On Tue, Jan 23, 2007 at 06:24:53PM -0800, David Reta wrote: > I am having an issue with some spam slipping through. When I check the > MSG.0 file from the quarantine against a manual run of the > ENTIRE_MESSAGE file from the quarantine there are rules that are not > hit. I am running them manually as the same user as mimedefang so I > don't think it could be a permission issue. Is there a timeout setting > or something else I could be missing that could be causing this? > > Any help is appreciated.
"spamassassin" as a standalone binary uses another configuration file as the spamassassin integrated into mimedefang does. That is likely your problem... try to compare with: spamassassin -p /etc/mail/sa-mimedefang.cf < ENTIRE_MESSAGE Then possibly tweak your sa-mimedefang.cf > Here is an example from the quarantine > > [EMAIL PROTECTED] qdir-2007-01-23-16.27.29-001]$ more MSG.0 [...] > Content analysis details: (0.6 points, 5.0 required) > > 0.603 5 BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY,NO_DNS_FOR_FROM > > Here is the output from when it manually > > [EMAIL PROTECTED] qdir-2007-01-23-16.27.29-001]$ spamassassin < > ENTIRE_MESSAGE [...] > X-Spam-Status: Yes, score=5.8 required=5.0 tests=BAYES_50,DBL_12_LETTER_FLDR, > DBL_12_LETTER_PGIMG,HTML_MESSAGE,MIME_HTML_ONLY,SARE_FORGED_PAYPAL, > SARE_FORGED_PAYPAL_C,SARE_SPOOF_BADURL,SPF_HELO_PASS autolearn=no > version=3.1.7 Note that you also use a different bayes database, apparently. Compare the configs of sa-mimedefang.cf and all *.cf files under /etc/mail/spamassassin. You could if you like put something like "include /etc/mail/spamassassin/local.cf" in your sa-mimedefang.cf, along with any other *.cf files you want to use. (This assumes spamassassin actually uses /etc/mail/spamassassin, and mimedefang uses /etc/mail. Substitute the appropriate paths for your setup, if necessary) -- Jan-Pieter Cornet <[EMAIL PROTECTED]> !! Disclamer: The addressee of this email is not the intended recipient. !! !! This is only a test of the echelon and data retention systems. Please !! !! archive this message indefinitely to allow verification of the logs. !! _______________________________________________ NOTE: If there is a disclaimer or other legal boilerplate in the above message, it is NULL AND VOID. You may ignore it. Visit http://www.mimedefang.org and http://www.roaringpenguin.com MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
