Hi Scott,
I appreciated your contact!
>>a) what does "spamassassin -D --lint" give you?
# spamassassin -D --lint
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: ignore: using a test message to lint rules
debug: using "/usr/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: using "/root/.spamassassin" for user state dir
debug: bayes: no dbs present, cannot scan: /root/.spamassassin/bayes_toks
debug: Score set 1 chosen.
debug: Initialising learner
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13570 untie-ing
debug: bayes: 13570 untie-ing db_toks
debug: is Net::DNS::Resolver available? yes
debug: trying (3) nytimes.com...
debug: looking up MX for 'nytimes.com'
debug: MX for 'nytimes.com' exists? 1
debug: MX lookup of nytimes.com succeeded => Dns available (set
dns_available to hardcode)
debug: is DNS available? 1
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=1.7
debug: running raw-body-text per-line regexp tests; score so far=1.7
debug: running uri tests; score so far=1.7
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=1.7
debug: Current PATH is:
/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin:/usr
/X11R6/bin:/root/bin
debug: Pyzor is not available: pyzor not found
debug: Razor2 is available
debug: Razor2 is available
debug: entering helper-app run mode
Razor-Log: Computed razorhome from env: /root/.razor
Razor-Log: Found razorhome: /root/.razor
Razor-Log: No /root/.razor/razor-agent.conf found, skipping.
Razor-Log: No razor-agent.conf found, using defaults.
Jun 17 08:38:02.270217 check[13570]: [ 1] [bootup] Logging initiated
LogDebugLevel=9 to stdout
Jun 17 08:38:02.285969 check[13570]: [ 5] computed razorhome=/root/.razor,
conf=, ident=/root/.razor/identity
Jun 17 08:38:02.286530 check[13570]: [ 8] Client supported_engines: 1 2 3 4
Jun 17 08:38:02.287310 check[13570]: [ 8] prep_mail done: mail 1
headers=92, mime0=1376
Jun 17 08:38:02.287993 check[13570]: [ 5] Can't read file
/root/.razor/servers.discovery.lst: No such file or directory
Jun 17 08:38:02.288429 check[13570]: [ 5] Can't read file
/root/.razor/servers.nomination.lst: No such file or directory
Jun 17 08:38:02.288726 check[13570]: [ 5] Can't read file
/root/.razor/servers.catalogue.lst: No such file or directory
Jun 17 08:38:02.289359 check[13570]: [ 5] no listfile:
/root/.razor/servers.catalogue.lst
Jun 17 08:38:02.289775 check[13570]: [ 6] no discovery listfile:
/root/.razor/servers.discovery.lst
Jun 17 08:38:02.289980 check[13570]: [ 5] Finding Discovery Servers via DNS
in the razor2.cloudmark.com zone
Jun 17 08:38:03.386275 check[13570]: [ 6] Found 3 Discovery Servers via DNS
in the razor2.cloudmark.com zone
Jun 17 08:38:03.386675 check[13570]: [ 8] Checking with Razor Discovery
Server 66.151.150.35
Jun 17 08:38:03.386948 check[13570]: [ 6] No proper port specified, using
2703
Jun 17 08:38:03.387230 check[13570]: [ 5] Connecting to 66.151.150.35 ...
Jun 17 08:38:27.287937 check[13570]: [ 3] Timed out (15 sec) while reading
from .
Jun 17 08:38:27.288553 check[13570]: [ 5] no listfile:
/root/.razor/servers.catalogue.lst
Jun 17 08:38:27.288850 check[13570]: [ 8] already have 3 discovery servers
Jun 17 08:38:27.289063 check[13570]: [ 8] Checking with Razor Discovery
Server 66.151.150.35
Jun 17 08:38:27.289409 check[13570]: [ 6] No proper port specified, using
2703
Jun 17 08:38:27.289606 check[13570]: [ 5] Connecting to 66.151.150.35 ...
Jun 17 08:38:47.298644 check[13570]: [ 3] Unable to connect to
66.151.150.35:2703; Reason: Operation now in progress.
Jun 17 08:38:47.298937 check[13570]: [ 5] Razor Discovery Server
66.151.150.35 not answering
Jun 17 08:38:47.299116 check[13570]: [ 8] Checking with Razor Discovery
Server 66.151.150.36
Jun 17 08:38:47.299425 check[13570]: [ 6] No proper port specified, using
2703
Jun 17 08:38:47.299621 check[13570]: [ 5] Connecting to 66.151.150.36 ...
