<br><br><div class="gmail_quote">On Tue, Jun 17, 2008 at 10:39 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div><div></div><div class="Wj3C7c">2008/6/17 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
><br>
><br>
> On Tue, Jun 17, 2008 at 9:51 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<br>
>><br>
>> 2008/6/17 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> ><br>
>> ><br>
>> > On Tue, Jun 17, 2008 at 5:11 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>><br>
>> > wrote:<br>
>> >><br>
>> >> 2008/6/17 Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>>:<br>
>> >> > 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> >> >><br>
>> >> >><br>
>> >> >> On Mon, Jun 16, 2008 at 4:12 PM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>><br>
>> >> >> wrote:<br>
>> >> >>><br>
>> >> >>> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> >> >>> ><br>
>> >> >>> ><br>
>> >> >>> > On Mon, Jun 16, 2008 at 2:46 PM, Glenn Steen<br>
>> >> >>> > <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>><br>
>> >> >>> > wrote:<br>
>> >> >>> >><br>
>> >> >>> >> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> Devon Harding wrote:<br>
>> >> >>> >> >>>> | I'm getting alot of spam coming through and it<br>
>> >> >>> >> >>>> seems<br>
>> >> >>> >> >>>> like<br>
>> >> >>> >> >>>> the cause of<br>
>> >> >>> >> >>>> | this is BAYES_00 scoring messages with -2.60. I'm<br>
>> >> >>> >> >>>> running<br>
>> >> >>> >> >>>> MS 4.68.8<br>
>> >> >>> >> >>>> | with SA *Le Service des Technologies de<br>
>> >> >>> >> >>>> l'Information<br>
>> >> >>> >> >>>> de<br>
>> >> >>> >> >>>> l'UdeS veut vous mettre en garde contre "3.2.4" qui<br>
>> >> >>> >> >>>> semble<br>
>> >> >>> >> >>>> être une tentative de fraude envers* <a href="http://3.2.4." target="_blank">3.2.4.</a><br>
>> >> >>> >> >>>> <<a href="http://3.2.4" target="_blank">http://3.2.4</a>.><br>
>> >> >>> >> >>>> <*Le Service des Technologies de l'Information de<br>
>> >> >>> >> >>>> l'UdeS<br>
>> >> >>> >> >>>> veut<br>
>> >> >>> >> >>>> vous mettre en garde contre "3.2.4" qui semble être<br>
>> >> >>> >> >>>> une<br>
>> >> >>> >> >>>> tentative de fraude envers* <a href="http://3.2.4" target="_blank">http://3.2.4</a>.> I've<br>
>> >> >>> >> >>>> already<br>
>> >> >>> >> >>>> trained hundreds of<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> | messages like these as spam and it doesn't seem to<br>
>> >> >>> >> >>>> work.<br>
>> >> >>> >> >>>> What else can<br>
>> >> >>> >> >>>> | I do?<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> My guess is that you are training the wrong<br>
>> >> >>> >> >>>> database.<br>
>> >> >>> >> >>>> You<br>
>> >> >>> >> >>>> train another<br>
>> >> >>> >> >>>> database and not the one you are using with<br>
>> >> >>> >> >>>> MailScanner.<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> Hugo.<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> For MS, where is the Bayes DB path specified? My DB is<br>
>> >> >>> >> >>>> located<br>
>> >> >>> >> >>>> here:<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> /etc/MailScanner/.spamassassin<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>>> I think my BAYES is all messed up. How do I rebuild it<br>
>> >> >>> >> >>>> from<br>
>> >> >>> >> >>>> scratch?<br>
>> >> >>> >> >>>><br>
>> >> >>> >> >>> Devon,<br>
>> >> >>> >> >>><br>
>> >> >>> >> >>> Look here for a starter kit:<br>
