It appears that load-sa-rules.pl is not loading all the
rules.
I saw this due to differences in scores on web front end
& in the email, I
checked the logs to see the rules triggered and they're
missing from the db.
The ones I have tracked down are Fred's rules from
rulesemporium.
88_FVGT_headers has many rules, but you can see the script
only recognise 3
of them and updates the scores of 2.
Final excerpt from the rules file shows the rules surounding
HELO_EQ_IP_ADDR
that are not in the database. (there are many others missng
too)
I emptied the maia_sa_rules table and reloaded the rules to
confirm.
Cheers
Mike
Load-sa-rules.pl version from the trunk source
http
s://secure.renaissoft.com/maia/browser/trunk rev 994
SpamAssassin version 3.1.1 running on Perl version 5.8.5
Centos 4.3
Mysql 4.1.12 seperate server
http://w
ww.rulesemporium.com/other-rules.htm
http://www.rulesemporium.com/rules/88_FVGT_headers.cf
2006-07-28 13:56:50 Maia: [load-sa-rules] Checking
/etc/mail/spamassassin/88_FVGT_body.cf for new rules...
2006-07-28 13:56:50 Maia: [load-sa-rules] 0 new rules added,
0 existing
rules skipped.
2006-07-28 13:56:50 Maia: [load-sa-rules] Checking
/etc/mail/spamassassin/88_FVGT_headers.cf for new rules...
2006-07-28 13:56:50 Maia: [load-sa-rules] Skipping existing
rule:
FH_RELAY_NODNS
2006-07-28 13:56:50 Maia: [load-sa-rules] Skipping existing
rule:
HELO_EQ_IP_ADDR
2006-07-28 13:56:50 Maia: [load-sa-rules] Skipping existing
rule:
FH_FROM_HINET
2006-07-28 13:56:50 Maia: [load-sa-rules] 0 new rules added,
3 existing
rules skipped.
2006-07-28 13:56:53 Maia: [load-sa-rules] Checking
/etc/mail/spamassassin/88_FVGT_body.cf for updated scores...
2006-07-28 13:56:53 Maia: [load-sa-rules] Checking
/etc/mail/spamassassin/88_FVGT_headers.cf for updated
scores...
2006-07-28 13:56:53 Maia: [load-sa-rules] Updating
HELO_EQ_IP_ADDR [
1.119] [ 1.119] [ 1.119] [ 1.119]
2006-07-28 13:56:53 Maia: [load-sa-rules] Updating
FH_FROM_HINET [
0.525] [ 0.525] [ 0.525] [ 0.525]
2006-07-28 13:56:53 Maia: [load-sa-rules] Checking
/etc/mail/spamassassin/88_FVGT_subject.cf for updated
scores...
2006-07-28 13:56:53 Maia: [load-sa-rules] Updating
FS_LARGE_DOLLAR [
0.549] [ 0.549] [ 0.549] [ 0.549]
2006-07-28 13:56:53 Maia: [load-sa-rules] Updating
FS_LARGE_DOLLAR2 [
0.209] [ 0.209] [ 0.209] [ 0.209]
2006-07-28 13:56:53 Maia: [load-sa-rules] Checking
/etc/mail/spamassassin/88_FVGT_uri.cf for updated scores...
Excerpt from 88_FVGT_headers.cf
header HELO_EQ_INTERBUSNESS X-Spam-Relays-Untrusted =~
/^[^\]]+
helo=host.{5,13}\.pool.{5,13}\.interbusiness\.it /
score HELO_EQ_INTERBUSNESS 1.111
#counts HELO_EQ_INTERBUSNESS 14s/0h of 41789 corpus
(34114s/7675h FVGT)
04/06/06
header HELO_EQ_IP_192_168 X-Spam-Relays-Untrusted =~
/^[^\]]+
helo=192\.168\.\d{1,3}\.\d{1,3}/
score HELO_EQ_IP_192_168 0.853
#counts HELO_EQ_IP_192_168 196s/0h of 41684 corpus
(34086s/7598h FVGT)
03/27/06
header HELO_EQ_IP_ADDR X-Spam-Relays-Untrusted =~
/^[^\]]+
helo=\!?(?!(?:127\.0\.0\.1|192\.168\.|10\.))\d{1,3}
.\d{1,3}\.\d{1,3}\.\d{1,
3}/
describe HELO_EQ_IP_ADDR HELO using IP Address (not
private)
score HELO_EQ_IP_ADDR 1.119
#counts HELO_EQ_IP_ADDR 6221s/9h of 54920 corpus
(47340s/7580h FVGT)
03/25/06
header HELO_EQ_IT X-Spam-Relays-Untrusted =~
/^[^\]]+ helo=[^
]+\.it /i
score HELO_EQ_IT 0.635
#counts HELO_EQ_IT 87s/0h of 41686 corpus
(34078s/7608h FVGT)
03/27/06
header HELO_EQ_JP X-Spam-Relays-Untrusted =~
/^[^\]]+ helo=[^
]+\.jp /i
score HELO_EQ_JP 1.244
#counts HELO_EQ_JP 203s/0h of 41722 corpus
(34113s/7609h FVGT)
03/27/06
_______________________________________________
Maia-users mailing list
Maia-users renaissoft.com
http://www.renaissoft.com/mailman/listinfo/maia-users
|