Hi Eric.
I checked my /var/qmail/supervise/smtp/run and this is what it contains. No
mention of clamav / spamassassin / simscan:
#!/bin/sh
QMAILDUID=`id -u vpopmail`
NOFILESGID=`id -g vpopmail`
MAXSMTPD=`cat /var/qmail/control/concurrencyincoming`
SPAMDYKE="/usr/bin/spamdyke"
SPAMDYKE_CONF="/etc/spamdyke/spamdyke.conf"
SMTPD="/var/qmail/bin/qmail-smtpd"
TCP_CDB="/etc/tcprules.d/tcp.smtp.cdb"
HOSTNAME=`hostname`
VCHKPW="/home/vpopmail/bin/vchkpw"
REQUIRE_AUTH=0
exec /usr/bin/softlimit -m 128000000 \
/usr/bin/tcpserver -v -R -H -l $HOSTNAME -x $TCP_CDB -c "$MAXSMTPD" \
-u "$QMAILDUID" -g "$NOFILESGID" 0 smtp \
$SPAMDYKE --config-file $SPAMDYKE_CONF \
$SMTPD $VCHKPW /bin/true 2>&1
I haven’t modified it from the stock install.
I don’t have any .qmail-default file anywhere that mentions dspam, but the
process is running, and when I change /etc/spamassassin/local.cf and systemctl
restart dspam, it reacts to the changes.
However, right now I”m in a quasi-panic because at some point after running
sa-learn against 1500+ spams and 2000+ hams, I started having massive
deliverability problems with almost email being rejected with the
USER_IN_BLACKLIST tag applied, even when I removed the (relatively few)
blacklist_from lines in my local.cf and restarted everything, even rebooted.
There was no explicit blacklist set anywhere, and for the life of me I have no
idea why that tag is being applied. There’s no way that I can find so far to
get spamassassin to show the blacklist, or indicate where it can be found. The
only way I’ve been able to restore deliverability so far is to set the score
for USER_IN_BLACKLIST to 0 in local.cf.
Ack?
- Steve
> On Jan 30, 2017, at 11:59 AM, Eric Broch <[email protected]> wrote:
>
> Steve,
>
> I think you mean simscan.
>
> Basically, the email flow is as follows for QMT (look in
> '/var/qmail/supervise/smtp/run'):
> 1) softlimit
>
> 2) tcpserver (utilizes the config file /etc/tcprules.d/tcp.smtp where
> QMAILQUEUE is configured as simscan)
> 3) simscan (utilizes /var/qmail/control/simcontrol where clamav and
> spamassassin are invoked)
> 4) clamav & spamassassin
>
> 5) spamdyke
>
> 6) qmail-smtpd ...
>
>
> Dspam on the other hand is called later during delivery. I use it in
> .qmail-default.
>
>
>
>
>
> On 1/30/2017 9:09 AM, Steve Linberg wrote:
>> Thanks Eric. It’s very likely that I”m confused about this - I am using
>> dspam. My understanding is that dspam is the daemon that launches
>> SpamAssassin and connects it to qmail, but I admit I’m fuzzy on the details.
>> The soup of spam-related things I know I am running are:
>>
>> SpamAssassin: evaluate individual messages and decide whether something is
>> spam or not
>> pyzor: additional information used by SpamAssassin to decide if something is
>> spammy or not
>> dspam: daemon wrapper around SpamAssassin
>> spamdyke: erm…. something else that connects to SpamAssassin somehow
>>
>> But again, I’m not completely clear on how it all fits together, and it’s
>> entirely possible I’ve got something miswired? On my older setup before your
>> modernization of it, spamc was a part of the process, but that seems to be
>> removed now?
>>
>> Whenever I make changes to /etc/spamassassin/local.cf, I activate them with
>> “systemctl restart spamd”. I don’t restart qmail.
>>
>> Any dope-slaps would be most welcome :)
>>
>> - Steve
>>
>>
>>> On Jan 30, 2017, at 10:59 AM, Eric Broch <[email protected]
>>> <mailto:[email protected]>> wrote:
>>>
>>> Steve,
>>>
>>> You might try Dspam. I still use it on my home server with a couple
>>> domains. If you need any help let me know.
>>>
>>> Eric
>>>
>>> On 1/30/2017 8:39 AM, Steve Linberg wrote:
>>>> Thanks for the suggestions, everyone. This is a small-scale system that’s
>>>> mostly for personal use, so unfortunately it doesn’t warrant the expense
>>>> of a standalone appliance for spam, so I’m pretty much limited to what I
>>>> can roll up on the box itself. I’ve used SA+qmail in various permutations
>>>> for about 15 years, and for the most part it’s worked reliably and well,
>>>> but every once in a while spammers change tactics and figure out a way
>>>> through and there’s an upsurge for a bit.
>>>>
>>>> I’ll give sa-learn a shot and see if it improves anything.
>>>>
>>>> Cheers,
>>>>
>>>> Steve
>>>>
>>>> --
>>>> Steve Linberg, Chief Goblin
>>>> Silicon Goblin Technologies
>>>> http://silicongoblin.com <http://silicongoblin.com/>
>>>> Be kind. Remember, everyone you meet is fighting a hard battle.
>>>>
>>>
>>> --
>>> Eric Broch, IMSO, DAM, NGOO, DITH, URTS
>>> White Horse Technical Consulting (WHTC)
>>> 406.214.6802
>>
>> --
>> Steve Linberg, Chief Goblin
>> Silicon Goblin Technologies
>> http://silicongoblin.com <http://silicongoblin.com/>
>> Be kind. Remember, everyone you meet is fighting a hard battle.
>>
>
> --
> Eric Broch, IMSO, DAM, NGOO, DITH, URTS
> White Horse Technical Consulting (WHTC)
> 406.214.6802
--
Steve Linberg, Chief Goblin
Silicon Goblin Technologies
http://silicongoblin.com
Be kind. Remember, everyone you meet is fighting a hard battle.
