I got my SpamAssassin content filter working, using recommendations and script
code (modified) from http://www.akadia.com/services/postfix_spamassassin.html
<http://www.akadia.com/services/postfix_spamassassin.html>.
Added to master.cf
smtp inet n - n - - smtpd
-o content_filter=spamchk:dummy
...
spamchk unix - n n - 10 pipe
flags=Rq user=mailman argv=/usr/local/bin/spamchk
${sender} ${recipient}
No changes to main.cf.
Tested. Installed. Checked. It was working from approximately 20:15pm yesterday
until 02:35am today.
Log sections looked like this when it was working:
Nov 17 02:35:37 g3po postfix/qmgr[70628]: 91D742F5FFD8:
from=<...@googlegroups.com>, size=7252, nrcpt=1 (queue active)
Nov 17 02:35:37 g3po postfix/smtpd[74671]: disconnect from
mail-qk0-f185.google.com[209.85.220.185]
Nov 17 02:35:37 g3po spamd[70257]: spamd: connection from 127.0.0.1
[127.0.0.1]:62946 to port 783, fd 6
Nov 17 02:35:38 g3po spamd[70257]: spamd: setuid to _mailman succeeded
Nov 17 02:35:38 g3po spamd[70257]: spamd: processing message
<...@googlegroups.com> for _mailman:78
Nov 17 02:35:39 g3po spamd[70257]: spamd: clean message (-0.8/8.0) for
_mailman:78 in 1.4 seconds, 7184 bytes.
Nov 17 02:35:39 g3po spamd[70257]: spamd: result: . 0 -
DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FORGED_FROMDOMAIN,FREEMAIL_FROM,HEADER_FROM_DIFFERENT_DOMAINS,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,RCVD_IN_MSPIKE_H3,RCVD_IN_MSPIKE_WL,SPF_PASS
scantime=1.4,size=7184,user=_mailman,uid=78,required_score=8.0,rhost=127.0.0.1,raddr=127.0.0.1,rport=62946,mid=<...googlegroups.com>,autolearn=disabled
Nov 17 02:35:39 g3po postfix/pickup[74405]: DB1842F5FFDB: uid=78
from=<...@googlegroups.com>
Nov 17 02:35:39 g3po postfix/pipe[74842]: 91D742F5FFD8: to=<...@cfcl.com>,
relay=spamchk, delay=2.9, delays=0.85/0.01/0/2.1, dsn=2.0.0, status=sent
(delivered via spamchk service)
Nov 17 02:35:39 g3po postfix/qmgr[70628]: 91D742F5FFD8: removed
Nov 17 02:35:39 g3po postfix/cleanup[74841]: DB1842F5FFDB:
message-id=...@googlegroups.com>
Nov 17 02:35:39 g3po postfix/qmgr[70628]: DB1842F5FFDB:
from=<...@googlegroups.com>, size=7712, nrcpt=1 (queue active)
Nov 17 02:35:40 g3po postfix/smtp[74836]: DB1842F5FFDB: to=<...@cfcl.com>,
relay=192.168.1.212[192.168.1.212]:25, delay=0.29, delays=0.04/0/0.16/0.09,
dsn=2.0.0, status=sent (250 2.0.0 Ok: queued as C71C93EC722)
Nov 17 02:35:40 g3po postfix/qmgr[70628]: DB1842F5FFDB: removed
Nov 17 02:35:39 g3po spamd[70255]: prefork: child states: II
Then it crashed.
/var/log/mail.log shows
Nov 17 02:38:29 g3po postfix/qmgr[70628]: warning: private/spamchk socket:
malformed response
Nov 17 02:38:29 g3po postfix/qmgr[70628]: warning: transport spamchk failure --
see a previous warning/fatal/panic logfile record for the problem description
Nov 17 02:38:29 g3po postfix/master[69788]: warning: process
/usr/libexec/postfix/pipe pid 74861 exit status 1
Nov 17 02:38:29 g3po postfix/master[69788]: warning: /usr/libexec/postfix/pipe:
bad command startup -- throttling
SpamAssassin's spamd is still running.
A test (pushing a simple test message through the spamchk script) works as it
did last night.
I'm guessing... that the log message indicates that the spamchk script had an
exit status of 1. But there's no indication of why. Is that a "malformed
response"?
Once the "malformed response" warning started, that's all I got until I turned
everything off again this morning.
Is there anything I can do to troubleshoot?
-- Vicki
cfcl.com/vlb
