You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by David Baron <d_...@012.net.il> on 2006/11/07 15:17:23 UTC
How to set up Razor (SOLVED)
>Installed it off Debian Sid.
>How do I get SA to make use of it?
Thanks for all the helpful responses.
I have it working fine, here is the idea:
1. Most of the documentation is out of date! One needs do absolutely nothing.
SA tests for an will use Razor, Phyzor, etc., if they be installed.
2. All this is of no avail if TCP to port 2703 be not allowed by the firewall.
This was buried in a email thread and not present in the documentation. (It
is not sufficient to enable from Razors main site in a DMZ since other IPs
are involved as well.)
Re: How to set up Razor (SOLVED)
Posted by Theo Van Dinter <fe...@apache.org>.
On Tue, Nov 07, 2006 at 10:14:38AM -0500, Matt Kettler wrote:
> http://razor.sourceforge.net/docs/faq.php
>
> But I agree it might be worth mentioning in the SA docs for razor.
FWIW: http://wiki.apache.org/spamassassin/UsingRazor
Already has pointers about firewall ports, license issues, etc.
--
Randomly Selected Tagline:
"The Power Company is having EMP problems with their reactor."
- Today's BOFH Excuse
Re: How to set up Razor (SOLVED)
Posted by Matt Kettler <mk...@verizon.net>.
David Baron wrote:
>> Installed it off Debian Sid.
>> How do I get SA to make use of it?
>>
>
> Thanks for all the helpful responses.
>
> I have it working fine, here is the idea:
> 1. Most of the documentation is out of date! One needs do absolutely nothing.
> SA tests for an will use Razor, Phyzor, etc., if they be installed.
>
For razor and pyzor, this is true in the more recent versions. Razor
recently changed their position on general usage, and that made the SA
devs change it to loaded-by-default.
However, the "etc." part is not true.. For DCC you'll still have to load
the plugin. DCC isn't free for everyone to use.
> 2. All this is of no avail if TCP to port 2703 be not allowed by the firewall.
> This was buried in a email thread and not present in the documentation. (It
> is not sufficient to enable from Razors main site in a DMZ since other IPs
> are involved as well.)
>
That's pretty well non-buried in the razor documentation.
It's in their FAQ
http://razor.sourceforge.net/docs/faq.php
--------------------------------------
Q: I have a firewall. What ports do I need to open in order for
Razor2 to work?
Outgoing TCP port 2703 (Razor2), only. Previous versions used
TCP port 7 (echo), but this is no longer used.
-----
But I agree it might be worth mentioning in the SA docs for razor.
Re: How to set up Razor (SOLVED)
Posted by Gary V <mr...@hotmail.com>.
> > >I have it working fine, here is the idea:
> > >1. Most of the documentation is out of date! One needs do absolutely
> > >nothing.
> >
> > Not true. It may function, but if you do nothing razor has to try and
> > discover the servers for every message. This creates unnecessary traffic
> > and processing power on both ends. You need to run
> > razor-admin -create (twice for good measure - and then make sure it
>worked)
> > as the user that will be calling razor (or every user that calls razor).
> > This makes the available server data available locally. You also need to
> > disable logging or eventually your disk will fill up with razor logs.
>You
> > can do this globally if you like by configuring the site wide config
>file
> > in the /etc/razor directory.
>
>I did do this. This is what failed before changing the firewall.
Right, it would fail if the port is blocked.
>SA does not
>require this stuff but Razor works better with it done. About out-of-date
>documentation, suggested three steps. Running the first one said it was
>obselete and the Razor works by default.
Is this what you are refering to?
http://marc.theaimsgroup.com/?l=razor-users&m=111962049416855
There have been some changes in versions, and when you run the deprecated
command the error message is misleading and innacurate. I don't use sid, but
from what you describe it looks like the documentation doesn't fit the
version (that is if it asks you to run razor-client). If so, I would submit
a bug report the the Debian maintainer.
>The second was the discover and the
>third was to get a registration ID. Now, how do I use that to report spam?
spamassassin -r <message
(for example) as the Bayes user in question (this will to report to other
stuff as well as razor).
also see:
man razor-agents
> >
> > >SA tests for an will use Razor, Phyzor, etc., if they be installed.
