From owner-freebsd-questions@freebsd.org Wed Sep 9 16:58:26 2015 Return-Path: Delivered-To: freebsd-questions@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 79D78A01560 for ; Wed, 9 Sep 2015 16:58:26 +0000 (UTC) (envelope-from karly@kipshouse.net) Received: from mgmt.ironboy.kipshouse.net (ironboy.kipshouse.net [IPv6:2001:470:835a:4242::42]) (using TLSv1 with cipher RC4-SHA (128/128 bits)) (Client CN "mx.kipshouse.net", Issuer "Starfield Secure Certificate Authority - G2" (not verified)) by mx1.freebsd.org (Postfix) with ESMTPS id 209631895 for ; Wed, 9 Sep 2015 16:58:26 +0000 (UTC) (envelope-from karly@kipshouse.net) DKIM-Signature: v=1; a=rsa-sha256; c=simple/simple; d=kipshouse.org; i=@kipshouse.org; q=dns/txt; s=kh-ss; t=1441817907; x=1473353907; h=date:from:to:cc:subject:message-id:references: mime-version:content-transfer-encoding:in-reply-to; z=Date:=20Wed,=209=20Sep=202015=2009:49:32=20-0700|From: =20Karl=20Young=20|To:=20Nagy=20=3D? iso-8859-1?B?TOFzemzz?=3D=20Zsolt=20|Cc:=20freebsd-questions@freebsd.org|Subject:=20Re:=20Ca nnot=20test=20spamassassin,=20what=20is=20going=20on=20he re?|Message-ID:=20<20150909164931.GB11226@mailboy.kipshou se.net>|References:=20<55F0212B.9090708@shopzeus.com> |MIME-Version:=201.0|Content-Transfer-Encoding:=208bit |In-Reply-To:=20<55F0212B.9090708@shopzeus.com>; bh=LwnJULtB52l00Omesm/2DDRRFmEUXYDORgBzt5V0MKw=; b=iw5cYPLb27jJyHJGER75+SaN6p6vlOA5vmVglgoXTpdB00djnngrLuZu BhTgl9t1LhRU4uXOywo3jX18wIa3wCWkoaw1fZhfFQOCRNOm2BEqSli6A Y2Y5Mf+7Yqjy1BNy/JL9EZibl/XMEHp1ByUCfMY/ZFhBsEYuFLgWGrKCO IDcSxsL9awiC1fzOBjbsPSWAEdqlWZzFgiBaGclS4LkN+yFKB0bza4lec BIo+cM59VP4NAI1OBIi7naTK/PimQsHQZVhMcjLI/2NhuKLq2RkHN7uQz 6HFUQDhXaQKWIh8DpnaPs5mp0dVjkmxepur038Nhto7DDdcrx78TWM08O A==; Authentication-Results: d2.ironport.kipshouse.net; dkim=neutral (message not signed) header.i=none Received-SPF: None (d2.ironport.kipshouse.net: no sender authenticity information available from domain of karly@kipshouse.org) identity=pra; client-ip=2001:470:835a:1010::26; receiver=d2.ironport.kipshouse.net; envelope-from="karly@kipshouse.net"; x-sender="karly@kipshouse.org"; x-conformance=sidf_compatible Received-SPF: None (d2.ironport.kipshouse.net: no sender authenticity information available from domain of karly@kipshouse.net) identity=mailfrom; client-ip=2001:470:835a:1010::26; receiver=d2.ironport.kipshouse.net; envelope-from="karly@kipshouse.net"; x-sender="karly@kipshouse.net"; x-conformance=sidf_compatible Received-SPF: None (d2.ironport.kipshouse.net: no sender authenticity information available from domain of postmaster@mailboy.kipshouse.net) identity=helo; client-ip=2001:470:835a:1010::26; receiver=d2.ironport.kipshouse.net; envelope-from="karly@kipshouse.net"; x-sender="postmaster@mailboy.kipshouse.net"; x-conformance=sidf_compatible X-SBRS: None X-MID: 174092 X-RemoteIP: 2001:470:835a:1010::26 X-RemoteHost: 2001:470:835a:1010::26, mailboypriv.kipshouse.net X-IronPort-AV: E=McAfee;i="5700,7163,7918"; a="174092" Received: from mailboypriv.kipshouse.net (HELO mailboy.kipshouse.net) ([IPv6:2001:470:835a:1010::26]) by d2.ironport.kipshouse.net with ESMTP; 09 Sep 2015 09:58:25 -0700 Received: by mailboy.kipshouse.net (Postfix, from userid 500) id 404134367B; Wed, 9 Sep 2015 09:49:32 -0700 (PDT) Date: Wed, 9 Sep 2015 09:49:32 -0700 From: Karl Young To: Nagy =?iso-8859-1?B?TOFzemzz?