MailScanner 4.26-1/ SpamAssassin2.63

Mon Mar 8 19:19:48 GMT 2004

For what it's worth, I noticed spamd and spamc log messages when I
upgraded to SA 2.63. But, I'm pretty sure they were just from the make
test I ran before the make install. They were not running later on.

-Eric Rz.

On Sat, Mar 06, 2004 at 11:28:12AM +0000, Julian Field wrote:
> MailScanner doesn't use spamd at all, it does it faster than that. However,
> it looks like something in your mail setup is calling spamc. You need to
> find and stop that first. Grep all your sendmail and procmail files for
> "spamc" and stop it being called. Then kill off spamd and stop it from
> being restarted when your system boots.
>
> At 00:45 06/03/2004, you wrote:
> >No Name wrote:
> >
> >>Hi everyone,
> >> I have MailScanner 4.26-1 running on 4 mail servers. All servers
> >> are Sun Workstations with 3 of them running Solaris 8 and the main
> >> server running Solaris 9.
> >>
> >> I wanted to upgrade to MailScanner 4.28.5-2 that was released in
> >> the last day but before doing that I decided to upgrade my Spamassassin.
> >>
> >> I was running SpamAssassin 2.61 on the Solaris 9 machine
> >> with perl 5.6.1  and upgraded this morning to 2.63.
> >> I downloaded the tar file and did the make and make install from
> >> there
> >>
> >> Now...
> >>  1) spamd is running (I don't know why)  It never ran before
> >>     entries from the syslog say..
> >>
> >>Mar  5 08:00:52 leka spamd[29851]: server started on port 48373/tcp
> >>(running
> >>version 2.63)
> >>Mar  5 08:00:53 leka spamd[29851]: connection from localhost [127.0.0.1]
> >>at port
> >>62945
> >>Mar  5 08:00:53 leka spamd[29862]: Still running as root: user not
> >>specified
> >>with -u, not found, or set to root.  Fall back to nobody.
> >>Mar  5 08:00:53 leka spamd[29862]: processing message
> >><78w08.t365th3y6x7h at yahoo.com> for root:60001.
> >>Mar  5 08:00:53 leka spamd[29862]: identified spam (16.3/5.0) for
> >>root:60001 in
> >>0.3 seconds, 1617 bytes.
> >>Mar  5 08:00:53 leka spamd[29851]: server killed by SIGTERM, shutting down
> >>Mar  5 08:01:01 leka spamd[29866]: server started on port 48373/tcp
> >>(running
> >>version 2.63)
> >>Mar  5 08:01:02 leka spamd[29866]: connection from localhost [127.0.0.1]
> >>at port
> >>62949
> >>Mar  5 08:01:02 leka spamd[29874]: Still running as root: user not
> >>specified
> >>with -u, not found, or set to root.  Fall back to nobody.
> >>Mar  5 08:01:02 leka spamd[29874]: checking message <9PS291LhupY> for
> >>root:60001.
> >>Mar  5 08:01:02 leka spamd[29866]: server killed by SIGTERM, shutting down
> >>Mar  5 08:01:02 leka spamd[29874]: identified spam (14.2/5.0) for
> >>root:60001 in
> >>0.2 seconds, 1544 bytes.
> >>Mar  5 08:01:03 leka spamc[29878]: [ID 990649 mail.error]
> >>connect(AF_INET) to
> >>spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused
> >>Mar  5 08:01:04 leka spamc[29878]: [ID 990649 mail.error]
> >>connect(AF_INET) to
> >>spamd at 127.0.0.1 failed, retrying (#2 of 3): Connection refused
> >>Mar  5 08:01:05 leka spamc[29878]: [ID 990649 mail.error]
> >>connect(AF_INET) to
> >>spamd at 127.0.0.1 failed, retrying (#3 of 3): Connection refused
> >>Mar  5 08:01:06 leka spamc[29878]: [ID 473657 mail.error] connection
> >>attempt to
> >>spamd aborted after 3 retries
> >>Mar  5 08:01:13 leka spamd[29890]: server started on port 48373/tcp
> >>(running
> >>version 2.63)
> >>Mar  5 08:01:13 leka spamd[29890]: connection from localhost [127.0.0.1]
> >>at port
> >>62956
> >>Mar  5 08:01:13 leka spamd[29900]: Still running as root: user not
> >>specified
> >>with -u, not found, or set to root.  Fall back to nobody.
