[Mimedefang] Spamassassin and MimeDefang custom rules

Jon Rowlan jon.rowlan at sads.com
Mon Oct 20 12:19:55 EDT 2008


On Wed, 15 Oct 2008, Paul Murphy wrote:

> spamassassin -p /etc/mail/sa-mimedefang.cf -t -d < INPUTMSG


> Because MIMEDefang runs under the "defang" user, you should also:
> su defang -c 'spamassassin -p /etc/mail/sa-mimedefang.cf -t -d' <
INPUTMSG



Following Paul and Steffan suggestions I have tried to take this a step
further.

I cannot get anything to run at all by issuing

su defang -c 'somecommand'

So I changed my defang user to be able to log in as /bin/sh rather than
/bin/false

So now when I

su defang

I get a prompt and am apparently logged in as defang. Access to some
places is restricted as you would expect.

Below is the output from the above command ... but if I execute the line
above as suggested by Paul or Steffan it just returns to the prompt with
the shell set to \bin\false but does give output when set to \bin\sh

This is a little confusing but it seems to suggest that this is spam but
that it only scores overall 1.8 (I presume because of local whitelist
etc).

Can someone tell me, is my procedure sufficient to prove or disprove
that MD and SA are using local rules or not?

Is there some way to be able to force a score of

a) under 5 but greater than zero - so I can add an SA report
b) over 5 but under 10 - so I can change subject
c) over 10 - so I can reject the mail

without worrying about whitelists etc getting in the way?

Also, can anyone suggest what I need to change permissions on for defang
to be able to run SA using just the "su defang" method.

Many thanks all,

jON


X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on 
	britney.sads.com
X-Spam-Level: *
X-Spam-Status: No, score=1.8 required=5.0 tests=AWL,BAD_TEST,BAYES_40,
	NO_RELAYS autolearn=no version=3.1.7-deb
Received: (from root at localhost)
	by britney.sads.com (8.13.8/8.13.8/Submit) id m9I5jFae022768
	for jon at rowlan.co.uk; Sat, 18 Oct 2008 06:45:15 +0100
Date: Sat, 18 Oct 2008 06:45:15 +0100
From: root <root at britney.sads.com>
Message-Id: <200810180545.m9I5jFae022768 at britney.sads.com>
To: jon at rowlan.co.uk
Subject: xyzzy

Spam detection software, running on the system "britney.sads.com", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
the administrator of that system for details.

Content preview:  [...] 

Content analysis details:   (1.8 points, 5.0 required)

 pts rule name              description
---- ----------------------
--------------------------------------------------
 6.0 BAD_TEST               Local Rule
-0.0 NO_RELAYS              Informational: message was not relayed via
SMTP
-0.2 BAYES_40               BODY: Bayesian spam probability is 20 to 40%
                            [score: 0.2189]
-4.0 AWL                    AWL: From: address is in the auto white-list

