fchan ybmjpmolsciorg hello complete sample without link apacheorg bounced message due spam content logs relevant message targztgz message hopefully pass spam filter message returnpath deliveredto ybmjpmolsciorg xspamstatus hits required messageid 20a13601c86ff164a2c7106400a8c0acerdac357703e rita gore cc subject size genetics warning date fri 15 feb 2008 173926 0100 contenttype textplain formatflowed replytypeoriginal contenttransferencoding 7bit gain 35 inches length 100 safe take side effects qmailqueuelog fri 15 feb 2008 083954 pst21158 sa finished scan 50013946 secs hits fri 15 feb 2008 083954 pst21158 p_s finished scan 0007968 secs fri 15 feb 2008 083954 pst21158 ini_sc finished scan varspoolqmailscantmps1molsciorg120309354376421158 fri 15 feb 2008 083954 pst21158 process 21158 finished total 50174236 secs fri 15 feb 2008 083955 pst21298 starting debugging process 21298 ppid21271 uid509 fri 15 feb 2008 083955 pst21298 c_a_g found url message maybe phishy better scan fri 15 feb 2008 083955 pst21298 w_c total time data command 0000196 secs fri 15 feb 2008 083955 pst21298 w_c elapsed time start 0000177 secs fri 15 feb 2008 083955 pst21298 g_e_h returnpathvitymjmakzwupeajvitanalogzonecom recipsvqxmolsciorgfchanmolsciorgadlimolsciorgftpfprotmolsciorgecpqwukmolsciorg fri 15 feb 2008 083955 pst21298 fromrita gore subjsize genetics warning via smtp 7926135208 fri 15 feb 2008 083955 pst21298 clamdscan finished scan 0014551 secs fri 15 feb 2008 084045 pst21298 sa finished scan 50020665 secs hits fri 15 feb 2008 084046 pst21298 p_s finished scan 000844500000000004 secs fri 15 feb 2008 084046 pst21298 ini_sc finished scan varspoolqmailscantmps1molsciorg120309359576421298 fri 15 feb 2008 084046 pst21298 process 21298 finished total 50133095 secs notices also right message fri 15 feb 2008 084045 pst21298 sa finished scan 50020665 secs hits fri 15 feb 2008 084046 pst21298 p_s finished scan 000844500000000004 secs fri 15 feb 2008 084046 pst21298 ini_sc finished scan varspoolqmailscantmps1molsciorg120309359576421298 fri 15 feb 2008 084046 pst21298 process 21298 finished total 50133095 secs fri 15 feb 2008 084046 pst21299 sa finished scan 5001334 secs hits fri 15 feb 2008 084046 pst21299 p_s finished scan 0009365 secs fri 15 feb 2008 084046 pst21299 ini_sc finished scan varspoolqmailscantmps1molsciorg120309359676421299 fri 15 feb 2008 084046 pst21299 process 21299 finished total 50215451 secs fri 15 feb 2008 084101 pst21376 sa finished scan 50061759 secs hits fri 15 feb 2008 084101 pst21376 p_s finished scan 0102243 secs fri 15 feb 2008 084101 pst21376 ini_sc finished scan varspoolqmailscantmps1molsciorg120309361076421376 fri 15 feb 2008 084102 pst21376 process 21376 finished total 50796067 secs fri 15 feb 2008 084102 pst21395 sa finished scan 50014535 secs hits fri 15 feb 2008 084102 pst21395 p_s finished scan 0008081 secs fri 15 feb 2008 084102 pst21395 ini_sc finished scan varspoolqmailscantmps1molsciorg120309361276421395 fri 15 feb 2008 084102 pst21391 sa finished scan 50102585 secs hits fri 15 feb 2008 084102 pst21391 p_s finished scan 0012847 secs fri 15 feb 2008 084103 pst21391 ini_sc finished scan varspoolqmailscantmps1molsciorg120309361276421391 fri 15 feb 2008 084103 pst21395 process 21395 finished total 50430792 secs fri 15 feb 2008 084103 pst21391 process 21391 finished total 50258332 secs fri 15 feb 2008 084103 pst21538 starting debugging process 21538 ppid21529 uid509 fri 15 feb 2008 084106 pst21406 sa finished scan 50016036 secs hits fri 15 feb 2008 084106 pst21406 p_s finished scan 0008182 secs fri 15 feb 2008 084106 pst21406 ini_sc