[Mimedefang] SA-Bayes not working..

Richard J. Kieran Rkieran at rhnet.org
Wed Jun 25 13:01:50 EDT 2008


Tomasz Ostrowski <tometzky at batory.org.pl> writes:
>On 2008-06-25 14:46, Richard J. Kieran wrote:
>> Tomasz Ostrowski <tometzky at batory.org.pl> writes:
>>> How did you save and restore a Bayes database?
>> I did it the same way you did.
>
>Looks good. Slightly strange location of bayes database and insecure
>permissions of it, but this should not brake it.
>
>Try this:
># su -s /bin/bash - defang
>$ spamassassin -D -p /etc/mail/sa-mimedefang.cf -t \
>  < /usr/share/doc/spamassassin-*/sample-spam.txt 2>&1 | grep -i bayes
Results:
Content analysis details:   (997.4 points, 4.0 required)

 pts rule name              description
---- ---------------------- --------------------------------------------------
-0.0 NO_RELAYS              Informational: message was not relayed via SMTP
1000 GTUBE                  BODY: Generic Test for Unsolicited Bulk Email
-2.6 BAYES_00               BODY: Bayesian spam probability is 0 to 1%
                            [score: 0.0052]
-0.0 NO_RECEIVED            Informational: message has no Received headers
Looks like Bayes worked. However, when sending it from another email server to this one, the tests are:
X-Spam-Tests: RCVD_IN_DNSWL_LOW,SPF_HELO_PASS,SPF_PASS,USER_IN_ALL_SPAM_TO,USER_IN_WHITELIST
X-Spam-Hits: -201.002
>
No sign of Bayes. It's not because I'm a whitelisted recipient, is it?
>
>Also show us a fragment of your /etc/mail/mimedefang-filter where it is
>running spamassassin. This starts with
>	if ($Features{"SpamAssassin"}
   
 if ($Features{"SpamAssassin"}) {
        if (-s "./INPUTMSG" < 405*1024) {
            # Only scan messages smaller than 405kB.  Larger messages
            # are extremely unlikely to be spam, and SpamAssassin is
            # dreadfully slow on very large messages.
            my($hits, $req, $names, $report) = spam_assassin_check();
            action_change_header("X-Spam-Tests", "$names");
            action_change_header("X-Spam-Hits", "$hits");

          if ($hits >= $req) {
                md_graphdefang_log('is_spam', "$hits/$req\[$names\]", $RelayAddr);
 # This is the part that bounces the SPAM:
                my($bouncemsg)="";
                if(@Recipients == 1) {
                        my($newrecipient)= $Recipients[0];
                        $newrecipient =~ s/\@/-nsdlvb\@/;
                        $bouncemsg="Your message was rejected as spam by our spamfilter. Please resend to ".$newrecipient.". Do not use this as a permanent address. It will change on the first of every month.";
                } else {
                        $bouncemsg="Your message was rejected as spam by our spamfilter. For assistance email help\@rhnet.org.";
                }
                md_syslog('err',"deleting\|$MessageID\|$hits\|$names");

                #Quarantine the spam if the score is not astronomical, then reject it.
                if ($hits <= 7.5) {
                        action_quarantine_entire_message("Spam quarantined by hoover.rhnet.org");
                }

                action_bounce($bouncemsg);

            } else {
                md_graphdefang_log('not_spam', "$hits/$req\[$names\]", $RelayAddr);
            }
        }
    # send_quarantine_notifications();
    }
>
>
Thanks.
Richard




More information about the MIMEDefang mailing list