> > >2. All this is of no avail if TCP to port 2703 be not allowed by the
> > >firewall.
> > >This was buried in a email thread and not present in the documentation.
> > > (It is not sufficient to enable from Razors main site in a DMZ since
> > > other IPs are involved as well.)
> >
> > http://razor.sourceforge.net/docs/doc.php?type=text&name=FAQ
> >
>OK. When I install off Debian Sid, nothing refers me to sourceforge and
>neither the docs in the package nor the programs (could say discovery
>failed--cannot connect port 2703--check your firewall) suggested enabling
>stuff in the firewall.
No doubt, that *would* be nice.
Gary V
_________________________________________________________________
Try the next generation of search with Windows Live Search today!
http://imagine-windowslive.com/minisites/searchlaunch/?locale=en-us&source=hmtagline
Re: How to set up Razor (SOLVED)
Posted by David Baron <d_...@012.net.il>.
On Tuesday 07 November 2006 17:24, Gary V wrote:
> > >Installed it off Debian Sid.
> > >How do I get SA to make use of it?
> >
> >Thanks for all the helpful responses.
> >
> >I have it working fine, here is the idea:
> >1. Most of the documentation is out of date! One needs do absolutely
> >nothing.
>
> Not true. It may function, but if you do nothing razor has to try and
> discover the servers for every message. This creates unnecessary traffic
> and processing power on both ends. You need to run
> razor-admin -create (twice for good measure - and then make sure it worked)
> as the user that will be calling razor (or every user that calls razor).
> This makes the available server data available locally. You also need to
> disable logging or eventually your disk will fill up with razor logs. You
> can do this globally if you like by configuring the site wide config file
> in the /etc/razor directory.
I did do this. This is what failed before changing the firewall. SA does not
require this stuff but Razor works better with it done. About out-of-date
documentation, suggested three steps. Running the first one said it was
obselete and the Razor works by default. The second was the discover and the
third was to get a registration ID. Now, how do I use that to report spam?
>
> >SA tests for an will use Razor, Phyzor, etc., if they be installed.
> >2. All this is of no avail if TCP to port 2703 be not allowed by the
> >firewall.
> >This was buried in a email thread and not present in the documentation.
> > (It is not sufficient to enable from Razors main site in a DMZ since
> > other IPs are involved as well.)
>
> http://razor.sourceforge.net/docs/doc.php?type=text&name=FAQ
>
OK. When I install off Debian Sid, nothing refers me to sourceforge and
neither the docs in the package nor the programs (could say discovery
failed--cannot connect port 2703--check your firewall) suggested enabling
stuff in the firewall.
> "Q: I have a firewall. What ports do I need to open in order for
> Razor2 to work?
>
> Outgoing TCP port 2703 (Razor2), only. Previous versions used
> TCP port 7 (echo), but this is no longer used."
>
> Gary V
>
> _________________________________________________________________
> Stay in touch with old friends and meet new ones with Windows Live Spaces
> http://clk.atdmt.com/MSN/go/msnnkwsp0070000001msn/direct/01/?href=http://sp
>aces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
RE: How to set up Razor (SOLVED)
Posted by Gary V <mr...@hotmail.com>.
>Hello,
>
>Thanks for " logging" tip.
>
>How should I disable razor logging exactly?
>
>This is what I have in razor-agent.conf:
>debuglevel = 3
>
>Best Regards,
>Leon Kolchinsky
>
debuglevel = 0
Gary V
_________________________________________________________________
Try Search Survival Kits: Fix up your home and better handle your cash with
Live Search!
http://imagine-windowslive.com/search/kits/default.aspx?kit=improve&locale=en-US&source=hmtagline
RE: How to set up Razor (SOLVED)
Posted by Leon Kolchinsky <lk...@univ.haifa.ac.il>.
Hello,
Thanks for " logging" tip.
How should I disable razor logging exactly?