Jun 17 08:39:07.309031 check[13570]: [ 3] Unable to connect to
66.151.150.36:2703; Reason: Operation now in progress.
Jun 17 08:39:07.309326 check[13570]: [ 5] Razor Discovery Server
66.151.150.36 not answering
Jun 17 08:39:07.309509 check[13570]: [ 8] Checking with Razor Discovery
Server 66.151.150.37
Jun 17 08:39:07.309824 check[13570]: [ 6] No proper port specified, using
2703
Jun 17 08:39:07.310015 check[13570]: [ 5] Connecting to 66.151.150.37 ...
Jun 17 08:39:27.319275 check[13570]: [ 3] Unable to connect to
66.151.150.37:2703; Reason: Operation now in progress.
Jun 17 08:39:27.319554 check[13570]: [ 5] Razor Discovery Server
66.151.150.37 not answering
Jun 17 08:39:27.319939 check[13570]: [ 5] Razor Discovery Server
66.151.150.35 not answering
Jun 17 08:39:27.320281 check[13570]: [ 8] Checking with Razor Discovery
Server 66.151.150.36
Jun 17 08:39:27.320521 check[13570]: [ 6] No proper port specified, using
2703
Jun 17 08:39:27.320691 check[13570]: [ 5] Connecting to 66.151.150.36 ...
Jun 17 08:39:47.329584 check[13570]: [ 3] Unable to connect to
66.151.150.36:2703; Reason: Operation now in progress.
Jun 17 08:39:47.329874 check[13570]: [ 5] Razor Discovery Server
66.151.150.36 not answering
Jun 17 08:39:47.330062 check[13570]: [ 8] Checking with Razor Discovery
Server 66.151.150.37
Jun 17 08:39:47.330370 check[13570]: [ 6] No proper port specified, using
2703
Jun 17 08:39:47.330565 check[13570]: [ 5] Connecting to 66.151.150.37 ...
Jun 17 08:40:07.339890 check[13570]: [ 3] Unable to connect to
66.151.150.37:2703; Reason: Operation now in progress.
Jun 17 08:40:07.340202 check[13570]: [ 5] Razor Discovery Server
66.151.150.37 not answering
razor2 check skipped: No such file or directory IO::Socket::INET: Operation
now in progress ...propagated at
/usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm line 401.
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0 highest cf score: 0
debug: DCC is not available: dccproc not found
debug: all '*From' addrs: [EMAIL PROTECTED]
debug: all '*To' addrs:
debug: running meta tests; score so far=1.8
debug: is spam? score=1.8 required=5
tests=DATE_MISSING,MISSING_HEADERS,NO_REAL_NAME
debug: bayes: 13570 untie-ing
#
>>b) start spamd thus: "/usr/local/bin/spamd -a -c -D -C
/etc/mail/spamassassin"
#/usr/local/bin/spamd -a -c -D -C /etc/mail/spamassassin
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: ignore: test message to precompile patterns and load modules
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/tmp/spamassassin-13742/.spamassassin" for user state dir
debug: bayes: no dbs present, cannot scan:
/tmp/spamassassin-13742/.spamassassin/bayes_toks
debug: Score set 1 chosen.
debug: Initialising learner
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13742 untie-ing
debug: bayes: 13742 untie-ing db_toks
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0
debug: running raw-body-text per-line regexp tests; score so far=0
debug: running uri tests; score so far=0
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=0
debug: running meta tests; score so far=0
debug: using "/tmp/spamassassin-13742/.spamassassin" for user state dir
debug: lock: 13742 created
/tmp/spamassassin-13742/.spamassassin/auto-whitelist.lock.bh.mydomain.com.br
.13742
debug: lock: 13742 trying to get lock on
/tmp/spamassassin-13742/.spamassassin/auto-whitelist with 0 retries
debug: lock: 13742 link to
/tmp/spamassassin-13742/.spamassassin/auto-whitelist.lock: link ok
debug: Tie-ing to DB file R/W in
/tmp/spamassassin-13742/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based):
[EMAIL PROTECTED]|ip=none scores 0/0
debug: AWL active, pre-score: 0, mean: undef, originating-ip: undef
debug: Post AWL score: 0
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 13742 unlink
/tmp/spamassassin-13742/.spamassassin/auto-whitelist.lock
debug: is spam? score=0 required=5 tests=
debug: bayes: 13742 untie-ing
server started on port 783 (running version 2.53)
server pid: 13742
logmsg: server started on port 783 (running version 2.53)
logmsg: connection from localhost.mydomain.com.br [127.0.0.1] at port 1869
logmsg: info: setuid to clamav succeeded
debug: user has changed
debug: bayes: 13808 untie-ing
debug: using "/home/clamav/.spamassassin" for user state dir
debug: bayes: 13808 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_toks
debug: bayes: 13808 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_seen
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13808 untie-ing
debug: bayes: 13808 untie-ing db_toks
debug: bayes: 13808 untie-ing db_seen
debug: Score set 1 chosen.
