This is weird

[Ken A]

Kevin Miller wrote:
> Ken A wrote:
>> sonic.net (a neighbor of ours) runs a dccd server, as I bet these
>> others do as well. Probably something dccifd does, though I'm not
>> sure why. Ken
>> Pacific.Net
> 
> Thought it might be something like that.  Figured sonic's host was a
> spamtrap or tarpit.  Not likely we've got a really really honest spammer
> out there! <g>
> 
> I have UDP port 6277 open for outbound so DCC should be OK.  I ran
> "spamassassin -D --lint" and did see the following output:
> 
>  debug: DCCifd is not available: no r/w dccifd socket found.
>  debug: DCC is not available: no executable dccproc found.
> 
> so maybe not all is well in DCC land.  Not sure what it's telling me
> there.
> 
> In spam.assassin.rules.conf I uncommented the "use DCC 0" line to
> disable it and restarted.  I'm still seeing attempted traffic to
> 66.250.40.33 (clapton.quatro.com), but the others seem to have abated.
> Maybe I'll disable razor and pyzor too and see what happens, then add
> things back in when I absolve them.
> 
> Guess I can look to troubleshooting DCC Monday morning.  Any clues to
> that appreciated.

dcc is a bit of an odd bird when it comes to installing and configuring.
Just grab the source, configure, make, make install it and it puts 
itself in /var/dcc. _All_ of it is in /var/dcc. The cron jobs, the 
config file, init scripts, the executables, everything.

Here's the wiki entry that explains how to install it:

http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:plugins:dcc:dccifd_install&s=dcc

Ken
Pacific.Net

> 
> Thanks...
> 
> ...Kevin