mla at cadfx
May 12, 2008, 6:38 AM
Post #1 of 3
(189 views)
Permalink
|
Hoping somebody out there can help. After noticing a dramatic increase
in male enhancement spam lately, I started to investigate what was going
on and it would appear that none of the default RBLs are getting
checked. I've done everything that I can think of and I just can't
figure out what is wrong. Any help would be greatly appreciated
Regards,
Matt Adair
mla[at]cadfx.com
Running FeeBSD 4.4
Spamassassin 3.2.4
Perl 5.8.4
Mail is fed into spamassassin using procmail
Here are the (partial) results of feeding a spam email into
Spamassassin with -D
%spamassassin -D < spam.txt
[84550] dbg: logger: adding facilities: all
[84550] dbg: logger: logging level is DBG
[84550] dbg: generic: SpamAssassin version 3.2.4
[84550] dbg: config: score set 0 chosen.
[84550] dbg: util: running in taint mode? yes
[84550] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[84550] dbg: util: PATH included '/usr/home/mla', keeping
[84550] dbg: util: PATH included '/sbin', keeping
[84550] dbg: util: PATH included '/bin', keeping
[84550] dbg: util: PATH included '/usr/sbin', keeping
[84550] dbg: util: PATH included '/usr/bin', keeping
[84550] dbg: util: PATH included '/usr/local/sbin', keeping
[84550] dbg: util: PATH included '/usr/local/bin', keeping
[84550] dbg: util: PATH included '/usr/local/www/bin', keeping
[84550] dbg: util: PATH included '/usr/libexec', keeping
[84550] dbg: util: PATH included '/usr/games', keeping
[84550] dbg: util: PATH included '/stand', which doesn't exist, dropping
[84550] dbg: dns: no ipv6
[84550] dbg: dns: is Net::DNS::Resolver available? yes
[84550] dbg: dns: Net::DNS version: 0.58
[84550] dbg: config: using "/etc/mail/spamassassin" for site rules pre files
[84550] dbg: config: read file /etc/mail/spamassassin/init.pre
[84550] dbg: config: read file /etc/mail/spamassassin/v310.pre
[84550] dbg: config: read file /etc/mail/spamassassin/v312.pre
[84550] dbg: config: read file /etc/mail/spamassassin/v320.pre
[84550] dbg: config: using "/usr/local/share/spamassassin" for sys rules
pre files
[84550] dbg: config: using "/usr/local/share/spamassassin" for default
rules dir
[84550] dbg: config: read file
/usr/local/share/spamassassin/10_default_prefs.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_advance_fee.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_body_tests.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_compensate.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_dnsbl_tests.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_drugs.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_dynrdns.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_fake_helo_tests.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_head_tests.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_html_tests.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_imageinfo.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/20_meta_tests.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_net_tests.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_phrases.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_porn.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_ratware.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_uri_tests.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/20_vbounce.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/23_bayes.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_accessdb.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_antivirus.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_asn.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_dcc.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_dkim.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/25_domainkeys.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_hashcash.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_pyzor.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_razor2.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_replace.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_spf.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_textcat.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/25_uribl.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/30_text_de.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/30_text_fr.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/30_text_it.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/30_text_nl.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/30_text_pl.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/30_text_pt_br.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/50_scores.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/60_awl.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/60_shortcircuit.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/60_whitelist.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/60_whitelist_dk.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/60_whitelist_dkim.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/60_whitelist_spf.cf
[84550] dbg: config: read file
/usr/local/share/spamassassin/60_whitelist_subject.cf
[84550] dbg: config: read file /usr/local/share/spamassassin/72_active.cf
(snip)
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry
from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[84550] dbg: pyzor: network tests on, attempting Pyzor
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[84550] dbg: razor2: razor2 is not available
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[84550] dbg: reporter: network tests on, attempting SpamCop
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[84550] dbg: plugin: loading
Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[84550] dbg: plugin: loading
Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from
@INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags
from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC
[84550] dbg: plugin: did not register
Mail::SpamAssassin::Plugin::URIDNSBL, already registered
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTTPSMismatch
from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDetail from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::Bayes from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::BodyEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::DNSEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::HTMLEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::HeaderEval from
@INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::WLBLEval from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::VBounce from @INC
[84550] dbg: plugin: loading Mail::SpamAssassin::Plugin::ImageInfo from @INC
(snip)
[84550] dbg: conf: finish parsing
[84550] dbg: plugin:
Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x8e465e0) implements
'finish_parsing_end', priority 0
[84550] dbg: replacetags: replacing tags
[84550] dbg: replacetags: done replacing tags
[84550] dbg: config: using "/root/.spamassassin" for user state dir
[84550] dbg: bayes: no dbs present, cannot tie DB R/O:
/root/.spamassassin/bayes_toks
[84550] dbg: config: score set 1 chosen.
