parsing normal part
[19915] dbg: message: added part, type: text/plain
[19915] dbg: message: ---- MIME PARSER END ----
[19915] dbg: message: no encoding detected
[19915] dbg: textcat: message too short for language analysis
[19915] dbg: textcat: X-Languages: "", X-Languages-Length: 121
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
implements 'parsed_metadata'
[19915] dbg: uri: html uri found, cid:e3d102da0c66e512fcf101d6db912ec4
[19915] dbg: uri: cleaned html uri, cid:e3d102da0c66e512fcf101d6db912ec4
[19915] dbg: uri: parsed uri found, mailto:[EMAIL PROTECTED]
[19915] dbg: uri: cleaned parsed uri, mailto:[EMAIL PROTECTED]
[19915] dbg: uri: parsed domain, atento.com.br
[19915] dbg: uri: parsed uri found, mailto:[EMAIL PROTECTED]
[19915] dbg: uri: cleaned parsed uri, mailto:[EMAIL PROTECTED]
[19915] dbg: uri: parsed domain, tomsawyer.com
[19915] dbg: uridnsbl: domains to query:
[19915] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[19915] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[19915] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[19915] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[19915] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[19915] dbg: dns: checking RBL combined.njabl.org., set njabl
[19915] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois
[19915] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[19915] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[19915] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[19915] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois-notfirsthop
[19915] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[19915] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[19915] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[19915] dbg: check: running tests for priority: 0
[19915] dbg: rules: running header regexp tests; score so far=0
[19915] dbg: plugin: registering glue method for check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbcfd44))
[19915] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: message was delivered entirely via trusted relays, not
required
[19915] dbg: eval: all '*From' addrs:
[19915] dbg: plugin: registering glue method for check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x12cf010))
[19915] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbcfd44))
[19915] dbg: eval: all '*To' addrs:
[19915] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: message was delivered entirely via trusted relays, not
required
[19915] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[19915] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule MISSING_HB_SEP ======> got hit
[19915] dbg: plugin: registering glue method for check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
[19915] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: cannot get Envelope-From, cannot use SPF
[19915] dbg: spf: def_spf_whitelist_from: could not find useable envelope
sender
[19915] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[19915] dbg: plugin: registering glue method for check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x12cf010))
[19915] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xca5e8c))
[19915] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[19915] dbg: rules: running body-text per-line regexp tests; score so
far=2.499
[19915] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "F"
[19915] dbg: uri: running uri tests; score so far=2.499
[19915] dbg: rules: ran uri rule __SARE_URI_ANY ======> got hit: "m"
[19915] dbg: rules: ran eval rule __HTML_LENGTH_512 ======> got hit
[19915] dbg: bayes: DB journal sync: last sync: 1105811470
[19915] dbg: bayes: corpus size: nspam = 153968, nham = 40588
[19915] dbg: bayes: score = 4.91619356335349e-10
[19915] dbg: bayes: DB expiry: tokens in DB: 1984629, Expiry max size:
150000, Oldest atime: 1084312293, Newest atime: 0, Last expire: 1098687948,
Current time: 1135280002
[19915] dbg: bayes: DB journal sync: last sync: 1105811470
[19915] dbg: bayes: untie-ing
[19915] dbg: bayes: untie-ing db_toks
[19915] dbg: bayes: untie-ing db_seen
[19915] dbg: plugin: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c))
[19915] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit
[19915] dbg: plugin: registering glue method for check_language
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118))
[19915] dbg: rules: ran eval rule __HTML_LENGTH_0000_1024 ======> got hit
[19915] dbg: plugin: registering glue method for check_microsoft_executable
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd1d1dc))
