Package: spamassassin
Version: 3.1.7-1
Severity: normal
I have just upgraded my mail machine from sarge to etch. Something has
gone wrong with spamassassin (run via sa-exim and mailscanner) such
that sa is timing out every few minutes. I think it is running
successfully about 4 out of 5 times, but it's a bit hard to tell from
the logs.
I once managed to catch it in the act by running
spamassassin -D < spamexample
It hung for about 5 mins (using max CPU) in the bayes module, but did eventually
complete. The timeout for sa-exim and mailscanner is 240 seconds. I am
assuming that the problem I observed is the same one that is causing
the problem when run as Debian-exim (I was running it as me, and thus
using my bayes db, not the one in /var/spool/exim4/.spamassassin which
is used by sa-exim.
When I ran the above command again on the same sample spam it
completed in a few seconds, so the content is not significant.
The log for the bad and good runs are attached. The bad run stopped at
this line:
[11544] dbg: bayes: expiry max exponent: 9
for several minutes before continuing from
[11544] dbg: bayes: atime token reduction
I have been staring at the logs and trying to understand what is going
on for quite a few hours now, but am at a loss.
The individual bayes databases are on an nfs-mounted home. The general
Debian-exim bayes database is on the local host. I _think_ mailscanner
is using the individual databases, sa-exim is definately using the
general one. It was all working fine before the upgrade.
I hope this is enough info to track down the problem.
Feb 2 02:08:26 court check[3111]: SpamAssassin timed out and was killed,
failure 0 of 10
Feb 2 02:21:24 court check[3111]: SpamAssassin timed out and was killed,
failure 0 of 10
Feb 2 02:28:05 court check[3111]: SpamAssassin timed out and was killed,
failure 0 of 10
Feb 2 02:34:22 court check[3111]: SpamAssassin timed out and was killed,
failure 2 of 10
Feb 2 02:40:28 court check[3111]: SpamAssassin timed out and was killed,
failure 2 of 10
Feb 2 02:55:03 court check[3111]: SpamAssassin timed out and was killed,
failure 2 of 10
Attached is two runs of processing the same spam message with SA. the
firsttime it took severla minutes, mostly waiting at the point
descriubed above, the second was was a few seconds.
-- System Information:
Debian Release: 4.0
APT prefers testing
APT policy: (500, 'testing')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.18-3-686
Locale: LANG=C, LC_CTYPE=C (charmap=ANSI_X3.4-1968)
Versions of packages spamassassin depends on:
ii libarchive-tar-perl 1.30-2 Archive::Tar - manipulate tar file
ii libdigest-sha1-perl 2.11-1 NIST SHA-1 message digest algorith
ii libhtml-parser-perl 3.55-1 A collection of modules that parse
ii libsocket6-perl 0.19-1 Perl extensions for IPv6
ii libwww-perl 5.805-1 WWW client/server library for Perl
ii perl 5.8.8-7 Larry Wall's Practical Extraction
Versions of packages spamassassin recommends:
pn libmail-spf-query-perl <none> (no description available)
ii libnet-dns-perl 0.59-1 Perform DNS queries from a Perl sc
ii perl [libmime-base64-perl] 5.8.8-7 Larry Wall's Practical Extraction
ii spamc 3.1.7-1 Client for SpamAssassin spam filte
-- debconf information:
* spamassassin/upgrade/2.40:
spamassassin/upgrade/2.40w:
* spamassassin/upgrade/cancel: Continue
* spamassassin/upgrade/2.42:
spamassassin/upgrade/2.42m: No
spamassassin/upgrade/2.42u: No
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
[EMAIL PROTECTED]:~$ spamassassin -D < spamex2
[11544] dbg: logger: adding facilities: all
[11544] dbg: logger: logging level is DBG
[11544] dbg: generic: SpamAssassin version 3.1.7
[11544] dbg: config: score set 0 chosen.
[11544] dbg: util: running in taint mode? yes
[11544] dbg: util: taint mode: deleting unsafe environment variables, resetting PATH
[11544] dbg: util: PATH included '/home/wookey/bin', keeping
[11544] dbg: util: PATH included '/usr/local/bin', keeping
[11544] dbg: util: PATH included '/usr/bin', keeping
[11544] dbg: util: PATH included '/bin', keeping
[11544] dbg: util: PATH included '/usr/bin/X11', keeping
[11544] dbg: util: PATH included '/usr/games', keeping
[11544] dbg: util: final PATH set to: /home/wookey/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
[11544] dbg: message: ---- MIME PARSER START ----
[11544] dbg: message: main message type: text/plain
[11544] dbg: message: parsing normal part
[11544] dbg: message: added part, type: text/plain
[11544] dbg: message: ---- MIME PARSER END ----
[11544] dbg: dns: is Net::DNS::Resolver available? yes
[11544] dbg: dns: Net::DNS version: 0.59
[11544] dbg: config: using "/etc/spamassassin" for site rules pre files
[11544] dbg: config: read file /etc/spamassassin/init.pre
[11544] dbg: config: read file /etc/spamassassin/v310.pre
[11544] dbg: config: read file /etc/spamassassin/v312.pre
[11544] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[11544] dbg: config: using "/usr/share/spamassassin" for default rules dir
[11544] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[11544] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[11544] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[11544] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[11544] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[11544] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[11544] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[11544] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[11544] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[11544] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[11544] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[11544] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[11544] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[11544] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
[11544] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
[11544] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[11544] dbg: config: read file /usr/share/spamassassin/60_whitelist_subject.cf
[11544] dbg: config: read file /usr/share/spamassassin/65_debian.cf
[11544] dbg: config: using "/etc/spamassassin" for site rules dir
[11544] dbg: config: read file /etc/spamassassin/local.cf
[11544] dbg: config: using "/home/wookey/.spamassassin" for user state dir
[11544] dbg: config: using "/home/wookey/.spamassassin/user_prefs" for user prefs file
[11544] dbg: config: read file /home/wookey/.spamassassin/user_prefs
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e7c0b4)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8e9f3c4)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[11544] dbg: pyzor: network tests on, attempting Pyzor
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8eb6b70)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[11544] dbg: razor2: razor2 is available, version 2.81
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::Razor2=HASH(0x8e8361c)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[11544] dbg: reporter: network tests on, attempting SpamCop
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::SpamCop=HASH(0x9362204)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::AWL=HASH(0x937fcd4)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x938d310)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x93915d0)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x938a10c)
[11544] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
[11544] dbg: plugin: registered Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x93a92e4)
[11544] dbg: config: adding redirector regex: /^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[11544] dbg: config: adding redirector regex: /^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[11544] dbg: config: adding redirector regex: /^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[11544] dbg: config: adding redirector regex: /^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[11544] dbg: config: adding redirector regex: /^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[11544] dbg: config: adding redirector regex: m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
[11544] dbg: config: adding redirector regex: m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[11544] dbg: config: adding redirector regex: m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
[11544] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
[11544] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
[11544] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
[11544] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
[11544] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x93a92e4) implements 'finish_parsing_end'
[11544] dbg: replacetags: replacing tags
[11544] dbg: replacetags: done replacing tags
[11544] dbg: config: using "/home/wookey/.spamassassin" for user state dir
[11544] dbg: bayes: tie-ing to DB file R/O /home/wookey/.spamassassin/bayes_toks
[11544] dbg: bayes: tie-ing to DB file R/O /home/wookey/.spamassassin/bayes_seen
[11544] dbg: bayes: found bayes db version 3
[11544] dbg: bayes: DB journal sync: last sync: 0
[11544] dbg: config: using "/home/wookey/.spamassassin" for user state dir
[11544] dbg: config: score set 3 chosen.