[84550] dbg: message: main message type: multipart/alternative
[84550] dbg: plugin: Mail::SpamAssassin::Plugin::DNSEval=HASH(0x8df9360)
implements 'check_start', priority 0
[84550] dbg: bayes: no dbs present, cannot tie DB R/O:
/root/.spamassassin/bayes_toks
[84550] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x8ffae28)
implements 'check_main', priority 0
[84550] dbg: conf: trusted_networks are not configured; it is
recommended that you configure trusted_networks manually
[84550] dbg: received-header: parsed as [. ip=67.76.178.81
rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81.sta.embarqhsd.net by=cadfx.com ident=
envfrom=kurosug1966[at]ARABAM.COM intl=0 id=m48FhNO10546 auth= msa=0 ]
[84550] dbg: received-header: do not trust any hosts from here on
[84550] dbg: received-header: relay 67.76.178.81 trusted? no internal?
no msa? no
[84550] dbg: metadata: X-Spam-Relays-Trusted:
[84550] dbg: metadata: X-Spam-Relays-Untrusted: [. ip=67.76.178.81
rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81.sta.embarqhsd.net by=cadfx.com ident=
envfrom=kurosug1966[at]ARABAM.COM intl=0 id=m48FhNO10546 auth= msa=0 ]
[84550] dbg: metadata: X-Spam-Relays-Internal:
[84550] dbg: metadata: X-Spam-Relays-External: [. ip=67.76.178.81
rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81.sta.embarqhsd.net by=cadfx.com ident=
envfrom=kurosug1966[at]ARABAM.COM intl=0 id=m48FhNO10546 auth= msa=0 ]
[84550] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x8b48210) implements
'extract_metadata', priority 0
[84550] dbg: metadata: X-Relay-Countries: US
[84550] dbg: message: ---- MIME PARSER START ----
[84550] dbg: message: parsing multipart, got boundary: B_6416288521_58879
[84550] dbg: message: found part of type text/plain, boundary:
B_6416288521_58879
[84550] dbg: message: added part, type: text/plain
[84550] dbg: message: found part of type text/html, boundary:
B_6416288521_58879
[84550] dbg: message: added part, type: text/html
[84550] dbg: message: parsing normal part
[84550] dbg: message: parsing normal part
[84550] dbg: message: ---- MIME PARSER END ----
[84550] dbg: message: decoding other encoding type (7bit), ignoring
[84550] dbg: message: decoding quoted-printable
[84550] dbg: plugin:
Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x8b48210) implements
'parsed_metadata', priority 0
[84550] dbg: plugin:
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8b8d2a0) implements
'parsed_metadata', priority 0
[84550] dbg: dns: is_dns_available() last checked 1210273626.0 seconds
ago; re-checking
[84550] dbg: dns: no ipv6
[84550] dbg: dns: is Net::DNS::Resolver available? yes
[84550] dbg: dns: Net::DNS version: 0.58
[84550] dbg: dns: name server: localhost, LocalAddr: 0.0.0.0
[84550] dbg: dns: testing resolver nameservers: localhost
[84550] dbg: dns: trying (3) yahoo.com...
[84550] dbg: dns: looking up NS for 'yahoo.com'
[84550] dbg: dns: NS lookup of yahoo.com using localhost succeeded =>
DNS available (set dns_available to override)
[84550] dbg: dns: name server: localhost, LocalAddr: 0.0.0.0
[84550] dbg: dns: NS list: localhost
[84550] warn: Use of uninitialized value in concatenation (.) or string
at /usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 205.
