Skip to content

Instantly share code, notes, and snippets.

@tino
Created February 14, 2016 04:20
Show Gist options
  • Save tino/2925d64a018310dc02a8 to your computer and use it in GitHub Desktop.
Save tino/2925d64a018310dc02a8 to your computer and use it in GitHub Desktop.
Spamassassin testing differs when input from MTA vs spamc cmdline
To: [email protected]
Content-Type: multipart/alternative; boundary=------------01483740197494617322076
X-Spam-Level: ***
Mime-Version: 1.0
X-Spam-Status: No, score=3.5 required=5.0 tests=HTML_MESSAGE,POOR_DOMAIN, PYZOR_CHECK,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE, URIBL_BLOCKED autolearn=no autolearn_force=no version=3.4.0
Return-Path: <[email protected]>
X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on alpha.mydomain.io
Received: from 127.0.0.1 (HELO alpha.mydomain.io) by alpha.mydomain.io (Archiveopteryx 3.2.0) with lmtp id 1454633828-17132-27942/5/50 for [email protected]; Fri, 5 Feb 2016 00:57:08 +0000
Received: (Haraka outbound); Fri, 05 Feb 2016 01:57:08 +0100
Received: from thesequestion.top (thesequestion.top [91.92.108.188]) by alpha.mydomain.io (Haraka/2.7.0) with ESMTP id EC7C2A51-41A1-48A7-BA9A-6CDF35C1916C.1 envelope-from <[email protected]>; Fri, 05 Feb 2016 01:57:06 +0100
Message-Id: <qKakINQa5qyu_-bBHKgw6I8ER_RHcqE8Y7JWzJTFcc0.P6HwbM7lYctRCqm27HkqnA@thesequestion.top>
X-Spam-Relaysuntrusted: [ ip=91.92.108.188 rdns=thesequestion.top helo=thesequestion.top by=alpha.mydomain.io ident= [email protected] intl=0 id=EC7C2A51-41A1-48A7-BA9A-6CDF35C1916C.1 auth= msa=0 ]
Shark-Tank investors were shocked by this
Fri Feb 5 01:10:14 2016 [24935] info: prefork: child states: I
Fri Feb 5 01:57:07 2016 [24937] info: spamd: connection from localhost [127.0.0.1]:48104 to port 783, fd 5
Fri Feb 5 01:57:07 2016 [24937] info: spamd: using default config for spamd: /etc/spamassassin//user_prefs
Fri Feb 5 01:57:07 2016 [24937] info: spamd: checking message <qKakINQa5qyu_-bBHKgw6I8ER_RHcqE8Y7JWzJTFcc0.P6HwbM7lYctRCqm27HkqnA@thesequestion.top> for spamd:1002
Fri Feb 5 01:57:07 2016 [24937] dbg: check: pms new, time limit in 299.992 s
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag RELAYSUNTRUSTEDREVIP is now ready, value: 188.108.92.91
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag RELAYSEXTERNALREVIP is now ready, value: 188.108.92.91
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - action 0 blocking on tags DKIMDOMAIN
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag RELAYSTRUSTED is now ready, value:
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value: [ ip=91.92.108.188 rdns=thesequestion.top helo=thesequestion.top by=alpha.mydomain.com iden t= [email protected] intl=0 id=EC7C2A51-41A1-48A7-BA9A-6CDF35C1916C.1 auth= msa=0 ]
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag RELAYSINTERNAL is now ready, value:
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value: [ ip=91.92.108.188 rdns=thesequestion.top helo=thesequestion.top by=alpha.mydomain.com ident = [email protected] intl=0 id=EC7C2A51-41A1-48A7-BA9A-6CDF35C1916C.1 auth= msa=0 ]
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag LANGUAGES is now ready, value: <UNDEF>
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag URIHOSTS is now ready, value: vem.thesequestion.top
Fri Feb 5 01:57:07 2016 [24937] dbg: check: tagrun - tag URIDOMAINS is now ready, value: thesequestion.top
Fri Feb 5 01:57:07 2016 [24937] dbg: check: check_main, time limit in 299.947 s
Fri Feb 5 01:57:07 2016 [24937] dbg: check: running tests for priority: -1000
Fri Feb 5 01:57:07 2016 [24937] dbg: check: running tests for priority: -950
Fri Feb 5 01:57:07 2016 [24937] dbg: check: running tests for priority: -900
Fri Feb 5 01:57:07 2016 [24937] dbg: check: running tests for priority: -400
Fri Feb 5 01:57:07 2016 [24937] dbg: check: running tests for priority: 0
Fri Feb 5 01:57:08 2016 [24937] dbg: check: create_fulltext_tmpfile, written 35108 bytes to file /tmp/.spamassassin24937yAEcCatmp
Fri Feb 5 01:57:08 2016 [24937] dbg: check: tagrun - tag PYZOR is now ready, value: Reported 10 times.