>> >> >>> >> >>> <a href="http://www.fsl.com/resources.html" target="_blank">http://www.fsl.com/resources.html</a><br>
>> >> >>> >> >>><br>
>> >> >>> >> >>> Denis<br>
>> >> >>> >> >>><br>
>> >> >>> >> >>> --<br>
>> >> >>> >> >><br>
>> >> >>> >> >> I've restored the starter DB and I do see the new files in<br>
>> >> >>> >> >> /etc/MailScanner/.spamassassin (I stopped MailScanner and<br>
>> >> >>> >> >> removed<br>
>> >> >>> >> >> the<br>
>> >> >>> >> >> one<br>
>> >> >>> >> >> ones first), but SA Bayes DB Info from Mailwatch shows<br>
>> >> >>> >> >> nothing.<br>
>> >> >>> >> >> When I<br>
>> >> >>> >> >> do a<br>
>> >> >>> >> >> lint from the Tools tab, i Get the following:<br>
>> >> >>> >> >><br>
>> >> >>> >> >> [5637] dbg: bayes: no dbs present, cannot tie DB R/O:<br>
>> >> >>> >> >> //.spamassassin/bayes_toks<br>
>> >> >>> >> ><br>
>> >> >>> >> ><br>
>> >> >>> >> > Hmm....I thing Bayes IS working. I just ran MailScanner<br>
>> >> >>> >> > --debug<br>
>> >> >>> >> > --debug-sa<br>
>> >> >>> >> > after the restore and did see:<br>
>> >> >>> >> ><br>
>> >> >>> >> > 11:52:13 [5879] dbg: bayes: tie-ing to DB file R/W<br>
>> >> >>> >> > /root/.spamassassin/bayes_toks<br>
>> >> >>> >> > 11:52:13 [5879] dbg: bayes: tie-ing to DB file R/W<br>
>> >> >>> >> > /root/.spamassassin/bayes_seen<br>
>> >> >>> >> > 11:52:13 [5879] dbg: bayes: found bayes db version 3<br>
>> >> >>> >> > 11:52:13 [5879] dbg: bayes: learned<br>
>> >> >>> >> > '88a47a16459989c19d47893de31fec608aa8f41e@sa_generated',<br>
>> >> >>> >> > atime:<br>
>> >> >>> >> > 1213631520<br>
>> >> >>> >> > 11:52:13 [5879] dbg: bayes: untie-ing<br>
>> >> >>> >> > 11:52:13 [5879] dbg: bayes: files locked, now unlocking lock<br>
>> >> >>> >> ><br>
>> >> >>> >> > It seems that MailWatch is the one thats not working right.<br>
>> >> >>> >> > Any<br>
>> >> >>> >> > way<br>
>> >> >>> >> > to<br>
>> >> >>> >> > relink this?<br>
>> >> >>> >> ><br>
>> >> >>> >> > -Devon<br>
>> >> >>> >> ><br>
>> >> >>> >> Make sure your apahce user (the one running your httpd<br>
>> >> >>> >> processes...<br>
>> >> >>> >> hence the one running MailWatch:-) can actually read the bayes<br>
>> >> >>> >> files... "su" is your friend here... and if you want to be able<br>
>> >> >>> >> to<br>
>> >> >>> >> learn via MailWatch, make sure the same user can write them too.<br>
>> >> >>> >><br>
>> >> >>> >> Cheers<br>
>> >> >>> >> --<br>
>> >> >>> ><br>
>> >> >>> > I have the right permissions set, the thing is MailWatch is not<br>
>> >> >>> > showing<br>
>> >> >>> > any<br>
>> >> >>> > data for 'Bayes Database Information'. What is the tie in for<br>
>> >> >>> > MailWatch?<br>
>> >> >>> ><br>
>> >> >>> > -rw-rw---- 1 root apache 78K Jun 16 15:17 bayes_journal<br>
>> >> >>> > -rw-rw---- 1 root apache 895 Jun 16 15:17 bayes.mutex<br>
>> >> >>> > -rw-rw---- 1 root apache 172K Jun 16 15:17 bayes_seen<br>
>> >> >>> > -rw-rw---- 1 root apache 5.1M Jun 16 15:17 bayes_toks<br>
>> >> >>> ><br>
>> >> >>> > -Devon<br>
>> >> >>> ><br>
>> >> >>> But can the apache user access the directory?<br>
>> >> >>> MailWatch isn't particularly "magical" here, it uses the same info<br>
>> >> >>> as<br>
>> >> >>> all else...<br>
>> >> >>><br>
>> >> >>> Try something like "su - apache -s /bin/bash" and then "cd<br>
>> >> >>> /path/to/where/you/have/the/bayes/files"... Might give a clue:-)<br>
>> >> >>><br>
>> >> >>> Cheers<br>
>> >> >>> --<br>
>> >> >>> -- Glenn<br>
>> >> >><br>
