J4,

> warn: dcc: dccifd -> check skipped: dcc: failed to connect to a
> socket /var/dcc/dccifd: Connection refused
> The socket is there:
>   srw-rw-rw- 1 dcc spamd 0 Jan 10 09:40 /var/dcc/dccifd
> local.cf has :-
>   use_dcc 1
>  dcc_path /usr/local/bin/dccproc

If a Unix socket is giving you trouble, go for an inet socket.


man Mail::SpamAssassin::Plugin::DCC

dcc_dccifd_path STRING
  This option tells SpamAssassin where to find the dccifd socket. If
  "dcc_dccifd_path" is not specified, it will default to looking for
  a socket named "dccifd" in a directory "dcc_home".  The
  "dcc_dccifd_path" can be a Unix socket name (absolute path), or an
  INET socket specification in a form "[host]:port" or "host:port",
  where a host can be an IPv4 or IPv6 address or a host name, and
  port is a TCP port number. In case of an IPv6 address the brackets
  are required syntax. If a "dccifd" socket is found, the plugin will
  use it instead of "dccproc".


Use option -p to dccifd to specify its inet socket binding interface,
port number, and allowed client IP, e.g.: -p 127.0.0.1,6277,127.0.0.0/8

> Should it be started as root, and then drop privs?
> I could add it to init.d/dccifd as:-
> dccifd -I dcc:dcc -Q -G off

Yes, use option -I to let it drop privileges.

  Mark

Reply via email to