mailscanner not calling spamassassin?

[Brendan Cody-Kenny]

    [ The following text is in the "ISO-8859-1" character set. ]
    [ Your display is set for the "US-ASCII" character set.  ]
    [ Some characters may be displayed incorrectly. ]

its actually version 2.64 but that worked!! it was looking for the rules
in the wrong directory. Its now giving me minus scores but i assume
thats got to do with the messages and how bayes/rules are tuned.

Thanks to everyone for their help.

Brendan Cody-Kenny | brendan.codykenny at realexpayments.com
Network Administrator
Realex Payments

The Forum, 29-32 Glasthule Rd, Glasthule, Co Dublin, Ireland
t: +353 1 2808559 | f: +353 1 2808538

This mail and any documents attached are classified as confidential and are intended for use by the addressee(s) only unless otherwise indicated. If you are not an intended recipient of this email, you must not use, disclose, copy, distribute or retain this message or any part of it. If you have received this email in error, please notify us immediately and delete all copies of this email from your computer system(s).



Martin Hepworth wrote:

> Brendan
>
> OK how did you install SpamAssassin, CPAN, RPM?
>
> and it's 3.01 right?
>
> Looks likes you've got the SpamAssassin rules directories pointing at
> the wrong place - default rules is normall
> /usr/local/share/spamassassin, site rules are usually
> /etc/mail/spamassassin. check the
> /etc/MailScanner/spam.assassin.prefs.conf for over-rides on these and
> make sure they pount to the correct place.
>
> Also make sure you have net::DNS installed as a perl module do RBL's and
> URI RBLS work..
>
>
> --
> Martin Hepworth
> Snr Systems Administrator
> Solid State Logic
> Tel: +44 (0)1865 842300
>
>
> Brendan Cody-Kenny wrote:
>
>> ok heres what it gave me:
>> Its confusing as it seems to be running the learner before it checks the
>> message. it then continues to check each part of the message and give it
>> avalue of 0. Then spamassassin has a problem locking the bayes db. it
>> looks like its doing everything in the wrong order.
>>
>> Starting MailScanner...
>> In Debugging mode, not forking...
>> debug: Score set 0 chosen.
>> debug: running in taint mode? no
>> SA bayes lock is /var/lib/MailScanner/bayes.lock
>> Bayes lock is at /var/lib/MailScanner/bayes.lock
>> debug: ignore: test message to precompile patterns and load modules
>> debug: using "/etc/MailScanner/rules" for default rules dir
>> debug: using "/etc/MailScanner/rules" for site rules dir
>> debug: using "/etc/MailScanner/spam.assassin.prefs.conf" for user prefs
>> file
>> debug: bayes: 1117 tie-ing to DB file R/O
>> /var/lib/MailScanner/bayes/bayes_toks
>> debug: bayes: 1117 tie-ing to DB file R/O
>> /var/lib/MailScanner/bayes/bayes_seen
>> debug: bayes: found bayes db version 2
>> debug: Score set 3 chosen.
>> debug: Initialising learner
>> debug: running header regexp tests; score so far=0
>> debug: running body-text per-line regexp tests; score so far=0
>> debug: running raw-body-text per-line regexp tests; score so far=0
>> debug: running uri tests; score so far=0
>> debug: uri tests: Done uriRE
>> debug: running full-text regexp tests; score so far=0
>> debug: running meta tests; score so far=0
>> debug: is spam? score=0 required=3.75 tests=
>> SpamAssassin: oops! still tied/locked to bayes DBs, untie'ing
>> debug: bayes: 1117 untie-ing
>> debug: bayes: 1117 untie-ing db_toks
>> debug: bayes: 1117 untie-ing db_seen
>> debug: received-header: parsed as [ ip=67.15.36.4
>> rdns=server21.fastbighost.com helo=server21.fastbighost.com
>> by=scruffy.realex.ie ident= ]
>> debug: is Net::DNS::Resolver available? no
>> debug: is DNS available? 0
>> debug: received-header: cannot use DNS, do not trust any hosts from
>> here on
