First of all, I apologize for the large post...
I have an interesting issue with my Razor installation on Fedora 7 that I can't
figure out. Razor will not log anything to my razor-agents.log file when an
email is scanned and found to be in the Razor list. I can get it to log only
once by restarting my spamassassin daemon.
Here are my details:
Spamassassin is run from sendmail using spamass-milter here is the line from my
sendmail.mc
INPUT_MAIL_FILTER(`spamassassin',
`S=local:/var/run/spamass-milter/spamass-milter.sock,
F=,T=C:15m;S:4m;R:4m;E:10m')dnl
A `Service spamassassin restart' logs the following in my
/var/log/razor-agent.log file so I know razor logs to the file.
[EMAIL PROTECTED] .razor]# cat /var/log/razor-agent.logOct 15 14:42:21.538221
check[9723]: [ 2] [bootup] Logging initiated LogDebugLevel=9 to
file:/var/log/razor-agent.logOct 15 14:42:21.540486 check[9723]: [ 5] computed
razorhome=/etc/mail/spamassassin/.razor,
conf=/etc/mail/spamassassin/.razor/razor-agent.conf,
ident=/etc/mail/spamassassin/.razor/identity-ruCTKnuVssOct 15 14:42:21.541407
check[9723]: [ 8] Client supported_engines: 4 8Oct 15 14:42:21.543351
check[9723]: [ 8] prep_mail done: mail 1 headers=101, mime0=1376Oct 15
14:42:21.544798 check[9723]: [ 5] read_file: 1 items read from
/etc/mail/spamassassin/.razor/servers.discovery.lstOct 15 14:42:21.546380
check[9723]: [ 5] read_file: 2 items read from
/etc/mail/spamassassin/.razor/servers.nomination.lstOct 15 14:42:21.547767
check[9723]: [ 5] read_file: 2 items read from
/etc/mail/spamassassin/.razor/servers.catalogue.lstOct 15 14:42:21.549624
check[9723]: [ 9] Assigning defaults to joy.cloudmark.comOct 15 14:42:21.550607
check[9723]: [ 9] Assigning defaults to folly.cloudmark.comOct 15
14:42:21.551594 check[9723]: [ 9] Assigning defaults to c104.cloudmark.comOct
15 14:42:21.552714 check[9723]: [ 9] Assigning defaults to
c103.cloudmark.comOct 15 14:42:21.558546 check[9723]: [ 5] read_file: 27 items
read from /etc/mail/spamassassin/.razor/server.c105.cloudmark.com.confOct 15
14:42:21.563064 check[9723]: [ 5] read_file: 27 items read from
/etc/mail/spamassassin/.razor/server.c105.cloudmark.com.confOct 15
14:42:21.567539 check[9723]: [ 5] read_file: 27 items read from
/etc/mail/spamassassin/.razor/server.c104.cloudmark.com.confOct 15
14:42:21.573254 check[9723]: [ 5] read_file: 27 items read from
/etc/mail/spamassassin/.razor/server.c104.cloudmark.com.confOct 15
14:42:21.577575 check[9723]: [ 5] read_file: 25 items read from
/etc/mail/spamassassin/.razor/server.joy.cloudmark.com.confOct 15
14:42:21.581684 check[9723]: [ 5] read_file: 25 items read from
/etc/mail/spamassassin/.razor/server.joy.cloudmark.com.confOct 15
14:42:21.586172 check[9723]: [ 5] read_file: 27 items read from
/etc/mail/spamassassin/.razor/server.c103.cloudmark.com.confOct 15
14:42:21.591131 check[9723]: [ 5] read_file: 27 items read from
/etc/mail/spamassassin/.razor/server.c103.cloudmark.com.confOct 15
14:42:21.592137 check[9723]: [ 5] 159271 seconds before closest server
discoveryOct 15 14:42:21.592987 check[9723]: [ 6] c104.cloudmark.com is a
Catalogue Server srl 5140; computed min_cf=21, Server se: 3BC8Oct 15