[19915] dbg: rules: ran eval rule BAYES_00 ======> got hit
[19915] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit
[19915] dbg: rules: ran eval rule __HTML_LENGTH_384 ======> got hit
[19915] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit
[19915] dbg: rules: ran eval rule HTML_IMAGE_ONLY_04 ======> got hit
[19915] dbg: plugin: registering glue method for check_body_8bits
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xcd7118))
[19915] dbg: plugin: registering glue method for check_suspect_name
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd1d1dc))
[19915] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit
[19915] dbg: rules: ran eval rule __TAG_EXISTS_META ======> got hit
[19915] dbg: rules: running raw-body-text per-line regexp tests; score so
far=3.501
[19915] dbg: rules: ran eval rule __SARE_HTML_HAS_BR ======> got hit
[19915] dbg: rules: ran eval rule __SARE_HTML_HAS_IMG ======> got hit
[19915] dbg: rules: running full-text regexp tests; score so far=3.501
[19915] dbg: plugin: registering glue method for check_pyzor
(Mail::SpamAssassin::Plugin::Pyzor=HASH(0x15ee690))
[19915] dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
[19915] dbg: info: entering helper-app run mode
[19915] dbg: pyzor: opening pipe: /usr/local/bin/pyzor check <
/tmp/.spamassassin19915vuN3S9tmp
[19921] dbg: util: setuid: ruid=0 euid=0
[19915] dbg: pyzor: killed stale helper [19921]
[19915] dbg: pyzor: [19921] terminated: exit=0x000f
[19915] dbg: info: leaving helper-app run mode
[19915] dbg: pyzor: check timed out after 10 seconds
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
implements 'check_tick'
[19915] dbg: check: running tests for priority: 500
[19915] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbfce8c)
implements 'check_post_dnsbl'
[19915] dbg: rules: running meta tests; score so far=3.501
[19915] dbg: rules: running header regexp tests; score so far=7.965
[19915] dbg: rules: running body-text per-line regexp tests; score so
far=7.965
[19915] dbg: uri: running uri tests; score so far=7.965
[19915] dbg: rules: running raw-body-text per-line regexp tests; score so
far=7.965
[19915] dbg: rules: running full-text regexp tests; score so far=7.965
[19915] dbg: check: running tests for priority: 1000
[19915] dbg: rules: running meta tests; score so far=7.965
[19915] dbg: rules: running header regexp tests; score so far=7.965
[19915] dbg: plugin: registering glue method for
check_from_in_auto_whitelist
(Mail::SpamAssassin::Plugin::AWL=HASH(0xcd494c))
[19915] dbg: rules: running body-text per-line regexp tests; score so
far=7.965
[19915] dbg: uri: running uri tests; score so far=7.965
[19915] dbg: rules: running raw-body-text per-line regexp tests; score so
far=7.965
[19915] dbg: rules: running full-text regexp tests; score so far=7.965
[19915] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xcd59e4) implements
'autolearn_discriminator'
[19915] dbg: learn: auto-learn: currently using scoreset 3, recomputing
score based on scoreset 1
[19915] dbg: learn: auto-learn: message score: 7.965, computed score for
autolearn: 8.87
[19915] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=2.881,
head-points=2.5, learned-points=-2.599
[19915] dbg: learn: auto-learn? no: inside auto-learn thresholds, not
considered ham or spam
[19915] dbg: check: is spam? score=7.965 required=5
[19915] dbg: check:
tests=BAYES_00,HTML_IMAGE_ONLY_04,HTML_MESSAGE,HTML_MISSING_CTYPE,MISSING_HB
_SEP,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
[19915] dbg: check:
subtests=__ENV_AND_HDR_FROM_MATCH,__HTML_LENGTH_0000_1024,__HTML_LENGTH_384,
__HTML_LENGTH_512,__NONEMPTY_BODY,__SARE_HTML_HAS_BR,__SARE_HTML_HAS_IMG,__S
ARE_URI_ANY,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXIS
TS_META,__UNUSABLE_MSGID
Received: from localhost by [mailhost].tomsawyer.com
with SpamAssassin (version 3.1.0);
Thu, 22 Dec 2005 11:33:33 -0800
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.0 (2005-09-13) on
[mailhost].tomsawyer.com
X-Spam-Level: *******
X-Spam-Status: Yes, score=8.0 required=5.0
tests=BAYES_00,HTML_IMAGE_ONLY_04,
HTML_MESSAGE,HTML_MISSING_CTYPE,MISSING_HB_SEP,MISSING_SUBJECT,
NO_RECEIVED,NO_RELAYS,TO_CC_NONE autolearn=no version=3.1.0
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_43AAFF8D.25EC0138"
This is a multi-part message in MIME format.
------------=_43AAFF8D.25EC0138
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "[mailhost].tomsawyer.com",
has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
[] for details.
Content preview: [...]