>> debug: received-header: relay 67.15.36.4 trusted? no
>> debug: running header regexp tests; score so far=0
>> debug: running body-text per-line regexp tests; score so far=0
>> debug: running raw-body-text per-line regexp tests; score so far=0
>> debug: running uri tests; score so far=0
>> debug: uri tests: Done uriRE
>> debug: running full-text regexp tests; score so far=0
>> debug: running meta tests; score so far=0
>> debug: is spam? score=0 required=3.75 tests=
>> debug: received-header: parsed as [ ip=195.245.230.131
>> rdns=mail78.messagelabs.com helo=mail78.messagelabs.com
>> by=scruffy.realex.ie ident= ]
>> debug: received-header: parsed as [ ip=194.69.198.39 rdns=efwdb01.aib.ie
>> helo= by=server-6.tower-78.messagelabs.com ident= ]
>> debug: is Net::DNS::Resolver available? no
>> debug: is DNS available? 0
>> debug: received-header: parsed as [ ip=10.8.22.86 rdns= helo=
>> by=efwdb01.aib.ie ident= ]
>> debug: received-header: parsed as [ ip=10.32.4.76 rdns=b11127-gx270
>> helo= by=sims.isec.aib.ie ident= ]
>> debug: received-header: cannot use DNS, do not trust any hosts from
>> here on
>> debug: received-header: relay 195.245.230.131 trusted? no
>> debug: received-header: relay 194.69.198.39 trusted? no
>> debug: received-header: relay 10.8.22.86 trusted? no
>> debug: received-header: relay 10.32.4.76 trusted? no
>> debug: running header regexp tests; score so far=0
>> debug: running body-text per-line regexp tests; score so far=0
>> debug: running raw-body-text per-line regexp tests; score so far=0
>> debug: running uri tests; score so far=0
>> debug: uri tests: Done uriRE
>> debug: running full-text regexp tests; score so far=0
>> debug: running meta tests; score so far=0
>> debug: is spam? score=0 required=3.75 tests=
>> debug: received-header: parsed as [ ip=161.58.229.253
>> rdns=newsvendor.com helo=newsvendor.com by=scruffy.realex.ie ident= ]
>> debug: received-header: parsed as [ ip=193.203.152.4
>> rdns=B-152-4.cust.iol.ie helo=webccssmtp.ccs.ie by=newsvendor.com
>> ident= ]
>> debug: is Net::DNS::Resolver available? no
>> debug: is DNS available? 0
>> debug: received-header: parsed as [ ip=223.0.1.127 rdns= helo=Tonylaptop
>> by=webccssmtp.ccs.ie ident= ]
>> debug: received-header: cannot use DNS, do not trust any hosts from
>> here on
>> debug: received-header: relay 161.58.229.253 trusted? no
>> debug: received-header: relay 193.203.152.4 trusted? no
>> debug: received-header: relay 223.0.1.127 trusted? no
>> debug: running header regexp tests; score so far=0
>> debug: running body-text per-line regexp tests; score so far=0
>> debug: running raw-body-text per-line regexp tests; score so far=0
>> debug: running uri tests; score so far=0
>> debug: uri tests: Done uriRE
>> debug: running full-text regexp tests; score so far=0
>> debug: running meta tests; score so far=0
>> debug: is spam? score=0 required=3.75 tests=
>> /etc/MailScanner/wrapper/trend-wrapper: /pack/trend/bin/vscan: No such
>> file or directory
>> /etc/MailScanner/wrapper/trend-wrapper: exec: /pack/trend/bin/vscan:
>> cannot execute: No such file or directory
>> Stopping now as you are debugging me.
>>
>> Brendan Cody-Kenny | brendan.codykenny at realexpayments.com
>> Network Administrator
>> Realex Payments
>>
>> The Forum, 29-32 Glasthule Rd, Glasthule, Co Dublin, Ireland
>> t: +353 1 2808559 | f: +353 1 2808538
>>
>> This mail and any documents attached are classified as confidential and
>> are intended for use by the addressee(s) only unless otherwise
>> indicated. If you are not an intended recipient of this email, you must
>> not use, disclose, copy, distribute or retain this message or any part
>> of it. If you have received this email in error, please notify us
>> immediately and delete all copies of this email from your computer