 config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org.pre
[18688] dbg: config: using "/var/lib/spamassassin/3.001007" for default
rules dir
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/sought_rules_yerp_org.cf
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org.cf
[18688] dbg: config: using "/etc/spamassassin" for site rules dir
[18688] dbg: config: read file /etc/spamassassin/local.cf
[18688] dbg: config: using "/var/spool/MIMEDefang/.spamassassin" for
user state dir
[18688] dbg: config: using "/etc/mail/sa-mimedefang.cf" for user prefs
file
[18688] dbg: config: read file /etc/mail/sa-mimedefang.cf
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from
@INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e7fa28)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from
@INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e9899c)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SPF=HASH(0x8ec316c)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[18688] dbg: pyzor: network tests on, attempting Pyzor
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8ece8d4)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from
@INC
[18688] dbg: razor2: razor2 is not available
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::Razor2=HASH(0x8eea0e8)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from
@INC
[18688] dbg: reporter: network tests on, attempting SpamCop
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::SpamCop=HASH(0x8f6ef08)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AWL=HASH(0x8f77f84)
[18688] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8f78f20)
[18688] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x8fa3bb8)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x8faf898)
[18688] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags
from @INC
[18688] dbg: plugin: registered
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8fbe798)
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/empty.pre
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/empty.pre" for
included file
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/sought_rules_yerp_org/20_sought.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/sought_rules_yerp_org/20_sought.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/sought_rules_yerp_org/20_sought.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/10_misc.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/10_misc.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/10_misc.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_advance_fee.c
f
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_advance_fee.
cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_advance_fee.c
f
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_anti_ratware.
cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_anti_ratware
.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_anti_ratware.
cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_body_tests.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_body_tests.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_body_tests.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_compensate.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_compensate.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_compensate.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_dnsbl_tests.c
f
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_dnsbl_tests.
cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_dnsbl_tests.c
f
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_drugs.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_drugs.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_drugs.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_fake_helo_tes
ts.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_fake_helo_te
sts.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_fake_helo_tes
ts.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_head_tests.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_head_tests.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_head_tests.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_html_tests.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_html_tests.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_html_tests.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_meta_tests.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_meta_tests.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_meta_tests.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_net_tests.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_net_tests.cf
" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_net_tests.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_phrases.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_phrases.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_phrases.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_porn.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_porn.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_porn.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_ratware.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_ratware.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_ratware.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_uri_tests.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_uri_tests.cf
" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/20_uri_tests.cf
[18688] dbg: config: adding redirector regex:
/^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[18688] dbg: config: adding redirector regex:
/^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[18688] dbg: config: adding redirector regex:
/^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[18688] dbg: config: adding redirector regex:
/^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[18688] dbg: config: adding redirector regex:
/^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[18688] dbg: config: adding redirector regex:
m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
[18688] dbg: config: adding redirector regex:
m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[18688] dbg: config: adding redirector regex:
m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
[18688] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:
$|[&#])'i
[18688] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*
?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
[18688] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*