[11544] dbg: dns: name server: 127.0.0.1, family: 2, ipv6: 0
[11544] dbg: dns: testing resolver nameservers: 127.0.0.1
[11544] dbg: dns: trying (3) w3.org...
[11544] dbg: dns: looking up NS for 'w3.org'
[11544] dbg: dns: NS lookup of w3.org using 127.0.0.1 succeeded => DNS available (set dns_available to override)
[11544] dbg: dns: is DNS available? 1
[11544] dbg: metadata: X-Spam-Relays-Trusted:
[11544] dbg: metadata: X-Spam-Relays-Untrusted:
[11544] dbg: metadata: X-Spam-Relays-Internal:
[11544] dbg: metadata: X-Spam-Relays-External:
[11544] dbg: message: ---- MIME PARSER START ----
[11544] dbg: message: main message type: text/plain
[11544] dbg: message: parsing normal part
[11544] dbg: message: added part, type: text/plain
[11544] dbg: message: ---- MIME PARSER END ----
[11544] dbg: message: no encoding detected
[11544] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8) implements 'parsed_metadata'
[11544] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[11544] dbg: uri: cleaned parsed uri, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[11544] dbg: uri: parsed domain, angelsabc.com
[11544] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[11544] dbg: uri: parsed domain, angelsabc.com
[11544] dbg: uri: parsed uri found, mailto:[EMAIL PROTECTED]
[11544] dbg: uri: cleaned parsed uri, mailto:[EMAIL PROTECTED]
[11544] dbg: uri: parsed domain, angelsabc.com
[11544] dbg: uridnsbl: domains to query: angelsabc.com
[11544] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-lastexternal
[11544] dbg: dns: checking RBL sa-accredit.habeas.com., set habeas-firsttrusted
[11544] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[11544] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[11544] dbg: dns: checking RBL combined.njabl.org., set njabl-lastexternal
[11544] dbg: dns: checking RBL combined.njabl.org., set njabl
[11544] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., set whois
[11544] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[11544] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[11544] dbg: dns: checking RBL sa-trusted.bondedsender.org., set bsp-firsttrusted
[11544] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., set whois-lastexternal
[11544] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[11544] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[11544] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[11544] dbg: check: running tests for priority: 0
[11544] dbg: rules: running header regexp tests; score so far=0
[11544] dbg: spf: no suitable relay for spf use found, skipping SPF-helo check
[11544] dbg: eval: all '*From' addrs:
[11544] dbg: eval: all '*To' addrs:
[11544] dbg: spf: no suitable relay for spf use found, skipping SPF check
[11544] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[11544] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
[11544] dbg: spf: cannot get Envelope-From, cannot use SPF
[11544] dbg: spf: def_spf_whitelist_from: could not find useable envelope sender
[11544] dbg: rules: ran eval rule HEAD_ILLEGAL_CHARS ======> got hit
[11544] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[11544] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[11544] dbg: rules: running body-text per-line regexp tests; score so far=1.605
[11544] dbg: rules: ran body rule __ISO_2022_JP_DELIM ======> got hit: "_$B"
[11544] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "_"
[11544] dbg: uri: running uri tests; score so far=1.605
[11544] dbg: bayes: DB journal sync: last sync: 0
[11544] dbg: bayes: corpus size: nspam = 5553, nham = 1052
[11544] dbg: bayes: score = 1
[11544] dbg: bayes: DB expiry: tokens in DB: 161977, Expiry max size: 150000, Oldest atime: 1166468326, Newest atime: 1170239341, Last expire: 1170315799, Current time: 1170375974
[11544] dbg: bayes: opportunistic call found expiry due
[11544] dbg: bayes: bayes journal sync starting
[11544] dbg: locker: safe_lock: created /home/wookey/.spamassassin/bayes.lock.court.aleph1.co.uk.11544
[11544] dbg: locker: safe_lock: trying to get lock on /home/wookey/.spamassassin/bayes with 0 retries
[11544] dbg: locker: safe_lock: breaking stale /home/wookey/.spamassassin/bayes.lock: age=1170373629 now=1170375975
[11544] dbg: locker: safe_lock: trying to get lock on /home/wookey/.spamassassin/bayes with 1 retries
[11544] dbg: locker: safe_lock: link to /home/wookey/.spamassassin/bayes.lock: link ok
[11544] dbg: bayes: tie-ing to DB file R/W /home/wookey/.spamassassin/bayes_toks
[11544] dbg: bayes: tie-ing to DB file R/W /home/wookey/.spamassassin/bayes_seen
[11544] dbg: bayes: found bayes db version 3
[11544] dbg: locker: refresh_lock: refresh /home/wookey/.spamassassin/bayes.lock
[11544] dbg: bayes: synced databases from journal in 0 seconds: 19 unique entries (38 total entries)
[11544] dbg: bayes: bayes journal sync completed
[11544] dbg: bayes: expiry starting
[11544] dbg: locker: refresh_lock: refresh /home/wookey/.spamassassin/bayes.lock
[11544] dbg: locker: refresh_lock: refresh /home/wookey/.spamassassin/bayes.lock
