Spamassassin is not scanning Mails

[MirkoMachine]

Hi,

I used this article to install Spamassassin. But I had to make a few changes:

1. I did not find any RPM for SuSE 10.1... so i installed from the sources.
2. /var/opt/scalix/sys/smtpd.cfg moved to /var/opt/scalix/XX/s/sys/smtpd.cfg since Scalix 11
3. O OperatorChars=.:%@!^/[]+ no need to change
4. Xspamassassin, S=local:/var/run/spamass.sock, F=, T=C:15m;S:4m;R:4m;E:10m
/var/run/spamass.sock moved to /var/run/sendmail/spamass.sock
5. /var/log/maillog does not exis. instead i looked at /var/log/mail

# ps aux | grep spam
root 26836 0.0 2.4 27444 24916 ? Ss 17:13 0:00 /usr/sbin/spamd -d -c -L -r /var/run/spamd.pid
root 26837 0.0 2.2 27444 23312 ? S 17:13 0:00 spamd child
root 26838 0.0 2.2 27444 23204 ? S 17:13 0:00 spamd child
root 26844 0.0 0.0 10944 788 ? Ssl 17:13 0:00 /usr/local/sbin/spamass-milter -f -p /var/run/sendmail/spamass.sock -m
root 27171 0.0 0.0 1888 644 pts/2 S+ 17:31 0:00 grep spam


/var/log/mail
Jan 17 17:13:23 testserver spamd[26834]: logger: removing stderr method
Jan 17 17:13:23 testserver spamd[26836]: spamd: server started on port 783/tcp (running version 3.1.3)
Jan 17 17:13:23 testserver spamd[26836]: spamd: server pid: 26836
Jan 17 17:13:23 testserver spamd[26836]: spamd: server successfully spawned child process, pid 26837
Jan 17 17:13:23 testserver spamd[26836]: spamd: server successfully spawned child process, pid 26838
Jan 17 17:13:23 testserver spamd[26836]: prefork: child states: II
Jan 17 17:13:26 testserver spamass-milter[26844]: spamass-milter 0.3.1 starting
Jan 17 17:13:30 testserver sendmail[26862]: starting daemon (8.13.6): SMTP+queueing@00:30:00
Jan 17 17:13:30 testserver sendmail-client[26869]: starting daemon (8.13.6): persistent-queueing@00:01:00
Jan 17 17:15:18 testserver clamd[3128]: SelfCheck: Database status OK.


/var/opt/scalix/tr/s/logs/audit
routing
time 1169050767 Wed Jan 17 17:19:27 2007 +60
type 0 message
priority 0 normal
sensitivity 0 normal
importance 0 normal
created-locally 1
hop-count 1
originator XXXXXXXX
subject Spam Test
ua-message-id LC1E5F0F554094852B5E7CD9354A2CAB0.1169050757.XXXXXX
mta-message-id LC1E5F0F554094852B5E7CD9354A2CAB0.1169050757.XXXXXX
part-size 313
part-type 1166 DISTRIBUTION LIST
part-size 69
part-type 1167 TEXT
recipient-to / internet DDT1=RFC-822; DDV1=xxx@yyy.zz;
ack-req 0 none
queue UNIX:MIME
max-nest-depth 0
message-size 3170
part-count 2
delivered-count 1

I sent a mail containing the GTUBE (Generic Test for Unsolicited Bulk Email) both intern -> extern and extern -> intern (XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X)
but it seems that Spamassassin is not scanning any mails... (but CLAMD is scanning my mails, at least this works )

[MirkoMachine]

anyone?

[kiil]

Hi MirkoMachine

Download
[url]
http://www.scalix.com/documents/Scalix_ ... _Draft.pdf
[/url]

and follow its contents beginning at page 37. It work for me. Be careful when inputting the codes written - the formating of the pdf is really bad.

like here::

Code: Select all

4 Immediately below that line, add the following:

#Milter options
#O Milter.LogLevel
O Milter.macros.connect=b, j, _, {daemon_name}, {if_name},
{if_addr}
O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits},
{cert_subject}, {cert_issuer}
O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {auth_ssf},
{auth_author}, {mail_mailer}, {mail_host}, {mail_addr}
O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}

5 In the section MAIL FILTER DEFINITIONS, add the following line:
 
Xspamassassin, S=local:/var/run/spamass-milter/spamass-mil-
ter.sock, F=, T=C:15m;S:4m;R:4m;E:10m


It should be:

Code: Select all


4 Immediately below that line, add the following:

#Milter options
#O Milter.LogLevel
O Milter.macros.connect=b, j, _, {daemon_name}, {if_name}, {if_addr}
O Milter.macros.helo={tls_version}, {cipher}, {cipher_bits}, {cert_subject}, {cert_issuer}
O Milter.macros.envfrom=i, {auth_type}, {auth_authen}, {auth_ssf}, {auth_author}, {mail_mailer}, {mail_host}, {mail_addr}
O Milter.macros.envrcpt={rcpt_mailer}, {rcpt_host}, {rcpt_addr}

5. In the section MAIL FILTER DEFINITIONS, add the following line:

Xspamassassin, S=local:/var/run/spamass-milter/spamass-milter.sock, F=, T=C:15m;S:4m;R:4m;E:10m


Good luck! Kevin

[MirkoMachine]

hi Kevin,

what OS are you using? I'm using SuSE 10.1 on this testserver


in my case the spamass.sock is in /var/run/sendmail

# dir /var/run/sendmail
total 0
srw-rw---- 1 root mail 0 Jan 17 17:13 control
srwxr-xr-x 1 root root 0 Jan 17 17:13 spamass.sock

and , as i wrote before, i got no /var/log/maillog but /var/log/mail

Greetings
Mirko


P.S. still not running

[kiil]

hi Kevin,

what OS are you using? I'm using SuSE 10.1 on this testserver


in my case the spamass.sock is in /var/run/sendmail

# dir /var/run/sendmail
total 0
srw-rw---- 1 root mail 0 Jan 17 17:13 control
srwxr-xr-x 1 root root 0 Jan 17 17:13 spamass.sock

and , as i wrote before, i got no /var/log/maillog but /var/log/mail

Greetings Mirko


P.S. still not running :(

Hi Mirko,

I am running a fresh install and an up to date copy of Fedora Core 5 with Scalix 11. Although the pdf gives instructions for Suse 9, I followed it exactly even installing actuall versions of the software listed as prerequisites.

Prerequisites:

perl-spamassassin-*
spamassassin-*
spamass-milter-*
sendmail-*
sendmail-devel-*

The reason why I suggested using the pdf's method is that the line you wrote:

Code: Select all

Xspamassassin, S=local:/var/run/spamass.sock, F=, T=C:15m;S:4m;R:4m;E:10m

does not match what's written in the pdf.

Code: Select all

Xspamassassin, S=local:/var/run/spamass-milter/spamass-milter.sock, F=, T=C:15m;S:4m;R:4m;E:10m

as to /var/log/maillog just create one your self.

Good luck!


Kevin

[Dimitriy]

Thank You Kevin. Your post helped me clear up a few mis conceptions and problems.

&
Dimitriy