MailScanner 4.26-1/ SpamAssassin2.63

Sat Mar 6 00:45:59 GMT 2004

No Name wrote:

>Hi everyone,
>  I have MailScanner 4.26-1 running on 4 mail servers. All servers
>  are Sun Workstations with 3 of them running Solaris 8 and the main
>  server running Solaris 9.
>
>  I wanted to upgrade to MailScanner 4.28.5-2 that was released in
>  the last day but before doing that I decided to upgrade my Spamassassin.
>
>  I was running SpamAssassin 2.61 on the Solaris 9 machine
>  with perl 5.6.1  and upgraded this morning to 2.63.
>  I downloaded the tar file and did the make and make install from
>  there
>
>  Now...
>   1) spamd is running (I don't know why)  It never ran before
>      entries from the syslog say..
>
>Mar  5 08:00:52 leka spamd[29851]: server started on port 48373/tcp (running
>version 2.63)
>Mar  5 08:00:53 leka spamd[29851]: connection from localhost [127.0.0.1] at port
>62945
>Mar  5 08:00:53 leka spamd[29862]: Still running as root: user not specified
>with -u, not found, or set to root.  Fall back to nobody.
>Mar  5 08:00:53 leka spamd[29862]: processing message
><78w08.t365th3y6x7h at yahoo.com> for root:60001.
>Mar  5 08:00:53 leka spamd[29862]: identified spam (16.3/5.0) for root:60001 in
>0.3 seconds, 1617 bytes.
>Mar  5 08:00:53 leka spamd[29851]: server killed by SIGTERM, shutting down
>Mar  5 08:01:01 leka spamd[29866]: server started on port 48373/tcp (running
>version 2.63)
>Mar  5 08:01:02 leka spamd[29866]: connection from localhost [127.0.0.1] at port
>62949
>Mar  5 08:01:02 leka spamd[29874]: Still running as root: user not specified
>with -u, not found, or set to root.  Fall back to nobody.
>Mar  5 08:01:02 leka spamd[29874]: checking message <9PS291LhupY> for
>root:60001.
>Mar  5 08:01:02 leka spamd[29866]: server killed by SIGTERM, shutting down
>Mar  5 08:01:02 leka spamd[29874]: identified spam (14.2/5.0) for root:60001 in
>0.2 seconds, 1544 bytes.
>Mar  5 08:01:03 leka spamc[29878]: [ID 990649 mail.error] connect(AF_INET) to
>spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused
>Mar  5 08:01:04 leka spamc[29878]: [ID 990649 mail.error] connect(AF_INET) to
>spamd at 127.0.0.1 failed, retrying (#2 of 3): Connection refused
>Mar  5 08:01:05 leka spamc[29878]: [ID 990649 mail.error] connect(AF_INET) to
>spamd at 127.0.0.1 failed, retrying (#3 of 3): Connection refused
>Mar  5 08:01:06 leka spamc[29878]: [ID 473657 mail.error] connection attempt to
>spamd aborted after 3 retries
>Mar  5 08:01:13 leka spamd[29890]: server started on port 48373/tcp (running
>version 2.63)
>Mar  5 08:01:13 leka spamd[29890]: connection from localhost [127.0.0.1] at port
>62956
>Mar  5 08:01:13 leka spamd[29900]: Still running as root: user not specified
>with -u, not found, or set to root.  Fall back to nobody.
>...etc,etc,etc.
>
>
>   2) I have no bayes databases that I can find anywhere
>   3) I found in the install log that the rules were installed
>       in /usr/perl5/5.6.1/share/spamassassin
>       So I editted the MailScanner.conf file and changed the
>       location to that, stopped and restarted MailScanner and
>       now it doesn't look like spamd/spamc are running.
>
> Did I go wrong in the make of Spamassassin?  Can I uninstall it?
> I don't know how to uninstall a perl module.
> Don't want to upgrade to the new MailScanner until I know this is
> working.  I haven't had any problems in the past.
>
>Aloha, Sharon
>
>*=============================================================*
>| UH/SOEST-Research Computer Fac  vox: (808) 956-2616         |
>| 1680 East West Rd- POST820    email: stahl at soest.hawaii.edu |
>| Honolulu, Hi 96822              fax: (808) 956-5154         |
>*=============================================================*
>
>
>
>
>
I recently upgraded from 2.6 to 2.63 and i noticed (after reading this)
that spamd is running too - i had 2.6 running, downloaded the source for
2.63 did perl Makefile/PL, make, make install - thats it. I have RH9
[root at mail01 root]# perl -V
Summary of my perl5 (revision 5.0 version 8 subversion 0)

root      7456  0.0  0.0 23600    4 ?        S    Mar05   0:12
/usr/bin/perl -T -w ../spamd/spamd -x -D -p 48373 -C log/test_rules_copy
--siteconfigpath log/localrules.tmp -L -m1
root     16404  0.0  0.1  1496  452 pts/0    S    11:47   0:00 grep -i spam

Since i have had a battle keeping this machine scanning mail lately, i
will wait to hear from more people before i make any changes - but
should this process be running? Is there something i should disable?

