After properly configuring a bayes database and training it following
the great advice from this list, I am now having this problem where some
spam is not detected properly due to a shortcircuit rule. However, I'm
having some difficulty figuring out which one of them is causing the
problem. Here is the X-Spam-Report - which should cause the email to be
classed as spam, really:
X-Spam-Report:
* 1.2 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
* [URIs: completercpt3040.com]
* 1.4 RCVD_IN_BRBL_LASTEXT RBL: No description available.
* [192.74.251.225 listed in bb.barracudacentral.org]
* 0.1 URIBL_SBL_A Contains URL's A record listed in the SBL blocklist
* [URIs: completercpt3040.com]
* 1.6 URIBL_SBL Contains an URL's NS IP listed in the SBL blocklist
* [URIs: completercpt3040.com]
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 0.8 BAYES_50 BODY: Bayes spam probability is 40 to 60%
* [score: 0.4954]
* 0.7 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 0.0 LOTS_OF_MONEY Huge... sums of money
* 0.0 UNPARSEABLE_RELAY Informational: message has unparseable
relay lines
* 0.8 RDNS_NONE Delivered to internal network by a host with no rDNS
* 2.0 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
But when the message goes through Exim, it comes out with -99 score. If
I run through the debug output, it becomes clear that a shortcircuit
rule fires - but it doesn't say which (see the last line of output -
clearly one of the rules is whitelisting the message). I can't even
disable shortcircuiting - although I've commented it out in v320.pre,
the debug output shows it is still being used:
# spamassassin -D < FWD\ Attention\ Domain\ yourdomain.com\ Notice.eml
2>&1 | grep -i shortcircuit
Dec 2 09:11:28.896 [16962] dbg: plugin: loading
Mail::SpamAssassin::Plugin::Shortcircuit from @INC
Dec 2 09:11:30.282 [16962] dbg: config: fixed relative path:
/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_shortcircuit.cf
Dec 2 09:11:30.282 [16962] dbg: config: using
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_shortcircuit.cf"
for included file
Dec 2 09:11:30.283 [16962] dbg: config: read file
/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_shortcircuit.cf
Dec 2 09:11:34.192 [16962] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x3a0cbf8) implements
'parsed_metadata', priority 0
Dec 2 09:11:34.394 [16962] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x3a0cbf8) implements
'have_shortcircuited', priority 0
Dec 2 09:11:34.533 [16962] dbg: plugin:
Mail::SpamAssassin::Plugin::Shortcircuit=HASH(0x3a0cbf8) implements
'hit_rule', priority 0
shortcircuit=no autolearn=no autolearn_force=no version=3.4.1
-100 SHORTCIRCUIT Not all rules were run, due to a
shortcircuited rule
