<br><br><div class="gmail_quote">On Tue, Jun 17, 2008 at 9:51 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
2008/6/17 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
<div><div></div><div class="Wj3C7c">><br>
><br>
> On Tue, Jun 17, 2008 at 5:11 AM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>> wrote:<br>
>><br>
>> 2008/6/17 Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>>:<br>
>> > 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> >><br>
>> >><br>
>> >> On Mon, Jun 16, 2008 at 4:12 PM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>><br>
>> >> wrote:<br>
>> >>><br>
>> >>> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> >>> ><br>
>> >>> ><br>
>> >>> > On Mon, Jun 16, 2008 at 2:46 PM, Glenn Steen <<a href="mailto:glenn.steen@gmail.com">glenn.steen@gmail.com</a>><br>
>> >>> > wrote:<br>
>> >>> >><br>
>> >>> >> 2008/6/16 Devon Harding <<a href="mailto:devonharding@gmail.com">devonharding@gmail.com</a>>:<br>
>> >>> >> >>>><br>
>> >>> >> >>>><br>
>> >>> >> >>>><br>
>> >>> >> >>>> Devon Harding wrote:<br>
>> >>> >> >>>> | I'm getting alot of spam coming through and it seems<br>
>> >>> >> >>>> like<br>
>> >>> >> >>>> the cause of<br>
>> >>> >> >>>> | this is BAYES_00 scoring messages with -2.60. I'm<br>
>> >>> >> >>>> running<br>
>> >>> >> >>>> MS 4.68.8<br>
>> >>> >> >>>> | with SA *Le Service des Technologies de l'Information<br>
>> >>> >> >>>> de<br>
>> >>> >> >>>> l'UdeS veut vous mettre en garde contre "3.2.4" qui<br>
>> >>> >> >>>> semble<br>
>> >>> >> >>>> être une tentative de fraude envers* <a href="http://3.2.4." target="_blank">3.2.4.</a><br>
>> >>> >> >>>> <<a href="http://3.2.4" target="_blank">http://3.2.4</a>.><br>
>> >>> >> >>>> <*Le Service des Technologies de l'Information de<br>
>> >>> >> >>>> l'UdeS<br>
>> >>> >> >>>> veut<br>
>> >>> >> >>>> vous mettre en garde contre "3.2.4" qui semble être une<br>
>> >>> >> >>>> tentative de fraude envers* <a href="http://3.2.4" target="_blank">http://3.2.4</a>.> I've<br>
>> >>> >> >>>> already<br>
>> >>> >> >>>> trained hundreds of<br>
>> >>> >> >>>><br>
>> >>> >> >>>> | messages like these as spam and it doesn't seem to<br>
>> >>> >> >>>> work.<br>
>> >>> >> >>>> What else can<br>
>> >>> >> >>>> | I do?<br>
>> >>> >> >>>><br>
>> >>> >> >>>> My guess is that you are training the wrong database.<br>
>> >>> >> >>>> You<br>
>> >>> >> >>>> train another<br>
>> >>> >> >>>> database and not the one you are using with<br>
>> >>> >> >>>> MailScanner.<br>
>> >>> >> >>>><br>
>> >>> >> >>>> Hugo.<br>
>> >>> >> >>>><br>
>> >>> >> >>>><br>
>> >>> >> >>>><br>
>> >>> >> >>>> For MS, where is the Bayes DB path specified? My DB is<br>
>> >>> >> >>>> located<br>
>> >>> >> >>>> here:<br>
>> >>> >> >>>><br>
>> >>> >> >>>> /etc/MailScanner/.spamassassin<br>
>> >>> >> >>>><br>
>> >>> >> >>>><br>
>> >>> >> >>>> I think my BAYES is all messed up. How do I rebuild it from<br>
>> >>> >> >>>> scratch?<br>
>> >>> >> >>>><br>
>> >>> >> >>> Devon,<br>
>> >>> >> >>><br>
>> >>> >> >>> Look here for a starter kit: <a href="http://www.fsl.com/resources.html" target="_blank">http://www.fsl.com/resources.html</a><br>
>> >>> >> >>><br>
>> >>> >> >>> Denis<br>
>> >>> >> >>><br>
>> >>> >> >>> --<br>
>> >>> >> >><br>
>> >>> >> >> I've restored the starter DB and I do see the new files in<br>
>> >>> >> >> /etc/MailScanner/.spamassassin (I stopped MailScanner and<br>
>> >>> >> >> removed<br>
>> >>> >> >> the<br>
>> >>> >> >> one<br>
>> >>> >> >> ones first), but SA Bayes DB Info from Mailwatch shows nothing.<br>
>> >>> >> >> When I<br>
>> >>> >> >> do a<br>
>> >>> >> >> lint from the Tools tab, i Get the following:<br>
>> >>> >> >><br>
>> >>> >> >> [5637] dbg: bayes: no dbs present, cannot tie DB R/O:<br>
>> >>> >> >> //.spamassassin/bayes_toks<br>
>> >>> >> ><br>
>> >>> >> ><br>
>> >>> >> > Hmm....I thing Bayes IS working. I just ran MailScanner --debug<br>
>> >>> >> > --debug-sa<br>
>> >>> >> > after the restore and did see:<br>
>> >>> >> ><br>
>> >>> >> > 11:52:13 [5879] dbg: bayes: tie-ing to DB file R/W<br>
>> >>> >> > /root/.spamassassin/bayes_toks<br>
>> >>> >> > 11:52:13 [5879] dbg: bayes: tie-ing to DB file R/W<br>
>> >>> >> > /root/.spamassassin/bayes_seen<br>
>> >>> >> > 11:52:13 [5879] dbg: bayes: found bayes db version 3<br>
>> >>> >> > 11:52:13 [5879] dbg: bayes: learned<br>
