Oh, yeah, I should also include this from the mail logs. It doesn't look like SNF4SA is being run successfully, but it still results in a SA weight of 1 rather than the sa_score configured:
May 13 16:04:32 mail amavis[1051]: (01051-07) _WARN: rules: failed to run SNF4SA test, skipping:\n\t(Snf4sa: Timeout waiting for response from SNFServer at /usr/local/etc/mail/spamassassin/snf4sa.pm line 721.\n)\n May 13 16:04:33 mail amavis[1051]: (01051-07) spam_scan: score=25.451 autolearn=disabled tests=[DCC_CHECK=1.37,DIGEST_MULTIPLE=0.001,FB_INDEPEND_RWD=3.599,FH_FRO M_CASH=2.996,HTML_MESSAGE=0.001,HTML_MIME_NO_HTML_TAG=1.052,HTML_TAG_BAL ANCE_BODY=0.807,MIME_HTML_ONLY=1.672,RAZOR2_CF_RANGE_51_100=0.5,RAZOR2_C F_RANGE_E4_51_100=1.5,RAZOR2_CF_RANGE_E8_51_100=1.5,RAZOR2_CHECK=0.5,SNF 4SA=1,SNIFFER=6,SPF_FAIL=0.992,URIBL_BLACK=1.961] May 13 16:04:34 mail amavis[1051]: (01051-07) SPAM, <bounce-muxikqvilwlv...@topspotbrands.com> -> <dwil...@wilcoxtravel.com>, Yes, score=25.451 tag=-999 tag2=6 kill=6 tests=[DCC_CHECK=1.37, DIGEST_MULTIPLE=0.001, FB_INDEPEND_RWD=3.599, FH_FROM_CASH=2.996, HTML_MESSAGE=0.001, HTML_MIME_NO_HTML_TAG=1.052, HTML_TAG_BALANCE_BODY=0.807, MIME_HTML_ONLY=1.672, RAZOR2_CF_RANGE_51_100=0.5, RAZOR2_CF_RANGE_E4_51_100=1.5, RAZOR2_CF_RANGE_E8_51_100=1.5, RAZOR2_CHECK=0.5, SNF4SA=1, SNIFFER=6, SPF_FAIL=0.992, URIBL_BLACK=1.961], autolearn=disabled Dan Horne TAIS Director of Operations www.taisweb.net supp...@taisweb.net 828.252.TAIS (8247) > -----Original Message----- > From: Dan Horne > Sent: Wednesday, May 13, 2009 4:04 PM > To: 'Message Sniffer Community' > Subject: RE: [sniffer] SNF4SA - Message Sniffer Antispam Plugin for > SpamAssassin > > Hi Pete. I've loaded SNF4SA.cf as instructed into > /usr/local/etc/mail/spamassassin (the correct location on my FreeBSD server), > but when I do "spamassassin -D --lint" I get the following lines: > > [1382] warn: config: failed to parse line, skipping, in > "/usr/local/etc/mail/spamassassin/snf4sa.cf": GBUdb_max_weight 3.0 > [1382] warn: config: failed to parse line, skipping, in > "/usr/local/etc/mail/spamassassin/snf4sa.cf": snf_result 1 sa_score -5.0 > short_circuit_no > [1382] warn: config: failed to parse line, skipping, in > "/usr/local/etc/mail/spamassassin/snf4sa.cf": snf_result 20 sa_score 6.0 > short_circuit_yes > [1382] warn: config: failed to parse line, skipping, in > "/usr/local/etc/mail/spamassassin/snf4sa.cf": snf_result 40 sa_score 2.5 > short_circuit_no > [1382] warn: config: failed to parse line, skipping, in > "/usr/local/etc/mail/spamassassin/snf4sa.cf": snf_result 47-62 sa_score 4.0 > short_circuit_no > [1382] warn: config: failed to parse line, skipping, in > "/usr/local/etc/mail/spamassassin/snf4sa.cf": snf_result 63 sa_score 3.5 > short_circuit_no > [1382] dbg: config: fixed relative path: > /usr/local/etc/mail/spamassassin/snf4sa.pm > [1382] dbg: plugin: loading Snf4sa from > /usr/local/etc/mail/spamassassin/snf4sa.pm > > ... and later in the output ... > > [1382] dbg: plugin: Snf4sa=HASH(0x986ba38) implements 'have_shortcircuited', > priority 0 > > Please advise regarding the "failed to parse line, skipping" warnings. Does > this mean this isn't working properly? > > Dan Horne > TAIS > Director of Operations > www.taisweb.net > supp...@taisweb.net > 828.252.TAIS (8247) > > > > -----Original Message----- > > From: Message Sniffer Community [mailto:snif...@sortmonster.com] On Behalf > Of > > Pete McNeil > > Sent: Tuesday, May 12, 2009 3:07 PM > > To: Message Sniffer Community > > Subject: [sniffer] SNF4SA - Message Sniffer Antispam Plugin for SpamAssassin > > > > Hello Sniffer Folks, > > > > We have just released a MUCH improved plugin for SpamAssassin. Our new > > plugin makes full use of the SpamAssassin Plugin API to provide features > > like: > > > > * Add weights for specific scan result codes. > > * Add (or subtract) additional weight based on IP reputation statistics. > > * Optionally skip other tests. > > * Inject SNF headers. > > > > The SNF4SA plugin is included in the latest *nix distribution of SNF on > > our products page: > > > > http://www.armresearch.com/products/index.jsp > > > > Also we have packaged the SNF4SA plugin separately for those of you > > running SpamAssassin on Windows machines -- or if you already have SNF > > up and running and just want to switch to the latest SpamAssassin plugin. > > > > Here is a link for more information on SNF4SA: > > > > http://www.armresearch.com/products/SNF4SA.jsp > > > > We look forward to your feedback! > > > > Thanks, > > > > _M > > > > > > ############################################################# > > This message is sent to you because you are subscribed to > > the mailing list <sniffer@sortmonster.com>. > > To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> > > To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> > > To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> > > Send administrative queries to <sniffer-requ...@sortmonster.com> ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <sniffer-...@sortmonster.com> To switch to the DIGEST mode, E-mail to <sniffer-dig...@sortmonster.com> To switch to the INDEX mode, E-mail to <sniffer-in...@sortmonster.com> Send administrative queries to <sniffer-requ...@sortmonster.com>