logmsg: processing message <[EMAIL PROTECTED]> for
clamav:1007.
debug: using "/home/clamav/.spamassassin" for user state dir
debug: bayes: 13808 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_toks
debug: bayes: 13808 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_seen
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13808 untie-ing
debug: bayes: 13808 untie-ing db_toks
debug: bayes: 13808 untie-ing db_seen
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0
debug: running raw-body-text per-line regexp tests; score so far=0
debug: running uri tests; score so far=0
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=0
debug: running meta tests; score so far=0
debug: auto-learn? safety=4, ham=-2, spam=15, body-hits=0, head-hits=0
debug: auto-learn: currently using scoreset 1. no need to recompute.
debug: auto-learn? no: inside auto-learn thresholds or safety zone around
required_hits
debug: using "/home/clamav/.spamassassin" for user state dir
debug: lock: 13808 created
/home/clamav/.spamassassin/auto-whitelist.lock.bh.mydomain.com.br.13808
debug: lock: 13808 trying to get lock on
/home/clamav/.spamassassin/auto-whitelist with 0 retries
debug: lock: 13808 link to /home/clamav/.spamassassin/auto-whitelist.lock:
link ok
debug: Tie-ing to DB file R/W in /home/clamav/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=201.128 scores
0/0
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=none scores 0/0
debug: AWL active, pre-score: 0, mean: undef, originating-ip: 201.128.124.31
debug: add_score: New count: 1, new totscore: 0
debug: Post AWL score: 0
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 13808 unlink /home/clamav/.spamassassin/auto-whitelist.lock
debug: is spam? score=0 required=5 tests=
logmsg: clean message (0.0/5.0) for clamav:1007 in 0.2 seconds, 1287 bytes.
debug: bayes: 13808 untie-ing
logmsg: connection from localhost.mydomain.com.br [127.0.0.1] at port 1876
logmsg: info: setuid to clamav succeeded
debug: user has changed
debug: bayes: 13880 untie-ing
debug: using "/home/clamav/.spamassassin" for user state dir
debug: bayes: 13880 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_toks
debug: bayes: 13880 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_seen
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13880 untie-ing
debug: bayes: 13880 untie-ing db_toks
debug: bayes: 13880 untie-ing db_seen
debug: Score set 1 chosen.
logmsg: processing message
<[EMAIL PROTECTED]> for clamav:1007.
debug: using "/home/clamav/.spamassassin" for user state dir
debug: bayes: 13880 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_toks
debug: bayes: 13880 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_seen
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13880 untie-ing
debug: bayes: 13880 untie-ing db_toks
debug: bayes: 13880 untie-ing db_seen
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0
debug: running raw-body-text per-line regexp tests; score so far=0
debug: running uri tests; score so far=0
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=0
debug: running meta tests; score so far=0
debug: auto-learn? safety=4, ham=-2, spam=15, body-hits=0, head-hits=0
debug: auto-learn: currently using scoreset 1. no need to recompute.