>> >> >> User apache can access this fine. I didn't see anything in the<br>
>> >> >> MailWatch<br>
>> >> >> .conf file on Bayes<br>
>> >> >><br>
>> >> > That's because there is nothing there....:-).<br>
>> >> > It uses the same info all else do (through the normal SA method...<br>
>> >> > The<br>
>> >> > .cf files).<br>
>> >> ><br>
>> >> > Unless this is something hardcoded into the scriptlet handling the SA<br>
>> >> > db dump... Haven't checked that (and will not be anwhere I can check<br>
>> >> > it until tomorrow... You have a look:-).<br>
>> >> ><br>
>> >> > Cheers<br>
>> >><br>
>> >> Nope, nothing strange here, the call is to<br>
>> >> sa-learn -p /path/to/MailScanner/spa.assassin.prefs.conf --dump-magic<br>
>> >> in bayes_info.php ... Where /path/to/MailScanner likely expands as<br>
>> >> /etc/MailScanner or similar (this is from the SA_PREFS setting in<br>
>> >> conf.php).<br>
>> >><br>
>> >> As the apache user, can you run the above command? What do you get?<br>
>> >><br>
>> >> Cheers<br>
>> >> --<br>
>> >> -- Glenn<br>
>> ><br>
>> > This was run as apache:<br>
>> ><br>
>> > bash-3.1$ sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --dump<br>
>> > magic<br>
>> > 0.000 0 3 0 non-token data: bayes db version<br>
>> > 0.000 0 448 0 non-token data: nspam<br>
>> > 0.000 0 1287 0 non-token data: nham<br>
>> > 0.000 0 170860 0 non-token data: ntokens<br>
>> > 0.000 0 1171294928 0 non-token data: oldest atime<br>
>> > 0.000 0 1213703845 0 non-token data: newest atime<br>
>> > 0.000 0 1213700281 0 non-token data: last journal<br>
>> > sync<br>
>> > atime<br>
>> > 0.000 0 1213671060 0 non-token data: last expiry<br>
>> > atime<br>
>> > 0.000 0 11059200 0 non-token data: last expire<br>
>> > atime<br>
>> > delta<br>
>> > 0.000 0 24264 0 non-token data: last expire<br>
>> > reduction count<br>
>> > bash-3.1$<br>
>> ><br>
>> Ok, and if you do (as the apache user)<br>
>> spamassassin --lint -D -p /etc/MailScanner/spam.assassin.prefs.conf<br>
>> (in reality, one should change MW to not use the -p preference file,<br>
>> since this is included as a .cf already... Don't do much harm<br>
>> though:-) Do you get the db error then?<br>
>><br>
>> Cheers<br>
>> --<br>
>> -- Glenn<br>
><br>
> No error and it even finds bayes installed. I think its something with MW.<br>
><br>
> [26297] dbg: replacetags: done replacing tags<br>
> [26297] dbg: bayes: tie-ing to DB file R/O /var/www/.spamassassin/bayes_toks<br>
> [26297] dbg: bayes: tie-ing to DB file R/O /var/www/.spamassassin/bayes_seen<br>
> [26297] dbg: bayes: found bayes db version 3<br>
> [26297] dbg: bayes: DB journal sync: last sync: 1213700281<br>
> [26297] dbg: config: score set 2 chosen.<br>
><br>
</div></div>Ok, what is your MS_CONFIG setting and your SA_PREFS in conf.php<br>
(sorry all you others, this should be on the MW list, I know)?<br>
<div><div></div><div class="Wj3C7c">--<br>
-- Glenn<br></div></div></blockquote><div><br>Here are paths:<br><br>// Paths<br>define(MAILWATCH_HOME, '/var/www/html/mailscanner');<br>define(MS_CONFIG_DIR, '/etc/MailScanner/');<br>define(MS_LIB_DIR, '/usr/lib/MailScanner/');<br>
define(CACHE_DIR, './images/cache/'); // JpGraph cache<br>define(TTF_DIR,'./jpgraph/fonts/'); // JpGraph fonts<br>define(SA_DIR,'/usr/bin/');<br>define(SA_RULES_DIR, '/usr/share/spamassassin/');<br>
define(SA_PREFS, MS_CONFIG_DIR.'spam.assassin.prefs.conf');<br>define(FPDF_FONTPATH,'./fpdf/font/'); <br></div></div>