Fri Feb 5 01:57:08 2016 [24937] dbg: check: running tests for priority: 500
Fri Feb 5 01:57:08 2016 [24937] dbg: check: tagrun - tag RBL is now ready, value: <dns:thesequestion.top> [104.27.136.28, 104.27.137.28]
Fri Feb 5 01:57:08 2016 [24937] dbg: check: is spam? score=3.535 required=5
Fri Feb 5 01:57:08 2016 [24937] dbg: check: tests=HTML_MESSAGE,POOR_DOMAIN,PYZOR_CHECK,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE,URIBL_BLOCKED
Fri Feb 5 01:57:08 2016 [24937] dbg: check: subtests=__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE,__BODY_TEXT_LINE,__BODY_TEXT_LINE,__COMMENT_EXISTS,__CR_IN_SUBJ,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIM_DEPENDABLE,__DOS_BODY_SAT,__DOS_DIRECT_TO_MX,__DOS_HAS_ANY_URI,__DOS_LINK,__DOS_RCVD_FRI,__DOS_SINGLE_EXT_RELAY,__ENV_AND_HDR_FROM_MATCH,__FB_NUM_PERCNT,__FIFTY_FIFTY,__FRAUD_PTS,__FRAUD_PTX,__HAS_ANY_URI,__HAS_DATE,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_TO,__HAS_URI,__HTML_FONT_TINY_01,__HTML_LINK_IMAGE,__HUSH_HUSH,__KHOP_NO_FULL_NAME,__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LCL__ENV_AND_HDR_FROM_MATCH,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_HOST,__NONEMPTY_BODY,__NOT_SPOOFED,__RDNS_NO_SUBDOM,__REMOTE_IMAGE,__RP_MATCHES_RCVD,__SANE_MSGID,__SINGLE_WORD_LINE,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPF_FULL_PASS,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TAG_EXISTS_STYLE,__TOCC_EXISTS,__TVD_MIME_ATT_TP
Fri Feb 5 01:57:08 2016 [24937] dbg: check: tagrun - tag REMOTEHOSTNAME is now ready, value: localhost
Fri Feb 5 01:57:08 2016 [24937] dbg: check: tagrun - tag REMOTEHOSTADDR is now ready, value: 127.0.0.1
Fri Feb 5 01:57:08 2016 [24937] info: spamd: clean message (3.5/5.0) for spamd:1002 in 0.7 seconds, 35108 bytes.
