Re: qmail-scanner-st dosn't work with spamd

>> "SA: required_hits ? / sa_quarantine +2.1 / sa_delete +4.2"
>> Why doesn't QS sense the SA required_hits?
> 
> This is strange. 
> 
> Try this comand: 
> 
> setuidgid qscand spamc -R -U /var/spool/spamd/spamd < /etc/hosts

Hejj, here is the problem. 

:~# setuidgid qscand spamc -R -U /var/spool/spamd/spamd < /etc/hosts
getpwuid() failed: Permission denied 

:~# su qscand
I have no name!@server:/root$ whoami
whoami: cannot find username for UID 112 


This system user seems to be broken on my Debian box.
Now QS + SA work with normal user, and I start tracing about the broken 
system user. 


Thank you for your assistance, 

Nandor 


> 
> In other words, test if the user that runs qmail-scanner can use properly 
> spamc, the output must be like this: 
> 
> -0.7/6.0
> Spam detection software, running on the system "apo135.usc.urbe.it", has
> identified this incoming email as possible spam.  The original message
> has been attached to this so you can view it (if it isn't spam) or label
> similar future email.  If you have any questions, see
> [email protected] for details. 
> 
> Content preview:  [...] 
> 
> Content analysis details:   (-0.7 points, 6.0 required) 
> 
>  pts rule name              description
> ---- ---------------------- 
> --------------------------------------------------
> -3.3 ALL_TRUSTED            Did not pass through any untrusted hosts
>  0.1 MISSING_HEADERS        Missing To: header
>  1.3 BAYES_50               BODY: Bayesian spam probability is 40 to 60%
>                             [score: 0.5060]
>  1.2 MISSING_SUBJECT        Missing Subject: header 
> 
>  
> 
> Regards 
> 
> Salvatore 
> 
>>> I suggest checking the following:
>>> 1) Check that spamd is running and working correctly from you qmail 
>>> scanner
>>> user (maybe it's a permission thing) spamc -U /var/spool/spamd/spamd < 
>>> /etc/hosts (or some mail file, like sample-nonspam.txt which comes with 
>>> SA)
>>> 2) Turn ON the debug for QS, Edit the .pl file and put debug=1 instead 
>>> of
>>> debug=0. After that look in the log file which will be created in the
>>> quarantine directory. There should be error messages there. 3) Turn ON 
>>> the debug for spamd (kill it and run with -D).
>>> It will put a verbose log in /var/log/maillog . Check the messages (if 
>>> it
>>> actually gets called)
>>> P.S.
>>> Don't forget to turn OFf the debug after solving the problem, it slows 
>>> down
>>> the processing and might fill up your FS.
>>> -----Original Message-----
>>> From: [email protected]
>>> [mailto:[email protected]] On Behalf Of
>>> Szabo Nandor
>>> Sent: Wednesday, January 25, 2006 12:33
>>> To: [email protected]
>>> Subject: [Qmail-scanner-general]qmail-scanner-st dosn't work with spamd
>>> Helo! I'm contentedly using qmail-scanner-1.25st patch on several 
>>> system.
>>> Except one: The configuraton successfully find the spamd socket, but the 
>>> scanner dosn't call the spamassassin daemon. Output of qmail-queue.log:
>>> "SA: finished scan in 0.006074 secs - hits=?/?"  
>>> 
>>> Output of qmail-scanner.125st install script:  
>>> -------------------------------------
>>> st: configuration options for  1.25st
>>>  -------------------------------------
>>> admin-fromname='Antivirus'
>>> minidebug=1
>>> settings-per-domain=0
>>> dscr-hdrs-text='X-Qmail-Scanner' sa-socket =/var/spool/spamd/spamd
>>> sa-forward="antispam@********.com"  (Is it a valid address?)
>>> sa-fwd-verbose=1  (X-Spam headers will be added in the forwarded mail)
>>> sa-subject="SPAM *** " sa-delta  =0.5
>>> sa-alt    =1
>>> sa-debug  =1    (only valid if sa-alt is enabled)
>>> sa-report =1    (only valid if sa-alt and sa-debug are enabled) 
>>> Spamassasin Required_Hits=5.0
>>> sa-quarantine=2.1       (messages over 7.1 hits will be quarantined)
>>> sa-delete    =4.2       (messages over 9.2 hits will be rejected)
>>> sa-reject    =1
>  
> 
> -------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc. Do you grep through log 
> files
> for problems?  Stop!  Download the new AJAX search engine that makes
> searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
> http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642
> _______________________________________________
> Qmail-scanner-general mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
 



-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=103432&bid=230486&dat=121642