SpamAssassin Rejecting messages

[Rick Knight]

I've noticed that I never get any messages with a spam score higher than
14.9. I have suspected that SpamAssassin is dumping messages with a
score of 15 or higher. While perusing my logs today I found this entry...

bash-3.1# cat /var/log/maillog | grep n9RIlpTE013636
Oct 27 11:48:07 mail milter-greylist: n9RIlpTE013636: addr
64.187.117.248 from <salforum.info@...> rcpt
<rick@...>: autowhitelisted for 72:00:00
Oct 27 11:48:07 mail sm-mta[13636]: n9RIlpTE013636:
from=<salforum.info@...>, size=1696, class=0, nrcpts=1,
msgid=<YOVGScJYm71Tr_WT1EAgFQ@...>, bodytype=8BITMIME,
proto=ESMTP, daemon=MTA, relay=mail.salforum.info [64.187.117.248]
Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter add: header:
X-Spam-Flag: YES
Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter add: header:
X-Spam-Status: Yes, score=25.8 required=3.6
tests=BAYES_99,DCC_CHECK,\n\tDIGEST_MULTIPLE,HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_04,HTML_MESSAGE,\n\tHTML_SHORT_LINK_IMG_2,MIME_HTML_ONLY,PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,\n\tRAZOR2_CF_RANGE_E4_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,SARE_UNSUB38,\n\tSPF_PASS,URIBL_BLACK,URIBL_RHS_DOB
autolearn=spam version=3.2.5
Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter: data,
reject=550 5.7.1 Blocked by SpamAssassin
Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636:
to=<rick@...>, delay=00:00:24, pri=31696, stat=Blocked by
SpamAssassin

Clearly the message higher than 14.9 (25.8) and SpamAssassin blocked the
delivery. This is probably due to something I put in my settings when I
first started using SpamAssassin years ago, but I can't find it. I've
checked the global local.cf and user local.cf files and they don't seem
to be causing it. I've tried to find another config file but there
aren't any. Where else can this be coming from?

I'm running Sendmail 8.14.2, SpamAssassin 3.2.5 and SpamAss-Milter 0.3.1
on Slackware 12.0.

Thanks,
Rick

[John Hardin]

On Tue, 27 Oct 2009, Rick Knight wrote:

> I've noticed that I never get any messages with a spam score higher than
> 14.9. I have suspected that SpamAssassin is dumping messages with a
> score of 15 or higher. While perusing my logs today I found this
> entry...
>
> Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter: data,
> reject=550 5.7.1 Blocked by SpamAssassin
>
> Clearly the message higher than 14.9 (25.8) and SpamAssassin blocked the
> delivery.

SpamAssassin only assigns scores. Somethine elsg, in this case...

> I'm running Sendmail 8.14.2, SpamAssassin 3.2.5 and SpamAss-Milter 0.3.1
> on Slackware 12.0.

...SpamAss-Milter, makes acceptance/delivery decisions based on that
score.

Check your spamass-milter config, probably in /etc/mail/

--
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@...    FALaholic #11174     pgpk -a jhardin@...
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   ...the Fates notice those who buy chainsaws...
                                               -- www.darwinawards.com
-----------------------------------------------------------------------
  4 days until Halloween

[Rick Knight]

Rick Knight wrote:

> I've noticed that I never get any messages with a spam score higher
> than 14.9. I have suspected that SpamAssassin is dumping messages with
> a score of 15 or higher. While perusing my logs today I found this
> entry...
>
> bash-3.1# cat /var/log/maillog | grep n9RIlpTE013636
> Oct 27 11:48:07 mail milter-greylist: n9RIlpTE013636: addr
> 64.187.117.248 from <salforum.info@...> rcpt
> <rick@...>: autowhitelisted for 72:00:00
> Oct 27 11:48:07 mail sm-mta[13636]: n9RIlpTE013636:
> from=<salforum.info@...>, size=1696, class=0, nrcpts=1,
> msgid=<YOVGScJYm71Tr_WT1EAgFQ@...>, bodytype=8BITMIME,
> proto=ESMTP, daemon=MTA, relay=mail.salforum.info [64.187.117.248]
> Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter add:
> header: X-Spam-Flag: YES
> Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter add:
> header: X-Spam-Status: Yes, score=25.8 required=3.6
> tests=BAYES_99,DCC_CHECK,\n\tDIGEST_MULTIPLE,HTML_IMAGE_ONLY_12,HTML_IMAGE_RATIO_04,HTML_MESSAGE,\n\tHTML_SHORT_LINK_IMG_2,MIME_HTML_ONLY,PYZOR_CHECK,RAZOR2_CF_RANGE_51_100,\n\tRAZOR2_CF_RANGE_E4_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,SARE_UNSUB38,\n\tSPF_PASS,URIBL_BLACK,URIBL_RHS_DOB
> autolearn=spam version=3.2.5
> Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter: data,
> reject=550 5.7.1 Blocked by SpamAssassin
> Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636:
> to=<rick@...>, delay=00:00:24, pri=31696, stat=Blocked by
> SpamAssassin
>
> Clearly the message higher than 14.9 (25.8) and SpamAssassin blocked
> the delivery. This is probably due to something I put in my settings
> when I first started using SpamAssassin years ago, but I can't find
> it. I've checked the global local.cf and user local.cf files and they
> don't seem to be causing it. I've tried to find another config file
> but there aren't any. Where else can this be coming from?
>
> I'm running Sendmail 8.14.2, SpamAssassin 3.2.5 and SpamAss-Milter
> 0.3.1 on Slackware 12.0.
>
> Thanks,
> Rick

I think I found my problem. SpamAss-Milter has a command line option to
ignore messages marked higher than the setting. I had that option set to
15. I've uped it to 30 and restarted. I'll see what happens.

Thanks,
Rick

[Rick Knight]

John Hardin wrote:

> On Tue, 27 Oct 2009, Rick Knight wrote:
>
>> I've noticed that I never get any messages with a spam score higher
>> than 14.9. I have suspected that SpamAssassin is dumping messages
>> with a score of 15 or higher. While perusing my logs today I found
>> this entry...
>>
>> Oct 27 11:48:31 mail sm-mta[13636]: n9RIlpTE013636: Milter: data,
>> reject=550 5.7.1 Blocked by SpamAssassin
>>
>> Clearly the message higher than 14.9 (25.8) and SpamAssassin blocked
>> the delivery.
>
> SpamAssassin only assigns scores. Somethine elsg, in this case...
>
>> I'm running Sendmail 8.14.2, SpamAssassin 3.2.5 and SpamAss-Milter
>> 0.3.1 on Slackware 12.0.
>
> ...SpamAss-Milter, makes acceptance/delivery decisions based on that
> score.
>
> Check your spamass-milter config, probably in /etc/mail/
>

John,

Thanks for your reply. The problem appears to be a com and line option
in my spamass-milter startup script (-r 15). I've upped it to 30 and
will see how that works.

Thanks,
Rick