You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Eben King <eb...@verizon.net> on 2006/06/12 02:04:50 UTC
SA not being run
Hi, I have Postfix 2.2.4, Procmail 3.2.2, Perl 5.8.7, and Spamassassin 3.0.4
. Various files look like this:
eben@pc:~$ ls -l ~/.forward ~/.procmailrc
4.0K -rw-r--r-- 1 eben eben 35 2006-06-10 19:06 /home/eben/.forward
4.0K -rw-r--r-- 1 eben eben 1.2K 2006-02-02 01:31 /home/eben/.procmailrc
eben@pc:~$ cat ~/.forward
| /usr/bin/procmail -f- || exit 75
eben@pc:~$ cat ~/.procmailrc
# SpamAssassin sample procmailrc
#
# Pipe the mail through spamassassin (replace 'spamassassin' with 'spamc'
# if you use the spamc/spamd combination)
#
# The condition line ensures that only messages smaller than 250 kB
# (250 * 1024 = 256000 bytes) are processed by SpamAssassin. Most spam
# isn't bigger than a few k and working with big messages can bring
# SpamAssassin to its knees.
#
# The lock file ensures that only 1 spamassassin invocation happens
# at 1 time, to keep the load down.
#
:0fw: spamassassin.lock
* < 256000
| spamassassin -D rulesrun=255
# Mails with a score of 15 or higher are almost certainly spam (with 0.05%
# false positives according to rules/STATISTICS.txt). Let's put them in a
# different mbox. (This one is optional.)
:0:
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*\*\*\*\*\*
almost-certainly-spam
# All mail tagged as spam (eg. with a score higher than the set threshold)
# is moved to "probably-spam".
:0:
* ^X-Spam-Status: Yes
probably-spam
# Work around procmail bug: any output on stderr will cause the "F" in
"From"
# to be dropped. This will re-add it.
:0
* ^^rom[ ]
{
LOG="*** Dropped F off From_ header! Fixing up. "
:0 fhw
| sed -e '1s/^/F/'
}
eben@pc:~$ ls `which procmail`
72K /usr/bin/procmail*
I think I've trained it enough:
eben@pc:~$ sa-learn --backup | head -3
v 3 db_version # this must be the first line!!!
v 401 num_spam
v 961 num_nonspam
But incoming mail doesn't get tagged by SA unless I manually pipe it
through. What should I look at?
--
-eben QebWenE01R@vTerYizUonI.nOetP http://royalty.no-ip.org:81
Are you confident that you appear to be professional in your electronic
communication? Consider this: A: No
Q: Can I top post? from nick@xx.co.uk