<br><br><div class="gmail_quote">On Tue, Jun 17, 2008 at 5:11 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
2008/6/17 Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>>:<br>
<div><div></div><div class="Wj3C7c">> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>><br>
>><br>
>> On Mon, Jun 16, 2008 at 4:12 PM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<br>
>>><br>
>>> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>>> ><br>
>>> ><br>
>>> > On Mon, Jun 16, 2008 at 2:46 PM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>><br>
>>> > wrote:<br>
>>> >><br>
>>> >> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>>> >> >>>><br>
>>> >> >>>><br>
>>> >> >>>><br>
>>> >> >>>> Devon Harding wrote:<br>
>>> >> >>>> | I'm getting alot of spam coming through and it seems like<br>
>>> >> >>>> the cause of<br>
>>> >> >>>> | this is BAYES_00 scoring messages with -2.60. I'm<br>
>>> >> >>>> running<br>
>>> >> >>>> MS 4.68.8<br>
>>> >> >>>> | with SA *Le Service des Technologies de l'Information de<br>
>>> >> >>>> l'UdeS veut vous mettre en garde contre "3.2.4" qui semble<br>
>>> >> >>>> être une tentative de fraude envers* <a href="http://3.2.4." target="_blank">3.2.4.</a> <<a href="http://3.2.4" target="_blank">http://3.2.4</a>.><br>
>>> >> >>>> <*Le Service des Technologies de l'Information de l'UdeS<br>
>>> >> >>>> veut<br>
>>> >> >>>> vous mettre en garde contre "3.2.4" qui semble être une<br>
>>> >> >>>> tentative de fraude envers* <a href="http://3.2.4" target="_blank">http://3.2.4</a>.> I've already<br>
>>> >> >>>> trained hundreds of<br>
>>> >> >>>><br>
>>> >> >>>> | messages like these as spam and it doesn't seem to work.<br>
>>> >> >>>> What else can<br>
>>> >> >>>> | I do?<br>
>>> >> >>>><br>
>>> >> >>>> My guess is that you are training the wrong database. You<br>
>>> >> >>>> train another<br>
>>> >> >>>> database and not the one you are using with MailScanner.<br>
>>> >> >>>><br>
>>> >> >>>> Hugo.<br>
>>> >> >>>><br>
>>> >> >>>><br>
>>> >> >>>><br>
>>> >> >>>> For MS, where is the Bayes DB path specified? My DB is located<br>
>>> >> >>>> here:<br>
>>> >> >>>><br>
>>> >> >>>> /etc/MailScanner/.spamassassin<br>
>>> >> >>>><br>
>>> >> >>>><br>
>>> >> >>>> I think my BAYES is all messed up. How do I rebuild it from<br>
>>> >> >>>> scratch?<br>
>>> >> >>>><br>
>>> >> >>> Devon,<br>
>>> >> >>><br>
>>> >> >>> Look here for a starter kit: <a href="http://www.fsl.com/resources.html" target="_blank">http://www.fsl.com/resources.html</a><br>
>>> >> >>><br>
>>> >> >>> Denis<br>
>>> >> >>><br>
>>> >> >>> --<br>
>>> >> >><br>
>>> >> >> I've restored the starter DB and I do see the new files in<br>
>>> >> >> /etc/MailScanner/.spamassassin (I stopped MailScanner and removed<br>
>>> >> >> the<br>
>>> >> >> one<br>
>>> >> >> ones first), but SA Bayes DB Info from Mailwatch shows nothing.<br>
>>> >> >> When I<br>
>>> >> >> do a<br>
>>> >> >> lint from the Tools tab, i Get the following:<br>
>>> >> >><br>
>>> >> >> [5637] dbg: bayes: no dbs present, cannot tie DB R/O:<br>
>>> >> >> //.spamassassin/bayes_toks<br>
>>> >> ><br>
>>> >> ><br>
>>> >> > Hmm....I thing Bayes IS working. I just ran MailScanner --debug<br>
>>> >> > --debug-sa<br>
>>> >> > after the restore and did see:<br>
>>> >> ><br>
>>> >> > 11:52:13 [5879] dbg: bayes: tie-ing to DB file R/W<br>
>>> >> > /root/.spamassassin/bayes_toks<br>
>>> >> > 11:52:13 [5879] dbg: bayes: tie-ing to DB file R/W<br>