[84550] dbg: dns: name server: , LocalAddr: 0.0.0.0
[84550] dbg: dns: is DNS available? 1
[84550] dbg: uridnsbl: domains to query: budeyaeb.com
[84550] warn: plugin: eval failed: send: Cannot determine peer address
at /usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 373
[84550] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs:
[84550] dbg: dns: checking RBL plus.bondedsender.org., set ssc-firsttrusted
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.plus.bondedsender.org. in background
[84550] dbg: dns: checking RBL combined.njabl.org., set njabl
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.combined.njabl.org. in background
[84550] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS TXT query for
81.178.76.67.bl.spamcop.net. in background
[84550] dbg: dns: _check_rbl_addresses RBL rhsbl.ahbl.org., set ahbl
[84550] dbg: dns: launching DNS A query for arabam.com.rhsbl.ahbl.org.
in background
[84550] warn: rules: failed to run DNS_FROM_AHBL_RHSBL RBL test, skipping:
[84550] warn: (send: Cannot determine peer address at
/usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 373
[84550] warn: )
[84550] dbg: dns: checking RBL dob.sibl.support-intelligence.net., set dob
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.dob.sibl.support-intelligence.net. in background
[84550] dbg: dns: checking A and MX for host arabam.com
[84550] dbg: dns: launching DNS A query for arabam.com in background
[84550] warn: rules: failed to run NO_DNS_FOR_FROM RBL test, skipping:
[84550] warn: (send: Cannot determine peer address at
/usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 373
[84550] warn: )
[84550] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.zen.spamhaus.org. in background
[84550] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.dnsbl.sorbs.net. in background
[84550] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.dnsbl.sorbs.net. in background
[84550] dbg: dns: _check_rbl_addresses RBL
dob.sibl.support-intelligence.net., set dob
[84550] dbg: dns: launching DNS A query for
arabam.com.dob.sibl.support-intelligence.net. in background
[84550] warn: rules: failed to run DNS_FROM_DOB RBL test, skipping:
[84550] warn: (send: Cannot determine peer address at
/usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 373
[84550] warn: )
[84550] dbg: dns: checking RBL zen.spamhaus.org., set zen-lastexternal
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.zen.spamhaus.org. in background
[84550] dbg: dns: checking RBL list.dnswl.org., set dnswl-firsttrusted
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for 81.178.76.67.list.dnswl.org.
in background
[84550] dbg: dns: checking RBL sa-accredit.habeas.com., set
habeas-firsttrusted
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.sa-accredit.habeas.com. in background
[84550] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS TXT query for
81.178.76.67.list.dsbl.org. in background
[84550] dbg: dns: checking RBL sa-trusted.bondedsender.org., set
bsp-firsttrusted
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS TXT query for
81.178.76.67.sa-trusted.bondedsender.org. in background
[84550] dbg: dns: checking RBL zen.spamhaus.org., set zen
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for
81.178.76.67.zen.spamhaus.org. in background
[84550] dbg: dns: _check_rbl_addresses RBL bl.open-whois.org., set openwhois
[84550] dbg: dns: launching DNS A query for
arabam.com.bl.open-whois.org. in background
[84550] warn: rules: failed to run DNS_FROM_OPENWHOIS RBL test, skipping:
[84550] warn: (send: Cannot determine peer address at
/usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 373
[84550] warn: )
[84550] dbg: dns: _check_rbl_addresses RBL fulldom.rfc-ignorant.org.,
set rfci_envfrom
[84550] dbg: dns: launching DNS A query for
arabam.com.fulldom.rfc-ignorant.org. in background
[84550] warn: rules: failed to run __RFC_IGNORANT_ENVFROM RBL test,
skipping:
[84550] warn: (send: Cannot determine peer address at
/usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/DnsResolver.pm
line 373
[84550] warn: )
[84550] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[84550] dbg: dns: IPs found: full-external: 67.76.178.81 untrusted:
67.76.178.81 originating:
[84550] dbg: dns: only inspecting the following IPs: 67.76.178.81
[84550] dbg: dns: launching DNS A query for 81.178.76.67.iadb.isipp.com.