[11544] dbg: bayes: DB expiry: tokens in DB: 161977, Expiry max size: 150000, Oldest atime: 1166468326, Newest atime: 1170373858, Last expire: 1170315799, Current time: 1170375976
[11544] dbg: bayes: expiry check keep size, 0.75 * max: 112500
[11544] dbg: bayes: token count: 161977, final goal reduction size: 49477
[11544] dbg: bayes: first pass? current: 1170375976, Last: 1170315799, atime: 4061558, count: 0, newdelta: 0, ratio: 0, period: 43200
[11544] dbg: bayes: can't use estimation method for expiry, unexpected result, calculating optimal atime delta (first pass)
[11544] dbg: bayes: expiry max exponent: 9
[11544] dbg: bayes: atime token reduction
[11544] dbg: bayes: ======== ===============
[11544] dbg: bayes: 43200 161958
[11544] dbg: bayes: 86400 161958
[11544] dbg: bayes: 172800 152793
[11544] dbg: bayes: 345600 125262
[11544] dbg: bayes: 691200 114369
[11544] dbg: bayes: 1382400 89971
[11544] dbg: bayes: 2764800 53127
[11544] dbg: bayes: 5529600 0
[11544] dbg: bayes: 11059200 0
[11544] dbg: bayes: 22118400 0
[11544] dbg: bayes: couldn't find a good delta atime, need more token difference, skipping expire
[11544] dbg: bayes: expiry completed
[11544] dbg: bayes: untie-ing
[11544] dbg: bayes: untie-ing db_toks
[11544] dbg: bayes: untie-ing db_seen
[11544] dbg: bayes: files locked, now unlocking lock
[11544] dbg: locker: safe_unlock: unlink /home/wookey/.spamassassin/bayes.lock
[11544] dbg: rules: ran eval rule BAYES_99 ======> got hit
[11544] dbg: rules: running raw-body-text per-line regexp tests; score so far=5.105
[11544] dbg: rules: running full-text regexp tests; score so far=5.105
[11544] dbg: info: entering helper-app run mode
[11544] dbg: info: leaving helper-app run mode
[11544] dbg: razor2: part=0 engine=4 contested=0 confidence=0
[11544] dbg: razor2: part=0 engine=8 contested=0 confidence=100
[11544] dbg: razor2: results: spam? 1
[11544] dbg: razor2: results: engine 8, highest cf score: 100
[11544] dbg: razor2: results: engine 4, highest cf score: 0
[11544] dbg: rules: ran eval rule RAZOR2_CF_RANGE_E8_51_100 ======> got hit
[11544] dbg: rules: ran eval rule RAZOR2_CHECK ======> got hit
[11544] dbg: rules: ran eval rule RAZOR2_CF_RANGE_51_100 ======> got hit
[11544] dbg: util: current PATH is: /home/wookey/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
[11544] dbg: pyzor: pyzor is not available: no pyzor executable found
[11544] dbg: pyzor: no pyzor found, disabling Pyzor
[11544] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8) implements 'check_tick'
[11544] dbg: uridnsbl: select found 1 socks ready
[11544] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_AB_SURBL): 127.0.0.118
[11544] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_WS_SURBL): 127.0.0.118
[11544] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_JP_SURBL): 127.0.0.118
[11544] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_OB_SURBL): 127.0.0.118
[11544] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_SC_SURBL): 127.0.0.118
[11544] dbg: uridnsbl: query for angelsabc.com took 310 seconds to look up (multi.surbl.org.:angelsabc.com)
[11544] dbg: uridnsbl: queries completed: 1 started: 0
[11544] dbg: uridnsbl: queries active: NS=1 at Fri Feb 2 00:31:21 2007
[11544] dbg: check: running tests for priority: 500
[11544] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8) implements 'check_post_dnsbl'
[11544] dbg: uridnsbl: select found 1 socks ready
[11544] dbg: uridnsbl: queries completed: 1 started: 2
[11544] dbg: uridnsbl: queries active: at Fri Feb 2 00:31:21 2007
[11544] dbg: uridnsbl: waiting 2 seconds for URIDNSBL lookups to complete
[11544] dbg: uridnsbl: select found 1 socks ready
[11544] dbg: uridnsbl: queries completed: 1 started: 1
[11544] dbg: uridnsbl: queries active: A=1 at Fri Feb 2 00:31:21 2007
[11544] dbg: uridnsbl: select found 1 socks ready
[11544] dbg: uridnsbl: queries completed: 1 started: 1
[11544] dbg: uridnsbl: queries active: DNSBL=1 at Fri Feb 2 00:31:21 2007
[11544] dbg: uridnsbl: select found 1 socks ready
[11544] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_SBL): "http://www.spamhaus.org/SBL/sbl.lasso?query=SBL42854";
[11544] dbg: uridnsbl: query for angelsabc.com took 310 seconds to look up (sbl.spamhaus.org.:66.83.182.210)
[11544] dbg: uridnsbl: queries completed: 1 started: 0
[11544] dbg: uridnsbl: queries active: DNSBL=1 at Fri Feb 2 00:31:21 2007
[11544] dbg: uridnsbl: select found 1 socks ready
[11544] dbg: uridnsbl: query for angelsabc.com took 310 seconds to look up (sbl.spamhaus.org.:58.18.204.61)
[11544] dbg: uridnsbl: queries completed: 1 started: 0
[11544] dbg: uridnsbl: queries active: at Fri Feb 2 00:31:21 2007
[11544] dbg: uridnsbl: done waiting for URIDNSBL lookups to complete
[11544] dbg: rules: running meta tests; score so far=26.789
[11544] info: rules: meta test BLANK_BCC_ONLY has undefined dependency '__BCC_EMPTY'
[11544] info: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
[11544] dbg: rules: running header regexp tests; score so far=28.735
[11544] dbg: rules: running body-text per-line regexp tests; score so far=28.735
[11544] dbg: uri: running uri tests; score so far=28.735