finished scan varspoolqmailscantmps1molsciorg120309361376421406 fri 15 feb 2008 084107 pst21406 process 21406 finished total 5081682 secs maillog period time feb 15 083839 s1 spamd19278 spamd checking message 000701c87009012e9d458856k222arwld qscand510 feb 15 084047 s1 spamd19278 spamd identified spam 44985 qscand510 1276 seconds 2091 bytes feb 15 084047 s1 spamd19278 spamd result 44 bayes_99botnetdos_oe_to_mxdrugs_erectiledrugs_erectile_obfufb_cialis_leo3fb_p1llfh_helo_eq_d_d_d_dfuzzy_cpillfuzzy_priceshelo_dynamic_hcchelo_dynamic_ipaddr2html_messagerazor2_cf_range_51_100razor2_cf_range_e8_51_100razor2_checkrcvd_in_bl_spamcop_netrcvd_in_pblrcvd_in_xblrdns_dynamicsubject_drug_gap_ctvd_rcvd_ipuribl_blackuribl_jp_surbluribl_ob_surbluribl_sbluribl_sc_surbluribl_ws_surbl scantime1276size2091userqscanduid510required_score85rhostlocalhostlocaldomainraddr127001rport54630mid000701c87009012e9d458856k222arwldbayes1000000autolearnspam feb 15 084047 s1 spamd30645 prefork child states bb feb 15 084047 s1 spamd30645 spamd server successfully spawned child process pid 21505 feb 15 084047 s1 spamd19278 spamd connection localhostlocaldomain 127001 port 54631 feb 15 084047 s1 spamd21505 spamd connection localhostlocaldomain 127001 port 54632 feb 15 084047 s1 spamd19278 spamd checking message 000501c86ff104c27ff7768m3qkhhmteb qscand510 feb 15 084047 s1 spamd30645 prefork child states bbb feb 15 084047 s1 spamd30645 spamd server successfully spawned child process pid 21506 feb 15 084047 s1 spamd21505 spamd checking message 000401c86ff1052d8315nxcrt53ldlbwdqwt qscand510 feb 15 084047 s1 spamd21506 spamd connection localhostlocaldomain 127001 port 54633 feb 15 084047 s1 spamd30645 prefork child states bbbb feb 15 084047 s1 spamd30645 spamd server successfully spawned child process pid 21507 feb 15 084047 s1 spamd21506 spamd checking message 44a8r2098127239groupeafdcom qscand510 feb 15 084047 s1 spamd30645 prefork child states bbbbb feb 15 084047 s1 spamd30645 prefork server reached maxchildren setting consider raising feb 15 084047 s1 spamd21507 spamd connection localhostlocaldomain 127001 port 54634 feb 15 084048 s1 spamd21507 spamd checking message 82w5p80m8345728abnamrocom qscand510 feb 15 084050 s1 spamd19278 spamd identified spam 32785 qscand510 32 seconds 828 bytes feb 15 084050 s1 spamd19278 spamd result 32 bayes_99botnetdos_oe_to_mxfh_helo_eq_d_d_d_dhelo_dynamic_hcchelo_dynamic_ipaddr2no_dns_for_fromrcvd_in_pblrdns_dynamictvd_rcvd_ipuribl_ab_surbluribl_blackuribl_jp_surbluribl_ob_surbluribl_ws_surbl scantime32size828userqscanduid510required_score85rhostlocalhostlocaldomainraddr127001rport54631mid000501c86ff104c27ff7768m3qkhhmtebbayes1000000autolearnspam feb 15 084050 s1 spamd30645 prefork child states bbbbb feb 15 084050 s1 spamd30645 prefork server reached maxchildren setting consider raising feb 15 084050 s1 spamd19278 spamd connection localhostlocaldomain 127001 port 54635 feb 15 084050 s1 spamd19278 spamd checking message 305914871623528330h914u7mx1egenomewebcom qscand510feb 15 084051 s1 spamd21505 spamd identified spam 26285 qscand510 43 seconds 863 bytes feb 15 084051 s1 spamd21505 spamd result 26 bayes_99botnetdos_oe_to_mxfh_helo_almost_iphelo_dynamic_dhcprcvd_in_sorbs_dulrdns_dynamicspf_failuribl_ab_surbluribl_blackuribl_jp_surbluribl_ob_surbluribl_ws_surbl scantime43size863userqscanduid510required_score85rhostlocalhostlocaldomainraddr127001rport54632mid000401c86ff1052d8315nxcrt53ldlbwdqwtbayes1000000autolearnspam feb 15 084052 s1 spamd30645 prefork child states bbbbb feb 15 084052 s1 spamd30645 prefork server reached maxchildren setting consider