This is what I have in razor-agent.conf:
#
# Razor2 config file
#
# Autogenerated by Razor-Agents v2.82
# Thu Oct 26 12:17:46 2006
# Created with all default values
#
# see razor-agent.conf(5) man page
#
debuglevel = 3
identity = identity
ignorelist = 0
listfile_catalogue = servers.catalogue.lst
listfile_discovery = servers.discovery.lst
listfile_nomination = servers.nomination.lst
logfile = razor-agent.log
logic_method = 4
min_cf = ac
razordiscovery = discovery.spamnet.com
rediscovery_wait = 172800
report_headers = 1
turn_off_discovery = 0
use_engines = 4,8
whitelist = razor-whitelist
#######
Best Regards,
Leon Kolchinsky
-----Original Message-----
From: Gary V [mailto:mr88talent@hotmail.com]
Sent: Tuesday, November 07, 2006 5:25 PM
To: users@spamassassin.apache.org
Subject: RE: How to set up Razor (SOLVED)
>
> >Installed it off Debian Sid.
> >How do I get SA to make use of it?
>
>Thanks for all the helpful responses.
>
>I have it working fine, here is the idea:
>1. Most of the documentation is out of date! One needs do absolutely
>nothing.
Not true. It may function, but if you do nothing razor has to try and
discover the servers for every message. This creates unnecessary traffic and
processing power on both ends. You need to run
razor-admin -create (twice for good measure - and then make sure it worked)
as the user that will be calling razor (or every user that calls razor).
This makes the available server data available locally. You also need to
disable logging or eventually your disk will fill up with razor logs. You
can do this globally if you like by configuring the site wide config file in
the /etc/razor directory.
>SA tests for an will use Razor, Phyzor, etc., if they be installed.
>2. All this is of no avail if TCP to port 2703 be not allowed by the
>firewall.
>This was buried in a email thread and not present in the documentation. (It
>is not sufficient to enable from Razors main site in a DMZ since other IPs
>are involved as well.)
http://razor.sourceforge.net/docs/doc.php?type=text&name=FAQ
"Q: I have a firewall. What ports do I need to open in order for
Razor2 to work?
Outgoing TCP port 2703 (Razor2), only. Previous versions used
TCP port 7 (echo), but this is no longer used."
Gary V
_________________________________________________________________
Stay in touch with old friends and meet new ones with Windows Live Spaces
http://clk.atdmt.com/MSN/go/msnnkwsp0070000001msn/direct/01/?href=http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us
RE: How to set up Razor (SOLVED)
Posted by Gary V <mr...@hotmail.com>.
>
> >Installed it off Debian Sid.
> >How do I get SA to make use of it?
>
>Thanks for all the helpful responses.
>
>I have it working fine, here is the idea:
>1. Most of the documentation is out of date! One needs do absolutely
>nothing.
Not true. It may function, but if you do nothing razor has to try and
discover the servers for every message. This creates unnecessary traffic and
processing power on both ends. You need to run
razor-admin -create (twice for good measure - and then make sure it worked)
as the user that will be calling razor (or every user that calls razor).
This makes the available server data available locally. You also need to
disable logging or eventually your disk will fill up with razor logs. You
can do this globally if you like by configuring the site wide config file in
the /etc/razor directory.
>SA tests for an will use Razor, Phyzor, etc., if they be installed.
>2. All this is of no avail if TCP to port 2703 be not allowed by the
>firewall.
>This was buried in a email thread and not present in the documentation. (It
>is not sufficient to enable from Razors main site in a DMZ since other IPs
>are involved as well.)
http://razor.sourceforge.net/docs/doc.php?type=text&name=FAQ
"Q: I have a firewall. What ports do I need to open in order for
Razor2 to work?
Outgoing TCP port 2703 (Razor2), only. Previous versions used
TCP port 7 (echo), but this is no longer used."
Gary V
_________________________________________________________________
Stay in touch with old friends and meet new ones with Windows Live Spaces
http://clk.atdmt.com/MSN/go/msnnkwsp0070000001msn/direct/01/?href=http://spaces.live.com/spacesapi.aspx?wx_action=create&wx_url=/friends.aspx&mkt=en-us