You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Shwetar (sent by Nabble.com)" <li...@nabble.com> on 2005/09/29 18:21:08 UTC
SA not workin
Hi,
I have all the bits and pieces up for gettin mail and also for running SA. Also I get no erros on spamassassin --lint... but I have still not been able to filter even ONE Spam out of my mail.
Dont know why qmail and SA are failin to communicate; but SA is not doing its job.
Can anyone of you help me plz? I can post whatever results or tests I need to check; but I dont know what direction to go in.
Shweta
--
Sent from the SpamAssassin - Users forum at Nabble.com:
http://www.nabble.com/SA-not-workin-t359076.html#a994170
Re: SA not workin
Posted by Jim Maul <jm...@elih.org>.
Shwetar (sent by Nabble.com) wrote:
> Jim,
>
> I must thank you and all the others for your valuable help... I installed
> qmail-scanner-1.25 yday... and configured it with SA as one of the scanners...
> and it worked!!!
>
> Thank you so much... hate to think that just this small piece was missin and I
> didnt get it.
>
Not a problem..most of the time the fixes arent very involved..you just
have to know where to look and what to do once you find the right place.
> Just one question... I have setup the rules and other config settings and spam
> is quite controlled...
>
> But... how do I stop spam that is realyed to everyone when the user is not
> present at mydomain.com?
>
> For ex. suppose an email is sent to xyz@mydomain.com... which is obviously spam
> as the user xyz doesnt exist... this mail gets realyed to everyone at
> mydomain.com... how do I stop these? I can blacklist them but there are infinite
> no of permutations that spammers could come up with...
>
Im not really sure what you are asking here. If someone sends mail to a
nonexistent address, how is it relayed to everyone else at that domain?
If the address doesnt exist, it shouldnt be delivered to anyone at
all..except maybe a catchall account.
-Jim
Re: SA not workin
Posted by "Shwetar (sent by Nabble.com)" <li...@nabble.com>.
Jim,
I must thank you and all the others for your valuable help... I installed qmail-scanner-1.25 yday... and configured it with SA as one of the scanners... and it worked!!!
Thank you so much... hate to think that just this small piece was missin and I didnt get it.
Just one question... I have setup the rules and other config settings and spam is quite controlled...
But... how do I stop spam that is realyed to everyone when the user is not present at mydomain.com?
For ex. suppose an email is sent to xyz@mydomain.com... which is obviously spam as the user xyz doesnt exist... this mail gets realyed to everyone at mydomain.com... how do I stop these? I can blacklist them but there are infinite no of permutations that spammers could come up with...
--
Sent from the SpamAssassin - Users forum at Nabble.com:
http://www.nabble.com/SA-not-workin-t359076.html#a1005431
Re: SA not workin
Posted by Jim Maul <jm...@elih.org>.
>
> Yes; it detected SA...
> ***********************************************
> Content/Virus Scanners installed on your System
>
> fprot=/usr/local/bin/f-prot
> fast_spamassassin=/usr/bin/spamc
> ***********************************************
>
> So if I might go ahead and install it; after work hours and check if all
> works fine.
> In your opinion, is this enough to trigger SA?
> --
> Sent from the SpamAssassin - Users forum at Nabble.com:
> http://www.nabble.com/SA-not-workin-t359076.html#a996649
>
If it detected it without any errors then you should be good. Check the
headers of some messages to see if there is any mention of SA after you
get it running.
-Jim
Re: SA not workin
Posted by Stuart Johnston <st...@ebby.com>.
Shwetar (sent by Nabble.com) wrote:
> Yes; it detected SA...
> ***********************************************
> Content/Virus Scanners installed on your System
>
> fprot=/usr/local/bin/f-prot
> fast_spamassassin=/usr/bin/spamc
> ***********************************************
>
> So if I might go ahead and install it; after work hours and check if all
> works fine.
> In your opinion, is this enough to trigger SA?
Make sure that spamd is actually running or spamc won't work.
Re: SA not workin
Posted by Jim Maul <jm...@elih.org>.
>
> Yes; it detected SA...
> ***********************************************
> Content/Virus Scanners installed on your System
>
> fprot=/usr/local/bin/f-prot
> fast_spamassassin=/usr/bin/spamc
> ***********************************************
>
> So if I might go ahead and install it; after work hours and check if all
> works fine.
> In your opinion, is this enough to trigger SA?
