Hi all,
I'm trying to get SURBL working so I followed the wiki and everything is
configured as suggested but the example URL is not catched when sending
the test mail from hotmail/gmail/anywhere.
I tried to understand why this doesn't work by taking the mail and
feeding it to the spamassassin executable. This works, the SURBL are
used and the spam score is through the roof as expected.
BUT, when I use spamc, nothing happens. Also when I run spamassassin and
spamc with the vpopmail user, nothing happens.
How can that be different? Is this a configuration problem?
Here are some example of what I ran (sorry in advance, it's going to be
big :-)):
###########################
# 1st test with spamassassin (user *root*)
###########################
# spamassassin < my_email_with_test_URL
Return-Path: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.agiir.net
X-Spam-Level: *******
X-Spam-Status: Yes, score=7.6 required=5.0 tests=AWL,BAYES_50,HTML_MESSAGE,
RDNS_NONE,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL,
URIBL_SC_SURBL,URIBL_WS_SURBL autolearn=disabled version=3.2.5
X-Spam-Report: =?ISO-8859-1?Q?
* 0.0 HTML_MESSAGE BODY: HTML inclus dans le message
* 0.0 BAYES_50 BODY: L'algorithme Bay=e9sien a =e9valu=e9 la
probabilit=e9 de spam
* entre 40 et 60%
* [score: 0.4992]
* 1.8 URIBL_PH_SURBL Contains an URL listed in the PH SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 1.9 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 1.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 1.5 URIBL_OB_SURBL Contains an URL listed in the OB SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 0.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 0.1 RDNS_NONE Delivered to trusted network by a host with no
rDNS
* -1.1 AWL AWL: From: address is in the auto white-list?=
Delivered-To: [email protected]
Received: (qmail 29153 invoked by uid 89); 27 May 2010 09:04:31 -0000
Received: by simscan 1.4.0 ppid: 29141, pid: 29144, t: 0.3683s
scanners: attach: 1.4.0 clamav: 0.96/m:52/d:11086 spam: 3.2.5
Received: from unknown (HELO col0-omc3-s8.col0.hotmail.com) (65.55.34.146)
by mail.agiir.net with SMTP; 27 May 2010 09:04:31 -0000
Received-SPF: pass (mail.agiir.net: SPF record at spf-a.hotmail.com
designates 65.55.34.146 as permitted sender)
Received: from COL112-W22 ([65.55.34.136]) by
col0-omc3-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 02:04:29 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_7c2d7506-6daa-410a-b29d-4f53760c4aef_"
X-Originating-IP: [85.14.144.10]
From: Pierre Gaxatte <[email protected]>
To: <[email protected]>
Subject: ***SPAM*** Test RBL
Date: Thu, 27 May 2010 11:04:29 +0200
Importance: Normal
MIME-Version: 1.0
X-Spam-Prev-Subject: Test RBL
--_7c2d7506-6daa-410a-b29d-4f53760c4aef_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
###########################
# 2nd test with spamc (user *root*)
###########################
# spamc < my_email_with_test_URL
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.agiir.net
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=AWL,BAYES_50,HTML_MESSAGE,
RDNS_NONE autolearn=no version=3.2.5
Delivered-To: [email protected]
Received: (qmail 29153 invoked by uid 89); 27 May 2010 09:04:31 -0000
Received: by simscan 1.4.0 ppid: 29141, pid: 29144, t: 0.3683s
scanners: attach: 1.4.0 clamav: 0.96/m:52/d:11086 spam: 3.2.5
Received: from unknown (HELO col0-omc3-s8.col0.hotmail.com) (65.55.34.146)
by mail.agiir.net with SMTP; 27 May 2010 09:04:31 -0000
Received-SPF: pass (mail.agiir.net: SPF record at spf-a.hotmail.com
designates 65.55.34.146 as permitted sender)
Received: from COL112-W22 ([65.55.34.136]) by
col0-omc3-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 02:04:29 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_7c2d7506-6daa-410a-b29d-4f53760c4aef_"
X-Originating-IP: [85.14.144.10]
From: Pierre Gaxatte <[email protected]>
To: <[email protected]>
Subject: Test RBL
Date: Thu, 27 May 2010 11:04:29 +0200
Importance: Normal