>> system(s).
>>
>>
>>
>> Martin Hepworth wrote:
>>
>>> Brendon
>>>
>>>
>>> sorry need to be more specific....
>>>
>>> stop MailScanner
>>>
>>> edit the MailScanner.conf
>>>
>>> run check_mailscanner
>>>
>>> you'll get a nice dump of what it's trying to so with each
>>> message...preferable run check_mailscanner as the mailscanner user so
>>> all permissions are consistent...
>>>
>>> --
>>> Martin Hepworth
>>> Snr Systems Administrator
>>> Solid State Logic
>>> Tel: +44 (0)1865 842300
>>>
>>>
>>> Brendan Cody-Kenny wrote:
>>>
>>>> spamassassin -D --lint does not return anything interesting when
>>>> run as
>>>> the mailscanner user.
>>>> both debugs are turned on in MailScanner.conf and check_mailscanner
>>>> returns:
>>>>
>>>> MailScanner running with pid 21667
>>>>
>>>>
>>>> I cannot figure out what the problem is so I am now trying to add in a
>>>> third mail directory queue. so mailscanner dumps the mail into this
>>>> "middle" queue, and then i run a cron job to run spamassassin on the
>>>> mail and dump it into the "out" queue. This is awkward and i am not
>>>> sure
>>>> what format that mailscanner is expecting the mail in. the mail dumped
>>>> into the "in" queue consists of two files, a header and data file
>>>> (ending in -H and -D respectively). I am sure spamassassin is
>>>> expecting
>>>> the mail in one single message. could this have anything to do with my
>>>> problem?
>>>>
>>>>
>>>> Martin Hepworth wrote:
>>>>
>>>>> Brendan Cody-Kenny wrote:
>>>>>
>>>>>> I remedied the line in spam.assassin.prefs.conf that was causing the
>>>>>> debug error line. The debug error message is not shown and the
>>>>>> behavior
>>>>>> of MS/SA has not changed. The use of dcc will not help explain why
>>>>>> MS is
>>>>>> not getting results from SA. If Sa called from the command line is
>>>>>> returning a value then the same value should be returned to MS.
>>>>>> From the
>>>>>> results of strace on MS I could see that MS is calling the SA perl
>>>>>> scripts. They dont return proper values. Is there specific
>>>>>> configuration
>>>>>> files for these scripts?
>>>>>>
>>>>> Brendan
>>>>>
>>>>> are you callingthe spamassassin -D --lint as the user that
>>>>> MailScanner
>>>>> is running as???
>>>>>
>>>>> also have you tried turning on both debug options in the
>>>>> MailScanner.conf and running check_mailscanner to see if it gives you
>>>>> more clues??
>>>>>
>>>>> --
>>>>> --
>>>>> Martin Hepworth
>>>>> Senior Systems Administrator
>>>>> Solid State Logic Ltd
>>>>> tel: +44 (0)1865 842300
>>>>>
>>>>>
>
> **********************************************************************
>
> This email and any files transmitted with it are confidential and
> intended solely for the use of the individual or entity to whom they
> are addressed. If you have received this email in error please notify
> the system manager.
>
> This footnote confirms that this email message has been swept
> for the presence of computer viruses and is believed to be clean.
>
> **********************************************************************
>
> ------------------------ MailScanner list ------------------------
> To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
> 'leave mailscanner' in the body of the email.
> Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
> the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).
>
> Support MailScanner development - buy the book off the website!

------------------------ MailScanner list ------------------------
To unsubscribe, email jiscmail at jiscmail.ac.uk with the words:
'leave mailscanner' in the body of the email.
Before posting, read the MAQ (http://www.mailscanner.biz/maq/) and
the archives (http://www.jiscmail.ac.uk/lists/mailscanner.html).

Support MailScanner development - buy the book off the website!