Problem with Qmail-scanner and Spamassassin scanner

Hi,

I have installed NetQmail + ClamAV + SpamAssassin and when i launch  
Qmail-Scanner, it doesn't detect SpamAssassin Scanner.

############################################################################
Something like spamc for SpamAssassin detected - but not correctly installed
(didn't include a "X-Spam-Status" line in output).
Please read Q-S FAQ if you want it - especially check that spamd daemon
is running. Ignoring...
############################################################################

Used Versions:

FreeBSD 6.1-RELEASE-p10
netqmail 1.05
clamav-0.90.1
p5-Mail-SpamAssassin-3.1.8_1
qmail-scanner-1.25_2

Process:

antispam:/# ps auxw | grep spamd
root       3764  0.0  0.8 34944  4148  ??  SsJ  Mon10AM   0:43.49  
/usr/local/bin/spamd -c -d -r /var/run/spamd/spamd.pid (perl)
root       3834  0.0  2.4 35052 12360  ??  IJ   Mon10AM   0:00.31  
spamd child (perl)
root       3835  0.0  1.7 35044  8728  ??  IJ   Mon10AM   0:00.36  
spamd child (perl)

antispam:/# ps auxw | grep clamav
clamav     3787  0.0  6.9 38528 34900  ??  IsJ  Mon10AM   2:33.10  
/usr/local/sbin/clamd
clamav     3925  0.0  0.3  4564  1448  ??  IsJ  Mon10AM   0:00.52  
/usr/local/bin/freshclam --daemon -p /var/run/clamav/freshclam.pid

antispam:/# ps auxw | grep qmail
root       3733  0.0  0.1  1180   432 con- IJ   Mon10AM   0:00.01  
supervise qmail-send
root       3735  0.0  0.1  1180   432 con- IJ   Mon10AM   0:00.01  
supervise qmail-smtpd
qmails     3737  0.0  0.1  1248   540 con- IJ   Mon10AM   0:00.21 qmail-send
qmaill     3738  0.0  0.1  1208   508 con- IJ   Mon10AM   0:00.08  
/usr/local/bin/multilog t /var/log/qmail
qmaild     3739  0.0  0.1  1212   552 con- IJ   Mon10AM   0:00.01  
/usr/local/bin/tcpserver -v -R -l antispam.domunix.org -x /etc/tcp.sm
qmaill     3740  0.0  0.1  1192   428 con- IJ   Mon10AM   0:00.00  
/usr/local/bin/multilog t /var/log/qmail/smtpd
root       3746  0.0  0.1  1200   384 con- IJ   Mon10AM   0:00.04  
qmail-lspawn ./Maildir
qmailr     3747  0.0  0.1  1200   528 con- IJ   Mon10AM   0:00.00 qmail-rspawn
qmailq     3748  0.0  0.1  1196   460 con- IJ   Mon10AM   0:00.02 qmail-clean


Options of spamassassin:

WITH_AS_ROOT=true
WITH_DOMAINKEYS=true
WITH_DKIM=true
WITH_SSL=true
WITH_GNUPG=true
WITHOUT_MYSQL=true
WITHOUT_PGSQL=true
WITH_RAZOR=true
WITH_SPF_QUERY=true
WITH_RELAY_COUNTRY=true
WITH_TOOLS=true

qmail-scanner installation:

antispam:/usr/ports/mail/qmail-scanner# make  
[email protected] QMAILSCAN_ADMINREALNAME="Sebastien  
LEFEVRE" QMAILSCAN_LANG="fr_FR,en_EN" QMAILSCAN_LOCALDOMAINS=toto.com  
install clean
===>  Cleaning for perl-5.8.8
===>  Cleaning for maildrop-2.0.3
===>  Cleaning for p5-Time-HiRes-1.9707,1
===>  Cleaning for tnef-1.4.3
===>  Cleaning for unzip-5.52_3
===>  Cleaning for qmail-1.03_5
===>  Cleaning for pcre-7.0_1
===>  Cleaning for qmail-scanner-1.25_2
===>  Extracting for qmail-scanner-1.25_2
=> MD5 Checksum OK for qmail-scanner-1.25.tgz.
=> SHA256 Checksum OK for qmail-scanner-1.25.tgz.
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/perl5.8.8 - found
===>  Patching for qmail-scanner-1.25_2
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/perl5.8.8 - found
===>  Applying FreeBSD patches for qmail-scanner-1.25_2
===>   qmail-scanner-1.25_2 depends on executable in : reformime - found
===>   qmail-scanner-1.25_2 depends on file:  
/usr/local/lib/perl5/site_perl/5.8.8/mach/Time/HiRes.pm - found
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/tnef - found
===>   qmail-scanner-1.25_2 depends on executable in : unzip - found
===>   qmail-scanner-1.25_2 depends on file: /var/qmail/bin/qmail-send - found
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/perl5.8.8 - found
===>  Configuring for qmail-scanner-1.25_2