= Zsolt Cc: freebsd-questions@freebsd.org Subject: Re: Cannot test spamassassin, what is going on here? Message-ID: <20150909164931.GB11226@mailboy.kipshouse.net> References: <55F0212B.9090708@shopzeus.com> MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: <55F0212B.9090708@shopzeus.com> X-Arbitrary-Number-Of-The-Day: 42 X-URL: http://www.kipshouse.org/karly X-Work-URL: http://www.cisco.com/ X-Disclaimer: My opinions do not necessarily represent those of my employer. User-Agent: Mutt/1.5.20 (2009-12-10) X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 09 Sep 2015 16:58:26 -0000 Nagy László Zsolt(gandalf@shopzeus.com)@2015.09.09 14:08:11 +0200: > Given a test file "test.eml" I can run this test: > > spamassassin -t test.eml > > and I get this: > > > > >-- > >This message has been scanned for viruses and > >dangerous content by MailScanner, and is > >believed to be clean. > > > >Spam detection software, running on the system "shopzeus.com", > >has NOT identified this incoming email as spam. The original > >message has been attached to this so you can view it or label > >similar future email. If you have any questions, see > >The administrator of that system for details. > > > >Content preview: We've run into ths bug: > >https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=148581 > > [libc] fopen(3) fails with EMFILE if there are more than > >SHORT_MAX fds open > > [...] > > > >Content analysis details: (-5.0 points, 5.0 required) > > > > pts rule name description > >---- ---------------------- > >-------------------------------------------------- > >-5.0 RCVD_IN_DNSWL_HI RBL: Sender listed at > >http://www.dnswl.org/, high > > trust > > [8.8.178.116 listed in list.dnswl.org] > > However, the very same email went through postfix/Mailscanner and > resulted in these headers: > > >X-shopzeus-MailScanner-Information: Please contact the ISP for more information > >X-shopzeus-MailScanner-ID: 4FFF48895E15.AB608 > >X-shopzeus-MailScanner: Found to be clean > >X-shopzeus-MailScanner-SpamCheck: spam, JUNKEMAIL > >X-shopzeus-MailScanner-From: owner-freebsd-questions@freebsd.org > >X-Spam-Status: Yes > > So the "spamassassin -t" command gives -5.0 score identifying as > ham, but when the email actually comes in then it is identified as > spam. > > Looks like spamassassin is using different rules/settings when it is > ran from the mailscanner daemon. The configuration should be the > same ( /usr/local/etc/mail/spamassassin is a symbolic link to > /usr/local/etc/MailScanner/spam.assassin.prefs.conf ) > > I cannot test spamassassin with the same user, because it is postfix > which is disabled: > > > > ># su postfix " spamassassin -t test.eml " > >This account is currently not available. > > > How to overcome this problem? What is going on here? I'm no SA expert, but I believe it will take the reputation of the sender into account. So if the mail content is marginal, it might pass the local test, but if the sending IP has a poor reputation, it could push it into the spam range. -karl > > Thanks > > Laszlo > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > https://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org"