[SLUG] spamassassin installation

From: Eben King (eben01@verizon.net)
Date: Thu Jun 08 2006 - 12:32:54 EDT


I set up and trained SA on my machine:

eben@pc:~$ sa-learn --backup | head
v 3 db_version # this must be the first line!!!
v 386 num_spam
v 942 num_nonspam

But it seems not to scan some messages, which I don't understand.

Here are the headers of a SLUG message, which it did scan (not the
"X-Spam-Status" header):

Return-Path: <slug@nks.net>
X-Original-To: eben@localhost
Delivered-To: eben@localhost
Received: from localhost (localhost.localdomain [127.0.0.1]) by pc (Postfix) with ESMTP id E05B85ACED for <eben@localhost>; Thu, 8 Jun 2006 11:52:06 -0400 (EDT)
Received: from incoming.verizon.net [206.46.232.10] by localhost with POP3 (fetchmail-6.2.5) for eben@localhost (single-drop); Thu, 08 Jun 2006 11:52:06 -0400 (EDT)
Received: from 209.34.226.205 ([172.18.12.134]) by vms051.mailsrvcs.net (Sun Java System Messaging Server 6.2-4.02 (built Sep 9 2005)) with ESMTP id <0J0J00B8NT4LMG80@vms051.mailsrvcs.net>; Thu, 08 Jun 2006 10:46:04 -0500 (CDT)
Received: from slug-list-00.nks.net (209.34.226.205) by sv8pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW) with ESMTP id <2-6952-211-6952-348-1-1149781557> for vms051pub.verizon.net; Thu, 08 Jun 2006 10:45:59 -0500
Received: from slug-list-00.ssn.nks.net (localhost [127.0.0.1]) by slug-list-00.nks.net (8.13.3/8.13.3/Debian-9icb) with ESMTP id k58FSBeU013536 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <slug-track29@slug-list-00.ssn.nks.net>; Thu, 08 Jun 2006 11:28:11 -0400
Received: (from majordomo@localhost) by slug-list-00.ssn.nks.net (8.13.3/8.13.3/Submit) id k58FSBjd013535 for slug-track29; Thu, 08 Jun 2006 11:28:11 -0400
Received: from nks-mail-02.nks.net (nks-mail-02.nks.net [66.152.21.101]) by slug-list-00.nks.net (8.13.3/8.13.3/Debian-9icb) with ESMTP id k58FSAji013531 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <slug@slug-list-00.nks.net>; Thu, 08 Jun 2006 11:28:10 -0400
Received: from nks-ma-07.lvs.nks.net (nks-ma-07.nks.net [209.34.225.207]) by nks-mail-02.nks.net (8.13.3/8.13.3/Debian-9icb) with ESMTP id k58FSATe031052 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-SHA bits=256 verify=NOT) for <slug@nks.net>; Thu, 08 Jun 2006 11:28:10 -0400
Received: from randymail-a5.dreamhost.com (sd-green-bigip-98.dreamhost.com [208.97.132.98]) by nks-ma-07.lvs.nks.net (8.13.3/8.13.3/Debian-9icb) with ESMTP id k58FS0LU024331 for <slug@nks.net>; Thu, 08 Jun 2006 11:28:00 -0400
Received: from ws11.ss.szmidt.org (pool-71-98-157-185.tampfl.dsl-w.verizon.net [71.98.157.185]) by randymail-a5.dreamhost.com (Postfix) with ESMTP id 53518901FD for <slug@nks.net>; Thu, 08 Jun 2006 08:27:58 -0700 (PDT)
Date: Thu, 08 Jun 2006 11:22:46 -0400
From: steve szmidt <steve@szmidt.org>
Subject: Re: [SLUG] {Screamed} Asterisk
In-reply-to: <620c90570606080702q21fe8170jbf617f66c97882c9@mail.gmail.com>
X-Originating-IP: [209.34.226.205]
Sender: slug@nks.net
To: slug@nks.net
Reply-to: slug@nks.net
Message-id: <200606081122.46428.steve@szmidt.org>
MIME-version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7bit
Content-disposition: inline
Precedence: bulk
X-NKS-MailAssistant-Information: Please contact the ISP for more information
X-NKS-MailAssistant: Found to be clean
X-NKS-MailAssistant-SpamCheck: not spam (whitelisted), NKS MailAssistant (score=-0.838, required 6, autolearn=not spam, AWL -0.84, BAYES_50 0.00)
References: <1149689599.5097.2119.camel@biostar.com> <200606080918.27641.steve@szmidt.org> <620c90570606080702q21fe8170jbf617f66c97882c9@mail.gmail.com>
User-Agent: KMail/1.9.1
X-Spam-Status: No