----------------------------------------
You may use the following build options:

QMAILSCAN_ADMIN          email adress of qmail-scanner admin for alerts
QMAILSCAN_ADMINREALNAME* name to use when sending alerts
QMAILSCAN_LANG           specify languages for QS mails (notify, etc..)
                          supported languages are: af_ZA, cs_CZ, da_DK, de_DE,
                          en_GB, en_PL, enlt_LT, enlt_LT_short, es_ES, fr_FR,
                          it_IT, ja_JP.EUC, nl_NL, no_NO, pl_PL, pt_BR, pt_PT,
                          sk_SK, sv_SE, tr_TR, tr_TR_ascii and tw_BIG5
                          default depends on your LANG variable
                          (en_GB if LANG is not set)
QMAILSCAN_LOCALDOMAINS   domains classified as local domains preventing alerts
                          of externals users (and mailing-lists...)
QMAILSCAN_LOGCRYPTO      simply notes in the log record if the message
                          contained any form of digital signing or encryption
                          (S/MIME, PGP and password protected files)
                          default is disabled
QMAILSCAN_MAXZIPSIZE     zip that would have unpacked into more diskspace
                          than this value will be blocked (prevent DoS)
                          default is 1000000000
QMAILSCAN_NOTBLKZIPPW    zip password protected are blocked by default
                          setting this variable to disable this function
QMAILSCAN_NOTIFY         who has to be notify of viruses/spams
                          defaults to 'psender,precips'
QMAILSCAN_SCANNERS       list of installed content scanner
                          default is automatic, so you do not need to set this
QMAILSCAN_SILENTVIRUSES  viruses that qs shoud not notify about
QMAILSCAN_SPAMSREDIRECT* set this if you want to redirect all spams to a
                          specific email address
QMAILSCAN_SPAMSTOSUFFIX* suffix to alter spams recipients with

When you set the last option to 'spam', a detected spam will be delivered to
'user-spam@domain' instead of 'user@domain'.

* Please note these options are only available with FreeBSD ports
So please, do not report relatives bugs to qmail-scanner team, but maintainer.
----------------------------------------

Building Qmail-Scanner 1.25...


                 ***** NOTE ******

Qmail-Scanner doesn't have language translations for fr_FR,en_EN,
- so setting back to english...


This script will search your system for the virus scanners it knows
about, and will ensure that all external programs
qmail-scanner-queue.pl uses are explicitly pathed for performance
reasons.


It will then generate qmail-scanner-queue.pl - it is up to you to install it
correctly.


Something like spamc for SpamAssassin detected - but not correctly installed
(didn't include a "X-Spam-Status" line in output).
Please read Q-S FAQ if you want it - especially check that spamd daemon
is running. Ignoring...



/usr/bin/uudecode works as expected on system...



Found tnef on your system! That means we'll be able to decode stupid
M$ attachments :-)


The following binaries and scanners were found on your system:

mimeunpacker=/usr/local/bin/reformime
uudecode=/usr/bin/uudecode
unzip=/usr/local/bin/unzip
max-zip-size=1000000000
tnef=/usr/local/bin/tnef

Content/Virus Scanners installed on your System

clamdscan=/usr/local/bin/clamdscan (which means clamscan won't be used  
as clamdscan is better)

Qmail-Scanner details.

log-details=syslog
log-crypto=0
fix-mime=2
ignore-eol-check=0
debug=0
notify=psender,precips
redundant-scanning=yes
admin=postmaster\@toto.com
local-domains='antispam.toto.com','toto.com'
silent-viruses='klez','bugbear','hybris','yaha','braid','nimda','tanatos','sobig','winevar','palyh','fizzer','gibe','cailont','lovelorn','swen','dumaru','sober','hawawi','holar-i','mimail','poffer','bagle','worm.galil','mydoom','worm.sco','tanx','novarg','\@mm'
scanners="clamdscan_scanner"

If that looks correct, I will now generate qmail-scanner-queue.pl
for your system...
Testing suid nature of /usr/bin/perl...
Looks OK...