>> >>> >> > '88a47a16459989c19d47893de31fec608aa8f41e@sa_generated', atime:<br>
>> >>> >> > 1213631520<br>
>> >>> >> > 11:52:13 [5879] dbg: bayes: untie-ing<br>
>> >>> >> > 11:52:13 [5879] dbg: bayes: files locked, now unlocking lock<br>
>> >>> >> ><br>
>> >>> >> > It seems that MailWatch is the one thats not working right. Any<br>
>> >>> >> > way<br>
>> >>> >> > to<br>
>> >>> >> > relink this?<br>
>> >>> >> ><br>
>> >>> >> > -Devon<br>
>> >>> >> ><br>
>> >>> >> Make sure your apahce user (the one running your httpd processes...<br>
>> >>> >> hence the one running MailWatch:-) can actually read the bayes<br>
>> >>> >> files... "su" is your friend here... and if you want to be able to<br>
>> >>> >> learn via MailWatch, make sure the same user can write them too.<br>
>> >>> >><br>
>> >>> >> Cheers<br>
>> >>> >> --<br>
>> >>> ><br>
>> >>> > I have the right permissions set, the thing is MailWatch is not<br>
>> >>> > showing<br>
>> >>> > any<br>
>> >>> > data for 'Bayes Database Information'. What is the tie in for<br>
>> >>> > MailWatch?<br>
>> >>> ><br>
>> >>> > -rw-rw---- 1 root apache 78K Jun 16 15:17 bayes_journal<br>
>> >>> > -rw-rw---- 1 root apache 895 Jun 16 15:17 bayes.mutex<br>
>> >>> > -rw-rw---- 1 root apache 172K Jun 16 15:17 bayes_seen<br>
>> >>> > -rw-rw---- 1 root apache 5.1M Jun 16 15:17 bayes_toks<br>
>> >>> ><br>
>> >>> > -Devon<br>
>> >>> ><br>
>> >>> But can the apache user access the directory?<br>
>> >>> MailWatch isn't particularly "magical" here, it uses the same info as<br>
>> >>> all else...<br>
>> >>><br>
>> >>> Try something like "su - apache -s /bin/bash" and then "cd<br>
>> >>> /path/to/where/you/have/the/bayes/files"... Might give a clue:-)<br>
>> >>><br>
>> >>> Cheers<br>
>> >>> --<br>
>> >>> -- Glenn<br>
>> >><br>
>> >> User apache can access this fine. I didn't see anything in the<br>
>> >> MailWatch<br>
>> >> .conf file on Bayes<br>
>> >><br>
>> > That's because there is nothing there....:-).<br>
>> > It uses the same info all else do (through the normal SA method... The<br>
>> > .cf files).<br>
>> ><br>
>> > Unless this is something hardcoded into the scriptlet handling the SA<br>
>> > db dump... Haven't checked that (and will not be anwhere I can check<br>
>> > it until tomorrow... You have a look:-).<br>
>> ><br>
>> > Cheers<br>
>><br>
>> Nope, nothing strange here, the call is to<br>
>> sa-learn -p /path/to/MailScanner/spa.assassin.prefs.conf --dump-magic<br>
>> in bayes_info.php ... Where /path/to/MailScanner likely expands as<br>
>> /etc/MailScanner or similar (this is from the SA_PREFS setting in<br>
>> conf.php).<br>
>><br>
>> As the apache user, can you run the above command? What do you get?<br>
>><br>
>> Cheers<br>
>> --<br>
>> -- Glenn<br>
><br>
> This was run as apache:<br>
><br>
> bash-3.1$ sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --dump magic<br>
> 0.000 0 3 0 non-token data: bayes db version<br>
> 0.000 0 448 0 non-token data: nspam<br>
> 0.000 0 1287 0 non-token data: nham<br>
> 0.000 0 170860 0 non-token data: ntokens<br>
> 0.000 0 1171294928 0 non-token data: oldest atime<br>
> 0.000 0 1213703845 0 non-token data: newest atime<br>
> 0.000 0 1213700281 0 non-token data: last journal sync<br>
> atime<br>
> 0.000 0 1213671060 0 non-token data: last expiry atime<br>
> 0.000 0 11059200 0 non-token data: last expire atime<br>
> delta<br>
> 0.000 0 24264 0 non-token data: last expire<br>
> reduction count<br>
> bash-3.1$<br>
><br>
</div></div>Ok, and if you do (as the apache user)<br>
spamassassin --lint -D -p /etc/MailScanner/spam.assassin.prefs.conf<br>
(in reality, one should change MW to not use the -p preference file,<br>
since this is included as a .cf already... Don't do much harm<br>
though:-) Do you get the db error then?<br>
<div><div></div><div class="Wj3C7c"><br>
Cheers<br>
--<br>
-- Glenn<br></div></div></blockquote><div><br>No error and it even finds bayes installed. I think its something with MW.<br><br>[26297] dbg: replacetags: done replacing tags<br>[26297] dbg: bayes: tie-ing to DB file R/O /var/www/.spamassassin/bayes_toks<br>
[26297] dbg: bayes: tie-ing to DB file R/O /var/www/.spamassassin/bayes_seen<br>[26297] dbg: bayes: found bayes db version 3<br>[26297] dbg: bayes: DB journal sync: last sync: 1213700281<br>[26297] dbg: config: score set 2 chosen.<br>
</div></div>