raising itfeb 15 084052 s1 spamd21505 spamd connection localhostlocaldomain 127001 port 54636feb 15 084052 s1 spamd21505 spamd checking message 000c01c8719404a29446k7883e67dcwbdbb qscand510feb 15 084053 s1 spamd21506 spamd identified spam 35185 qscand510 60 seconds 772 bytes feb 15 084053 s1 spamd21506 spamd result 35 bayes_99botnetdigest_multiplepyzor_checkrazor2_cf_range_51_100razor2_cf_range_e4_51_100razor2_cf_range_e8_51_100razor2_checkrcvd_in_bl_spamcop_netrcvd_in_xblrdns_nonesubj_pilluribl_ab_surbluribl_blackuribl_jp_surbluribl_ob_surbluribl_sc_surbluribl_ws_surbl scantime60size772userqscanduid510required_score85rhostlocalhostlocaldomainraddr127001rport54633mid47b5c0192042888groupeafdcombayes1000000autolearnspam feb 15 084053 s1 spamd30645 prefork child states bbbbb noticed maxchildern setting reached spamd option setting set default spamd configuration spamdoptionsd c maxchildren20 h spamd_pidvarrunspamdpid maxchildern setting set sever fairly powerful two 3ghz 4gb ram running redhat linux 5 information need since im keeping message solve strange annoying issue occurs 2050 800010000 messages get day thank frank hello sample message got link message got spam score also appears message links without links get score however appears investigating links thank frank returnpath deliveredto ybmjpmolsciorg xspamstatus hits1040 required85 mailinglist contact thpqhjmvzspamassassinapacheorg run ezmlm listhelp listunsubscribe listpost listid deliveredto mailing list zqoqispamassassinapacheorg xasfspamstatus hits12 required100 testsspf_neutral xspamcheckby apacheorg subject getting spam scores karsten brckelmann zqoqispamassassinapacheorg contenttype textplain date sat 09 feb 2008 041440 0100 messageid 8595785860907245azvttmonkeyloc contenttransferencoding 7bit xviruschecked checked clamav apacheorg please resist urge top post including unnecessary full quotes also makes answering questions much easier fri 20080208 1645 0800 fchan wrote thank check dns appears resolve link correctly link spample show also dns queries relevant sa various blacklists default including uri well ip blacklists anyway cant prove nonexistence dns issue one successful query know works least sometimes good pretty much knew annoying think less 1 messages getting im checking something solve sample message causing sample incomplete received qmail 7689 invoked uid 501 8 feb 2008 015800 0800 received 8718202233 s1molsciorg envelopefrom uid 509 qmailscanner201st clamdscan 0925545 spamassassin 324 perlscan 201st clearrc08718202233sa0 processed 50059824 secs 08 feb 2008 095800 0000 xspamstatus hits required try asking qmailscanner folks already default sa header snip another thing salearn spam message get message learned tokens 0 messages 1 messages examined get salearn learn message also auto learned wed 06 feb 2008 091641 pst18972 clamdscan finished scan 0011407 secs wed 06 feb 2008 091726 pst18972 sa finished scan 45026522 secs hits mean qmailscanner forced processing due timeout without actually waiting sa finish despite success suggesting phrase hey im qmailscanner guy meant rhetorical question wed 06 feb 2008 091726 pst18972 p_s finished scan 0020737 secs wed 06 feb 2008 091726 pst18972 ini_sc finished scan varspoolqmailscantmps1molsciorg120231820076418972 set timeout qmailscanner spamc 45 seconds guess links causing positive related links sa queries uri blacklists possible dns issue chance really positive guenther char t10pse0r0dtu0ghnox4exc8x79xf4xabx51x8ax10xf4xf4xc4 main char hmhtxt2hcilxs0 i0icx c128 sh h1tsh putchartshms0 wed 06 aug 2008 012917 0800 getting spam scores