> --
> Sent from the SpamAssassin - Users forum at Nabble.com:
> http://www.nabble.com/SA-not-workin-t359076.html#a996649
>
If it detected it without any errors then you should be good. Check the
headers of some messages to see if there is any mention of SA after you
get it running.
-Jim
Re: SA not workin
Posted by "Shwetar (sent by Nabble.com)" <li...@nabble.com>.
Yes; it detected SA...
***********************************************
Content/Virus Scanners installed on your System
fprot=/usr/local/bin/f-prot
fast_spamassassin=/usr/bin/spamc
***********************************************
So if I might go ahead and install it; after work hours and check if all works fine.
In your opinion, is this enough to trigger SA?
--
Sent from the SpamAssassin - Users forum at Nabble.com:
http://www.nabble.com/SA-not-workin-t359076.html#a996649
Re: SA not workin
Posted by Jim Maul <jm...@elih.org>.
Shwetar (sent by Nabble.com) wrote:
> Jim,
>
> I dont see any mention of SA in the logcheck monitored logs.
> On checkin up qmail-scanner-queue.pl... I realised that...
>
> my @scanner_array=();
> so I changed that to my @scanner_array=("spamassassin");
> Also my @scanners_default=("fprot_scanner","perlscan_scanner");
> so I changed that to my
> @scanners_default=("spamassassin","fprot_scanner","perlscan_scanner");
>
> but I left the following as it is:
> my @scanners_installed=("fprot_scanner","perlscan_scanner");
>
> I restarted all the necessary services... but on tail'ing the logs... I still
> dont see SA being mentioned.
>
> Am I doing anything wrong?
>
>
First, you might want to bring this over to the qmail-scanner list. We
can continue the discussion over there ;)
But anyway, generally you cant just add the scanner into the array and
have it work. qmail-scanner tries to detect what supported scanners are
available on the system at build time. Chances are, if the scanner
wasnt detected, just adding it in manually isnt going to work either.
I'd download the newest qmail-scanner (1.25) and build that using the
settings of your choice. See what scanners it autodetects. You can
safely do this without even altering anything on your system. Just dont
supply the --install switch and you should be fine. Does it detect SA?
-Jim
Re: SA not workin
Posted by "Shwetar (sent by Nabble.com)" <li...@nabble.com>.
Jim,
I dont see any mention of SA in the logcheck monitored logs.
On checkin up qmail-scanner-queue.pl... I realised that...
my @scanner_array=();
so I changed that to my @scanner_array=("spamassassin");
Also my @scanners_default=("fprot_scanner","perlscan_scanner");
so I changed that to my @scanners_default=("spamassassin","fprot_scanner","perlscan_scanner");
but I left the following as it is:
my @scanners_installed=("fprot_scanner","perlscan_scanner");
I restarted all the necessary services... but on tail'ing the logs... I still dont see SA being mentioned.
Am I doing anything wrong?
--
Sent from the SpamAssassin - Users forum at Nabble.com:
http://www.nabble.com/SA-not-workin-t359076.html#a996257
Re: SA not workin
Posted by Jim Maul <jm...@elih.org>.
Shwetar (sent by Nabble.com) wrote:
> Hi Matte,
>
> Yeah I already have qmail-scanner1.20 up and running... and I have logcheck
> installed which keeps mailing me periodically the scanner log contents...
>
> Sep 29 13:58:18 myserver qmail-scanner[27731]:
> Policy:Bad_MIME_Break:RC:0(212.241.78.57): 0.528588 3370
> jqcemgkfera@a-o-building.dk gange@mydomain.com Teeth_bleaching_made_easy
> <TB...@a-o-building.dk> 1128016430.27733-0.myserver:2435
> orig-myserver112801643076827731:3370
>
This was blocked by qmail-scanner itself. There is no mention of
spamassassin at all in that snippet. Do you see anything like:
Sep 29 15:06:20 external qmail-scanner[29244]:
Clear:RC:0(69.56.2.92):SA:1(13.1/5.0): 11.73458 4473
bounce-dajzhazhcavzggza@americanfamilynews-mail.info spam@elih.org
What's_your_Car_Worth_at_Trade_In?
