From: "Thomas Booms" <[EMAIL PROTECTED]>
> Loren Wilton schrieb: > > >>Well, header I have on detected spams like these (possibly I need to > >>reconfigure something) to get the above lists: > >> > >>X-Spam-Status: No, score=-1.8 required=1.5 tests=BAYES_00, > >>DATE_IN_FUTURE_03_06 autolearn=ham version=3.0.4 > >> > >> > > > >This says that the message is NOT spam. Bayes in particular is convinced > >that it was ham, and has auto-learned it as such. It looks like your Bayes > >database is corrupt and will need to be rebuilt at some point. > > > >However, before doing that, we need to figure out why all this hit was > >date-in-future. > > > >I'm a little concerned that that initial Received header from Qmail may be > >keeping SA from analyzing the return headers. This could case a lot fo the > >net tests to fail. Hiwever, maybe that header is ok. Others that know more > >about received headers than I do will look at it. > > > >If that spam had been in English the body text would have nailed it. > >"Greencard lottery" is pretty much a guaranteed spam indicator all by > >itself. This looks like a case where a few of the rules for these things > >could profitably be translated to German, by someone that speaks both > >languages. (I don't, or I'd just do it.) > > > >There is a good chance though that register-usa.com should have hit SURBL. > >This makes me think your net tests aren't working. Since this is 3.0.4, > >they should be by default. > > > >Why don't you run "spamassassin --lint -D" and post the output. My guess is > >you either have a problem with the Net::DNS version, or init.pre insn't > >installed correctly. (Of course you might be starting SA with the -L > >parameter that disables net tests.) > > > > Loren > > > > > > > > > > > Well, here's the content of my init.pre and then the running > spamassassin task: > > # This is the right place to customize your installation of SpamAssassin. > # > # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be > # tweaked. > # > # This file will be loaded before *all other* configuration files, including > # the system configuration. As such, it's a good place to set things that > # will affect how those files are parsed, like which plugins are loaded > # etc. > # > ########################################################################### > > # RelayCountry - add metadata for Bayes learning, marking the countries > # a message was relayed through > # > # loadplugin Mail::SpamAssassin::Plugin::RelayCountry > > # URIDNSBL - look up URLs found in the message against several DNS > # blocklists. > # > loadplugin Mail::SpamAssassin::Plugin::URIDNSBL > > # Hashcash - perform hashcash verification. > # > loadplugin Mail::SpamAssassin::Plugin::Hashcash > > # SPF - perform SPF verification. > # > loadplugin Mail::SpamAssassin::Plugin::SPF > > (I've never touched that file) > > /usr/bin/perl -T -w /usr/bin/spamd -q -H /etc/mail/spamassassin > \_ spamd child > \_ spamd child > \_ spamd child > \_ spamd child > \_ spamd child Contents of local.cf also matter. If you have DNS rules off or your DNS misconfigured from what SA wants it isn't going to work well. {^_^}