Bug 2179 - A spam email slipped through AND doesn't have SpamAssassin-headers in it
Summary: A spam email slipped through AND doesn't have SpamAssassin-headers in it
Status: RESOLVED WORKSFORME
Alias: None
Product: Spamassassin
Classification: Unclassified
Component: spamassassin (show other bugs)
Version: 2.55
Hardware: Other Solaris
: P5 critical
Target Milestone: 2.70
Assignee: SpamAssassin Developer Mailing List
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-07-02 01:32 UTC by Arno
Modified: 2003-07-03 04:01 UTC (History)
0 users


Attachment Type Modified Status Actions Submitter/CLA Status
The message that doesn't have any spamassassin-headers message/rfc822 None Arno [NoCLA]
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Arno 2003-07-02 01:32:03 UTC 
I received an email from, what appears to be "ibm.com" (obviously spoofed), and
its 100% certain. The odd thing is that it didn't get tagged as spam, but the
normal SpamAssassin-headers (like spam-level etc...) are also missing, as if
SpamAssassin never even saw the file. I can put a sample of the email (but I
don't whether i can upload attachments at this point else I'll put it on my ftp).
Comment 1 Arno 2003-07-02 01:34:02 UTC 
Created attachment 1120 [details]
The message that doesn't have any spamassassin-headers
Comment 2 Arno 2003-07-03 03:19:06 UTC 
It happened again: I received several spam-emails (4), they are all tagged as 
spam except for one which (again) doesn't even have the SpamAssassin (X) headers 
in the message. I do think this is a serieus bug, as somehow the spammer as able 
to disable SpamAssassin for his messages.
Comment 3 Theo Van Dinter 2003-07-03 08:16:41 UTC 
do _NOT_ change the milestone on bugs unless you're a developer.
Comment 4 Theo Van Dinter 2003-07-03 08:18:42 UTC 
Works fine for me:

X-Spam-Status: Yes, hits=24.7 required=5.0 tests=BAYES_99,CLICK_BELOW
        CLICK_TO_REMOVE_2,DCC_CHECK,HTML_80_90,HTML_FONTCOLOR_GRAY
        HTML_IMAGE_AREA_06,HTML_IMAGE_ONLY_02,HTML_IMAGE_RATIO_02
        HTML_LINK_CLICK_HERE,HTML_MESSAGE,HTML_WITH_BGCOLOR,MAILTO_LINK
        MANY_EXCLAMATIONS,MIME_BASE64_NO_NAME,MIME_BASE64_TEXT,MIME_HTML_ONLY
        MISSING_MIMEOLE,MSGID_FROM_MTA_SHORT,PLING_PLING,PRIORITY_NO_NAME
        RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET
        RCVD_IN_DSBL,RCVD_IN_NJABL,RCVD_IN_NJABL_PROXY,RCVD_IN_OSIRU
        RCVD_IN_OSIRU_SPAMWARE,RCVD_IN_RFCI,RCVD_IN_SBL,RCVD_IN_SORBS
        RCVD_IN_SORBS_HTTP,RCVD_IN_SORBS_MISC,SUBJ_FREE_CAP autolearn=spam
        version=2.60-cvs
Comment 5 Justin Mason 2003-07-03 12:01:57 UTC 
this is almost definitely a problem with whatever mechanism you're using to run
spamassassin; if spamc cannot connect to spamd, it passes the message straight
through without modifications.

I would suggest checking your /var/log/messages or any other log files from
whatever system you're using to run SA (spamc/spamd, procmail, milter, Amavis,
whatever.)