Content analysis details: (8.0 points, 5.0 required)
pts rule name description
---- ----------------------
--------------------------------------------------
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
2.5 MISSING_HB_SEP Missing blank line between message header and
body
-2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1%
[score: 0.0000]
0.0 HTML_MESSAGE BODY: HTML included in message
3.6 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words
1.8 MISSING_SUBJECT Missing Subject: header
2.5 HTML_MISSING_CTYPE Message is HTML without HTML Content-Type
0.1 TO_CC_NONE No To: or Cc: header
-0.0 NO_RECEIVED Informational: message has no Received headers
------------=_43AAFF8D.25EC0138
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2900.2802" name=GENERATOR></HEAD>
<BODY><B>From:</B> [EMAIL PROTECTED]<BR><B>Sent:</B> Thursday, December
22,
2005 4:28 AM<BR><B>To:</B> [EMAIL PROTECTED]<BR><B>Subject:</B> press
release<BR><IMG src="cid:e3d102da0c66e512fcf101d6db912ec4"> </BODY></HTML>
------------=_43AAFF8D.25EC0138--
##########spamd debug:
242 [mailhost]:#/TSS/Sources/tmp# spamd -D -l -p 10000 > /tmp/spamd-debug
[19678] dbg: logger: adding facilities: all
[19678] dbg: logger: logging level is DBG
[19678] dbg: logger: trying to connect to syslog/unix...
[19678] warn: unix passed to setlogsock, but path not available at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76
[19678] error: logger: at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76.
[19678] dbg: logger: connection to syslog/unix failed: logger: at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76.
[19678] dbg: logger: trying to connect to syslog/inet...
[19678] dbg: logger: failed to setlogsock(unix): logger: at
/usr/local/spamassassin/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Logger/S
yslog.pm line 76.
[19678] dbg: logger: opening syslog using inet socket
[19678] dbg: logger: successfully connected to syslog/unix
[19678] dbg: logger: successfully added syslog method
[19678] dbg: spamd: creating INET socket:
[19678] dbg: spamd: Listen: 5
[19678] dbg: spamd: LocalAddr: 127.0.0.1
[19678] dbg: spamd: LocalPort: 10000
[19678] dbg: spamd: Proto: 6
[19678] dbg: spamd: ReuseAddr: 1
[19678] dbg: spamd: Type: 2
[19678] dbg: logger: adding facilities: all
[19678] dbg: logger: logging level is DBG
[19678] dbg: generic: SpamAssassin version 3.1.0
[19678] dbg: config: score set 0 chosen.
[19678] dbg: dns: is Net::DNS::Resolver available? yes
[19678] dbg: dns: Net::DNS version: 0.54
[19678] dbg: dns: name server: xxx.xxx.xxx.xxx, family: 2, ipv6: 0
[19678] dbg: spamd: Preloading modules with HOME=/tmp/spamd-19678-init
[19678] dbg: ignore: test message to precompile patterns and load modules
[19678] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[19678] dbg: config: read file /etc/mail/spamassassin/init.pre
[19678] dbg: config: read file /etc/mail/spamassassin/v310.pre
[19678] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[19678] dbg: config: using "/usr/share/spamassassin" for default rules dir
[19678] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[19678] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[19678] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[19678] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[19678] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[19678] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[19678] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[19678] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[19678] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[19678] dbg: config: read file
/usr/share/spamassassin/60_whitelist_subject.cf
[19678] dbg: config: using "/etc/mail/spamassassin" for site rules dir
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_adult.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_genlsubj0.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/70_sare_genlsubj_eng.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_header.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_header0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_html0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_obfu0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_oem.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_random.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_specific.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_uri_eng.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
[19678] dbg: config: read file /etc/mail/spamassassin/70_sc_top200.cf
[19678] dbg: config: read file /etc/mail/spamassassin/72_sare_bml_post25x.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
[19678] dbg: config: read file
/etc/mail/spamassassin/99_sare_fraud_post25x.cf
[19678] dbg: config: read file /etc/mail/spamassassin/local.cf
[19678] dbg: config: read file /etc/mail/spamassassin/mailscanner.cf
[19678] dbg: config: read file /etc/mail/spamassassin/tripwire.cf
[19678] dbg: config: read file /etc/mail/spamassassin/user_prefs.cf
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from
@INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xc4fcd4)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0xc7daa8)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[19678] dbg: pyzor: network tests on, attempting Pyzor
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0xd631d4)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[19678] dbg: reporter: network tests on, attempting SpamCop
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0xc95a68)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AntiVirus from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd7f684)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0xde309c)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold
from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xde4224)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::TextCat from @INC
[19678] dbg: textcat: loading languages file...