in background
[84550] dbg: check: running tests for priority: -1000
[84550] dbg: rules: running head tests; score so far=0
[84550] dbg: rules: compiled head tests
[84550] dbg: eval: all '*From' addrs: kurosug1966[at]ARABAM.COM
[84550] dbg: eval: all '*To' addrs: jobs[at]cadfx.com
[84550] dbg: rules: running body tests; score so far=0
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: running uri tests; score so far=0
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: running rawbody tests; score so far=0
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: running full tests; score so far=0
[84550] dbg: rules: compiled full tests
[84550] dbg: rules: running meta tests; score so far=0
[84550] dbg: rules: compiled meta tests
[84550] dbg: check: running tests for priority: -950
[84550] dbg: rules: running head tests; score so far=0
[84550] dbg: rules: compiled head tests
[84550] dbg: rules: running body tests; score so far=0
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: running uri tests; score so far=0
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: running rawbody tests; score so far=0
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: running full tests; score so far=0
[84550] dbg: rules: compiled full tests
[84550] dbg: rules: running meta tests; score so far=0
[84550] dbg: rules: compiled meta tests
[84550] dbg: check: running tests for priority: -900
[84550] dbg: rules: running head tests; score so far=0
[84550] dbg: rules: compiled head tests
[84550] dbg: rules: running body tests; score so far=0
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: running uri tests; score so far=0
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: running rawbody tests; score so far=0
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: running full tests; score so far=0
[84550] dbg: rules: compiled full tests
[84550] dbg: rules: running meta tests; score so far=0
[84550] dbg: rules: compiled meta tests
[84550] dbg: check: running tests for priority: -400
[84550] dbg: rules: running head tests; score so far=0
[84550] dbg: rules: compiled head tests
[84550] dbg: rules: running body tests; score so far=0
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: running uri tests; score so far=0
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: running rawbody tests; score so far=0
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: running full tests; score so far=0
[84550] dbg: rules: compiled full tests
[84550] dbg: rules: running meta tests; score so far=0
[84550] dbg: rules: compiled meta tests
[84550] dbg: check: running tests for priority: 0
[84550] dbg: rules: running head tests; score so far=0
[84550] dbg: rules: compiled head tests
[84550] dbg: rules: ran header rule __CTYPE_MULTIPART_ALT ======> got
hit: "multipart/alternative"
[84550] dbg: rules: ran header rule __CTYPE_HAS_BOUNDARY ======> got
hit: "boundary"
[84550] dbg: rules: ran header rule __CT ======> got hit: "m"
[84550] dbg: rules: ran header rule __RDNS_DYNAMIC_IPADDR ======> got
hit: "[ ip=67.76.178.81 rdns=nj-67-76-178-81.sta.embarqhsd.net"
[84550] dbg: rules: ran header rule __LAST_UNTRUSTED_RELAY_NO_AUTH
======> got hit: "[ ip=67.76.178.81
rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81.sta.embarqhsd.net by=cadfx.com ident=
envfrom=kurosug1966[at]ARABAM.COM intl=0 id=m48FhNO10546 auth= "
[84550] dbg: rules: ran header rule FH_HELO_EQ_D_D_D_D ======> got hit:
"[ ip=67.76.178.81 rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81"
[84550] dbg: rules: ran header rule HELO_DYNAMIC_IPADDR ======> got hit:
"[. ip=67.76.178.81 rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81.sta.embarqhsd.net by=cadfx.com ident=
envfrom=kurosug1966[at]ARABAM.COM intl=0 id=m48FhNO10546 auth= "
[84550] dbg: rules: ran header rule __MISSING_REF ======> got hit: "UNSET"
[84550] dbg: rules: ran header rule CFX_OK6 ======> got hit:
"jobs[at]cadfx.com"
[84550] dbg: rules: ran header rule __MIME_VERSION ======> got hit: "1"
[84550] dbg: rules: ran header rule __TOCC_EXISTS ======> got hit: """
[84550] dbg: rules: ran header rule __DOS_SINGLE_EXT_RELAY ======> got
hit: "[. ip=67.76.178.81 rdns=nj-67-76-178-81.sta.embarqhsd.net
helo=nj-67-76-178-81.sta.embarqhsd.net by=cadfx.com ident=
envfrom=kurosug1966[at]ARABAM.COM intl=0 id=m48FhNO10546 auth= msa=0 ]"
[84550] dbg: rules: ran header rule __HAS_RCVD ======> got hit: "f"
[84550] dbg: rules: ran header rule __DOS_RCVD_THU ======> got hit: " Thu, "
[84550] dbg: rules: ran header rule __MSGID_OK_HOST ======> got hit:
"@ARABAM.COM>"
[84550] dbg: rules: ran header rule __HAS_MSGID ======> got hit: "<"
[84550] dbg: rules: ran header rule __SANE_MSGID ======> got hit:
"<0E03FAC9.A%kurosug1966[at]ARABAM.COM>
[84550] dbg: rules: "
[84550] dbg: rules: ran header rule __HAS_SUBJECT ======> got hit: "B"
[84550] dbg: spf: checking to see if the message has a Received-SPF
header that we can use
[84550] dbg: spf: cannot load Mail::SPF module or create
Mail::SPF::Server object: Can't locate Mail/SPF.pm in @INC (@INC
contains: /usr/local/lib/perl5/site_perl/5.8.4/i386-freebsd
/usr/local/lib/perl5/site_perl/5.8.4
/usr/local/lib/perl5/5.8.4/i386-freebsd /usr/local/lib/perl5/5.8.4
/usr/local/lib/perl5/site_perl) at
/usr/local/lib/perl5/site_perl/5.8.4/Mail/SpamAssassin/Plugin/SPF.pm
line 390.