Finished. Please read README(.html) and then go over the script to
check paths/etc, and then install as you see fit.

Remember to copy quarantine-attachments.txt to /usr/local/qmailscan and then
run "qmail-scanner-queue.pl -g" to generate DB version.



               ****** FINAL TEST ******

Please log into an unpriviledged account and run
/usr/local/bin/qmail-scanner-queue.pl -g

If you see the error "Can't do setuid", or "Permission denied", then
refer to the FAQ.

(e.g.  "setuidgid qmaild /usr/local/bin/qmail-scanner-queue.pl -g")


That's it! To report success:

    % (echo 'First M. Last'; cat SYSDEF)|mail [email protected]
Replace First M. Last with your name.
test -f  
/usr/ports/mail/qmail-scanner/work/qmail-scanner-1.25/qmail-scanner-queue.pl
===>  Installing for qmail-scanner-1.25_2
===>   qmail-scanner-1.25_2 depends on executable in : reformime - found
===>   qmail-scanner-1.25_2 depends on file:  
/usr/local/lib/perl5/site_perl/5.8.8/mach/Time/HiRes.pm - found
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/tnef - found
===>   qmail-scanner-1.25_2 depends on executable in : unzip - found
===>   qmail-scanner-1.25_2 depends on file: /var/qmail/bin/qmail-send - found
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/perl5.8.8 - found
===>   qmail-scanner-1.25_2 depends on file: /var/qmail/bin/qmail-send - found
===>   qmail-scanner-1.25_2 depends on file: /usr/local/bin/perl5.8.8 - found
===>   Generating temporary packing list
===>  Checking if mail/qmail-scanner already installed
test -f /usr/local/bin/qmail-scanner-queue.pl &&  /bin/mv  
/usr/local/bin/qmail-scanner-queue.pl   
/usr/local/bin/qmail-scanner-queue.pl.old
*** Error code 1 (ignored)
install  -o root -g wheel -m 555  
/usr/ports/mail/qmail-scanner/work/qmail-scanner-1.25/qmail-scanner-queue.pl  
/usr/local/bin
install  -o root -g wheel -m 555  
/usr/ports/mail/qmail-scanner/work/qmail-scanner-1.25/contrib/qs2mrtg.pl  
/usr/local/bin
install  -o root -g wheel -m 444  
/usr/ports/mail/qmail-scanner/work/qmail-scanner-1.25/quarantine-attachments.txt   
/usr/local/qmailscan/quarantine-attachments.sample
test -f /usr/local/qmailscan/quarantine-attachments.txt ||  install   
-o root -g wheel -m 444  
/usr/ports/mail/qmail-scanner/work/qmail-scanner-1.25/quarantine-attachments.txt  
/usr/local/qmailscan
install  -o root -g wheel -m 444  
/usr/ports/mail/qmail-scanner/work/qmail-scanner-1.25/contrib/mrtg-qmail-scanner.cfg   
/usr/local/share/examples/qs2mrtg
perlscanner: generate new DB file from  
/usr/local/qmailscan/quarantine-attachments.txt
perlscanner: total of 9 entries.
****************************************************
NOTES:
  - You have to configure your anti-virus and anti-spams products!
  - You HAVE to reinstall this port each time you add or remove one!

Now, you have to modify your qmail startup files to call qmail-scanner.
In most case, you just need to add:
   export QMAILQUEUE="${PREFIX}/bin/qmail-scanner-queue.pl"
to your tcpserver startup file.

You can test installation by running 'make test' in port dir.
****************************************************
===>   Registering installation for qmail-scanner-1.25_2
===> SECURITY REPORT:
       This port has installed the following binaries, which execute with
       increased privileges.
/usr/local/bin/qmail-scanner-queue.pl

       If there are vulnerabilities in these programs there may be a security
       risk to the system. FreeBSD makes no guarantee about the security of
       ports included in the Ports Collection. Please type 'make deinstall'
       to deinstall the port if this is a concern.

       For more information, and contact details about the security
       status of this software, see the following webpage:
http://qmail-scanner.sourceforge.net/
antispam:/usr/ports/mail/qmail-scanner#

Why spamassassin scanner it doesn't detected?


Thanks for your answers.

Sébastien

----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.



-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/