[11544] dbg: rules: running raw-body-text per-line regexp tests; score so far=28.735
[11544] dbg: rules: running full-text regexp tests; score so far=28.735
[11544] dbg: check: running tests for priority: 1000
[11544] dbg: rules: running meta tests; score so far=28.735
[11544] dbg: rules: running header regexp tests; score so far=28.735
[11544] dbg: rules: running body-text per-line regexp tests; score so far=28.735
[11544] dbg: uri: running uri tests; score so far=28.735
[11544] dbg: rules: running raw-body-text per-line regexp tests; score so far=28.735
[11544] dbg: rules: running full-text regexp tests; score so far=28.735
[11544] dbg: plugin: Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x938d310) implements 'autolearn_discriminator'
[11544] dbg: learn: auto-learn: currently using scoreset 3, recomputing score based on scoreset 1
[11544] dbg: learn: auto-learn: message score: 28.735, computed score for autolearn: 21.008
[11544] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=18.01, head-points=4.019, learned-points=3.5
[11544] dbg: learn: auto-learn? yes, spam (21.008 > 12)
[11544] dbg: learn: initializing learner
[11544] dbg: learn: learning spam
[11544] dbg: eval: all '*From' addrs:
[11544] dbg: eval: all '*To' addrs:
[11544] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[11544] dbg: uri: cleaned parsed uri, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[11544] dbg: uri: parsed domain, angelsabc.com
[11544] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[11544] dbg: uri: parsed domain, angelsabc.com
[11544] dbg: uri: parsed uri found, mailto:[EMAIL PROTECTED]
[11544] dbg: uri: cleaned parsed uri, mailto:[EMAIL PROTECTED]
[11544] dbg: uri: parsed domain, angelsabc.com
[11544] dbg: locker: safe_lock: created /home/wookey/.spamassassin/bayes.lock.court.aleph1.co.uk.11544
[11544] dbg: locker: safe_lock: trying to get lock on /home/wookey/.spamassassin/bayes with 0 retries
[11544] dbg: locker: safe_lock: link to /home/wookey/.spamassassin/bayes.lock: link ok
[11544] dbg: bayes: tie-ing to DB file R/W /home/wookey/.spamassassin/bayes_toks
[11544] dbg: bayes: tie-ing to DB file R/W /home/wookey/.spamassassin/bayes_seen
[11544] dbg: bayes: found bayes db version 3
[11544] dbg: bayes: learned '[EMAIL PROTECTED]', atime: 1170376282
[11544] dbg: bayes: untie-ing
[11544] dbg: bayes: untie-ing db_toks
[11544] dbg: bayes: untie-ing db_seen
[11544] dbg: bayes: files locked, now unlocking lock
[11544] dbg: locker: safe_unlock: unlink /home/wookey/.spamassassin/bayes.lock
[11544] dbg: learn: initializing learner
[11544] dbg: check: is spam? score=28.735 required=4.6
[11544] dbg: check:
tests=BAYES_99,HEAD_ILLEGAL_CHARS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,TO_CC_NONE,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
[11544] dbg: check: subtests=__ENV_AND_HDR_FROM_MATCH,__ISO_2022_JP_DELIM,__NONEMPTY_BODY,__UNUSABLE_MSGID
Received: from localhost by court.aleph1.co.uk
with SpamAssassin (version 3.1.7);
Fri, 02 Feb 2007 00:31:24 +0000
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on court.aleph1.co.uk
X-Spam-Level: ****************************
X-Spam-Status: Yes, score=28.7 required=4.6 tests=BAYES_99,HEAD_ILLEGAL_CHARS,
MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,TO_CC_NONE,URIBL_AB_SURBL,
URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
autolearn=spam version=3.1.7
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_45C2865C.D3A7AA7F"
This is a multi-part message in MIME format.
------------=_45C2865C.D3A7AA7F
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "court.aleph1.co.uk", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: 39$rJb$/#O#L$r$$$-$J$j%9%+!<%H$r$a$/$C$F%Q%s%D$r2<$m$7$F$V$C$+$1!*
"#"#!!?o;~99?7Cf$J$N$GKhF|3Z$7$a$k!!"#"#
http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[...]
Content analysis details: (28.7 points, 4.6 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
1.6 HEAD_ILLEGAL_CHARS Headers have too many raw illegal characters
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: angelsabc.com]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: angelsabc.com]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: angelsabc.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: angelsabc.com]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: angelsabc.com]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: angelsabc.com]
1.8 MISSING_SUBJECT Missing Subject: header
-0.0 NO_RECEIVED Informational: message has no Received headers
0.1 TO_CC_NONE No To: or Cc: header
------------=_45C2865C.D3A7AA7F
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
!Z!!Bg?M5$Ep;#%7%j!<%:!!![
%W!<%k$G!"3$4_$GDL$j$,$+$j$N?eCeH~=w$r$$$-$J$jC&$,$7$F$V$C$+$1!*
39$rJb$/#O#L$r$$$-$J$j%9%+!<%H$r$a$/$C$F%Q%s%D$r2<$m$7$F$V$C$+$1!*
"#"#!!?o;~99?7Cf$J$N$GKhF|3Z$7$a$k!!"#"#
http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
!!!!%$%?%:%i$N8B3&$rD6$($F$$$^$9!*
!!!c!c!!D6%<%m5wN%Ep;#!*!!!d!d
OB<0%H%$%l$rEp;#Cf!"$o$6$H%+%a%i$rH/8+$5$;$FF($2$k!*
%+%a%i$,fjLg$KEv$?$k5wN%$^$G6a4s$C$FF($2$k!*!!