[84550] dbg: spf: attempting to use legacy Mail::SPF::Query module instead
[84550] dbg: spf: using Mail::SPF::Query for SPF checks
[84550] dbg: spf: checking HELO (helo=nj-67-76-178-81.sta.embarqhsd.net,
ip=67.76.178.81)
[84550] dbg: spf: query for
/67.76.178.81/nj-67-76-178-81.sta.embarqhsd.net: result: none, comment:
SPF: domain of sender nj-67-76-178-81.sta.embarqhsd.net does not
designate mailers, text:
[84550] dbg: spf: already checked for Received-SPF headers, proceeding
with DNS based checks
[84550] dbg: spf: found Envelope-From in first external Received header
[84550] dbg: spf: checking EnvelopeFrom
(helo=nj-67-76-178-81.sta.embarqhsd.net, ip=67.76.178.81,
envfrom=kurosug1966[at]arabam.com)
[84550] dbg: spf: query for
kurosug1966[at]arabam.com/67.76.178.81/nj-67-76-178-81.sta.embarqhsd.net:
result: none, comment: SPF: domain of sender kurosug1966[at]arabam.com does
not designate mailers, text:
[84550] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got
hit (1)
[84550] dbg: spf: def_spf_whitelist_from: already checked spf and didn't
get pass, skipping whitelist check
[84550] dbg: spf: whitelist_from_spf: already checked spf and didn't get
pass, skipping whitelist check
[84550] dbg: rules: running body tests; score so far=-21.567
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "B"
[84550] dbg: rules: running uri tests; score so far=-21.567
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: ran uri rule __DOS_HAS_ANY_URI ======> got hit: "h"
[84550] dbg: rules: ran eval rule __HTML_LENGTH_512 ======> got hit (1)
[84550] dbg: eval: stock info total: 0
[84550] dbg: rules: ran eval rule __TAG_EXISTS_BODY ======> got hit (1)
[84550] dbg: eval: text words: 11, html words: 15
[84550] dbg: eval: madiff: left: 4, orig: 15, max-difference: 26.67%
[84550] dbg: rules: ran eval rule __HTML_LENGTH_0000_1024 ======> got
hit (1)
[84550] dbg: rules: ran eval rule __MIME_HTML ======> got hit (1)
[84550] dbg: rules: ran eval rule HTML_MESSAGE ======> got hit (1)
[84550] dbg: rules: ran eval rule __HTML_LENGTH_384 ======> got hit (1)
[84550] dbg: rules: ran eval rule __TAG_EXISTS_HTML ======> got hit (1)
[84550] dbg: rules: ran eval rule __TAG_EXISTS_HEAD ======> got hit (1)
[84550] dbg: rules: running rawbody tests; score so far=-21.566
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: ran eval rule __MIME_QP ======> got hit (1)
[84550] dbg: rules: running full tests; score so far=-21.566
[84550] dbg: rules: compiled full tests
[84550] dbg: pyzor: pyzor is not available: no pyzor executable found
[84550] dbg: pyzor: no pyzor found, disabling Pyzor
[84550] dbg: ClamAV: No virus detected
[84550] dbg: rules: running meta tests; score so far=-21.566
[84550] dbg: rules: compiled meta tests
[84550] dbg: check: running tests for priority: 500
[84550] dbg: dns: harvest_dnsbl_queries
[84550] dbg: rules: running head tests; score so far=-21.566
[84550] dbg: rules: compiled head tests
[84550] dbg: rules: running body tests; score so far=-21.566
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: running uri tests; score so far=-21.566