[root at mail01 root]# cat /var/log/maillog | grep -i spamd
Mar  5 01:40:27 mail01 spamc[6955]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#1 of 3): Connection refused
Mar  5 01:40:28 mail01 spamc[6955]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#2 of 3): Connection refused
Mar  5 01:40:29 mail01 spamc[6955]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#3 of 3): Connection refused
Mar  5 01:40:30 mail01 spamc[6955]: connection attempt to spamd aborted
after 3 retries
Mar  5 01:40:51 mail01 spamd[6990]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:40:53 mail01 spamd[6990]: connection from
localhost.localdomain [127.0.0.1] at port 32797
Mar  5 01:40:53 mail01 spamd[7168]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.
Mar  5 01:40:54 mail01 spamd[7168]: processing message
<78w08.t365th3y6x7h at yahoo.com> for root:99.
Mar  5 01:40:54 mail01 spamd[7168]: identified spam (16.3/5.0) for
root:99 in 0.9 seconds, 1617 bytes.
Mar  5 01:40:54 mail01 spamd[6990]: server killed by SIGTERM, shutting down
Mar  5 01:41:09 mail01 spamd[7177]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:41:11 mail01 spamd[7177]: connection from
localhost.localdomain [127.0.0.1] at port 32798
Mar  5 01:41:11 mail01 spamd[7208]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.
Mar  5 01:41:12 mail01 spamd[7208]: checking message <9PS291LhupY> for
root:99.
Mar  5 01:41:12 mail01 spamd[7208]: identified spam (14.2/5.0) for
root:99 in 1.0 seconds, 1544 bytes.
Mar  5 01:41:13 mail01 spamd[7177]: server killed by SIGTERM, shutting down
Mar  5 01:41:14 mail01 spamc[7210]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#1 of 3): Connection refused
Mar  5 01:41:15 mail01 spamc[7210]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#2 of 3): Connection refused
Mar  5 01:41:16 mail01 spamc[7210]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#3 of 3): Connection refused
Mar  5 01:41:17 mail01 spamc[7210]: connection attempt to spamd aborted
after 3 retries
Mar  5 01:41:32 mail01 spamd[7213]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:41:33 mail01 spamd[7213]: connection from
localhost.localdomain [127.0.0.1] at port 32802
Mar  5 01:41:34 mail01 spamd[7222]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.
Mar  5 01:41:34 mail01 spamd[7222]: checking message <9PS291LhupY> for
root:99.
Mar  5 01:41:34 mail01 spamd[7222]: identified spam (14.2/5.0) for
root:99 in 0.8 seconds, 1544 bytes.
Mar  5 01:41:34 mail01 spamd[7213]: server killed by SIGTERM, shutting down
Mar  5 01:41:35 mail01 spamc[7250]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#1 of 3): Connection refused
Mar  5 01:41:36 mail01 spamc[7250]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#2 of 3): Connection refused
Mar  5 01:41:37 mail01 spamc[7250]: connect(AF_INET) to spamd at
127.0.0.1 failed, retrying (#3 of 3): Connection refused
Mar  5 01:41:38 mail01 spamc[7250]: connection attempt to spamd aborted
after 3 retries
Mar  5 01:41:52 mail01 spamd[7272]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:41:54 mail01 spamd[7272]: connection from
localhost.localdomain [127.0.0.1] at port 32806
Mar  5 01:41:54 mail01 spamd[7349]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.
Mar  5 01:41:55 mail01 spamd[7349]: processing message <9PS291LhupY> for
root:99.
Mar  5 01:41:55 mail01 spamd[7349]: identified spam (14.2/5.0) for
root:99 in 0.9 seconds, 1544 bytes.
Mar  5 01:41:55 mail01 spamd[7272]: server killed by SIGTERM, shutting down
Mar  5 01:42:10 mail01 spamd[7361]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:42:13 mail01 spamd[7361]: connection from
localhost.localdomain [127.0.0.1] at port 32807
Mar  5 01:42:13 mail01 spamd[7401]: Using default config for testuser:
log/virtualconfig/testuser/user_prefs
Mar  5 01:42:13 mail01 spamd[7401]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.
Mar  5 01:42:13 mail01 spamd[7401]: processing message
<78w08.t365th3y6x7h at yahoo.com> for testuser:99.
Mar  5 01:42:14 mail01 spamd[7401]: identified spam (17.3/5.0) for
testuser:99 in 1.3 seconds, 1588 bytes.
Mar  5 01:42:14 mail01 spamd[7361]: server killed by SIGTERM, shutting down
Mar  5 01:42:28 mail01 spamd[7413]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:42:32 mail01 spamd[7413]: server hit by SIGHUP, restarting
Mar  5 01:42:45 mail01 spamd[7413]: server started on port 48373/tcp
(running version 2.63)
Mar  5 01:42:45 mail01 spamd[7413]: connection from
localhost.localdomain [127.0.0.1] at port 32808
Mar  5 01:42:45 mail01 spamd[7453]: Still running as root: user not
specified with -u, not found, or set to root.  Fall back to nobody.
Mar  5 01:42:45 mail01 spamd[7453]: processing message
<GTUBE1.1010101 at example.com> for root:99.
Mar  5 01:42:45 mail01 spamd[7453]: identified spam (1000.0/5.0) for
root:99 in 0.6 seconds, 387 bytes.
Mar  5 01:42:46 mail01 spamd[7413]: server killed by SIGTERM, shutting down
Mar  5 01:43:00 mail01 spamd[7456]: server started on port 48373/tcp
(running version 2.63)