"#"# $$$D$G$b$I$3$G$b#2G/4V8+J|Bj!!"#"#
http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
"(Cm0U!!#1#8:PL$K~$NJ}$O;kD0=PMh$^$;$s!#$4N;>52<$5$$!#
(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!
!!G[?.5qH]$O$3$A$i$^$G
[EMAIL PROTECTED]
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------=_45C2865C.D3A7AA7F--
[EMAIL PROTECTED]:~$ spamassassin -D < spamex2
[13355] dbg: logger: adding facilities: all
[13355] dbg: logger: logging level is DBG
[13355] dbg: generic: SpamAssassin version 3.1.7
[13355] dbg: config: score set 0 chosen.
[13355] dbg: util: running in taint mode? yes
[13355] dbg: util: taint mode: deleting unsafe environment variables, resetting PATH
[13355] dbg: util: PATH included '/home/wookey/bin', keeping
[13355] dbg: util: PATH included '/usr/local/bin', keeping
[13355] dbg: util: PATH included '/usr/bin', keeping
[13355] dbg: util: PATH included '/bin', keeping
[13355] dbg: util: PATH included '/usr/bin/X11', keeping
[13355] dbg: util: PATH included '/usr/games', keeping
[13355] dbg: util: final PATH set to: /home/wookey/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
[13355] dbg: message: ---- MIME PARSER START ----
[13355] dbg: message: main message type: text/plain
[13355] dbg: message: parsing normal part
[13355] dbg: message: added part, type: text/plain
[13355] dbg: message: ---- MIME PARSER END ----
[13355] dbg: dns: is Net::DNS::Resolver available? yes
[13355] dbg: dns: Net::DNS version: 0.59
[13355] dbg: config: using "/etc/spamassassin" for site rules pre files
[13355] dbg: config: read file /etc/spamassassin/init.pre
[13355] dbg: config: read file /etc/spamassassin/v310.pre
[13355] dbg: config: read file /etc/spamassassin/v312.pre
[13355] dbg: config: using "/usr/share/spamassassin" for sys rules pre files
[13355] dbg: config: using "/usr/share/spamassassin" for default rules dir
[13355] dbg: config: read file /usr/share/spamassassin/10_misc.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_advance_fee.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_anti_ratware.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_body_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_compensate.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_drugs.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_head_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_html_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_meta_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_net_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_phrases.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_porn.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_ratware.cf
[13355] dbg: config: read file /usr/share/spamassassin/20_uri_tests.cf
[13355] dbg: config: read file /usr/share/spamassassin/23_bayes.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_accessdb.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_antivirus.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_body_tests_es.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_body_tests_pl.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_dcc.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_dkim.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_domainkeys.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_hashcash.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_pyzor.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_razor2.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_replace.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_spf.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_textcat.cf
[13355] dbg: config: read file /usr/share/spamassassin/25_uribl.cf
[13355] dbg: config: read file /usr/share/spamassassin/30_text_de.cf
[13355] dbg: config: read file /usr/share/spamassassin/30_text_fr.cf
[13355] dbg: config: read file /usr/share/spamassassin/30_text_it.cf
[13355] dbg: config: read file /usr/share/spamassassin/30_text_nl.cf
[13355] dbg: config: read file /usr/share/spamassassin/30_text_pl.cf
[13355] dbg: config: read file /usr/share/spamassassin/30_text_pt_br.cf
[13355] dbg: config: read file /usr/share/spamassassin/50_scores.cf
[13355] dbg: config: read file /usr/share/spamassassin/60_awl.cf
[13355] dbg: config: read file /usr/share/spamassassin/60_whitelist.cf
[13355] dbg: config: read file /usr/share/spamassassin/60_whitelist_dk.cf
[13355] dbg: config: read file /usr/share/spamassassin/60_whitelist_dkim.cf
[13355] dbg: config: read file /usr/share/spamassassin/60_whitelist_spf.cf
[13355] dbg: config: read file /usr/share/spamassassin/60_whitelist_subject.cf
[13355] dbg: config: read file /usr/share/spamassassin/65_debian.cf
[13355] dbg: config: using "/etc/spamassassin" for site rules dir
[13355] dbg: config: read file /etc/spamassassin/local.cf
[13355] dbg: config: using "/home/wookey/.spamassassin" for user state dir
[13355] dbg: config: using "/home/wookey/.spamassassin/user_prefs" for user prefs file
[13355] dbg: config: read file /home/wookey/.spamassassin/user_prefs
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8e7c0b4)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8e9f3c4)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC
[13355] dbg: pyzor: network tests on, attempting Pyzor
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::Pyzor=HASH(0x8eb6b70)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[13355] dbg: razor2: razor2 is available, version 2.81
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::Razor2=HASH(0x8e8361c)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC
[13355] dbg: reporter: network tests on, attempting SpamCop
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::SpamCop=HASH(0x9362204)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::AWL=HASH(0x937fcd4)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x938d310)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0x93915d0)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0x938a10c)
[13355] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC
[13355] dbg: plugin: registered Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x93a92e4)
[13355] dbg: config: adding redirector regex: /^http:\/\/chkpt\.zdnet\.com\/chkpt\/\w+\/(.*)$/i
[13355] dbg: config: adding redirector regex: /^http:\/\/www(?:\d+)?\.nate\.com\/r\/\w+\/(.*)$/i
[13355] dbg: config: adding redirector regex: /^http:\/\/.+\.gov\/(?:.*\/)?externalLink\.jhtml\?.*url=(.*?)(?:&.*)?$/i
[13355] dbg: config: adding redirector regex: /^http:\/\/redir\.internet\.com\/.+?\/.+?\/(.*)$/i
[13355] dbg: config: adding redirector regex: /^http:\/\/(?:.*?\.)?adtech\.de\/.*(?:;|\|)link=(.*?)(?:;|$)/i
[13355] dbg: config: adding redirector regex: m'^http.*?/redirect\.php\?.*(?<=[?&])goto=(.*?)(?:$|[&#])'i
[13355] dbg: config: adding redirector regex: m'^https?:/*(?:[^/]+\.)?emf\d\.com/r\.cfm.*?&r=(.*)'i
[13355] dbg: config: adding redirector regex: m'/(?:index.php)?\?.*(?<=[?&])URL=(.*?)(?:$|[&#])'i
[13355] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/url\?.*?(?<=[?&])q=(.*?)(?:$|[&#])'i
[13355] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])site:(.*?)(?:$|%20|[\s+&#])'i
[13355] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/search\?.*?(?<=[?&])q=[^&]*?(?<=%20|..[=+\s])(?:"|%22)(.*?)(?:$|%22|["\s+&#])'i
[13355] dbg: config: adding redirector regex: m'^http:/*(?:\w+\.)?google(?:\.\w{2,3}){1,2}/translate\?.*?(?<=[?&])u=(.*?)(?:$|[&#])'i
[13355] dbg: plugin: Mail::SpamAssassin::Plugin::ReplaceTags=HASH(0x93a92e4) implements 'finish_parsing_end'
[13355] dbg: replacetags: replacing tags
[13355] dbg: replacetags: done replacing tags
[13355] dbg: config: using "/home/wookey/.spamassassin" for user state dir
[13355] dbg: bayes: tie-ing to DB file R/O /home/wookey/.spamassassin/bayes_toks
[13355] dbg: bayes: tie-ing to DB file R/O /home/wookey/.spamassassin/bayes_seen
[13355] dbg: bayes: found bayes db version 3
[13355] dbg: bayes: DB journal sync: last sync: 1170375976
[13355] dbg: config: using "/home/wookey/.spamassassin" for user state dir
[13355] dbg: config: score set 3 chosen.
[13355] dbg: dns: name server: 127.0.0.1, family: 2, ipv6: 0
[13355] dbg: dns: testing resolver nameservers: 127.0.0.1
[13355] dbg: dns: trying (3) sun.com...
[13355] dbg: dns: looking up NS for 'sun.com'
[13355] dbg: dns: NS lookup of sun.com using 127.0.0.1 succeeded => DNS available (set dns_available to override)
[13355] dbg: dns: is DNS available? 1
[13355] dbg: metadata: X-Spam-Relays-Trusted:
[13355] dbg: metadata: X-Spam-Relays-Untrusted:
[13355] dbg: metadata: X-Spam-Relays-Internal:
[13355] dbg: metadata: X-Spam-Relays-External:
[13355] dbg: message: ---- MIME PARSER START ----
[13355] dbg: message: main message type: text/plain
[13355] dbg: message: parsing normal part
[13355] dbg: message: added part, type: text/plain
[13355] dbg: message: ---- MIME PARSER END ----
[13355] dbg: message: no encoding detected
[13355] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8) implements 'parsed_metadata'
[13355] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[13355] dbg: uri: cleaned parsed uri, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[13355] dbg: uri: parsed domain, angelsabc.com
[13355] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[13355] dbg: uri: parsed domain, angelsabc.com
[13355] dbg: uri: parsed uri found, mailto:[EMAIL PROTECTED]
[13355] dbg: uri: cleaned parsed uri, mailto:[EMAIL PROTECTED]
[13355] dbg: uri: parsed domain, angelsabc.com
[13355] dbg: uridnsbl: domains to query: angelsabc.com
[13355] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl-lastexternal
[13355] dbg: dns: checking RBL sa-accredit.habeas.com., set habeas-firsttrusted
[13355] dbg: dns: checking RBL sbl-xbl.spamhaus.org., set sblxbl
[13355] dbg: dns: checking RBL sa-other.bondedsender.org., set bsp-untrusted
[13355] dbg: dns: checking RBL combined.njabl.org., set njabl-lastexternal
[13355] dbg: dns: checking RBL combined.njabl.org., set njabl
[13355] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., set whois
[13355] dbg: dns: checking RBL list.dsbl.org., set dsbl-lastexternal
[13355] dbg: dns: checking RBL bl.spamcop.net., set spamcop
[13355] dbg: dns: checking RBL sa-trusted.bondedsender.org., set bsp-firsttrusted
[13355] dbg: dns: checking RBL combined-HIB.dnsiplists.completewhois.com., set whois-lastexternal
[13355] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs-lastexternal
[13355] dbg: dns: checking RBL dnsbl.sorbs.net., set sorbs
[13355] dbg: dns: checking RBL iadb.isipp.com., set iadb-firsttrusted
[13355] dbg: check: running tests for priority: 0
[13355] dbg: rules: running header regexp tests; score so far=0
[13355] dbg: spf: no suitable relay for spf use found, skipping SPF-helo check
[13355] dbg: eval: all '*From' addrs:
[13355] dbg: eval: all '*To' addrs:
[13355] dbg: spf: no suitable relay for spf use found, skipping SPF check
[13355] dbg: rules: ran eval rule NO_RELAYS ======> got hit
[13355] dbg: rules: ran eval rule __ENV_AND_HDR_FROM_MATCH ======> got hit