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: running rawbody tests; score so far=-21.566
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: running full tests; score so far=-21.566
[84550] dbg: rules: compiled full tests
[84550] dbg: rules: running meta tests; score so far=-21.566
[84550] dbg: rules: meta test DIGEST_MULTIPLE has undefined dependency
'DCC_CHECK'
[84550] dbg: rules: meta test FM_DDDD_TIMES_2 has undefined dependency
'FH_HOST_EQ_D_D_D_D'
[84550] dbg: rules: meta test FM_SEX_HOSTDDDD has undefined dependency
'FH_HOST_EQ_D_D_D_D'
[84550] dbg: rules: compiled meta tests
[84550] dbg: check: running tests for priority: 1000
[84550] dbg: rules: running head tests; score so far=-21.466
[84550] dbg: rules: compiled head tests
[84550] dbg: config: using "/root/.spamassassin" for user state dir
[84550] dbg: locker: safe_lock: created
/root/.spamassassin/auto-whitelist.lock.cadfx.com.84550
[84550] dbg: locker: safe_lock: trying to get lock on
/root/.spamassassin/auto-whitelist with 0 retries
[84550] dbg: locker: safe_lock: link to
/root/.spamassassin/auto-whitelist.lock: link ok
[84550] dbg: auto-whitelist: tie-ing to DB file of type DB_File R/W in
/root/.spamassassin/auto-whitelist
[84550] dbg: auto-whitelist: db-based kurosug1966[at]arabam.com|ip=67.76
scores 0/0
[84550] dbg: auto-whitelist: db-based kurosug1966[at]arabam.com|ip=none
scores 0/0
[84550] dbg: auto-whitelist: AWL active, pre-score: -21.466, autolearn
score: -21.466, mean: undef, IP: 67.76.178.81
[84550] dbg: auto-whitelist: add_score: new count: 1, new totscore: -21.466
[84550] dbg: auto-whitelist: DB addr list: untie-ing and unlocking
[84550] dbg: auto-whitelist: DB addr list: file locked, breaking lock
[84550] dbg: locker: safe_unlock: unlink
/root/.spamassassin/auto-whitelist.lock
[84550] dbg: auto-whitelist: post auto-whitelist score: -21.466
[84550] dbg: rules: running body tests; score so far=-21.466
[84550] dbg: rules: compiled body tests
[84550] dbg: rules: running uri tests; score so far=-21.466
[84550] dbg: rules: compiled uri tests
[84550] dbg: rules: running rawbody tests; score so far=-21.466
[84550] dbg: rules: compiled rawbody tests
[84550] dbg: rules: running full tests; score so far=-21.466
[84550] dbg: rules: compiled full tests
[84550] dbg: rules: running meta tests; score so far=-21.466
[84550] dbg: rules: compiled meta tests
[84550] dbg: plugin:
Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x8fa295c)
implements 'autolearn_discriminator', priority 0
[84550] dbg: learn: auto-learn: currently using scoreset 1
[84550] dbg: learn: auto-learn: message score: -21.466, computed score
for autolearn: -21.466
[84550] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=-21.466,
head-points=-21.466, learned-points=0
[84550] dbg: learn: auto-learn? yes, ham (-21.466 < 0.1)
[84550] dbg: learn: initializing learner
[84550] dbg: learn: learning ham
[84550] dbg: plugin:
Mail::SpamAssassin::Plugin::WLBLEval=HASH(0x92dbe34) implements
'check_wb_list', priority 0
[84550] dbg: eval: all '*From' addrs: kurosug1966[at]ARABAM.COM