debug: auto-learn? no: inside auto-learn thresholds or safety zone around
required_hits
debug: using "/home/clamav/.spamassassin" for user state dir
debug: lock: 13880 created
/home/clamav/.spamassassin/auto-whitelist.lock.bh.mydomain.com.br.13880
debug: lock: 13880 trying to get lock on
/home/clamav/.spamassassin/auto-whitelist with 0 retries
debug: lock: 13880 link to /home/clamav/.spamassassin/auto-whitelist.lock:
link ok
debug: Tie-ing to DB file R/W in /home/clamav/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=192.168 scores
0/0
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=none scores 0/0
debug: AWL active, pre-score: 0, mean: undef, originating-ip: 192.168.4.30
debug: add_score: New count: 1, new totscore: 0
debug: Post AWL score: 0
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 13880 unlink /home/clamav/.spamassassin/auto-whitelist.lock
debug: is spam? score=0 required=5 tests=
logmsg: clean message (0.0/5.0) for clamav:1007 in 0.1 seconds, 9108 bytes.
debug: bayes: 13880 untie-ing
logmsg: connection from localhost.mydomain.com.br [127.0.0.1] at port 1878
logmsg: info: setuid to clamav succeeded
debug: user has changed
debug: bayes: 13914 untie-ing
debug: using "/home/clamav/.spamassassin" for user state dir
debug: bayes: 13914 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_toks
debug: bayes: 13914 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_seen
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13914 untie-ing
debug: bayes: 13914 untie-ing db_toks
debug: bayes: 13914 untie-ing db_seen
debug: Score set 1 chosen.
logmsg: processing message
<[EMAIL PROTECTED]> for clamav:1007.
debug: using "/home/clamav/.spamassassin" for user state dir
debug: bayes: 13914 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_toks
debug: bayes: 13914 tie-ing to DB file R/O
/home/clamav/.spamassassin/bayes_seen
debug: debug: Only 0 spam(s) in Bayes DB < 200
debug: bayes: 13914 untie-ing
debug: bayes: 13914 untie-ing db_toks
debug: bayes: 13914 untie-ing db_seen
debug: running header regexp tests; score so far=0
debug: running body-text per-line regexp tests; score so far=0
debug: running raw-body-text per-line regexp tests; score so far=0
debug: running uri tests; score so far=0
debug: uri tests: Done uriRE
debug: running full-text regexp tests; score so far=0
debug: running meta tests; score so far=0
debug: auto-learn? safety=4, ham=-2, spam=15, body-hits=0, head-hits=0
debug: auto-learn: currently using scoreset 1. no need to recompute.
debug: auto-learn? no: inside auto-learn thresholds or safety zone around
required_hits
debug: using "/home/clamav/.spamassassin" for user state dir
debug: lock: 13914 created
/home/clamav/.spamassassin/auto-whitelist.lock.bh.mydomain.com.br.13914
debug: lock: 13914 trying to get lock on
/home/clamav/.spamassassin/auto-whitelist with 0 retries
debug: lock: 13914 link to /home/clamav/.spamassassin/auto-whitelist.lock:
link ok
debug: Tie-ing to DB file R/W in /home/clamav/.spamassassin/auto-whitelist
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=192.168
scores 0/0
debug: auto-whitelist (db-based): [EMAIL PROTECTED]|ip=none
scores 0/0
debug: AWL active, pre-score: 0, mean: undef, originating-ip: 192.168.3.8
debug: add_score: New count: 1, new totscore: 0
debug: Post AWL score: 0
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 13914 unlink /home/clamav/.spamassassin/auto-whitelist.lock
debug: is spam? score=0 required=5 tests=
logmsg: clean message (0.0/5.0) for clamav:1007 in 0.0 seconds, 2301 bytes.
Could you help me?
Thanks a lot and regards.
Eicke.
----- Original Message -----
From: "Scott Truman" <[EMAIL PROTECTED]>
To: "Eicke" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Thursday, June 17, 2004 5:05 AM
Subject: RE: Doubts
> -----Original Message-----
> From: Eicke
> Sent: Thursday, 17 June 2004 8:17 a.m.
>
>
> Hi folks, I continuing receiving spams, I am very worried ...
> The messages was verified by spamd but the spams are
> delivered to users mail
> box.
> I get the following messages from my maillog:
>
> Jun 16 17:09:40 spamd[4928]: connection from localhost.domain.com.br
> [127.0.0.1] at port 3423
> Jun 16 17:09:40 spamd[4928]: connection from localhost.domain.com.br
> [127.0.0.1] at port 3423
> Jun 16 17:09:40 spamd[4978]: info: setuid to clamav succeeded
> Jun 16 17:09:40 spamd[4978]: info: setuid to clamav succeeded
> Jun 16 17:09:40 spamd[4978]: processing message
> <[EMAIL PROTECTED]> for clamav:1007.
