с марта месяца стоит связка drweb+spamassassin+sendmail
все хорошо , ну вот с месяц назад начал пропускать спам приличным обьемом, т.е. вроде как работает отлавливает но процент пропущенных резко поднялся. причем скармливаю в спам а он опять пропускает , что могло произойти
local.cf
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
###########################################################################
#
#rewrite_header Subject *****SPAM*****
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
bayes_auto_learn_threshold_nonspam 0.1
bayes_auto_learn_threshold_spam 10.0
score FROM_ILLEGAL_CHARS 1.5
score HEAD_ILLEGAL_CHARS 1.5
score SUBJ_ILLEGAL_CHARS 1.5
AL_CHARS 1.5ASES 2.5
score NO_REAL_NAME 1.0
score PENIS_ENLARGE 3.5
score PENIS_ENLARGE2 3.5
score FROM_HAS_MIXED_NUMS 1.0
score FORGET_IMS_TAGS 0.5
score FORGET_MUA_OUTLOOK 0.5
score FORGET_OUTLOOK_TAGS 0.5
score HABEAS_SWE 0.0
score BAYES_00 -9.8
score BAYES_01 -3.048
score BAYES_10 -1.816
score BAYES_20 -2.856
score BAYES_30 -1.808
score BAYES_40 -0.002
score BAYES_44 -0.002
score BAYES_50 0.002
score BAYES_56 0.002
score BAYES_60 3.184
score BAYES_70 4.51
score BAYES_80 3.5
score BAYES_90 4.202
score BAYES_99 10.8
use_razor2 0
use_dcc 0
use_pyzor 0
# check rdl
skip_rbl_checks 0
# autowhitelist
use_auto_whitelist 1
auto_whitelist_path /var/spool/filter/.spamassassin/auto_whitelist
# bayes
use_bayes 1
bayes_path /var/spool/filter/.spamassassin/
auto_learn 1
ok_languages en ru
ok_locales en ru
# rewrite subject
#rewrite_subject 1
#subject_tag *SPAM*_HITS_ points* :
rewrite_header Subject *****SPAM*****_HITS_ points* :
required_hits 3.5
report_charset koi8-r
allow_user_rules 0
clear_report_template
report This message has identified this incoming email as possible spam.
report
report Content preview: _PREVIEW_
report
report Content analysis details: (_HITS_ points, _REQD_ required, _BAYES_ bayes score)
report
report pts rule name description
report ---- ---------------------- --------------------------------------------------
report _SUMMARY_
clear_unsafe_report_template
# network whitelist
#whitelist_from localhost
#whitelist_to
spam@mycompany.ru
#blacklist_to
resumenk@narod.ru
[root@ /usr/local/samba/sbin]# pss | grep spam
smmsp 635 0,0 0,1 1852 908 con- S 28╤╬╫06 0:40,81 /usr/local/sb
in/milter-spamc -B
spam@domain.com -s SPAM -S unix
filter 20000 0,0 2,3 24156 23568 ?? Is 13:39 0:01,59 /usr/local/b
in/spamd -d -x -u filter (perl5.00503)
root 20001 0,0 2,5 27164 26548 ?? I 13:39 0:02,45 spamd child
(perl5.00503)
root 20002 0,0 2,5 26948 26296 ?? I 13:39 0:02,18 spamd child
(perl5.00503)
root 20003 0,0 2,4 25740 25168 ?? I 13:39 0:01,78 spamd child
(perl5.00503)
root 20004 0,0 2,6 27420 26636 ?? I 13:39 0:03,90 spamd child
(perl5.00503)
root 20005 0,0 2,5 26880 26132 ?? I 13:39 0:02,39 spamd child
(perl5.00503)
spamassassin -D --lint
debug: SpamAssassin version 3.0.2
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/usr/games', keeping.
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/usr/X11R6/bin', keeping.
debug: PATH included '/home/sashka/bin', which doesn't exist, dropping.
debug: PATH included '/usr/local/pgsql/bin', keeping.
debug: Final PATH set to: /sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/usr/X11R6/bin:/usr/local/pgsql/bin
debug: diag: module installed: DBI, version 1.34
debug: diag: module installed: DB_File, version 1.810
debug: diag: module installed: Digest::SHA1, version 2.10
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.05
debug: diag: module installed: Net::DNS, version 0.48
debug: diag: module installed: Net::LDAP, version 0.32
debug: diag: module not installed: Razor2::Client::Agent ('require' failed)
debug: diag: module installed: Storable, version 2.13
debug: diag: module installed: URI, version 1.35
debug: ignore: using a test message to lint rules
debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/mail/spamassassin/init.pre
debug: using "/usr/local/share/spamassassin" for default rules dir
debug: config: read file /usr/local/share/spamassassin/10_misc.cf
debug: config: read file /usr/local/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/local/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_compensate.cf
debug: config: read file /usr/local/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_drugs.cf
debug: config: read file /usr/local/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/local/share/spamassassin/20_phrases.cf
debug: config: read file /usr/local/share/spamassassin/20_porn.cf
debug: config: read file /usr/local/share/spamassassin/20_ratware.cf
debug: config: read file /usr/local/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/local/share/spamassassin/23_bayes.cf
debug: config: read file /usr/local/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/local/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/local/share/spamassassin/25_spf.cf
debug: config: read file /usr/local/share/spamassassin/25_uribl.cf
debug: config: read file /usr/local/share/spamassassin/30_text_de.cf
debug: config: read file /usr/local/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/local/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/local/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/local/share/spamassassin/50_scores.cf
debug: config: read file /usr/local/share/spamassassin/60_whitelist.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file /etc/mail/spamassassin/local.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x85126f0)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cc118c)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8c9a0d4)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x85126f0) implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cc118c) implements 'parse_config'
config: SpamAssassin failed to parse line, skipping: AL_CHARS 1.5ASES 2.5
config: SpamAssassin failed to parse line, skipping: auto_learn 1
debug: Not allowing user rules!
