-----Original Message----- From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf Of Sven De Troch Sent: Sunday, September 24, 2006 10:05 AM To: Message Sniffer Community Subject: [sniffer] Re: Mdaemon plugin 'sleeping'
We are using v 9.0.6, we will try with version 9.0.7 within a week (we always wait some time after the release of a new version, just to be sure that most bugs have been repeaired ;-) SA rules are correct I assume, because most of the spam is being tagged correctly? I'll have a look to be 100% sure. Thanks for the effort, Sven We are having the same problem. Sniffer is processing the messages but it appears as if SA is not picking it up. I posted this in the MDaemon Discussion list yesterday and had one reply. Upgraded to 9.07 and tried what the poster recommended and it is still not adding to the spam score. Anyone else (Pete?) have ideas. We need to get this working. Thanks Grant Link to MDaemon discussion: http://lists.altn.com/[EMAIL PROTECTED]@.eebd191/1 MD 9.06 with message sniffer used as a plug-in. I believe that message sniffer is processing the messages properly and reporting it but appartently SA is not recoginizing this and adding it to the overall spam score. No known changes on our end but anything is possible. Here is a snippet of a header: X-SortMonster-MessageSniffer-Message: md50001219094.msg X-SortMonster-MessageSniffer-Rules: XXXXXXXX-MDPv0.53b (SNFv2-3.1i2) 52-73990-881-898-m 52-1145685-1198-1220-m 52-1145685-1576-1598-m 52-1145685-1923-1945-m 52-1145685-2132-2154-m 52-73990-881-898-f X-SortMonster-MessageSniffer-Result: 52 X-Spam-Report: * 0.0 HTML_MESSAGE BODY: HTML included in message * 10 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.0000] * 3.0 URIBL_BLACK Contains a URL listed in the URIBL.com blacklist * [URIs: yatchul.com] X-Spam-Flag: YES X-Spam-Status: Yes, score=13.00 required=10.1 X-Spam-Level: ************* X-Spam-Processed: domain.com, Fri, 29 Sep 2006 12:37:36 -0400 (processed during SMTP session) X-MDRcpt-To: [EMAIL PROTECTED] X-Rcpt-To: [EMAIL PROTECTED] X-MDRemoteIP: 12.151.3.4 X-Return-Path: [EMAIL PROTECTED] X-Envelope-From: [EMAIL PROTECTED] X-MDaemon-Deliver-To: [EMAIL PROTECTED] X-MDAV-Processed: domain.com, Fri, 29 Sep 2006 12:37:37 -0400 Here is our local.cf: required_score 10.1 rewrite_header subject [***SPAM*** Score/Req: _SCORE(0)_/_REQD_] report_safe 0 skip_rbl_checks 1 add_header all Report _REPORT_ add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) local_tests_only 1 use_hashcash 1 use_bayes 1 bayes_path M:\MDaemon\SpamAssassin\bayes\bayes bayes_auto_learn 1 bayes_auto_learn_threshold_nonspam 0.1 bayes_auto_learn_threshold_spam 21.0 bayes_ignore_header X-Spam-Status bayes_ignore_header X-Spam-Level bayes_ignore_header X-Spam-Checker-Version bayes_ignore_header X-Spam-Report bayes_ignore_header X-Spam-Processed bayes_auto_expire 0 bayes_expiry_max_db_size 150000 bayes_min_ham_num 25 bayes_min_spam_num 25 use_auto_whitelist 0 auto_whitelist_path M:\MDaemon\SpamAssassin\auto_whitelist\auto_whitelist use_dcc 0 use_razor2 0 use_pyzor 0 score RAZOR2_CHECK 0 score MDAEMON_SPF_FAIL 5.0 score MDAEMON_SPF_PASS -0.5 score MDAEMON_DK_PASS -0.5 score MDAEMON_DK_FAIL 15.0 score USER_IN_WHITELIST -100.0 score USER_IN_WHITELIST_TO -100.0 score USER_IN_BLACKLIST 100.0 score MDAEMON_DNSBL 3.0 dns_available yes header MESSAGE_SNIFFER X-SortMonster-MessageSniffer-Result =~ /([1-63])/ describe MESSAGE_SNIFFER Flagged by message sniffer(www.sortmonster.com) score MESSAGE_SNIFFER 15.0 auto_whitelist_factor 0.5 auto_whitelist_file_mode 0666 Thanks. This was recommended and did not fix it: Seems to me that rule is wrong Try : header MESSAGE_SNIFFER X-SortMonster-MessageSniffer-Result =~ /1-63$/ instead of header MESSAGE_SNIFFER X-SortMonster-MessageSniffer-Result =~ /([1-63])/ ############################################################# This message is sent to you because you are subscribed to the mailing list <sniffer@sortmonster.com>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