[13355] dbg: spf: cannot get Envelope-From, cannot use SPF
[13355] dbg: spf: def_spf_whitelist_from: could not find useable envelope sender
[13355] dbg: rules: ran eval rule HEAD_ILLEGAL_CHARS ======> got hit
[13355] dbg: rules: ran eval rule __UNUSABLE_MSGID ======> got hit
[13355] dbg: spf: spf_whitelist_from: could not find useable envelope sender
[13355] dbg: rules: running body-text per-line regexp tests; score so far=1.605
[13355] dbg: rules: ran body rule __ISO_2022_JP_DELIM ======> got hit: "_$B"
[13355] dbg: rules: ran body rule __NONEMPTY_BODY ======> got hit: "_"
[13355] dbg: uri: running uri tests; score so far=1.605
[13355] dbg: bayes: DB journal sync: last sync: 1170375976
[13355] dbg: bayes: corpus size: nspam = 5554, nham = 1052
[13355] dbg: bayes: score = 1
[13355] dbg: bayes: DB journal sync: last sync: 1170375976
[13355] dbg: bayes: untie-ing
[13355] dbg: bayes: untie-ing db_toks
[13355] dbg: bayes: untie-ing db_seen
[13355] dbg: rules: ran eval rule BAYES_99 ======> got hit
[13355] dbg: rules: running raw-body-text per-line regexp tests; score so far=5.105
[13355] dbg: rules: running full-text regexp tests; score so far=5.105
[13355] dbg: info: entering helper-app run mode
[13355] dbg: info: leaving helper-app run mode
[13355] dbg: razor2: part=0 engine=4 contested=0 confidence=0
[13355] dbg: razor2: part=0 engine=8 contested=0 confidence=100
[13355] dbg: razor2: results: spam? 1
[13355] dbg: razor2: results: engine 8, highest cf score: 100
[13355] dbg: razor2: results: engine 4, highest cf score: 0
[13355] dbg: rules: ran eval rule RAZOR2_CF_RANGE_E8_51_100 ======> got hit
[13355] dbg: rules: ran eval rule RAZOR2_CHECK ======> got hit
[13355] dbg: rules: ran eval rule RAZOR2_CF_RANGE_51_100 ======> got hit
[13355] dbg: util: current PATH is: /home/wookey/bin:/usr/local/bin:/usr/bin:/bin:/usr/bin/X11:/usr/games
[13355] dbg: pyzor: pyzor is not available: no pyzor executable found
[13355] dbg: pyzor: no pyzor found, disabling Pyzor
[13355] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8) implements 'check_tick'
[13355] dbg: uridnsbl: select found 1 socks ready
[13355] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_AB_SURBL): 127.0.0.118
[13355] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_WS_SURBL): 127.0.0.118
[13355] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_JP_SURBL): 127.0.0.118
[13355] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_OB_SURBL): 127.0.0.118
[13355] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_SC_SURBL): 127.0.0.118
[13355] dbg: uridnsbl: query for angelsabc.com took 6 seconds to look up (multi.surbl.org.:angelsabc.com)
[13355] dbg: uridnsbl: queries completed: 1 started: 0
[13355] dbg: uridnsbl: queries active: NS=1 at Fri Feb 2 00:48:57 2007
[13355] dbg: check: running tests for priority: 500
[13355] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8340bf8) implements 'check_post_dnsbl'
[13355] dbg: uridnsbl: select found 1 socks ready
[13355] dbg: uridnsbl: queries completed: 1 started: 2
[13355] dbg: uridnsbl: queries active: at Fri Feb 2 00:48:57 2007
[13355] dbg: uridnsbl: waiting 2 seconds for URIDNSBL lookups to complete
[13355] dbg: uridnsbl: select found 1 socks ready
[13355] dbg: uridnsbl: queries completed: 1 started: 1
[13355] dbg: uridnsbl: queries active: A=1 at Fri Feb 2 00:48:58 2007
[13355] dbg: uridnsbl: select found 1 socks ready
[13355] dbg: uridnsbl: queries completed: 1 started: 1
[13355] dbg: uridnsbl: queries active: DNSBL=1 at Fri Feb 2 00:48:58 2007
[13355] dbg: uridnsbl: select found 1 socks ready
[13355] dbg: uridnsbl: domain "angelsabc.com" listed (URIBL_SBL): "http://www.spamhaus.org/SBL/sbl.lasso?query=SBL42854";
[13355] dbg: uridnsbl: query for angelsabc.com took 7 seconds to look up (sbl.spamhaus.org.:66.83.182.210)
[13355] dbg: uridnsbl: queries completed: 1 started: 0
[13355] dbg: uridnsbl: queries active: DNSBL=1 at Fri Feb 2 00:48:58 2007
[13355] dbg: uridnsbl: select found 1 socks ready
[13355] dbg: uridnsbl: query for angelsabc.com took 7 seconds to look up (sbl.spamhaus.org.:58.18.204.61)
[13355] dbg: uridnsbl: queries completed: 1 started: 0
[13355] dbg: uridnsbl: queries active: at Fri Feb 2 00:48:58 2007
[13355] dbg: uridnsbl: done waiting for URIDNSBL lookups to complete
[13355] dbg: rules: running meta tests; score so far=26.789
[13355] info: rules: meta test BLANK_BCC_ONLY has undefined dependency '__BCC_EMPTY'
[13355] info: rules: meta test DIGEST_MULTIPLE has undefined dependency 'DCC_CHECK'
[13355] dbg: rules: running header regexp tests; score so far=28.735
[13355] dbg: rules: running body-text per-line regexp tests; score so far=28.735
[13355] dbg: uri: running uri tests; score so far=28.735
[13355] dbg: rules: running raw-body-text per-line regexp tests; score so far=28.735
[13355] dbg: rules: running full-text regexp tests; score so far=28.735
[13355] dbg: check: running tests for priority: 1000
[13355] dbg: rules: running meta tests; score so far=28.735
[13355] dbg: rules: running header regexp tests; score so far=28.735
[13355] dbg: rules: running body-text per-line regexp tests; score so far=28.735
[13355] dbg: uri: running uri tests; score so far=28.735
[13355] dbg: rules: running raw-body-text per-line regexp tests; score so far=28.735
[13355] dbg: rules: running full-text regexp tests; score so far=28.735
[13355] dbg: plugin: Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0x938d310) implements 'autolearn_discriminator'