[19678] dbg: textcat: loaded 73 language models
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::AccessDB from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AccessDB=HASH(0x137e1e8)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject
from @INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x138176c)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x13c2c64)
[19678] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from
@INC
[19678] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x13cc420)
[19678] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[19678] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[19678] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&\#])'i
[19678] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x13cc420)
implements 'finish_parsing_end'
[19678] dbg: replacetags: replacing tags
[19678] dbg: replacetags: done replacing tags
[19678] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_toks
[19678] dbg: bayes: tie-ing to DB file R/O
/extra/system/spamassassin/autoDB/bayes_seen
[19678] dbg: bayes: found bayes db version 3
[19678] dbg: bayes: DB journal sync: last sync: 1105811470
[19678] dbg: config: score set 3 chosen.
[19678] dbg: message: ---- MIME PARSER START ----
[19678] dbg: message: main message type: text/plain
[19678] dbg: message: parsing normal part
[19678] dbg: message: added part, type: text/plain
[19678] dbg: message: ---- MIME PARSER END ----
[19678] dbg: dns: dns_available set to yes in config file, skipping test
[19678] dbg: metadata: X-Spam-Relays-Trusted:
[19678] dbg: metadata: X-Spam-Relays-Untrusted:
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xc4fcd4)
implements 'extract_metadata'
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958)
implements 'extract_metadata'
[19678] dbg: metadata: X-Relay-Countries:
[19678] dbg: message: no encoding detected
[19678] dbg: textcat: classifying, skipping: et yi rm sco cy fy eo lv is bs
sl ga gd la lt eu sa
[19678] dbg: textcat: language possibly: en
[19678] dbg: textcat: X-Languages: "en", X-Languages-Length: 1340
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
implements 'parsed_metadata'
[19678] dbg: uridnsbl: domains to query:
[19678] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-notfirsthop
[19678] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[19678] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[19678] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[19678] dbg: dns: checking RBL combined.njabl.org., set njabl-notfirsthop
[19678] dbg: dns: checking RBL combined.njabl.org., set njabl
[19678] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois
[19678] dbg: dns: checking RBL list.dsbl.org., set dsbl-notfirsthop
[19678] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[19678] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[19678] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com.,
set whois-notfirsthop
[19678] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-notfirsthop
[19678] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[19678] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[19678] dbg: check: running tests for priority: 0
[19678] dbg: rules: running header regexp tests; score so far=0
[19678] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[19678] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<[EMAIL PROTECTED]>
[19678] dbg: rules: "
[19678] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@spamassassin_spamd_init>"
[19678] dbg: rules: ran header rule NO_REAL_NAME ======> got hit:
"[EMAIL PROTECTED]
[19678] dbg: rules: "
[19678] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"1135274536"
[19678] dbg: plugin: registering glue method for check_hashcash_double_spend
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xc7daa8))
[19678] dbg: plugin: registering glue method for check_for_spf_helo_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: message was delivered entirely via trusted relays, not
required
[19678] dbg: eval: all '*From' addrs:
[EMAIL PROTECTED]
[19678] dbg: plugin: registering glue method for check_subject_in_blacklist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x138176c))
[19678] dbg: plugin: registering glue method for check_hashcash_value
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0xc7daa8))
[19678] dbg: eval: all '*To' addrs:
[19678] dbg: plugin: registering glue method for check_for_spf_neutral
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: message was delivered entirely via trusted relays, not
required
[19678] dbg: plugin: registering glue method for check_for_spf_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[19678] dbg: plugin: registering glue method for check_for_spf_pass
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: plugin: registering glue method for check_for_spf_helo_softfail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: plugin: registering glue method for