> Jun 16 17:09:40 spamd[4978]: processing message
> <[EMAIL PROTECTED]> for clamav:1007.
> Jun 16 17:09:40 spamd[4978]: clean message (0.0/5.0) for
> clamav:1007 in 0.0
> seconds, 1787 bytes.
> Jun 16 17:09:40 spamd[4978]: clean message (0.0/5.0) for
> clamav:1007 in 0.0
> seconds, 1787 bytes.
>
> Please Could you help me?
> Regards.
> Eicke.
> ----- Original Message -----
> From: "Eicke" <[EMAIL PROTECTED]>
> To: "Fred" <[EMAIL PROTECTED]>
> Cc: <[EMAIL PROTECTED]>
> Sent: Wednesday, June 16, 2004 2:40 PM
> Subject: Re: Doubts
>
>
> > Postfix master.cf:
> >
> > smtp inet n - n - - smtpd
> > -o content_filter=clamav:clamav
> > clamav unix - n n - - pipe
> > flags=Rq user=clamav
> argv=/usr/libexec/postfix/clamav-filter.sh -f
> > ${sender} -- ${recipient}
> >
> >
> > In /usr/libexec/postfix/clamav-filter.sh there is a variable:
> >
> > SENDMAIL=/usr/bin/spamc -f -e /usr/sbin/sendmail -i
> >
> > The result is something like this:
> >
> > /usr/bin/spamc -f -e /usr/sbin/sendmail -i -f sender -- recipient
> >
> >
> > Tks.
> > Eicke.
> >
> >
> > ----- Original Message -----
> > From: "Fred" <[EMAIL PROTECTED]>
> > To: "Eicke" <[EMAIL PROTECTED]>;
> > <[EMAIL PROTECTED]>
> > Sent: Wednesday, June 16, 2004 2:29 PM
> > Subject: Re: Doubts
> >
> >
> > > How are you calling spamc and passing the message to it?
> > >
> > > Frederic Tarasevicius
> > > Internet Information Services, Inc.
> > > http://www.i-is.com/
> > > 810-794-4400
> > > mailto:[EMAIL PROTECTED]
> > >
> > >
> > >
> > > Eicke wrote:
> > > > Hi folks,
> > > >
> > > > I am starts with spamassassin yesterday.
> > > >
> > > > My Environment:
> > > >
> > > > FreeBSD Server 4.8
> > > > Postfix 2.0.16
> > > > SpamAssassin
> > > > Clamav
> > > >
> > > > I guess the spamassassin is not configured correctly in
> my server
> > > > because I continuing receiving a lot of spams.
> > > > I read the documentation and faq, but I dont know what is wrong.
> > > >
> > > > I started the spamd as follow:
> > > > /usr/local/bin/spamd -a -c -d -C /etc/mail/spamassassin
> > > >
> > > > Inside /etc/mail/spamassassin there is a file local.cf
> as follow:
> > > >
> > > >> # This is the right place to customize your installation of
> > > >> SpamAssassin. #
> > > >> # See 'perldoc Mail::SpamAssassin::Conf' for details
> of what can be
> > > >> # tweaked.
> > > >> #
> > > >>
> > > >
> > >
> >
> ##############################################################
> #############
> > > >> #
> > > >> # rewrite_subject 0
> > > >> # report_safe 1
> > > >> # trusted_networks 212.17.35.
> > > >> rewrite_subject 1
> > > >> report_header 1
> > > >> subject_tag *****SPAM DETECTADO*****
> > > >> use_terse_report 0
> > > >> required_hits 5.0
> > > >> skip_rbl_checks 0
> > > >> use_bayes 1
> > > >> auto_learn 1
> > > >> awl->add_known_bad_address($addr);
<snip>
Hi Ericke,
I don't know much about Postfix (exim/sa-exim/spamd/clamav myself)...but
back to basics:
a) what does "spamassassin -D --lint" give you?
b) start spamd thus: "/usr/local/bin/spamd -a -c -D -C
/etc/mail/spamassassin"
-this will run spamd in debug mode with the output going to stdout (ctrl-c
to kill)
-see how this daemon processes incoming emails
-check for errors, post output
Cheers
Scott