Fri Feb 5 01:57:08 2016 [24937] info: spamd: result: . 3 - HTML_MESSAGE,POOR_DOMAIN,PYZOR_CHECK,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS,T_REMOTE_IMAGE,URIBL_BLOCKED scantime=0.7,size=35108,user=spamd,uid=1002,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=48104,mid=<qKakINQa5qyu_-bBHKgw6I8ER_RHcqE8Y7JWzJTFcc0.P6HwbM7lYctRCqm27HkqnA@thesequestion.top>,autolearn=no autolearn_force=no
Fri Feb 5 01:57:08 2016 [24937] dbg: check: tagrun - tag DKIMDOMAIN is still blocking action 0
Fri Feb 5 03:54:40 2016 [5658] info: prefork: child states: I
Fri Feb 5 04:06:32 2016 [5660] info: spamd: connection from localhost [::1]:55390 to port 783, fd 6
Fri Feb 5 04:06:32 2016 [5660] info: spamd: using default config for root: /etc/spamassassin//user_prefs
Fri Feb 5 04:06:32 2016 [5660] info: spamd: checking message <qKakINQa5qyu_-bBHKgw6I8ER_RHcqE8Y7JWzJTFcc0.P6HwbM7lYctRCqm27HkqnA@thesequestion.top> for root:1002
Fri Feb 5 04:06:32 2016 [5660] dbg: check: pms new, time limit in 299.986 s
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag RELAYSUNTRUSTEDREVIP is now ready, value: 188.108.92.91
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag RELAYSEXTERNALREVIP is now ready, value: 188.108.92.91
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - action 0 blocking on tags DKIMDOMAIN
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag RELAYSTRUSTED is now ready, value: [ ip=127.0.0.1 rdns= helo=alpha.mydomain.com by=alpha.mydomain.com ident= envfrom= intl=1 id=1454633828-17132-27942/5/50 auth= msa=0 ]
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag RELAYSUNTRUSTED is now ready, value: [ ip=91.92.108.188 rdns=thesequestion.top helo=thesequestion.top by=alpha.mydomain.com ident= [email protected] intl=0 id=EC7C2A51-41A1-48A7-BA9A-6CDF35C1916C.1 auth= msa=0 ]
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag RELAYSINTERNAL is now ready, value: [ ip=127.0.0.1 rdns= helo=alpha.mydomain.com by=alpha.mydomain.com ident= envfrom= intl=1 id=1454633828-17132-27942/5/50 auth= msa=0 ]
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag RELAYSEXTERNAL is now ready, value: [ ip=91.92.108.188 rdns=thesequestion.top helo=thesequestion.top by=alpha.mydomain.com ident= [email protected] intl=0 id=EC7C2A51-41A1-48A7-BA9A-6CDF35C1916C.1 auth= msa=0 ]
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag LANGUAGES is now ready, value: <UNDEF>
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag URIHOSTS is now ready, value: vem.thesequestion.top
Fri Feb 5 04:06:32 2016 [5660] dbg: check: tagrun - tag URIDOMAINS is now ready, value: thesequestion.top
Fri Feb 5 04:06:32 2016 [5660] dbg: check: check_main, time limit in 299.930 s
Fri Feb 5 04:06:32 2016 [5660] dbg: check: running tests for priority: -1000
Fri Feb 5 04:06:32 2016 [5660] dbg: check: running tests for priority: -950
Fri Feb 5 04:06:32 2016 [5660] dbg: check: running tests for priority: -900
Fri Feb 5 04:06:32 2016 [5660] dbg: check: running tests for priority: -400
Fri Feb 5 04:06:32 2016 [5660] dbg: check: running tests for priority: 0
Fri Feb 5 04:06:33 2016 [5660] dbg: check: create_fulltext_tmpfile, written 37388 bytes to file /tmp/.spamassassin5660YCgp3Qtmp
Fri Feb 5 04:06:33 2016 [5660] dbg: check: tagrun - tag PYZOR is now ready, value: Reported 12 times.