MIME-Version: 1.0
--_7c2d7506-6daa-410a-b29d-4f53760c4aef_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
###########################
# 3rd test with spamassassin -L (user *root*)
###########################
# spamassassin -L < my_email_with_test_URL
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.agiir.net
X-Spam-Level: ***
X-Spam-Status: No, score=3.6 required=5.0 tests=AWL,BAYES_50,HTML_MESSAGE,
RDNS_NONE autolearn=disabled version=3.2.5
Delivered-To: [email protected]
Received: (qmail 29153 invoked by uid 89); 27 May 2010 09:04:31 -0000
Received: by simscan 1.4.0 ppid: 29141, pid: 29144, t: 0.3683s
scanners: attach: 1.4.0 clamav: 0.96/m:52/d:11086 spam: 3.2.5
Received: from unknown (HELO col0-omc3-s8.col0.hotmail.com) (65.55.34.146)
by mail.agiir.net with SMTP; 27 May 2010 09:04:31 -0000
Received-SPF: pass (mail.agiir.net: SPF record at spf-a.hotmail.com
designates 65.55.34.146 as permitted sender)
Received: from COL112-W22 ([65.55.34.136]) by
col0-omc3-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 02:04:29 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_7c2d7506-6daa-410a-b29d-4f53760c4aef_"
X-Originating-IP: [85.14.144.10]
From: Pierre Gaxatte <[email protected]>
To: <[email protected]>
Subject: Test RBL
Date: Thu, 27 May 2010 11:04:29 +0200
Importance: Normal
MIME-Version: 1.0
--_7c2d7506-6daa-410a-b29d-4f53760c4aef_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
###########################
# 4th test with spamassassin (user *vpopmail*)
###########################
# sudo -u vpopmail -H spamassassin < my_email_with_test_URL
Return-Path: <[email protected]>
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.agiir.net
X-Spam-Level: ********
X-Spam-Status: Yes, score=8.8 required=5.0 tests=AWL,HTML_MESSAGE,RDNS_NONE,
URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_PH_SURBL,URIBL_SC_SURBL,
URIBL_WS_SURBL autolearn=disabled version=3.2.5
X-Spam-Report:
* 0.0 HTML_MESSAGE BODY: HTML inclus dans le message
* 2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 1.6 URIBL_AB_SURBL Contains an URL listed in the AB SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 2.9 URIBL_JP_SURBL Contains an URL listed in the JP SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 2.1 URIBL_OB_SURBL Contains an URL listed in the OB SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 2.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL
blocklist
* [URIs: surbl-org-permanent-test-point.com]
* 0.1 RDNS_NONE Delivered to trusted network by a host with no
rDNS
* -4.5 AWL AWL: From: address is in the auto white-list
Delivered-To: [email protected]
Received: (qmail 29153 invoked by uid 89); 27 May 2010 09:04:31 -0000
Received: by simscan 1.4.0 ppid: 29141, pid: 29144, t: 0.3683s
scanners: attach: 1.4.0 clamav: 0.96/m:52/d:11086 spam: 3.2.5
Received: from unknown (HELO col0-omc3-s8.col0.hotmail.com) (65.55.34.146)
by mail.agiir.net with SMTP; 27 May 2010 09:04:31 -0000
Received-SPF: pass (mail.agiir.net: SPF record at spf-a.hotmail.com
designates 65.55.34.146 as permitted sender)
Received: from COL112-W22 ([65.55.34.136]) by
col0-omc3-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 02:04:29 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_7c2d7506-6daa-410a-b29d-4f53760c4aef_"
X-Originating-IP: [85.14.144.10]
From: Pierre Gaxatte <[email protected]>
To: <[email protected]>
Subject: ***SPAM*** Test RBL
Date: Thu, 27 May 2010 11:04:29 +0200
Importance: Normal
MIME-Version: 1.0
X-Spam-Prev-Subject: Test RBL
--_7c2d7506-6daa-410a-b29d-4f53760c4aef_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
###########################
# 5th test with spamc (user *vpopmail*)
###########################
# sudo -u vpopmail -H spamc < my_email_with_test_URL
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.agiir.net
X-Spam-Level: **
X-Spam-Status: No, score=2.6 required=5.0 tests=AWL,HTML_MESSAGE,RDNS_NONE
autolearn=no version=3.2.5
Delivered-To: [email protected]