> >>...etc,etc,etc.
> >>
> >>
> >>  2) I have no bayes databases that I can find anywhere
> >>  3) I found in the install log that the rules were installed
> >>      in /usr/perl5/5.6.1/share/spamassassin
> >>      So I editted the MailScanner.conf file and changed the
> >>      location to that, stopped and restarted MailScanner and
> >>      now it doesn't look like spamd/spamc are running.
> >>
> >>Did I go wrong in the make of Spamassassin?  Can I uninstall it?
> >>I don't know how to uninstall a perl module.
> >>Don't want to upgrade to the new MailScanner until I know this is
> >>working.  I haven't had any problems in the past.
> >>
> >>Aloha, Sharon
> >>
> >>*=============================================================*
> >>| UH/SOEST-Research Computer Fac  vox: (808) 956-2616         |
> >>| 1680 East West Rd- POST820    email: stahl at soest.hawaii.edu |
> >>| Honolulu, Hi 96822              fax: (808) 956-5154         |
> >>*=============================================================*
> >>
> >>
> >>
> >>
> >I recently upgraded from 2.6 to 2.63 and i noticed (after reading this)
> >that spamd is running too - i had 2.6 running, downloaded the source for
> >2.63 did perl Makefile/PL, make, make install - thats it. I have RH9
> >[root at mail01 root]# perl -V
> >Summary of my perl5 (revision 5.0 version 8 subversion 0)
> >
> >root      7456  0.0  0.0 23600    4 ?        S    Mar05   0:12
> >/usr/bin/perl -T -w ../spamd/spamd -x -D -p 48373 -C log/test_rules_copy
> >--siteconfigpath log/localrules.tmp -L -m1
> >root     16404  0.0  0.1  1496  452 pts/0    S    11:47   0:00 grep -i spam
> >
> >Since i have had a battle keeping this machine scanning mail lately, i
> >will wait to hear from more people before i make any changes - but
> >should this process be running? Is there something i should disable?
> >
> >[root at mail01 root]# cat /var/log/maillog | grep -i spamd
> >Mar  5 01:40:27 mail01 spamc[6955]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#1 of 3): Connection refused
> >Mar  5 01:40:28 mail01 spamc[6955]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#2 of 3): Connection refused
> >Mar  5 01:40:29 mail01 spamc[6955]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#3 of 3): Connection refused
> >Mar  5 01:40:30 mail01 spamc[6955]: connection attempt to spamd aborted
> >after 3 retries
> >Mar  5 01:40:51 mail01 spamd[6990]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:40:53 mail01 spamd[6990]: connection from
> >localhost.localdomain [127.0.0.1] at port 32797
> >Mar  5 01:40:53 mail01 spamd[7168]: Still running as root: user not
> >specified with -u, not found, or set to root.  Fall back to nobody.
> >Mar  5 01:40:54 mail01 spamd[7168]: processing message
> ><78w08.t365th3y6x7h at yahoo.com> for root:99.
> >Mar  5 01:40:54 mail01 spamd[7168]: identified spam (16.3/5.0) for
> >root:99 in 0.9 seconds, 1617 bytes.
> >Mar  5 01:40:54 mail01 spamd[6990]: server killed by SIGTERM, shutting down
> >Mar  5 01:41:09 mail01 spamd[7177]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:41:11 mail01 spamd[7177]: connection from
> >localhost.localdomain [127.0.0.1] at port 32798
> >Mar  5 01:41:11 mail01 spamd[7208]: Still running as root: user not
> >specified with -u, not found, or set to root.  Fall back to nobody.
> >Mar  5 01:41:12 mail01 spamd[7208]: checking message <9PS291LhupY> for
> >root:99.
> >Mar  5 01:41:12 mail01 spamd[7208]: identified spam (14.2/5.0) for
> >root:99 in 1.0 seconds, 1544 bytes.