14:42:21.593923 check[9723]: [ 8] Computed supported_engines: 4 8Oct 15
14:42:21.594624 check[9723]: [ 8] Using next closest server
c104.cloudmark.com:2703, cached info srl 5140Oct 15 14:42:21.595993
check[9723]: [ 8] mail 1 has no subjectOct 15 14:42:21.597854 check[9723]: [ 6]
preproc: mail 1.0 went from 1376 bytes to 1339Oct 15 14:42:21.598569
check[9723]: [ 6] computing sigs for mail 1.0, len 1339Oct 15 14:42:21.608506
check[9723]: [ 6] Engine (8) didn't produce a signature for mail 1.0Oct 15
14:42:21.609432 check[9723]: [ 6] skipping whitelist file (empty?):
/etc/mail/spamassassin/.razor/razor-whitelistOct 15 14:42:21.610092
check[9723]: [ 5] Connecting to c104.cloudmark.com ...Oct 15 14:42:21.783360
check[9723]: [ 8] Connection establishedOct 15 14:42:21.784151 check[9723]: [
4] c104.cloudmark.com >> 36 server greeting:
sn=C&srl=5140&a=1&a=cg&ep4=7542-10Oct 15 14:42:21.786070 check[9723]: [ 4]
c104.cloudmark.com << 25Oct 15 14:42:21.786511 check[9723]: [ 6]
cn=razor-agents&cv=2.84Oct 15 14:42:21.787623 check[9723]: [ 6]
c104.cloudmark.com is a Catalogue Server srl 5140; computed min_cf=21, Server
se: 3BC8Oct 15 14:42:21.788608 check[9723]: [ 8] Computed supported_engines: 4
8Oct 15 14:42:21.789363 check[9723]: [ 8] mail 1.0 e4 sig:
xFaZIZUVHk90OQfARnenjx5BZTMAOct 15 14:42:21.790092 check[9723]: [ 5] mail 1.0
e8 got no sigOct 15 14:42:21.790855 check[9723]: [ 8] preparing 1 queriesOct 15
14:42:21.791779 check[9723]: [ 8] sending 1 batchesOct 15 14:42:21.792537
check[9723]: [ 4] c104.cloudmark.com << 52Oct 15 14:42:21.792950 check[9723]: [
6] a=c&e=4&ep4=7542-10&s=xFaZIZUVHk90OQfARnenjx5BZTMAOct 15 14:42:21.991659
check[9723]: [ 4] c104.cloudmark.com >> 5Oct 15 14:42:21.992340 check[9723]: [
6] response to sent.2p=0Oct 15 14:42:21.994182 check[9723]: [ 6] mail 1.0 e=4
sig=xFaZIZUVHk90OQfARnenjx5BZTMA: sig not found.Oct 15 14:42:21.994754
check[9723]: [ 7] method 4: mail 1.0: no-contention part, spam=0Oct 15
14:42:21.995228 check[9723]: [ 7] method 4: mail 1: all non-contention parts
not spam, mail not spamOct 15 14:42:21.995655 check[9723]: [ 3] mail 1 is not
known spam.Oct 15 14:42:21.996162 check[9723]: [ 5] disconnecting from server
c104.cloudmark.comOct 15 14:42:21.996915 check[9723]: [ 4] c104.cloudmark.com
<< 5Oct 15 14:42:21.997318 check[9723]: [ 6] [EMAIL PROTECTED] .razor]#
Here is my spamassassin local.cf
[EMAIL PROTECTED] spamassassin]# cat local.cf# These values can be overridden
by editing ~/.spamassassin/user_prefs.cf# (see spamassassin(1) for details)
# These should be safe assumptions and allow for simple visual sifting# without
risking lost emails.
required_hits 5report_safe 0rewrite_header Subject [SPAM?]# custom changes by
LOuse_bayes 0bayes_auto_learn 0skip_rbl_checks
1use_razor2 1score RAZOR2_CHECK 8.00razor_config
/etc/mail/spamassassin/.razor/razor-agent.confuse_pyzor
1pyzor_options --homedir /etc/mail/spamassassinpyzor_path
/usr/bin/pyzoradd_header all Pyzor _PYZOR_score PYZOR_CHECK 5.00pyzor_max
[EMAIL PROTECTED] spamassassin]#
If I change the RAZOR2_CHECK to be 100 and then tail -f my maillog, I catch
spamassassin rating over 100 for different messages so I know Razor is scoring
correctly.
