Re: qmail-scanner-st dosn't work with spamd

At 12:19 +0100 25-01-2006, Szabo Nandor wrote:
>After debugging:
>1.
># spamc -U /var/spool/spamd/spamd < /etc/hosts
>X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on server
>X-Spam-Level:
>X-Spam-Status: No, score=-1.2 required=5.0 tests=ALL_TRUSTED,MISSING_DATE,
>       MISSING_SUBJECT autolearn=unavailable version=3.0.3
>Seems good.
>2. /var/log/mail.log
>"spamd[20532]: logmsg: clean message (-1.2/5.0) for root:117 in 0.1 
>seconds, 268 bytes."
>Seems good, too.
>
>3. /var/spool/qmailscan/qmail-queue.log
>"SA: required_hits ? / sa_quarantine +2.1 / sa_delete +4.2"
>Why doesn't QS sense the SA required_hits?

This is strange.

Try this comand:

setuidgid qscand spamc -R -U /var/spool/spamd/spamd < /etc/hosts

In other words, test if the user that runs qmail-scanner can use 
properly spamc, the output must be like this:

-0.7/6.0
Spam detection software, running on the system "apo135.usc.urbe.it", has
identified this incoming email as possible spam.  The original message
has been attached to this so you can view it (if it isn't spam) or label
similar future email.  If you have any questions, see
[email protected] for details.

Content preview:  [...]

Content analysis details:   (-0.7 points, 6.0 required)

  pts rule name              description
---- ---------------------- --------------------------------------------------
-3.3 ALL_TRUSTED            Did not pass through any untrusted hosts
  0.1 MISSING_HEADERS        Missing To: header
  1.3 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
                             [score: 0.5060]
  1.2 MISSING_SUBJECT        Missing Subject: header



Regards

Salvatore

>>I suggest checking the following:
>>1) Check that spamd is running and working correctly from you qmail scanner
>>user (maybe it's a permission thing) 
>>spamc -U /var/spool/spamd/spamd < /etc/hosts 
>>(or some mail file, like sample-nonspam.txt which comes with SA)
>>2) Turn ON the debug for QS, Edit the .pl file and put debug=1 instead of
>>debug=0. After that look in the log file which will be created in the
>>quarantine directory. There should be error messages there. 
>>3) Turn ON the debug for spamd (kill it and run with -D).
>>It will put a verbose log in /var/log/maillog . Check the messages (if it
>>actually gets called)
>>P.S.
>>Don't forget to turn OFf the debug after solving the problem, it slows down
>>the processing and might fill up your FS.
>>-----Original Message-----
>>From: [email protected]
>>[mailto:[email protected]] On Behalf Of
>>Szabo Nandor
>>Sent: Wednesday, January 25, 2006 12:33
>>To: [email protected]
>>Subject: [Qmail-scanner-general]qmail-scanner-st dosn't work with spamd
>>Helo! 
>>I'm contentedly using qmail-scanner-1.25st patch on several system.
>>Except one: 
>>The configuraton successfully find the spamd socket, but the 
>>scanner dosn't call the spamassassin daemon. 
>>Output of qmail-queue.log:
>>"SA: finished scan in 0.006074 secs - hits=?/?" 
>>
>>Output of qmail-scanner.125st install script: 
>>  -------------------------------------
>>st: configuration options for  1.25st
>>  -------------------------------------
>>admin-fromname='Antivirus'
>>minidebug=1
>>settings-per-domain=0
>>dscr-hdrs-text='X-Qmail-Scanner' 
>>sa-socket =/var/spool/spamd/spamd
>>sa-forward="antispam@********.com"  (Is it a valid address?)
>>sa-fwd-verbose=1  (X-Spam headers will be added in the forwarded mail)
>>sa-subject="SPAM *** " 
>>sa-delta  =0.5
>>sa-alt    =1
>>sa-debug  =1    (only valid if sa-alt is enabled)
>>sa-report =1    (only valid if sa-alt and sa-debug are enabled) 
>>Spamassasin Required_Hits=5.0
>>sa-quarantine=2.1       (messages over 7.1 hits will be quarantined)
>>sa-delete    =4.2       (messages over 9.2 hits will be rejected)
>>sa-reject    =1


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642