> >Mar  5 01:41:13 mail01 spamd[7177]: server killed by SIGTERM, shutting down
> >Mar  5 01:41:14 mail01 spamc[7210]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#1 of 3): Connection refused
> >Mar  5 01:41:15 mail01 spamc[7210]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#2 of 3): Connection refused
> >Mar  5 01:41:16 mail01 spamc[7210]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#3 of 3): Connection refused
> >Mar  5 01:41:17 mail01 spamc[7210]: connection attempt to spamd aborted
> >after 3 retries
> >Mar  5 01:41:32 mail01 spamd[7213]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:41:33 mail01 spamd[7213]: connection from
> >localhost.localdomain [127.0.0.1] at port 32802
> >Mar  5 01:41:34 mail01 spamd[7222]: Still running as root: user not
> >specified with -u, not found, or set to root.  Fall back to nobody.
> >Mar  5 01:41:34 mail01 spamd[7222]: checking message <9PS291LhupY> for
> >root:99.
> >Mar  5 01:41:34 mail01 spamd[7222]: identified spam (14.2/5.0) for
> >root:99 in 0.8 seconds, 1544 bytes.
> >Mar  5 01:41:34 mail01 spamd[7213]: server killed by SIGTERM, shutting down
> >Mar  5 01:41:35 mail01 spamc[7250]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#1 of 3): Connection refused
> >Mar  5 01:41:36 mail01 spamc[7250]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#2 of 3): Connection refused
> >Mar  5 01:41:37 mail01 spamc[7250]: connect(AF_INET) to spamd at
> >127.0.0.1 failed, retrying (#3 of 3): Connection refused
> >Mar  5 01:41:38 mail01 spamc[7250]: connection attempt to spamd aborted
> >after 3 retries
> >Mar  5 01:41:52 mail01 spamd[7272]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:41:54 mail01 spamd[7272]: connection from
> >localhost.localdomain [127.0.0.1] at port 32806
> >Mar  5 01:41:54 mail01 spamd[7349]: Still running as root: user not
> >specified with -u, not found, or set to root.  Fall back to nobody.
> >Mar  5 01:41:55 mail01 spamd[7349]: processing message <9PS291LhupY> for
> >root:99.
> >Mar  5 01:41:55 mail01 spamd[7349]: identified spam (14.2/5.0) for
> >root:99 in 0.9 seconds, 1544 bytes.
> >Mar  5 01:41:55 mail01 spamd[7272]: server killed by SIGTERM, shutting down
> >Mar  5 01:42:10 mail01 spamd[7361]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:42:13 mail01 spamd[7361]: connection from
> >localhost.localdomain [127.0.0.1] at port 32807
> >Mar  5 01:42:13 mail01 spamd[7401]: Using default config for testuser:
> >log/virtualconfig/testuser/user_prefs
> >Mar  5 01:42:13 mail01 spamd[7401]: Still running as root: user not
> >specified with -u, not found, or set to root.  Fall back to nobody.
> >Mar  5 01:42:13 mail01 spamd[7401]: processing message
> ><78w08.t365th3y6x7h at yahoo.com> for testuser:99.
> >Mar  5 01:42:14 mail01 spamd[7401]: identified spam (17.3/5.0) for
> >testuser:99 in 1.3 seconds, 1588 bytes.
> >Mar  5 01:42:14 mail01 spamd[7361]: server killed by SIGTERM, shutting down
> >Mar  5 01:42:28 mail01 spamd[7413]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:42:32 mail01 spamd[7413]: server hit by SIGHUP, restarting
> >Mar  5 01:42:45 mail01 spamd[7413]: server started on port 48373/tcp
> >(running version 2.63)
> >Mar  5 01:42:45 mail01 spamd[7413]: connection from
> >localhost.localdomain [127.0.0.1] at port 32808
> >Mar  5 01:42:45 mail01 spamd[7453]: Still running as root: user not
> >specified with -u, not found, or set to root.  Fall back to nobody.
> >Mar  5 01:42:45 mail01 spamd[7453]: processing message
> ><GTUBE1.1010101 at example.com> for root:99.
> >Mar  5 01:42:45 mail01 spamd[7453]: identified spam (1000.0/5.0) for
> >root:99 in 0.6 seconds, 387 bytes.
> >Mar  5 01:42:46 mail01 spamd[7413]: server killed by SIGTERM, shutting down
> >Mar  5 01:43:00 mail01 spamd[7456]: server started on port 48373/tcp
> >(running version 2.63)
>
> --
> Julian Field
> www.MailScanner.info
> Professional Support Services at www.MailScanner.biz
> MailScanner thanks transtec Computers for their support
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654