<67...@americanfamilynews-mail.info>
1128020771.29246-0.external.elih.org:3589
orig-external.elih.org112802076848729244:4473
Notice the SA:1(13.1/5.0) which shows that SA scanned the message and
scored it 13.1
Check qmail-scanner-queue.pl and look for:
#Array of virus scanners used must point to subroutines
my @scanner_array=("clamdscan_scanner","spamassassin");
This tells qmail-scanner to use ClamAV and SpamAssassin. What do the
headers of some messages say? Do any mention SA at all?
> So I guess mail is definitely reachin the scanner but I dotn know where can I
> specify that scanner pass on these mails to SA. Also I am unsure of the type of
> flow that a mail goes through.
>
> I cant upgrade qmail-scanner to 1.25 since we want to stick to these settings
> for now; but I have version 1.20 which is good as well, right?
I dont know..there have been many improvements in newer versions, you
may want to upgrade. If you look at qmail-scanner-queue.pl you will see
the exact configure settings that were used to build it. You can then
use these same settings to build the new version. Its quite easy actually..
-Jim
Re: SA not workin
Posted by "Shwetar (sent by Nabble.com)" <li...@nabble.com>.
Hi Matte,
Yeah I already have qmail-scanner1.20 up and running... and I have logcheck installed which keeps mailing me periodically the scanner log contents...
Sep 29 13:58:18 myserver qmail-scanner[27731]: Policy:Bad_MIME_Break:RC:0(212.241.78.57): 0.528588 3370 jqcemgkfera@a-o-building.dk gange@mydomain.com Teeth_bleaching_made_easy 1128016430.27733-0.myserver:2435 orig-myserver112801643076827731:3370
So I guess mail is definitely reachin the scanner but I dotn know where can I specify that scanner pass on these mails to SA. Also I am unsure of the type of flow that a mail goes through.
I cant upgrade qmail-scanner to 1.25 since we want to stick to these settings for now; but I have version 1.20 which is good as well, right?
--
Sent from the SpamAssassin - Users forum at Nabble.com:
http://www.nabble.com/SA-not-workin-t359076.html#a995769
Re: SA not workin
Posted by Matthew Yette <my...@mapolce.com>.
On 9/29/05 2:07 PM, "Shwetar (sent by Nabble.com)" <li...@nabble.com> wrote:
> Ok, I am actually workin on something that has already been setup; I mean
> somebody already set this thing up and then left. So I am delaing with Spam
> right now.
>
> I have everything up and running... I also ran the tests with the sample spam
> and it seems that SA assigns some points to it... but however it does get
> tagged or apparently it is not "really" detecting it.
>
> I can send in the results of spamassassin -D <
> /usr/share/doc/spamc/sample-spam.txt... if that helps identify the problem.
>
> Shweta
>
> Sent from the SpamAssassin - Users
> <http://www.nabble.com/SA-not-workin-t359076.html#a995280> forum at
> Nabble.com.
Shwetar,
What Matt was saying is, by feeding a message into spamassassin directly
during a test, you¹re only verifying that SA is working. You still have to
link the MTA with Spamassassin. Try qmail-scanner-1.25st. Google on that and
read up. Life w/ qmail also is great.
Matt
--
Matthew Yette
Senior Engineer (NOC/Operations)
M.A. Polce Consulting
315-838-1644
Re: SA not workin
Posted by "Shwetar (sent by Nabble.com)" <li...@nabble.com>.
Ok, I am actually workin on something that has already been setup; I mean somebody already set this thing up and then left. So I am delaing with Spam right now.
I have everything up and running... I also ran the tests with the sample spam and it seems that SA assigns some points to it... but however it does get tagged or apparently it is not "really" detecting it.
I can send in the results of spamassassin -D < /usr/share/doc/spamc/sample-spam.txt... if that helps identify the problem.
Shweta
--
Sent from the SpamAssassin - Users forum at Nabble.com:
http://www.nabble.com/SA-not-workin-t359076.html#a995280
Re: SA not workin
Posted by Matt Kettler <mk...@evi-inc.com>.
Shwetar (sent by Nabble.com) wrote:
> Hi,
>
> I have all the bits and pieces up for gettin mail and also for running
> SA. Also I get no erros on spamassassin --lint... but I have still not
> been able to filter even ONE Spam out of my mail.
>
> Dont know why qmail and SA are failin to communicate; but SA is not
> doing its job.
Well, what have you done to make qmail and SA communicate?
Merely installing spamassassin does nothing to qmail, you have to do that yourself.
Let us know what (exactly) you've done so far, and people can make suggestions
on how to complete the process.