DCC config and SA lint complaints

[Denis Beauchemin]

Stephen Swaney a écrit :
>> -----Original Message-----
>> From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-
>> bounces at lists.mailscanner.info] On Behalf Of Aaron K. Moore
>> Sent: Friday, July 07, 2006 9:01 AM
>> To: MailScanner discussion
>> Subject: RE: DCC config and SA lint complaints
>>
>> Arthur Sherman wrote:
>>     
>>> It should be in MailScanner.conf, I believe:
>>> #use_dcc
>>>
>>> As for the path...
>>> Funny, I had it in the different order and it worked with no problem
>>> (pls mention diff. path!)
>>>
>>> dcc_home  /var/dcc
>>> dcc_path  /var/dcc/bin/dccproc
>>>
>>>       
>> You might want to look into running dccifd instead of using dccproc.
>>
>> >From the dccifd manpage:
>>
>> "Dccifd is a daemon intended to connect spam filters such as SpamAssasin
>> and mail transfer agents (MTAs) other than sendmail to DCC servers.  The
>> MTA or filter dccifd which in turn reports related checksums to the
>> near-
>> est DCC server.  DCCIFD then adds an X-DCC SMTP header line to the mes-
>> sage.  The MTA is told to reject the message if it is unsolicited bulk."
>>
>> I switched to using this method with SpamAssassin a couple of years ago.
>> It greatly reduced the load I was seeing from all of the forks to call
>> dccproc.
>>
>> I have set the following items in the SpamAssassin config file.
>> use_dcc 1
>> dcc_home /var/dcc
>> dcc_path /var/dcc
>> dcc_timeout 15
>>
>> Depending on your setup you might also need to set dcc_dccifd_path.
>>
>> dcc_dccifd_path STRING
>>
>> This option tells SpamAssassin specifically where to find the dccifd
>> socket. If dcc_dccifd_path is not specified, it will default to looking
>> in dcc_home If a dccifd socket is found, it will use it instead of
>> dccproc.
>>
>> --
>> Aaron Kent Moore
>> Information Technology Services
>> DeKalb Memorial Hospital, Inc.
>> Auburn, IN
>> E-mail:  amoore at dekalbmemorial.com
>>     
>
>
> To install / configure DCCIFD, please see this article in the Wiki:
>
> http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassi
> n:plugins:dcc:dccifd_install&s=dccifd  
>
> Stephen Swaney
> Fort Systems Ltd.
> stephen.swaney at fsl.com
> www.fsl.com
>
>   
I installed a new machine yesterday and dcc would not work unless I 
forced it in IPV4:
cdcc host
# 07/07/06 09:39:20 EDT  /var/dcc/map
# Re-resolve names after 10:27:12
# 12 total, 0 working servers
IPv6 on

dcc1.dcc-servers.net,-      RTT+0 ms    anon
#  ::ffff:208.201.249.233,-
#      not answering
#  2001:4f8:3:ba:2e0:81ff:fe61:1f65,-
#      not answering
#  2001:888:20ee::6277,-
#      not answering
...

After "cdcc ipv6 off":
# 07/07/06 10:30:33 EDT  /var/dcc/map
# Re-resolve names after 11:43:35
# 299.30 ms threshold, 210.15 ms average    12 total, 10 working servers
IPv6 off

dcc1.dcc-servers.net,-      RTT+0 ms    anon
# *142.27.70.214,-                                  
CollegeOfNewCaledonia ID 1189
#     100% of 32 requests ok  193.98+0 ms RTT          102 ms queue wait
#  194.109.153.82,-                                             NIET ID 1080
#     100% of  2 requests ok  207.92+0 ms RTT           65 ms queue wait
#  208.201.249.233,-                                       sonic.net ID 1117
#     100% of  2 requests ok  201.91+0 ms RTT          102 ms queue wait
...

Denis

-- 
   _
  °v°   Denis Beauchemin, analyste
 /(_)\  Université de Sherbrooke, S.T.I.
  ^ ^   T: 819.821.8000x2252 F: 819.821.8045


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3226 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20060707/91c112a6/smime.bin