?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
[18688] dbg: config: adding redirector regex:
m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.
*?)(?:$|[&#])'i
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/23_bayes.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/23_bayes.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/23_bayes.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_accessdb.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_accessdb.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_accessdb.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_antivirus.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_antivirus.cf
" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_antivirus.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_body_tests_es
.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_body_tests_e
s.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_body_tests_es
.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_body_tests_pl
.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_body_tests_p
l.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_body_tests_pl
.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_dcc.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_dcc.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_dcc.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_dkim.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_dkim.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_dkim.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_domainkeys.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_domainkeys.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_domainkeys.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_hashcash.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_hashcash.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_hashcash.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_pyzor.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_pyzor.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_pyzor.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_razor2.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_razor2.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_razor2.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_replace.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_replace.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_replace.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_spf.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_spf.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_spf.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_textcat.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_textcat.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_textcat.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_uribl.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_uribl.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/25_uribl.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_de.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_de.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_de.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_fr.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_fr.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_fr.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_nl.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_nl.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_nl.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_pl.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_pl.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_pl.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_pt_br.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_pt_br.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/30_text_pt_br.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/50_scores.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/50_scores.cf"
for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/50_scores.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_awl.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_awl.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_awl.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist.cf
" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_dk.
cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_dk
.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_dk.
cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_dki
m.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_dk
im.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_dki
m.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_spf
.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_sp
f.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_spf
.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_sub
ject.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_su
bject.cf" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/60_whitelist_sub
ject.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/70_iadb.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/70_iadb.cf" for
included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/70_iadb.cf
[18688] dbg: plugin: fixed relative path:
/var/lib/spamassassin/3.001007/updates_spamassassin_org/80_additional.cf
[18688] dbg: config: using
"/var/lib/spamassassin/3.001007/updates_spamassassin_org/80_additional.c
f" for included file
[18688] dbg: config: read file
/var/lib/spamassassin/3.001007/updates_spamassassin_org/80_additional.cf
[18688] info: config: failed to parse line, skipping: rewrite_subject 0
[18688] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8fbe798) implements
'finish_parsing_end'
[18688] dbg: replacetags: replacing tags
[18688] dbg: replacetags: done replacing tags
[18688] dbg: config: using "/var/spool/MIMEDefang/.spamassassin" for
user state dir
[18688] dbg: bayes: tie-ing to DB file R/O
/var/spool/MIMEDefang/.spamassassin/bayes_toks
[18688] dbg: bayes: tie-ing to DB file R/O
/var/spool/MIMEDefang/.spamassassin/bayes_seen
[18688] dbg: bayes: found bayes db version 3
[18688] dbg: bayes: DB journal sync: last sync: 0
[18688] dbg: config: using "/var/spool/MIMEDefang/.spamassassin" for
user state dir
[18688] dbg: config: score set 3 chosen.
[18688] dbg: dns: name server: 10.1.1.1, family: 2, ipv6: 0
[18688] dbg: dns: testing resolver nameservers: 10.1.1.1, 10.1.1.5,
10.1.1.3
[18688] dbg: dns: trying (3) google.com...
[18688] dbg: dns: looking up NS for 'google.com'