>>> >> > /root/.spamassassin/bayes_seen<br>
>>> >> > 11:52:13 [5879] dbg: bayes: found bayes db version 3<br>
>>> >> > 11:52:13 [5879] dbg: bayes: learned<br>
>>> >> > '88a47a16459989c19d47893de31fec608aa8f41e@sa_generated', atime:<br>
>>> >> > 1213631520<br>
>>> >> > 11:52:13 [5879] dbg: bayes: untie-ing<br>
>>> >> > 11:52:13 [5879] dbg: bayes: files locked, now unlocking lock<br>
>>> >> ><br>
>>> >> > It seems that MailWatch is the one thats not working right. Any way<br>
>>> >> > to<br>
>>> >> > relink this?<br>
>>> >> ><br>
>>> >> > -Devon<br>
>>> >> ><br>
>>> >> Make sure your apahce user (the one running your httpd processes...<br>
>>> >> hence the one running MailWatch:-) can actually read the bayes<br>
>>> >> files... "su" is your friend here... and if you want to be able to<br>
>>> >> learn via MailWatch, make sure the same user can write them too.<br>
>>> >><br>
>>> >> Cheers<br>
>>> >> --<br>
>>> ><br>
>>> > I have the right permissions set, the thing is MailWatch is not showing<br>
>>> > any<br>
>>> > data for 'Bayes Database Information'. What is the tie in for<br>
>>> > MailWatch?<br>
>>> ><br>
>>> > -rw-rw---- 1 root apache 78K Jun 16 15:17 bayes_journal<br>
>>> > -rw-rw---- 1 root apache 895 Jun 16 15:17 bayes.mutex<br>
>>> > -rw-rw---- 1 root apache 172K Jun 16 15:17 bayes_seen<br>
>>> > -rw-rw---- 1 root apache 5.1M Jun 16 15:17 bayes_toks<br>
>>> ><br>
>>> > -Devon<br>
>>> ><br>
>>> But can the apache user access the directory?<br>
>>> MailWatch isn't particularly "magical" here, it uses the same info as<br>
>>> all else...<br>
>>><br>
>>> Try something like "su - apache -s /bin/bash" and then "cd<br>
>>> /path/to/where/you/have/the/bayes/files"... Might give a clue:-)<br>
>>><br>
>>> Cheers<br>
>>> --<br>
>>> -- Glenn<br>
>><br>
>> User apache can access this fine. I didn't see anything in the MailWatch<br>
>> .conf file on Bayes<br>
>><br>
> That's because there is nothing there....:-).<br>
> It uses the same info all else do (through the normal SA method... The<br>
> .cf files).<br>
><br>
> Unless this is something hardcoded into the scriptlet handling the SA<br>
> db dump... Haven't checked that (and will not be anwhere I can check<br>
> it until tomorrow... You have a look:-).<br>
><br>
> Cheers<br>
<br>
</div></div>Nope, nothing strange here, the call is to<br>
sa-learn -p /path/to/MailScanner/spa.assassin.prefs.conf --dump-magic<br>
in bayes_info.php ... Where /path/to/MailScanner likely expands as<br>
/etc/MailScanner or similar (this is from the SA_PREFS setting in<br>
conf.php).<br>
<br>
As the apache user, can you run the above command? What do you get?<br>
<div><div></div><div class="Wj3C7c"><br>
Cheers<br>
--<br>
-- Glenn<br></div></div></blockquote><div><br>This was run as apache:<br><br>bash-3.1$ sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --dump magic <br>0.000 0 3 0 non-token data: bayes db version<br>
0.000 0 448 0 non-token data: nspam<br>0.000 0 1287 0 non-token data: nham<br>0.000 0 170860 0 non-token data: ntokens<br>0.000 0 1171294928 0 non-token data: oldest atime<br>
0.000 0 1213703845 0 non-token data: newest atime<br>0.000 0 1213700281 0 non-token data: last journal sync atime<br>0.000 0 1213671060 0 non-token data: last expiry atime<br>
0.000 0 11059200 0 non-token data: last expire atime delta<br>0.000 0 24264 0 non-token data: last expire reduction count<br>bash-3.1$ <br></div></div>