and here is one it didn't (a phishing spam that came through my rr.com
account):

Return-Path: <security@paypal.com>
X-Original-To: eben@localhost
Delivered-To: eben@localhost
Received: from localhost (localhost.localdomain [127.0.0.1]) by pc (Postfix) with ESMTP id 1B4945ACED for <eben@localhost>; Thu, 8 Jun 2006 12:02:08 -0400 (EDT)
Received: from pop-server.tampabay.rr.com [65.32.5.45] by localhost with POP3 (fetchmail-6.2.5) for eben@localhost (single-drop); Thu, 08 Jun 2006 12:02:08 -0400 (EDT)
Received: from ms-mta-03 (ms-mta-03-smtp [10.10.4.11]) by ms-mss-01.tampabay.rr.com (iPlanet Messaging Server 5.2 HotFix 2.10 (built Dec 26 2005)) with ESMTP id <0J0J00AUVTQI3Z@ms-mss-01.tampabay.rr.com> for eben1@tampabay.rr.com; Thu, 08 Jun 2006 11:59:06 -0400 (EDT)
Received: from hrndva-mx-10.mgw.rr.com (hrndva-mx-10.mgw.rr.com [24.28.204.29]) by ms-mta-03.tampabay.rr.com (iPlanet Messaging Server 5.2 HotFix 2.10 (built Dec 26 2005)) with ESMTP id <0J0J00MP9TQ9CG@ms-mta-03.tampabay.rr.com> for eben1@tampabay.rr.com (ORCPT eben1@tampabay.rr.com); Thu, 08 Jun 2006 11:59:06 -0400 (EDT)
Received: from smtp.billreed.com (HELO billreed.com) ([69.15.192.94]) by hrndva-mx-10.mgw.rr.com with ESMTP; Thu, 08 Jun 2006 11:56:12 -0400
Received: from [211.200.20.196] (helo=kitc-vod) by billreed.com with asmtp (Exim 3.36 #1) id 1FoMfs-00068M-00; Thu, 08 Jun 2006 10:43:56 -0500
Date: Thu, 08 Jun 2006 23:39:55 +0900
From: PayPal <security@paypal.com>
Subject: Payment confirmation for StarbucksStore
Message-id: <E1FoMfs-00068M-00@billreed.com>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
Content-type: text/html; charset=Windows-1251
Content-transfer-encoding: 7bit
X-Priority: 3
X-MSMail-priority: Normal
Original-recipient: rfc822;eben1@tampabay.rr.com
To: undisclosed-recipients:;

What's the deal? Why would it scan some messages and not others, when both
are fetched be fetchmail?

-- 
-eben      QebWenE01R@vTerYizUonI.nOetP      royalty.no-ip.org:81
A. A Top Poster                       \  http://www.fscked.co.uk/
B. Who's there?                        \  writing/
A. Knock-knock -- from bobward@xxx.com  \  top-posting-cuss.html
-----------------------------------------------------------------------
This list is provided as an unmoderated internet service by Networked
Knowledge Systems (NKS).  Views and opinions expressed in messages
posted are those of the author and do not necessarily reflect the
official policy or position of NKS or any of its employees.



This archive was generated by hypermail 2.1.3 : Fri Aug 01 2014 - 20:06:34 EDT