[18688] dbg: dns: NS lookup of google.com using 10.1.1.1 succeeded =>
DNS available (set dns_available to override)
[18688] dbg: dns: is DNS available? 1
[18688] dbg: metadata: X-Spam-Relays-Trusted: 
[18688] dbg: metadata: X-Spam-Relays-Untrusted: 
[18688] dbg: metadata: X-Spam-Relays-Internal: 
[18688] dbg: metadata: X-Spam-Relays-External: 
[18688] dbg: message: ---- MIME PARSER START ----
[18688] dbg: message: main message type: text/plain
[18688] dbg: message: parsing normal part
[18688] dbg: message: added part, type: text/plain
[18688] dbg: message: ---- MIME PARSER END ----
[18688] dbg: message: no encoding detected
[18688] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e7fa28) implements
'parsed_metadata'
[18688] dbg: uridnsbl: domains to query: 
[18688] dbg: check: running tests for priority: 0
[18688] dbg: rules: running header regexp tests; score so far=0
[18688] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[18688] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "("
[18688] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<200810180545.m9I5jFae022768 at britney.sads.com>
[18688] dbg: rules: "
[18688] dbg: rules: ran header rule BAD_TEST ======> got hit: "xyzzy"
[18688] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@britney.sads.com>"
[18688] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: "j"
[18688] dbg: rules: ran header rule __NAKED_TO ======> got hit:
"jon at rowlan.co.uk"
[18688] dbg: rules: ran header rule __MSGID_OK_DIGITS ======> got hit:
"2008101805"
[18688] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "s"
[18688] dbg: spf: no suitable relay for spf use found, skipping SPF-helo
check
[18688] dbg: eval: all '*From' addrs: root at britney.sads.com
[18688] dbg: eval: trying Received header date for real time: 18 Oct
2008 06:45:15 +0100
[18688] dbg: eval: time_t from date=1224308715, rcvd= 18 Oct 2008
06:45:15 +0100
[18688] dbg: eval: all '*To' addrs: jon at rowlan.co.uk
[18688] dbg: spf: no suitable relay for spf use found, skipping SPF
check
[18688] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[18688] dbg: spf: cannot get Envelope-From, cannot use SPF
[18688] dbg: spf: def_spf_whitelist_from: could not find useable
envelope sender
[18688] dbg: eval: date chosen from message: Sat Oct 18 06:45:15 2008
[18688] dbg: spf: spf_whitelist_from: could not find useable envelope
sender
[18688] dbg: rules: running body-text per-line regexp tests; score so
far=5.999
[18688] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "s"
[18688] dbg: uri: running uri tests; score so far=5.999
[18688] dbg: bayes: DB journal sync: last sync: 0
[18688] dbg: bayes: corpus size: nspam = 1149, nham = 51765
[18688] dbg: bayes: score = 0.218922185940122
[18688] dbg: bayes: DB journal sync: last sync: 0
[18688] dbg: bayes: untie-ing
[18688] dbg: bayes: untie-ing db_toks
[18688] dbg: bayes: untie-ing db_seen
[18688] dbg: rules: ran eval rule BAYES_40 ======> got hit
[18688] dbg: rules: running raw-body-text per-line regexp tests; score
so far=5.814
[18688] dbg: rules: running full-text regexp tests; score so far=5.814
[18688] dbg: util: current PATH is:
/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
[18688] dbg: pyzor: pyzor is not available: no pyzor executable found
[18688] dbg: pyzor: no pyzor found, disabling Pyzor
[18688] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e7fa28) implements
'check_tick'
[18688] dbg: check: running tests for priority: 500
[18688] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8e7fa28) implements
'check_post_dnsbl'
[18688] dbg: rules: running meta tests; score so far=5.814
[18688] info: rules: meta test DIGEST_MULTIPLE has undefined dependency
'DCC_CHECK'
[18688] dbg: rules: running header regexp tests; score so far=5.814
[18688] dbg: rules: running body-text per-line regexp tests; score so
far=5.814
[18688] dbg: uri: running uri tests; score so far=5.814
[18688] dbg: rules: running raw-body-text per-line regexp tests; score
so far=5.814
[18688] dbg: rules: running full-text regexp tests; score so far=5.814
[18688] dbg: check: running tests for priority: 1000
[18688] dbg: rules: running meta tests; score so far=5.814
[18688] dbg: rules: running header regexp tests; score so far=5.814
[18688] dbg: config: using "/var/spool/MIMEDefang/.spamassassin" for
user state dir
[18688] dbg: locker: safe_lock: created
/var/spool/MIMEDefang/.spamassassin/auto-whitelist.lock.britney.sads.com
.18688
[18688] dbg: locker: safe_lock: trying to get lock on
/var/spool/MIMEDefang/.spamassassin/auto-whitelist with 0 retries
[18688] dbg: locker: safe_lock: link to
/var/spool/MIMEDefang/.spamassassin/auto-whitelist.lock: link ok
[18688] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in
/var/spool/MIMEDefang/.spamassassin/auto-whitelist
[18688] dbg: auto-whitelist: db-based root at britney.sads.com|ip=none
scores 882/-2001.996
[18688] dbg: auto-whitelist: AWL active, pre-score: 5.814, autolearn
score: 5.814, mean: -2.26983673469388, IP: undef
[18688] dbg: auto-whitelist: add_score: new count: 883, new totscore:
-1996.182
[18688] dbg: auto-whitelist: DB addr list: untie-ing and unlocking
[18688] dbg: auto-whitelist: DB addr list: file locked, breaking lock
[18688] dbg: locker: safe_unlock: unlink
/var/spool/MIMEDefang/.spamassassin/auto-whitelist.lock
[18688] dbg: auto-whitelist: post auto-whitelist score: 1.77208163265306
[18688] dbg: rules: running body-text per-line regexp tests; score so
far=1.77208163265306
[18688] dbg: uri: running uri tests; score so far=1.77208163265306
[18688] dbg: rules: running raw-body-text per-line regexp tests; score
so far=1.77208163265306
[18688] dbg: rules: running full-text regexp tests; score so
far=1.77208163265306
[18688] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8f78f20)
implements 'autolearn_discriminator'
[18688] dbg: learn: auto-learn: currently using scoreset 3, recomputing
score based on scoreset 1
[18688] dbg: learn: auto-learn: message score: 1.77208163265306,
computed score for autolearn: 6
[18688] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=0,
head-points=6, learned-points=-0.185
[18688] dbg: learn: auto-learn? no: inside auto-learn thresholds, not
considered ham or spam
[18688] dbg: check: is spam? score=1.772 required=5
[18688] dbg: check: tests=AWL,BAD_TEST,BAYES_40,NO_RELAYS
[18688] dbg: check:
subtests=__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__MSGID_OK_DIGITS,__MSGID_
OK_HOST,__NAKED_TO,__NONEMPTY_BODY,__SANE_MSGID,__TOCC_EXISTS






More information about the MIMEDefang mailing list