Here is my spamassassin v310.pre:
[EMAIL PROTECTED] spamassassin]# cat v310.pre# This is the right place to
customize your installation of SpamAssassin.## See 'perldoc
Mail::SpamAssassin::Conf' for details of what can be# tweaked.## This file was
installed during the installation of SpamAssassin 3.1.0,# and contains plugin
loading commands for the new plugins added in that# release. It will not be
overwritten during future SpamAssassin installs,# so you can modify it to
enable some disabled-by-default plugins below,# if you so wish.## There are now
multiple files read to enable plugins in the# /etc/mail/spamassassin directory;
previously only one, "init.pre" was# read. Now both "init.pre", "v310.pre",
and any other files ending in# ".pre" will be read. As future releases are
made, new plugins will be# added to new files, named according to the release
they're added
in.###########################################################################
# DCC - perform DCC message checks.## DCC is disabled here because it is not
open source. See the DCC# license for more details.##loadplugin
Mail::SpamAssassin::Plugin::DCC
# Pyzor - perform Pyzor message checks.#loadplugin
Mail::SpamAssassin::Plugin::Pyzor
# Razor2 - perform Razor2 message checks.#loadplugin
Mail::SpamAssassin::Plugin::Razor2
# SpamCop - perform SpamCop message reporting##loadplugin
Mail::SpamAssassin::Plugin::SpamCop
# AntiVirus - some simple anti-virus checks, this is not a replacement# for an
anti-virus filter like Clam AntiVirus##loadplugin
Mail::SpamAssassin::Plugin::AntiVirus
# AWL - do auto-whitelist checks#loadplugin Mail::SpamAssassin::Plugin::AWL
# AutoLearnThreshold - threshold-based discriminator for Bayes auto-learning##
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
# TextCat - language guesser#loadplugin Mail::SpamAssassin::Plugin::TextCat
# AccessDB - lookup from-addresses in access database##loadplugin
Mail::SpamAssassin::Plugin::AccessDB
# WhitelistSubject - Whitelist/Blacklist certain subject regular
expressions#loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject
############################################################################
experimental plugins
# DomainKeys - perform DomainKeys verification## External modules required for
use, see INSTALL for more information.# Note that this may be redundant if you
also plan to use the DKIM plugin.##loadplugin
Mail::SpamAssassin::Plugin::DomainKeys
# MIMEHeader - apply regexp rules against MIME headers in the
message#loadplugin Mail::SpamAssassin::Plugin::MIMEHeader
# ReplaceTags#loadplugin Mail::SpamAssassin::Plugin::[EMAIL PROTECTED]
spamassassin]#
Here is my razor-agent.conf
[EMAIL PROTECTED] .razor]# cat razor-agent.conf## Razor2 config file##
Autogenerated by Razor-Agents v2.84# Mon Oct 15 12:10:50 2007# Non-default
values taken from /etc/mail/spamassassin/.razor//razor-agent.conf## see
razor-agent.conf(5) man page#
debuglevel = 9identity = identityignorelist
= 0listfile_catalogue = servers.catalogue.lstlistfile_discovery =
servers.discovery.lstlistfile_nomination = servers.nomination.lstlogfile
= /var/log/razor-agent.loglogic_method = 4min_cf
= acrazordiscovery = discovery.razor.cloudmark.comrazorhome
= /etc/mail/spamassassin/.razorrediscovery_wait =
172800report_headers = 1turn_off_discovery = 0use_engines
= 4,8whitelist = [EMAIL PROTECTED] .razor]#
Regards,
The Speedster
_________________________________________________________________
R U Ready for Windows Live Messenger Beta 8.5? Try it today!
http://entertainment.sympatico.msn.ca/WindowsLiveMessenger
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Razor-users mailing list
Razor-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users
