You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Massimiliano Marini <ma...@linuxtime.it> on 2008/02/26 12:41:28 UTC

Email with no "hits" and "required"

System: Debian with Qmail + QmailScanner + SpamAssassins + ClamAV
Installation: qmailrocks.org

I've updated SA (original from qmailrocks.org 3.0.2) to 3.2.4 
my locale.cf is :

rewrite_header Subject *SPAM*
report_safe 0
required_score 4
required_hits 5
use_bayes 1

Question 1. The email still tagged like this:

Received: from  ... [snip] ... with qmail-scanner-1.25-st-qms
(clamdscan: 0.83/705. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
                                    ^^^^^^
I've updated to 3.2.4
spamd -V :
SpamAssassin Server version 3.2.4
  running on Perl 5.8.4

Question 2. And some email have this tag

X-Spam-Status: No, hits=? required=?

Why?

Cheers
--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
"It's easier to invent the future than to predict it."  -- Alan Kay

Re: Email with no "hits" and "required"

Posted by Massimiliano Marini <ma...@linuxtime.it>.
Hi Randy,

> I can only guess that you still have two versions of spamassasin 
> installed. I would search the disk for multiple copies of 
> spamd/spamc/spamassassin and remove the older version. Also remember 
> that spamassassin  probably runs as non-root or at least, it should.

I've searched the disk, but only one version of SA exists,
and /usr/bin/spamd runs as root:

-r-xr-xr-x   1 root root      27059 Feb 20 15:59 spamassassin
-r-xr-xr-x   1 root root     115226 Feb 20 15:59 spamc
-r-xr-xr-x   1 root root     102285 Feb 20 15:59 spamd

Any other idea?
--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
"It's easier to invent the future than to predict it."  -- Alan Kay

Re: Email with no "hits" and "required"

Posted by Massimiliano Marini <ma...@linuxtime.it>.
Hi Jason,

> This is and always has been documented behaviour in Qmail-Scanner. 
> Please read the FAQ

I tried to find the link but I have not found. You may send me the
right link?

Cheers
--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
"It's easier to invent the future than to predict it."  -- Alan Kay

Re: Email with no "hits" and "required"

Posted by Jason Haar <Ja...@trimble.co.nz>.
Randy Ramsdell wrote:
>> Question 2. And some email have this tag
>>
>> X-Spam-Status: No, hits=? required=?
>>
>> Why?
>>
This is and always has been documented behaviour in Qmail-Scanner. 
Please read the FAQ

-- 
Cheers

Jason Haar
Information Security Manager, Trimble Navigation Ltd.
Phone: +64 3 9635 377 Fax: +64 3 9635 417
PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1


Re: Email with no "hits" and "required"

Posted by Randy Ramsdell <rr...@livedatagroup.com>.
Massimiliano Marini wrote:
> System: Debian with Qmail + QmailScanner + SpamAssassins + ClamAV
> Installation: qmailrocks.org
>
> I've updated SA (original from qmailrocks.org 3.0.2) to 3.2.4 
> my locale.cf is :
>
> rewrite_header Subject *SPAM*
> report_safe 0
> required_score 4
> required_hits 5
> use_bayes 1
>
> Question 1. The email still tagged like this:
>
> Received: from  ... [snip] ... with qmail-scanner-1.25-st-qms
> (clamdscan: 0.83/705. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
>                                     ^^^^^^
> I've updated to 3.2.4
> spamd -V :
> SpamAssassin Server version 3.2.4
>   running on Perl 5.8.4
>
>   
I can only guess that you still have two versions of spamassasin 
installed. I would search the disk for multiple copies of 
spamd/spamc/spamassassin and remove the older version. Also remember 
that spamassassin  probably runs as non-root or at least, it should.

> Question 2. And some email have this tag
>
> X-Spam-Status: No, hits=? required=?
>
> Why?
>
> Cheers
> --
> Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
> "It's easier to invent the future than to predict it."  -- Alan Kay
>   


Re: Email with no "hits" and "required"

Posted by Massimiliano Marini <ma...@linuxtime.it>.
Any hint about it?

It might depend on the older version of qmail-scanner (1.25-st-qms)?

--
Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/
"It's easier to invent the future than to predict it."  -- Alan Kay

RE: Email with no "hits" and "required"

Posted by Robert - elists <li...@abbacomm.net>.
> 
> System: Debian with Qmail + QmailScanner + SpamAssassins + ClamAV
> Installation: qmailrocks.org
> 
> I've updated SA (original from qmailrocks.org 3.0.2) to 3.2.4
> my locale.cf is :
> 
> rewrite_header Subject *SPAM*
> report_safe 0
> required_score 4
> required_hits 5
> use_bayes 1
> 
> Question 1. The email still tagged like this:
> 
> Received: from  ... [snip] ... with qmail-scanner-1.25-st-qms
> (clamdscan: 0.83/705. spamassassin: 3.0.2. perlscan: 1.25-st-qms.
>                                     ^^^^^^
> I've updated to 3.2.4
> spamd -V :
> SpamAssassin Server version 3.2.4
>   running on Perl 5.8.4
> 
> Question 2. And some email have this tag
> 
> X-Spam-Status: No, hits=? required=?
> 
> Why?
> 
> Cheers
> --
> Massimiliano Marini - http://www.linuxtime.it/massimilianomarini/

Massimiliano,

The correct answer is this on our systems

setuidgid clamav /var/qmail/bin/qmail-scanner-queue.pl -z
setuidgid clamav /var/qmail/bin/qmail-scanner-queue.pl -g

be careful though, about the user you use... we use clamav user

when you are done and if I recall correctly, you should stop and restart all
necessary services to pull in the new config info so to speak.

The no hits part, I dunno. Could be to large message or whatever else... you
can debug that in the logs

 - rh