check_for_def_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: cannot get Envelope-From, cannot use SPF
[19678] dbg: spf: def_spf_whitelist_from: could not find useable envelope
sender
[19678] dbg: plugin: registering glue method for check_for_spf_fail
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[19678] dbg: plugin: registering glue method for check_subject_in_whitelist
(Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x138176c))
[19678] dbg: plugin: registering glue method for
check_for_spf_whitelist_from
(Mail::SpamAssassin::Plugin::SPF=HASH(0xd4a280))
[19678] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[19678] dbg: rules: running body-text per-line regexp tests; score so
far=0.96
[19678] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "I"
[19678] dbg: uri: running uri tests; score so far=0.96
[19678] dbg: plugin: registering glue method for check_uridnsbl
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0))
[19678] dbg: plugin: registering glue method for check_language
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958))
[19678] dbg: plugin: registering glue method for check_microsoft_executable
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd7f684))
[19678] dbg: plugin: registering glue method for check_body_8bits
(Mail::SpamAssassin::Plugin::TextCat=HASH(0xde5958))
[19678] dbg: plugin: registering glue method for check_suspect_name
(Mail::SpamAssassin::Plugin::AntiVirus=HASH(0xd7f684))
[19678] dbg: rules: running raw-body-text per-line regexp tests; score so
far=0.96
[19678] dbg: rules: running full-text regexp tests; score so far=0.96
[19678] dbg: plugin: registering glue method for check_pyzor
(Mail::SpamAssassin::Plugin::Pyzor=HASH(0xd631d4))
[19678] dbg: pyzor: pyzor is available: /usr/local/bin/pyzor
[19678] dbg: info: entering helper-app run mode
[19678] dbg: pyzor: opening pipe: /usr/local/bin/pyzor check <
/tmp/.spamassassin19678kkkWvgtmp
[19703] dbg: util: setuid: ruid=0 euid=0
[19678] dbg: pyzor: [19703] finished: exit=0x0100
[19678] dbg: pyzor: got response: 66.92.49.157:24441_TimeoutError:
[19678] dbg: info: leaving helper-app run mode
[19678] dbg: pyzor: failure to parse response
"66.92.49.157:24441_TimeoutError: "
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
implements 'check_tick'
[19678] dbg: check: running tests for priority: 500
[19678] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xd0c3b0)
implements 'check_post_dnsbl'
[19678] dbg: rules: running meta tests; score so far=0.96
[19678] dbg: rules: running header regexp tests; score so far=2.906
[19678] dbg: rules: running body-text per-line regexp tests; score so
far=2.906
[19678] dbg: uri: running uri tests; score so far=2.906
[19678] dbg: rules: running raw-body-text per-line regexp tests; score so
far=2.906
[19678] dbg: rules: running full-text regexp tests; score so far=2.906
[19678] dbg: check: running tests for priority: 1000
[19678] dbg: rules: running meta tests; score so far=2.906
[19678] dbg: rules: running header regexp tests; score so far=2.906
[19678] dbg: plugin: registering glue method for
check_from_in_auto_whitelist
(Mail::SpamAssassin::Plugin::AWL=HASH(0xde309c))
[19678] dbg: rules: running body-text per-line regexp tests; score so
far=2.906
[19678] dbg: uri: running uri tests; score so far=2.906
[19678] dbg: rules: running raw-body-text per-line regexp tests; score so
far=2.906
[19678] dbg: rules: running full-text regexp tests; score so far=2.906
[19678] dbg: check: is spam? score=2.906 required=5
[19678] dbg: check:
tests=MISSING_SUBJECT,NO_REAL_NAME,NO_RECEIVED,NO_RELAYS,TO_CC_NONE
[19678] dbg: check:
subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SAN
E_MSGID,__UNUSABLE_MSGID
[19678] dbg: bayes: untie-ing
[19678] dbg: bayes: untie-ing db_toks
[19678] dbg: bayes: untie-ing db_seen
[19678] dbg: config: copying current conf to backup
[19678] info: spamd: server started on port 10000/tcp (running version
3.1.0)
[19678] info: spamd: server pid: 19678
[19678] info: spamd: server successfully spawned child process, pid 19705
[19678] dbg: prefork: child 19705: entering state 0
[19678] dbg: prefork: new lowest idle kid: none
[19705] dbg: prefork: sysread(10) not ready, wait max 300 secs
[19678] info: spamd: server successfully spawned child process, pid 19706
[19678] dbg: prefork: child 19706: entering state 0
[19678] dbg: prefork: new lowest idle kid: none
[19678] dbg: prefork: child 19705: entering state 1
[19678] dbg: prefork: new lowest idle kid: 19705
[19678] dbg: prefork: child reports idle
[19678] info: prefork: child states: IS
[19678] dbg: prefork: child 19706: entering state 1
[19678] dbg: prefork: new lowest idle kid: 19705
[19678] dbg: prefork: child reports idle
[19678] info: prefork: child states: II
[19706] dbg: prefork: sysread(10) not ready, wait max 300 secs