[13355] dbg: learn: auto-learn: currently using scoreset 3, recomputing score based on scoreset 1
[13355] dbg: learn: auto-learn: message score: 28.735, computed score for autolearn: 21.008
[13355] dbg: learn: auto-learn? ham=0.1, spam=12, body-points=18.01, head-points=4.019, learned-points=3.5
[13355] dbg: learn: auto-learn? yes, spam (21.008 > 12)
[13355] dbg: learn: initializing learner
[13355] dbg: learn: learning spam
[13355] dbg: eval: all '*From' addrs:
[13355] dbg: eval: all '*To' addrs:
[13355] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[13355] dbg: uri: cleaned parsed uri, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[13355] dbg: uri: parsed domain, angelsabc.com
[13355] dbg: uri: parsed uri found, http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[13355] dbg: uri: parsed domain, angelsabc.com
[13355] dbg: uri: parsed uri found, mailto:[EMAIL PROTECTED]
[13355] dbg: uri: cleaned parsed uri, mailto:[EMAIL PROTECTED]
[13355] dbg: uri: parsed domain, angelsabc.com
[13355] dbg: locker: safe_lock: created /home/wookey/.spamassassin/bayes.lock.court.aleph1.co.uk.13355
[13355] dbg: locker: safe_lock: trying to get lock on /home/wookey/.spamassassin/bayes with 0 retries
[13355] dbg: locker: safe_lock: link to /home/wookey/.spamassassin/bayes.lock: link ok
[13355] dbg: bayes: tie-ing to DB file R/W /home/wookey/.spamassassin/bayes_toks
[13355] dbg: bayes: tie-ing to DB file R/W /home/wookey/.spamassassin/bayes_seen
[13355] dbg: bayes: found bayes db version 3
[13355] dbg: bayes: [EMAIL PROTECTED] already learnt correctly, not learning twice
[13355] dbg: bayes: untie-ing
[13355] dbg: bayes: untie-ing db_toks
[13355] dbg: bayes: untie-ing db_seen
[13355] dbg: bayes: files locked, now unlocking lock
[13355] dbg: locker: safe_unlock: unlink /home/wookey/.spamassassin/bayes.lock
[13355] dbg: learn: initializing learner
[13355] dbg: check: is spam? score=28.735 required=4.6
[13355] dbg: check:
tests=BAYES_99,HEAD_ILLEGAL_CHARS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,TO_CC_NONE,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_
SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
[13355] dbg: check: subtests=__ENV_AND_HDR_FROM_MATCH,__ISO_2022_JP_DELIM,__NONEMPTY_BODY,__UNUSABLE_MSGID
Received: from localhost by court.aleph1.co.uk
with SpamAssassin (version 3.1.7);
Fri, 02 Feb 2007 00:48:58 +0000
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on court.aleph1.co.uk
X-Spam-Level: ****************************
X-Spam-Status: Yes, score=28.7 required=4.6 tests=BAYES_99,HEAD_ILLEGAL_CHARS,
MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,RAZOR2_CF_RANGE_51_100,
RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,TO_CC_NONE,URIBL_AB_SURBL,
URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL
autolearn=unavailable version=3.1.7
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="----------=_45C28A7A.E7DB1AA3"
This is a multi-part message in MIME format.
------------=_45C28A7A.E7DB1AA3
Content-Type: text/plain
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
Spam detection software, running on the system "court.aleph1.co.uk", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email. If you have any questions, see
the administrator of that system for details.
Content preview: 39$rJb$/#O#L$r$$$-$J$j%9%+!<%H$r$a$/$C$F%Q%s%D$r2<$m$7$F$V$C$+$1!*
"#"#!!?o;~99?7Cf$J$N$GKhF|3Z$7$a$k!!"#"#
http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
[...]
Content analysis details: (28.7 points, 4.6 required)
pts rule name description
---- ---------------------- --------------------------------------------------
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
1.6 HEAD_ILLEGAL_CHARS Headers have too many raw illegal characters
3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100%
[score: 1.0000]
1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/)
0.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
1.6 URIBL_SBL Contains an URL listed in the SBL blocklist
[URIs: angelsabc.com]
3.8 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist
[URIs: angelsabc.com]
4.1 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist
[URIs: angelsabc.com]
2.1 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist
[URIs: angelsabc.com]
3.0 URIBL_OB_SURBL Contains an URL listed in the OB SURBL blocklist
[URIs: angelsabc.com]
4.5 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist
[URIs: angelsabc.com]
1.8 MISSING_SUBJECT Missing Subject: header
-0.0 NO_RECEIVED Informational: message has no Received headers
0.1 TO_CC_NONE No To: or Cc: header
------------=_45C28A7A.E7DB1AA3
Content-Type: message/rfc822; x-spam-type=original
Content-Description: original message before SpamAssassin
Content-Disposition: inline
Content-Transfer-Encoding: 8bit
!Z!!Bg?M5$Ep;#%7%j!<%:!!![
%W!<%k$G!"3$4_$GDL$j$,$+$j$N?eCeH~=w$r$$$-$J$jC&$,$7$F$V$C$+$1!*
39$rJb$/#O#L$r$$$-$J$j%9%+!<%H$r$a$/$C$F%Q%s%D$r2<$m$7$F$V$C$+$1!*
"#"#!!?o;~99?7Cf$J$N$GKhF|3Z$7$a$k!!"#"#
http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
!!!!%$%?%:%i$N8B3&$rD6$($F$$$^$9!*
!!!c!c!!D6%<%m5wN%Ep;#!*!!!d!d
OB<0%H%$%l$rEp;#Cf!"$o$6$H%+%a%i$rH/8+$5$;$FF($2$k!*
%+%a%i$,fjLg$KEv$?$k5wN%$^$G6a4s$C$FF($2$k!*!!
"#"# $$$D$G$b$I$3$G$b#2G/4V8+J|Bj!!"#"#
http://www.angelsabc.com/?bc=ag01&mc=776F6F6B65794064656269616E2E6F7267
"(Cm0U!!#1#8:PL$K~$NJ}$O;kD0=PMh$^$;$s!#$4N;>52<$5$$!#
(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!(!
!!G[?.5qH]$O$3$A$i$^$G
[EMAIL PROTECTED]
--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.
------------=_45C28A7A.E7DB1AA3--
