Re: Mail gateway server with amavis on CentOS 8

On 28/12/2020 2:01 μ.μ., Matus UHLAR - fantomas wrote:

> score 2.7 for BAYES_999 is manually tuned. the original is 0.2
>
> are you sure that /var/spool/amavisd/var/.spamassassin/ is correct path?
> try "locate bayes_seen" to find out.

Hi Matus,

Thanks for your reply.

On your two questions:

1. On both servers, in my /etc/mail/spamassassin/local.cf, I have added:

    add_header all Report _REPORT_

    bayes_min_ham_num   0
    bayes_min_spam_num  0

    bayes_auto_learn 0

    # Bayesian filtering yeah!
    # bayes_path '/var/amavis/var/.spamassassin'
    # bayes_file_mode 0775
    bayes_expiry_max_db_size 300000
    # 150000 = ~4 MiB

    score LOTS_OF_MONEY 0.9
    score FREEMAIL_FORGED_FROMDOMAIN 0.5
    score WEIRD_PORT 1.5
    score TO_IN_SUBJ 1.0

    score RCVD_IN_MSPIKE_BL 1.0
    score RCVD_IN_MSPIKE_L5 2.5
    score RCVD_IN_MSPIKE_L4 2.0
    score RCVD_IN_MSPIKE_L3 1.5
    score RCVD_IN_MSPIKE_L2 1.0
    score RCVD_IN_MSPIKE_H5 -1.0
    score RCVD_IN_MSPIKE_H4 -0.8
    score RCVD_IN_MSPIKE_H3 -0.6
    score RCVD_IN_MSPIKE_H2 -0.4
    score RCVD_IN_MSPIKE_WL -0.5
    score SPF_NONE 0.001
    score SPF_HELO_NONE 0.001
    score SPF_PASS -0.1
    score SPF_HELO_PASS -0.1
    score SPF_FAIL 3.0
    score SPF_HELO_FAIL 3.0
    score SPF_NEUTRAL 0.001
    score SPF_HELO_NEUTRAL 0.001
    score SPF_SOFTFAIL 1.0
    score SPF_HELO_SOFTFAIL 1.0

    score BAYES_99 3.7
    score BAYES_999 2.7

    score RP_MATCHES_RCVD -0.01
    score RCVD_IN_DNSWL_LOW -0.01

    score RCVD_IN_IADB_VOUCHED  0
    score RCVD_IN_IADB_OPTIN  0
    score RCVD_IN_IADB_RDNS  0

    score RCVD_IN_DNSWL_MED -1

I can't remember what was the exact source of the above, but I had 
followed some tutorial(s) back in 2016 to improve bayes filtering.

2. Interestingly there are two dirs with identical content:

==============================================================================================

# cd /var/spool/
# find ./ -name 'bayes_seen'
./amavisd/var/.spamassassin/bayes_seen
# ls -la ./amavisd/var/.spamassassin/
total 4724
drwx------. 2 amavis amavis    4096 Dec 28 11:40 .
drwx------. 4 amavis amavis    4096 Dec 16 16:53 ..
-rw-------. 1 amavis amavis   78048 Dec 28 14:06 bayes_journal
-rw-------. 1 amavis amavis  684032 Dec 28 11:26 bayes_seen
-rw-------. 1 amavis amavis 5013504 Dec 28 11:26 bayes_toks
-rw-r--r--. 1 amavis amavis     299 Dec 28 11:13 user_prefs
#
# ls -la /var/spool/amavisd/
.bash_history     bayes-0.db        bayes-mailgw3.db db/               
quarantine/       reported-ham/ reported-spam/    .spamassassin/    
tmp/              var/
#
# ls -la /var/spool/amavisd/var/.spamassassin/
total 4724
drwx------. 2 amavis amavis    4096 Dec 28 11:40 .
drwx------. 4 amavis amavis    4096 Dec 16 16:53 ..
-rw-------. 1 amavis amavis   78048 Dec 28 14:06 bayes_journal
-rw-------. 1 amavis amavis  684032 Dec 28 11:26 bayes_seen
-rw-------. 1 amavis amavis 5013504 Dec 28 11:26 bayes_toks
-rw-r--r--. 1 amavis amavis     299 Dec 28 11:13 user_prefs

===============================================================================================

In amavisd.conf I have configured:

    $MYHOME = '/var/spool/amavisd';
    $TEMPBASE = "$MYHOME/tmp";
    $ENV{TMPDIR} = $TEMPBASE;
    $QUARANTINEDIR = "/var/blockedmail";
    $db_home   = "$MYHOME/db";
    $helpers_home = "$MYHOME/var";  # working directory for SpamAssassin, -S

Why do I find two directories with identical content? I could guess that 
my imported bayes db is overwritten by an allien db?

Should I probably re-import the migrated bayes db into 
/var/spool/amavisd rather than in /var/spool/amavisd/var/.spamassassin?

Nick