Steve Ok looks good. If you can drop an example of a spam that 'gets through' to a web page somewhere, I can run it over my system and see what happens.
I've got loads of extra rules (most of rulesemporium.com etc etc so we'll see what hits... -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -----Original Message----- From: Steve [Spamassasin] [mailto:[EMAIL PROTECTED] Sent: 12 September 2005 11:43 To: Martin Hepworth; users@spamassassin.apache.org Subject: Re: Very simple user query... Martin Hepworth wrote: >Steve > >OK - what do you get for "spamassassin -D --lint" ?? > > Output attached: sdlint.txt... >This will give you the list of tests etc its triggering along with things >that might be causing ptoblems. The URI-RBLs are enabled by default in most config's, but Gentoo might have removed this from the init.pre (as it is in the RH rpms) which is a right PITA. > >In /etc/mail/spamassassin there should be a init.pre file and the following >line should be enabled to make the URI-RBL's work.. > >loadplugin Mail::SpamAssassin::Plugin::URIDNSBL > >if it doesn't exist or has a # in the front then that will not help at all. > I've got that line... and I can confirm that some RBLs do work - for example - a spam was classified today with these matches: > 0.5 SARE_MSGID_ADDED Message ID added by later system > 1.7 MSGID_FROM_MTA_ID Message-Id for external message added locally > 0.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence level above 50% > [cf: 100] > 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% > [score: 1.0000] > 1.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) > 2.2 DCC_CHECK Listed in DCC (http://rhyolite.com/anti-spam/dcc/) > 2.0 RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address > [213.106.39.160 listed in dnsbl.sorbs.net] > 1.2 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net > [Blocked - see <http://www.spamcop.net/bl.shtml?213.106.39.160>] > 3.1 RCVD_IN_XBL RBL: Received via a relay in Spamhaus XBL > [213.106.39.160 listed in sbl-xbl.spamhaus.org] > 1.6 DNS_FROM_RFC_POST RBL: Envelope sender in postmaster.rfc-ignorant.org > 0.1 RCVD_IN_NJABL_DUL RBL: NJABL: dialup sender did non-local SMTP > [213.106.39.160 listed in combined.njabl.org] > 1.0 URIBL_SBL Contains an URL listed in the SBL blocklist > [URIs: e4v.net] > 0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist > [URIs: e4v.net] > 2.5 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist > [URIs: e4v.net] > 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist > [URIs: e4v.net] > 3.2 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist > [URIs: e4v.net] > 4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist > [URIs: e4v.net] > 0.1 DIGEST_MULTIPLE Message hits more than one network digest check > 1.7 SARE_SPEC_ROLEX Rolex watch spam > 2.3 SARE_SPEC_ROLEX_REP Rolex Replic > > ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. **********************************************************************