Received: (qmail 29153 invoked by uid 89); 27 May 2010 09:04:31 -0000
Received: by simscan 1.4.0 ppid: 29141, pid: 29144, t: 0.3683s
scanners: attach: 1.4.0 clamav: 0.96/m:52/d:11086 spam: 3.2.5
Received: from unknown (HELO col0-omc3-s8.col0.hotmail.com) (65.55.34.146)
by mail.agiir.net with SMTP; 27 May 2010 09:04:31 -0000
Received-SPF: pass (mail.agiir.net: SPF record at spf-a.hotmail.com
designates 65.55.34.146 as permitted sender)
Received: from COL112-W22 ([65.55.34.136]) by
col0-omc3-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 02:04:29 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_7c2d7506-6daa-410a-b29d-4f53760c4aef_"
X-Originating-IP: [85.14.144.10]
From: Pierre Gaxatte <[email protected]>
To: <[email protected]>
Subject: Test RBL
Date: Thu, 27 May 2010 11:04:29 +0200
Importance: Normal
MIME-Version: 1.0
--_7c2d7506-6daa-410a-b29d-4f53760c4aef_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
###########################
# 6th and last test with spamassassin -L (user *vpopmail*)
###########################
# sudo -u vpopmail -H spamassassin -L < my_email_with_test_URL
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mail.agiir.net
X-Spam-Level: **
X-Spam-Status: No, score=2.4 required=5.0 tests=AWL,HTML_MESSAGE,RDNS_NONE
autolearn=disabled version=3.2.5
Delivered-To: [email protected]
Received: (qmail 29153 invoked by uid 89); 27 May 2010 09:04:31 -0000
Received: by simscan 1.4.0 ppid: 29141, pid: 29144, t: 0.3683s
scanners: attach: 1.4.0 clamav: 0.96/m:52/d:11086 spam: 3.2.5
Received: from unknown (HELO col0-omc3-s8.col0.hotmail.com) (65.55.34.146)
by mail.agiir.net with SMTP; 27 May 2010 09:04:31 -0000
Received-SPF: pass (mail.agiir.net: SPF record at spf-a.hotmail.com
designates 65.55.34.146 as permitted sender)
Received: from COL112-W22 ([65.55.34.136]) by
col0-omc3-s8.col0.hotmail.com with Microsoft SMTPSVC(6.0.3790.4675);
Thu, 27 May 2010 02:04:29 -0700
Message-ID: <[email protected]>
Return-Path: [email protected]
Content-Type: multipart/alternative;
boundary="_7c2d7506-6daa-410a-b29d-4f53760c4aef_"
X-Originating-IP: [85.14.144.10]
From: Pierre Gaxatte <[email protected]>
To: <[email protected]>
Subject: Test RBL
Date: Thu, 27 May 2010 11:04:29 +0200
Importance: Normal
MIME-Version: 1.0
--_7c2d7506-6daa-410a-b29d-4f53760c4aef_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
http://surbl-org-permanent-test-point.com
###########################
# END OF TESTS
###########################
I could run the spamassassin with -D if it may be relevant, but I didn't
do it here not to scare people :-D
There is one thing that makes me think it's really a configuration
problem: the autolearn is set sometimes to "disabled", sometimes to "no"
although all tests were run without changing my local.cf, which looks
like this:
loadplugin Mail::SpamAssassin::Plugin::DCC
loadplugin Mail::SpamAssassin::Plugin::TextCat
ok_languages en fr
skip_rbl_checks 0
required_score 5
report_safe 0
rewrite_header Subject ***SPAM***
use_pyzor 1
use_auto_whitelist 1
dns_available yes
use_bayes 1
use_bayes_rules 1
bayes_auto_learn 0
bayes_store_module Mail::SpamAssassin::BayesStore::SQL
bayes_sql_dsn [...]
bayes_sql_username [...]
bayes_sql_password [...]
score BAYES_99 4.900
score FH_DATE_PAST_20XX 0.0
The local.pre:
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
Can somebody help me figuring out why the SURBL are not firing when
emails are scanned by spamc?
Thank you in advance,
Pierre
---------------------------------------------------------------------------------
Qmailtoaster is sponsored by Vickers Consulting Group
(www.vickersconsulting.com)
Vickers Consulting Group offers Qmailtoaster support and installations.
If you need professional help with your setup, contact them today!
---------------------------------------------------------------------------------
Please visit qmailtoaster.com for the latest news, updates, and packages.
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
