| Summary: | Spamass-milter/postfix accepts some spam messages as ham | ||
|---|---|---|---|
| Product: | [Fedora] Fedora | Reporter: | Lars Bjorndal <lars> |
| Component: | spamass-milter | Assignee: | Paul Howarth <paul> |
| Status: | CLOSED NOTABUG | QA Contact: | Fedora Extras Quality Assurance <extras-qa> |
| Severity: | medium | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 23 | CC: | paul |
| Target Milestone: | --- | ||
| Target Release: | --- | ||
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2016-10-13 16:06:53 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
|
Description
Lars Bjorndal
2016-09-30 14:44:19 UTC
(In reply to Lars Bjorndal from comment #0) > Description of problem: I'm in process on moving from using postfix and > spamassassin through amavisd-new to spamassassin through spamass-milter. > After enabling spamass-milter and before removeing amavisd, I notice that > some mail messages still is cought by amavisd. > > To demonstrate the problem, I paste the headers of a message in question, > where I've replaced the actual local user by testuser. > ... > X-Spam-Status: Yes, score=8.295 tag=2 tag2=6.2 kill=6.9 > tests=[DKIM_SIGNED=0.1, HTML_IMAGE_ONLY_24=1.282, HTML_MESSAGE=0.001, > MIME_HTML_ONLY=1.105, RAZOR2_CF_RANGE_51_100=0.365, > RAZOR2_CF_RANGE_E8_51_100=2.43, RAZOR2_CHECK=1.729, RDNS_NONE=1.274, > SPF_PASS=-0.001, T_DKIM_INVALID=0.01] autolearn=no autolearn_force=no ... > Received: from relay578.mysmtp.mobi (unknown [93.90.122.170]) > by dalen.lamasti.net (Postfix) with ESMTP id 7328B2403B > for <testuser>; Fri, 30 Sep 2016 09:55:01 +0200 (CEST) ... > X-Spam-Status: Yes, score=6.8 required=5.0 tests=DKIM_SIGNED,DKIM_VALID, > DKIM_VALID_AU,HTML_IMAGE_ONLY_24,HTML_MESSAGE,MIME_HTML_ONLY, > RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,SPF_PASS > autolearn=no autolearn_force=no version=3.4.1 > X-Spam-Report: > * -0.0 SPF_PASS SPF: sender matches SPF record > * 1.1 MIME_HTML_ONLY BODY: Message only has text/html MIME parts > * 0.0 HTML_MESSAGE BODY: HTML included in message > * 1.3 HTML_IMAGE_ONLY_24 BODY: HTML: images with 2000-2400 bytes of words > * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature > * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's > * domain > * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily > * valid > * 0.4 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50% > * [cf: 100] > * 1.7 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) > * 2.4 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level > * above 50% > * [cf: 100] ... > As you can see, there is two different score values from spamassassin. As I > understand, one with score 8.x from spamassassin through amavisd and 6.x > from spamassassin through spamass-milter. Looking at the individual spamassassin scores from amavisd and spamass-milter, most of the difference (1.274) comes from the RDNS_NONE rule. This appears to have been due to a temporary name resolution error, as the spamass-milter invocation didn't have this problem and the IP address 93.90.122.170 does resolve back to relay263.mysmtp.mobi for me now. The other 0.2 of score difference came from spamass-milter being able to validate the sender's DKIM signature, whereas amavis could not (the "OpenSSL error: data too large for modulus" message in the Authentication-Results: header may be related to this). So I don't think spamass-milter is doing anything wrong here, and in fact the problems are on the amavis side, causing it to score the message as more spammy that it actually is. > I don't know if this is related, but when spamass-milter starts with the > debug flag, I get the following message: > > Code: > Could not retrieve sendmail macro "i". Please add it to > confMILTER_MACROS_ENVFROM for better spamassassin results > > > Postconf |grep milter_connect_macro outputs > > Code: > milter_connect_macros = j {daemon_name} v {if_name} _ > > > I tried to insert an "i" into this line, at the beginning, but that didn't > change anything. There's some discussion of that here: https://bugzilla.redhat.com/show_bug.cgi?id=1368645 I'm inclined to close this as NOTABUG; any objections? |