missing "X-Bogosity" line
David Relson
relson at osagesoftware.com
Sat Oct 26 01:46:14 CEST 2002
Greetings,
As happens several times a day, a spam message snuck past bogofilter. As I
moved it to my spam-fixups (for reprocessing via "bogofilter -S"), I
noticed that the message was missing its "X-Bogosity:" header.
Looking at my syslog I notice that the normal bogofilter log message is
also missing.
Here're the log entries for this message:
Oct 25 18:00:08 nic postfix/smtpd[30788]: connect from unknown[157.238.181.133]
Oct 25 18:00:08 nic postfix/smtpd[30788]: A2AF727EB8:
client=unknown[157.238.181.133]
Oct 25 18:00:09 nic postfix/cleanup[30790]: A2AF727EB8:
message-id=<20021025220008.A2AF727EB8 at example.com>
Oct 25 18:00:09 nic postfix/smtpd[30788]: disconnect from
unknown[157.238.181.133]
Oct 25 18:00:09 nic postfix/qmgr[23166]: A2AF727EB8:
from=<Dreammates at CHOICEOFFERS.VIRTUAL3.NET>, size=1847, nrcpt=1 (queue active)
Oct 25 18:00:11 nic postfix/local[30792]: A2AF727EB8:
to=<eric at example.com>, relay=local, delay=3, status=sent
("|/usr/bin/procmail -Y -a $DOMAIN")
Here're the normal log entries for the next email that came in. Notice it
_does_ have the bogofilter message:
Oct 25 18:02:26 nic postfix/smtpd[30910]: connect from
cpe-24-221-90-238.mi.example.net[24.221.90.238]
Oct 25 18:02:27 nic postfix/smtpd[30910]: EAB3627EB8:
client=cpe-24-221-90-238.mi.example.net[24.221.90.238]
Oct 25 18:02:27 nic postfix/cleanup[30911]: EAB3627EB8:
message-id=<3DB9BEE7.101 at example.net>
Oct 25 18:02:27 nic postfix/qmgr[23166]: EAB3627EB8:
from=<mdlug-return-6031-relson=example.com at mdlug.org>, size=1811, nrcpt=1
(queue active)
Oct 25 18:02:27 nic postfix/smtpd[30910]: disconnect from
cpe-24-221-90-238.mi.example.net[24.221.90.238]
Oct 25 18:02:28 nic bogofilter[30915]: X-Bogosity: No, spamicity=0.000000,
version=0.7.5-1024.0711, register-n, 180 words, 1 messages
Oct 25 18:02:28 nic postfix/local[30912]: EAB3627EB8:
to=<relson at example.com>, relay=local, delay=1, status=sent
("|/usr/bin/procmail -Y -a $DOMAIN")
One coincidence I noticed is that the message came in at 18:00:09 and every
hour I run a script to do spam-fixups, i.e. feed mis-classified messages
back into the wordlists. One of the script's actions is to dump the
wordlists (using bogofilter). I often notice the script running because I
hear the server's disk running for a while (multiple seconds).
Could there be a locking issue?
Has anyone else noticed messages missing expected "X-Bogosity" lines?
Cheers!
--------------------------------------------------------
David Relson Osage Software Systems, Inc.
relson at osagesoftware.com Ann Arbor, MI 48103
www.osagesoftware.com tel: 734.821.8800
More information about the bogofilter-dev
mailing list