warning: score set for non-existent rule PENIS_ENLARGE2
warning: score set for non-existent rule BAYES_90
warning: score set for non-existent rule BAYES_01
warning: score set for non-existent rule BAYES_56
warning: score set for non-existent rule BAYES_10
warning: score set for non-existent rule FORGET_OUTLOOK_TAGS
warning: score set for non-existent rule BAYES_30
warning: score set for non-existent rule FORGET_IMS_TAGS
warning: score set for non-existent rule BAYES_70
warning: score set for non-existent rule FORGET_MUA_OUTLOOK
warning: score set for non-existent rule HABEAS_SWE
warning: score set for non-existent rule BAYES_44
warning: score set for non-existent rule PENIS_ENLARGE
debug: bayes: 24591 tie-ing to DB file R/O /var/spool/filter/.spamassassin/_toks
debug: bayes: 24591 tie-ing to DB file R/O /var/spool/filter/.spamassassin/_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 24591 untie-ing
debug: bayes: 24591 untie-ing db_toks
debug: bayes: 24591 untie-ing db_seen
debug: Score set 1 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: bayes: 24591 tie-ing to DB file R/O /var/spool/filter/.spamassassin/_toks
debug: bayes: 24591 tie-ing to DB file R/O /var/spool/filter/.spamassassin/_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 24591 untie-ing
debug: bayes: 24591 untie-ing db_toks
debug: bayes: 24591 untie-ing db_seen
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: decoding: no encoding detected
debug: Loading languages file...
debug: Language possibly: en,sco
debug: metadata: X-Languages: en sco
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x85126f0) implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: trying (3) yahoo.com...
debug: looking up NS for 'yahoo.com'
debug: NS lookup of yahoo.com succeeded => Dns available (set dns_available to hardcode)
debug: is DNS available? 1
debug: URIDNSBL: domains to query:
debug: all '*From' addrs:
ignore@compiling.spamassassin.taint.org
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cc118c))
debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c9a0d4))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8cc118c))
debug: all '*To' addrs:
debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c9a0d4))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c9a0d4))
debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c9a0d4))
debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c9a0d4))
debug: running body-text per-line regexp tests; score so far=-1.801
debug: running uri tests; score so far=-1.801
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x85126f0))
debug: bayes: 24591 tie-ing to DB file R/O /var/spool/filter/.spamassassin/_toks
debug: bayes: 24591 tie-ing to DB file R/O /var/spool/filter/.spamassassin/_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: not scoring message, returning undef
debug: bayes: 24591 untie-ing
debug: bayes: 24591 untie-ing db_toks
debug: bayes: 24591 untie-ing db_seen
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x85126f0) implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=-1.801
debug: running full-text regexp tests; score so far=-1.801
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x85126f0) implements 'check_post_dnsbl'
debug: running meta tests; score so far=-1.801
debug: running header regexp tests; score so far=-0.231
debug: running body-text per-line regexp tests; score so far=-0.231
debug: running uri tests; score so far=-0.231
debug: running raw-body-text per-line regexp tests; score so far=-0.231
debug: running full-text regexp tests; score so far=-0.231
debug: Running tests for priority: 1000
debug: running meta tests; score so far=-0.231
debug: running header regexp tests; score so far=-0.231
debug: lock: 24591 created /var/spool/filter/.spamassassin/auto_whitelist.lock.soft-ua.com.24591
debug: lock: 24591 trying to get lock on /var/spool/filter/.spamassassin/auto_whitelist with 0 retries
debug: lock: 24591 link to /var/spool/filter/.spamassassin/auto_whitelist.lock: link ok
debug: Tie-ing to DB file R/W in /var/spool/filter/.spamassassin/auto_whitelist
debug: auto-whitelist (db-based):
ignore@compiling.spamassassin.taint.org|ip=none scores 0/0
debug: AWL active, pre-score: -0.231, autolearn score: -0.231, mean: undef, IP: undef
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 24591 unlink /var/spool/filter/.spamassassin/auto_whitelist.lock
debug: Post AWL score: -0.231
debug: running body-text per-line regexp tests; score so far=-0.231
debug: running uri tests; score so far=-0.231
debug: running raw-body-text per-line regexp tests; score so far=-0.231
debug: running full-text regexp tests; score so far=-0.231
debug: is spam? score=-0.231 required=3.5
debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__UNUSABLE_MSGID
lint: 15 issues detected. please rerun with debug enabled for more information.
из заголовка :
Subject: =?Windows-1251?Q?=D3=EFpa=E2=EBe=ED=E8=E5_=EFep=F1=EE=ED=E0=EB=EE=EC?=
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------e92033200178665"
X-Spam-Flag: NO
X-Scanned-By: milter-spamc/0.25.321 (soft-ua.com [195.184.201.34]); Mon, 06 Feb 2006 13:57:06 +0200
X-Spam-Status: NO, hits=0.30 required=3.50
X-Spam-Level:
X-UIDL: )1_!!#]V"!aiO"!!o-!!
на чистый спам выставляет низкий hits=0.30 , как вылечить?
Спасибо.