[84550] dbg: eval: all '*To' addrs: jobs[at]cadfx.com
[84550] dbg: locker: safe_lock: created
/root/.spamassassin/bayes.lock.cadfx.com.84550
[84550] dbg: locker: safe_lock: trying to get lock on
/root/.spamassassin/bayes with 0 retries
[84550] dbg: locker: safe_lock: link to /root/.spamassassin/bayes.lock:
link ok
[84550] dbg: bayes: tie-ing to DB file R/W /root/.spamassassin/bayes_toks
[84550] dbg: bayes: tie-ing to DB file R/W /root/.spamassassin/bayes_seen
[84550] dbg: bayes: new db, set db version 3 and 0 tokens
[84550] dbg: bayes: learned
'f7257b8051340b635a04d8e56868618105cf7e00[at]sa_generated', atime: 1210261404
[84550] dbg: bayes: untie-ing
[84550] dbg: bayes: files locked, now unlocking lock
[84550] dbg: locker: safe_unlock: unlink /root/.spamassassin/bayes.lock
[84550] dbg: learn: initializing learner
[84550] dbg: check: is spam? score=-21.466 required=4
[84550] dbg: check:
tests=CFX_OK6,FH_HELO_EQ_D_D_D_D,HELO_DYNAMIC_IPADDR,HTML_MESSAGE,RDNS_DYNAMIC
[84550] dbg: check:
subtests=__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__DOS_HAS_ANY_URI,__DOS_RCVD_THU,__DOS_SINGLE_EXT_RELAY,__ENV_AND_HDR_FROM_MATCH,__HAS_ANY_URI,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HTML_LENGTH_0000_1024,__HTML_LENGTH_384,__HTML_LENGTH_512,__LAST_UNTRUSTED_RELAY_NO_AUTH,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MISSING_REF,__MSGID_OK_HOST,__NONEMPTY_BODY,__RDNS_DYNAMIC_IPADDR,__SANE_MSGID,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TOCC_EXISTS
X-Spam-Virus: No
X-Spam-Checker-Version: SpamAssassin 3.2.4 (2008-01-01) on cadfx.com
X-Spam-Level:
X-Spam-Status: No, score=-21.5 required=4.0
tests=CFX_OK6,FH_HELO_EQ_D_D_D_D,
HELO_DYNAMIC_IPADDR,HTML_MESSAGE,RDNS_DYNAMIC autolearn=ham
version=3.2.4
X-Spam-RBL-Results:
X-Spam-Relay-Country: US
Received: from nj-67-76-178-81.sta.embarqhsd.net
(nj-67-76-178-81.sta.embarqhsd.net [67.76.178.81])
by cadfx.com (8.11.6/8.11.0) with ESMTP id m48FhNO10546
for <jobs[at]cadfx.com>; Thu, 8 May 2008 11:43:24 -0400 (EDT)
(envelope-from kurosug1966[at]ARABAM.COM)
User-Agent: Microsoft-Entourage/12.1.0.080305
Date: Thu, 8 May 2008 12:49:28 -0400
Subject: Be a man today
From: Hili <kurosug1966[at]ARABAM.COM>
To: "jobs[at]cadfx.com" <jobs[at]cadfx.com>
Message-ID: <0E03FAC9.A%kurosug1966[at]ARABAM.COM>
Thread-Topic: Be a man today
Thread-Index: AcixCfOlto4N51OES0KToaMhv9aK4Q==
Mime-version: 1.0
Content-type: multipart/alternative;
boundary="B_6416288521_58879"
X-UIDL: KfM!!~D["!ZT(#!0+;"!
--B_6416288521_58879
Content-type: text/plain;
charset="US-ASCII"
Content-transfer-encoding: 7bit
Make her the goddess of pleasure with your long tool
http://www.budeyaeb.com/
--B_6416288521_58879
Content-type: text/html;
charset="US-ASCII"
Content-transfer-encoding: quoted-printable
<HTML>
<HEAD>
<TITLE>Be a man today</TITLE>
</HEAD>
<BODY>
<FONT SIZE=3D"4"><FONT FACE=3D"Verdana, Arial"><SPAN =
STYLE=3D'font-size:11pt'>Make her the goddess of pleasure with your long =
tool <a =
href=3D"http://www.budeyaeb.com/">http://www.budeyaeb.com/</a><BR>
</SPAN></FONT></FONT></FONT>
</BODY>
</HTML>
--B_6416288521_58879--
|