Fri Feb 5 04:06:33 2016 [5660] dbg: check: running tests for priority: 500
Fri Feb 5 04:06:33 2016 [5660] dbg: check: tagrun - tag RBL is now ready, value: <dns:188.108.92.91.zen.spamhaus.org> [127.0.0.3]
Fri Feb 5 04:06:33 2016 [5660] dbg: check: [...] <dns:thesequestion.top> [104.27.137.28, 104.27.136.28]
Fri Feb 5 04:06:33 2016 [5660] dbg: check: [...] <dns:188.108.92.91.wl.mailspike.net> [127.0.0.19]
Fri Feb 5 04:06:33 2016 [5660] dbg: check: [...] <dns:188.108.92.91.bl.score.senderscore.com> [127.0.0.6]
Fri Feb 5 04:06:33 2016 [5660] dbg: check: is spam? score=11.717 required=5
Fri Feb 5 04:06:33 2016 [5660] dbg: check: tests=HTML_MESSAGE,POOR_DOMAIN,PYZOR_CHECK,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,RCVD_IN_RP_RNBL,RCVD_IN_SBL_CSS,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS,TVD_RCVD_IP,TVD_RCVD_IP4,T_REMOTE_IMAGE,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_SPAM
Fri Feb 5 04:06:33 2016 [5660] dbg: check: subtests=__ANY_TEXT_ATTACH,__ANY_TEXT_ATTACH_DOC,__BODY_TEXT_LINE,__BODY_TEXT_LINE,__BODY_TEXT_LINE,__COMMENT_EXISTS,__CR_IN_SUBJ,__CT,__CTYPE_HAS_BOUNDARY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIM_DEPENDABLE,__DOS_BODY_SAT,__DOS_DIRECT_TO_MX,__DOS_HAS_ANY_URI,__DOS_LINK,__DOS_RCVD_FRI,__DOS_SINGLE_EXT_RELAY,__ENV_AND_HDR_FROM_MATCH,__FB_NUM_PERCNT,__FIFTY_FIFTY,__FRAUD_PTS,__FRAUD_PTX,__HAS_ANY_URI,__HAS_DATE,__HAS_FROM,__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_RCVD,__HAS_SUBJECT,__HAS_TO,__HAS_URI,__HTML_FONT_TINY_01,__HTML_LINK_IMAGE,__HUSH_HUSH,__KHOP_NO_FULL_NAME,__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LCL__ENV_AND_HDR_FROM_MATCH,__LOCAL_PP_NONPPURL,__MIME_HTML,__MIME_QP,__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NAKED_TO,__NONEMPTY_BODY,__NOT_SPOOFED,__RCVD_IN_MSPIKE_L,__RCVD_IN_ZEN,__RDNS_NO_SUBDOM,__REMOTE_IMAGE,__RP_MATCHES_RCVD,__SANE_MSGID,__SINGLE_WORD_LINE,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPAN_BEG_TEXT,__SPF_FULL_PASS,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TAG_EXISTS_META,__TAG_EXISTS_STYLE,__TOCC_EXISTS,__TO_NO_ARROWS_R,__TO_NO_BRKTS_PCNT,__TVD_MIME_ATT_TP
Fri Feb 5 04:06:33 2016 [5660] info: spamd: identified spam (11.7/5.0) for root:1002 in 0.7 seconds, 37388 bytes.
Fri Feb 5 04:06:33 2016 [5660] info: spamd: result: Y 11 - HTML_MESSAGE,POOR_DOMAIN,PYZOR_CHECK,RCVD_IN_MSPIKE_H4,RCVD_IN_MSPIKE_WL,RCVD_IN_RP_RNBL,RCVD_IN_SBL_CSS,RP_MATCHES_RCVD,SPF_HELO_PASS,SPF_PASS,TVD_RCVD_IP,TVD_RCVD_IP4,T_REMOTE_IMAGE,URIBL_ABUSE_SURBL,URIBL_BLOCKED,URIBL_DBL_SPAM scantime=0.7,size=37388,user=root,uid=1002,required_score=5.0,rhost=localhost,raddr=::1,rport=55390,mid=<qKakINQa5qyu_-bBHKgw6I8ER_RHcqE8Y7JWzJTFcc0.P6HwbM7lYctRCqm27HkqnA@thesequestion.top>,autolearn=no autolearn_force=no
Fri Feb 5 04:06:33 2016 [5660] dbg: check: tagrun - tag DKIMDOMAIN is still blocking action 0
Fri Feb 5 04:06:33 2016 [5658] info: prefork: child states: I
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment