Re: [toaster] clamav-0.88.1

[Marcus Williams]

On 05/04/2006 Bob Hutchinson wrote:

One of the toaster patches failed: (0.87)


I'm running the toaster with clamav from Debian volatile (0.88) with no 
patches and everything seems fine - can someone tell me what the patches 
do? I dont run with custom error messages setup on qmail either as I 
assumed that the patches allowed error messages on the output stream or 
something.


Thanks

Marcus

Re: [toaster] Submitting spam to Bayesian filter from SquirrelMail

[Nikki Locke]

Bob Hutchinson wrote:
> On Wednesday 05 Apr 2006 19:55, Nikki Locke wrote: 
> > Bob Hutchinson wrote: 
> > > The squirrelmail spam-button plugin works for me. 
> > 
> > .. 
> > 
> > > This will allow your customers to train spamassassin. 
> > > 
> > > Wether they will or not is another matter ;-( 
..
> > 
> > There is at least one user (me) who will be using it religously! 
>  
> Personally I'm sticking to TMDA, despite the collateral mail.

In my experience, many TMDA challenge messages are rejected as spam or 
phishing or just plain not worth the bother. 

I've had people send me email asking a question, and, when I reply, I get a 
TMDA challenge. If I do, I usually just bin the whole correspondence.

So I don't use it.

Nikki
-- 
Nikki Locke, Trumphurst Ltd.  PC & Unix consultancy & programming
http://www.trumphurst.com/

Re: [toaster] LogWatch and MultiLog

[Nikki Locke]

Bob Hutchinson wrote:
> On Wednesday 05 Apr 2006 19:55, Nikki Locke wrote: 
> > People with CentOS and RedHat get LogWatch installed by default. 
> > Unfortunately, out of the box LogWatch does not grok MultiLog files at all. 
>  
> More recent versions of Logwatch do support qmail running with Multilog. 
> Look for qmail-pop3d, qmail-pop3ds, qmail-send and qmail-smtpd in the 
> scripts/services directory. 

Thanks again, Bob.

I've installed the latest logwatch, and that works much better. Pity CentOS 
hasn't already got it.

I must be rubbish at searching Google - putting in "logwatch multilog" didn't 
find anything useful in the first 5 pages yesterday.

-- 
Nikki Locke, Trumphurst Ltd.  PC & Unix consultancy & programming
http://www.trumphurst.com/

Re: [toaster] Sorting spam mail into a separate folder

[Nikki Locke]

Bob Hutchinson wrote:
> On Wednesday 05 Apr 2006 19:55, Nikki Locke wrote: 
> > I would like to sort my spam tagged email into a separate spam folder 
> > automatically. I've seen lots of different ways to do that, or varying 
> > complexity, on the 'Net. 
> > 
> > Is there an easy way, that works well with the Toaster? 
>  
> yeah, maildrop 
> search the archive for this list for details, roundabout mid-february

Thanks for that. I've had a look, and my brain hurts! Yet another perl-like 
language to learn, just to separate mail into two IMAP folders. Perhaps 
when I get over this cold I'll feel more up to it :-)

-- 
Nikki Locke, Trumphurst Ltd.  PC & Unix consultancy & programming
http://www.trumphurst.com/

Re: [toaster] LogWatch and MultiLog

[Bob Hutchinson]

On Thursday 06 Apr 2006 13:00, Nikki Locke wrote:
> Bob Hutchinson wrote:
> > On Wednesday 05 Apr 2006 19:55, Nikki Locke wrote:
> > > People with CentOS and RedHat get LogWatch installed by default.
> > > Unfortunately, out of the box LogWatch does not grok MultiLog files at
> > > all.
> >
> > More recent versions of Logwatch do support qmail running with Multilog.
> > Look for qmail-pop3d, qmail-pop3ds, qmail-send and qmail-smtpd in the
> > scripts/services directory.
>
> Thanks again, Bob.
>
> I've installed the latest logwatch, and that works much better. Pity CentOS
> hasn't already got it.

Some things, Logwatch and Clamav in particular, I always install myself from 
source and keep up to the latest stable version. I'm using Debian myself and 
for most things the apt update system works fine.

>
> I must be rubbish at searching Google - putting in "logwatch multilog"
> didn't find anything useful in the first 5 pages yesterday.

-- 
-
Bob Hutchinson
Midwales dot com
-

Re: [toaster] Sorting spam mail into a separate folder

[Bob Hutchinson]

On Thursday 06 Apr 2006 13:00, Nikki Locke wrote:
> Bob Hutchinson wrote:
> > On Wednesday 05 Apr 2006 19:55, Nikki Locke wrote:
> > > I would like to sort my spam tagged email into a separate spam folder
> > > automatically. I've seen lots of different ways to do that, or varying
> > > complexity, on the 'Net.
> > >
> > > Is there an easy way, that works well with the Toaster?
> >
> > yeah, maildrop
> > search the archive for this list for details, roundabout mid-february
>
> Thanks for that. I've had a look, and my brain hurts! Yet another perl-like
> language to learn, just to separate mail into two IMAP folders. Perhaps
> when I get over this cold I'll feel more up to it :-)

maildrop is picky about it's filter files and not very helpful about spotting 
errors ;-(

here is a filter to kick-start you (watch out for wrapping):
import EXT
import HOST

VPOPBIN="/home/vpopmail/bin"
QMAILDIRMAKE="/var/qmail/bin/maildirmake"

VUSERDIR=`$VPOPBIN/vuserinfo -d [EMAIL PROTECTED]
VMAILDIR="$VUSERDIR/Maildir"
SPAMDIR="$VUSERDIR/Maildir/.SPAM"

if (/^X-Spam-Flag: *YES/)
{
`test -d $SPAMDIR`
if( $RETURNCODE == 1 )
{
`$QMAILDIRMAKE $SPAMDIR;chown -R vpopmail.vchkpw $SPAMDIR`
}
to $SPAMDIR/
}
else
{
to $VMAILDIR/
}

#
# use this for courier-imap v4.xx
# MAILDIRMAKE="/usr/lib/courier-imap/bin/maildirmake"
# MAILDIRACL="/usr/lib/courier-imap/bin/maildiracl"
# `$MAILDIRMAKE -f SPAM $VUSERDIR/Maildir;$MAILDIRACL -set $VUSERDIR/Maildir 
INBOX.SPAM owner aceilrstwx;chown -R vpopmail.vchkpw $VUSERDIR/Maildir/.SPAM`
#

then put something like this in your .qmail-user file

|/usr/local/bin/maildrop  /home/vpopmail/domains/mydomain.com/spam-mailfilter


-- 
-
Bob Hutchinson
Midwales dot com
-

Re: [toaster] Sorting spam mail into a separate folder

[Nikki Locke]

Thanks, Bob.

I'm still ever so slightly confused, as I seem to have both 
/var/qmail/bin/maildirmake AND  /usr/lib/courier-imap/bin/maildirmake, and I'm 
not sure which one I'm supposed to use.

It occurred to me to ask myself what version of courier-imap I had, so my 
fingers (which sometimes have a better memory than my brain) typed "ident  
/usr/lib/courier-imap/bin/maildirmake" - turns out I don't have ident. Wonder 
what package it comes with? Of course, "yum provides ident" provides thousands 
of hits :-( So I went to the source (Luke :-), and I've got 4.0.6 (that's what 
the toaster says to install, so that's what I've got).

Nikki

[I've top posted this because in this rare instance it seemed to be clearer - 
hope you don't mind.]

Bob Hutchinson wrote:
> maildrop is picky about it's filter files and not very helpful about spotting 
> errors ;-( 
>  
> here is a filter to kick-start you (watch out for wrapping): 
> import EXT 
> import HOST 
>  
> VPOPBIN="/home/vpopmail/bin" 
> QMAILDIRMAKE="/var/qmail/bin/maildirmake" 
>  
> VUSERDIR=`$VPOPBIN/vuserinfo -d [EMAIL PROTECTED] 
> VMAILDIR="$VUSERDIR/Maildir" 
> SPAMDIR="$VUSERDIR/Maildir/.SPAM" 
>  
> if (/^X-Spam-Flag: *YES/) 
> { 
>`test -d $SPAMDIR` 
>if( $RETURNCODE == 1 ) 
>{ 
>`$QMAILDIRMAKE $SPAMDIR;chown -R vpopmail.vchkpw $SPAMDIR` 
>} 
>to $SPAMDIR/ 
> } 
> else 
> { 
>to $VMAILDIR/ 
> } 
>  
> # 
> # use this for courier-imap v4.xx 
> # MAILDIRMAKE="/usr/lib/courier-imap/bin/maildirmake" 
> # MAILDIRACL="/usr/lib/courier-imap/bin/maildiracl" 
> # `$MAILDIRMAKE -f SPAM $VUSERDIR/Maildir;$MAILDIRACL -set $VUSERDIR/Maildir 
> INBOX.SPAM owner aceilrstwx;chown -R vpopmail.vchkpw $VUSERDIR/Maildir/.SPAM` 
> # 
>  
> then put something like this in your .qmail-user file 
>  
> |/usr/local/bin/maildrop  /home/vpopmail/domains/mydomain.com/spam-mailfilter



-- 
Nikki Locke, Trumphurst Ltd.  PC & Unix consultancy & programming
http://www.trumphurst.com/

[toaster] problems with spamassassin 3.1.1

[Ingo Claro]

Hello all:

when I activate spamassassin for a domain the mails get corrupted, I 
only get this:


Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 3833 invoked by uid 89); 7 Apr 2006 04:09:06 -
Received: by simscan 1.1.0 ppid: 3826, pid: 3830, t: 0.0193s
   scanners: attach: 1.1.0 spam: 3.1.1




looking in spamd/current i've found the following warning:
info: config: failed to parse, now a plugin, skipping: ok_languages all

so removing that line in local.cf gets that solved, but no mails.

I don't see anything in the logs that indicates the mail gets scanned, 
but if I remove spamassassin in simcontrol the emails arrive ok. So it 
is a Spamassassin problem.


Can anybody help?

thanks,
--




*Ingo Claro F.*
Gerente de Operaciones
[EMAIL PROTECTED] 
(+56-2) 43 00 155

Re: [toaster] problems with spamassassin 3.1.1

[Bill Shupp]

Ingo Claro wrote:
> Hello all:
> 
> when I activate spamassassin for a domain the mails get corrupted, I
> only get this:
> 
> Return-Path: <[EMAIL PROTECTED]>
> Delivered-To: [EMAIL PROTECTED]
> Received: (qmail 3833 invoked by uid 89); 7 Apr 2006 04:09:06 -
> Received: by simscan 1.1.0 ppid: 3826, pid: 3830, t: 0.0193s
>scanners: attach: 1.1.0 spam: 3.1.1
> 
> 
> 
> 
> looking in spamd/current i've found the following warning:
> info: config: failed to parse, now a plugin, skipping: ok_languages all
> 
> so removing that line in local.cf gets that solved, but no mails.
> 
> I don't see anything in the logs that indicates the mail gets scanned,
> but if I remove spamassassin in simcontrol the emails arrive ok. So it
> is a Spamassassin problem.
> 
> Can anybody help?

How are you handing mail off to spamassassin?  simscan?  maildrop?

Regards,

Bill

Re: [toaster] problems with spamassassin 3.1.1

[Kiril Todorov]

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bill Shupp wrote:
> Ingo Claro wrote:
>> Hello all:
>>
>> when I activate spamassassin for a domain the mails get corrupted, I
>> only get this:
>>
>> Return-Path: <[EMAIL PROTECTED]>
>> Delivered-To: [EMAIL PROTECTED]
>> Received: (qmail 3833 invoked by uid 89); 7 Apr 2006 04:09:06 -
>> Received: by simscan 1.1.0 ppid: 3826, pid: 3830, t: 0.0193s
>>scanners: attach: 1.1.0 spam: 3.1.1
>>
>>
>>
>>
>> looking in spamd/current i've found the following warning:
>> info: config: failed to parse, now a plugin, skipping: ok_languages all
>>
>> so removing that line in local.cf gets that solved, but no mails.
>>
>> I don't see anything in the logs that indicates the mail gets scanned,
>> but if I remove spamassassin in simcontrol the emails arrive ok. So it
>> is a Spamassassin problem.
>>
>> Can anybody help?
> 
> How are you handing mail off to spamassassin?  simscan?  maildrop?
> 
> Regards,
> 
> Bill

- From the received line - I would say simscan,

to OP:

on shell, set SIMSCAN_DEBUG=2, and QMAILQUEUE=/var/qmail/bin/simscan

then pipe an email via qmail-inject, see what the debug of simscan says.
Also, if you have maildrop filters, for delivering spam messages to
separate folder and if the simscan test runs without errors - you should
check the maildrop.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFENVCnNACY/F2/q5ERAjNKAJ9eWHwcKV706cPnCRl52sZs2SG9zgCdGg15
qn/BTlV6zaG2i1yGxNNmj80=
=6IYN
-END PGP SIGNATURE-

Re: [toaster] problems with spamassassin 3.1.1

[Ingo Claro]

Got this:

@40004436092c0e078b8c CHKUSER accepted rcpt: from 
<[EMAIL PROTECTED]:[EMAIL PROTECTED]:> remote 
<[192.168.1.105]:unknown:192.168.1.105> rcpt <[EMAIL PROTECTED]> : found 
existing recipient

@40004436092c0f04c7ac simscan: cdb looking up
@40004436092c0f50e024 simscan: cdb for  found 
clam=no,spam=no,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif

@40004436092c0f5141cc simscan: pelookup clam = no
@40004436092c0f5193d4 simscan: pelookup spam = no
@40004436092c0f51d63c simscan: pelookup spam_passthru = yes
@40004436092c0f5237e4 simscan: spampassthru = yes/1
@40004436092c0f527a4c simscan: pelookup attach = 
.vbs:.lnk:.scr:.wsh:.hta:.pif
@40004436092c0f52c09c simscan: attachment flag attach = 
.vbs:.lnk:.scr:.wsh:.hta:.pif

@40004436092c0f532244 simscan: .vbs is attachment number 0
@40004436092c0f5364ac simscan: .lnk is attachment number 1
@40004436092c0f53a32c simscan: .scr is attachment number 2
@40004436092c0f53e594 simscan: .wsh is attachment number 3
@40004436092c0f542414 simscan: .hta is attachment number 4
@40004436092c0f54667c simscan: .pif is attachment number 5
@40004436092c0f54dbac simscan: starting: work dir: 
/var/qmail/simscan/1144391970.257199.7789

@40004436092c0fa322bc simscan: pelookup: called with [EMAIL PROTECTED]
@40004436092c0fa370dc simscan: pelookup: domain is domain.com
@40004436092c0fa3c6cc simscan: cdb looking up domain.com
@40004436092c0fa44f84 simscan: cdb for domain.com found 
clam=yes,spam=yes,spam_passthru=yes,spam_hits=10.1

@40004436092c0fa495d4 simscan: pelookup clam = yes
@40004436092c0fa4d83c simscan: pelookup spam = yes
@40004436092c0fa51aa4 simscan: pelookup spam_passthru = yes
@40004436092c0fa560f4 simscan: spampassthru = yes/1
@40004436092c0fa59f74 simscan: pelookup spam_hits = 10.1
@40004436092c0fa67a34 simscan: Per Domain Hits set to : 10.10
@40004436092c0fa6c084 simscan: pelookup: local part is test
@40004436092c0fa71a5c simscan: cdb looking up [EMAIL PROTECTED]
@40004436092c0fa71a5c simscan: cdb looking up [EMAIL PROTECTED]
@40004436092c0fa77c04 simscan: pelookup: called with [EMAIL PROTECTED]
@40004436092c0fa7c254 simscan: pelookup: domain is domain.com
@40004436092c0fa800d4 simscan: cdb looking up domain.com
@40004436092c0fa879ec simscan: cdb for domain.com found 
clam=yes,spam=yes,spam_passthru=yes,spam_hits=10.1

@40004436092c0fa8bc54 simscan: pelookup clam = yes
@40004436092c0fa8febc simscan: pelookup spam = yes
@40004436092c0fa94124 simscan: pelookup spam_passthru = yes
@40004436092c0fa9838c simscan: spampassthru = yes/1
@40004436092c0fa9c5f4 simscan: pelookup spam_hits = 10.1
@40004436092c0faa17fc simscan: Per Domain Hits set to : 10.10
@40004436092c0faa5e4c simscan: pelookup: local part is test
@40004436092c0faaa0b4 simscan: cdb looking up [EMAIL PROTECTED]
@40004436092c109fd23c simscan: cdb looking up version attach
@40004436092c10f0c0fc simscan: calling clamdscan
@40004436092c206c1a2c simscan: cdb looking up version clamav
@40004436092c206c29cc simscan: normal clamdscan return code: 0
@40004436092c206c2db4 simscan: calling spamc
@40004436092c206c3584 simscan: calling /usr/local/bin/spamc  spamc 
-u [EMAIL PROTECTED]

@40004436092c206d0c5c simscan: cdb looking up version spam
@40004436092c206dc3f4 simscan: done, execing qmail-queue
@40004436092c242f67a4 simscan: qmail-queue exited 0
@40004436092c24e050b4 tcpserver: end 7785 status 0
@40004436092c24e05c6c tcpserver: status: 0/20


simcontrol file:
domain.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=10.1
:clam=no,spam=no,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif


regards,




*Ingo Claro F.*
Gerente de Operaciones
[EMAIL PROTECTED] 
(+56-2) 43 00 155





Kiril Todorov escribió:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bill Shupp wrote:
  

Ingo Claro wrote:


Hello all:

when I activate spamassassin for a domain the mails get corrupted, I
only get this:

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 3833 invoked by uid 89); 7 Apr 2006 04:09:06 -
Received: by simscan 1.1.0 ppid: 3826, pid: 3830, t: 0.0193s
   scanners: attach: 1.1.0 spam: 3.1.1




looking in spamd/current i've found the following warning:
info: config: failed to parse, now a plugin, skipping: ok_languages all

so removing that line in local.cf gets that solved, but no mails.

I don't see anything in the logs that indicates the mail gets scanned,
but if I remove spamassassin in simcontrol the emails arrive ok. So it
is a Spamassassin problem.

Can anybody help?
  

How are you handing mail off to spamassassin?  simscan?  maildrop?

Regards,

Bill



- From the received line - I would say simscan,

to OP:

on shell, set SIMSCAN_DEBUG=2, and QMAILQUEUE=/var/qmail/bin/simscan

then pip

Re: [toaster] problems with spamassassin 3.1.1

[Ingo Claro]

ok, I'll check, I'm using pure simscan, no maildrop.

atte,




*Ingo Claro F.*
Gerente de Operaciones
[EMAIL PROTECTED] 
(+56-2) 43 00 155





Kiril Todorov escribió:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bill Shupp wrote:
  

Ingo Claro wrote:


Hello all:

when I activate spamassassin for a domain the mails get corrupted, I
only get this:

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 3833 invoked by uid 89); 7 Apr 2006 04:09:06 -
Received: by simscan 1.1.0 ppid: 3826, pid: 3830, t: 0.0193s
   scanners: attach: 1.1.0 spam: 3.1.1




looking in spamd/current i've found the following warning:
info: config: failed to parse, now a plugin, skipping: ok_languages all

so removing that line in local.cf gets that solved, but no mails.

I don't see anything in the logs that indicates the mail gets scanned,
but if I remove spamassassin in simcontrol the emails arrive ok. So it
is a Spamassassin problem.

Can anybody help?
  

How are you handing mail off to spamassassin?  simscan?  maildrop?

Regards,

Bill



- From the received line - I would say simscan,

to OP:

on shell, set SIMSCAN_DEBUG=2, and QMAILQUEUE=/var/qmail/bin/simscan

then pipe an email via qmail-inject, see what the debug of simscan says.
Also, if you have maildrop filters, for delivering spam messages to
separate folder and if the simscan test runs without errors - you should
check the maildrop.
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFENVCnNACY/F2/q5ERAjNKAJ9eWHwcKV706cPnCRl52sZs2SG9zgCdGg15
qn/BTlV6zaG2i1yGxNNmj80=
=6IYN
-END PGP SIGNATURE-
  

Re: [toaster] Sorting spam mail into a separate folder

[Bob Hutchinson]

On Thursday 06 Apr 2006 16:30, Nikki Locke wrote:
> Thanks, Bob.
>
> I'm still ever so slightly confused, as I seem to have both
> /var/qmail/bin/maildirmake AND  /usr/lib/courier-imap/bin/maildirmake, and
> I'm not sure which one I'm supposed to use.
>
> It occurred to me to ask myself what version of courier-imap I had, so my
> fingers (which sometimes have a better memory than my brain) typed "ident
> /usr/lib/courier-imap/bin/maildirmake" - turns out I don't have ident.
> Wonder what package it comes with? Of course, "yum provides ident" provides
> thousands of hits :-( So I went to the source (Luke :-), and I've got 4.0.6
> (that's what the toaster says to install, so that's what I've got).

I think you need to use the courier-imap one, if the .SPAM folder is to be 
visible in squirrelmail. That's what happened when I installed 4.x, (for a 
customer) which has a whole acl (access control) system. Without it the 
folder just was not there.

so:

MAILDIRMAKE="/usr/lib/courier-imap/bin/maildirmake"
MAILDIRACL="/usr/lib/courier-imap/bin/maildiracl"

use this where the simpler one is in the filter. It only gets used if there is 
no .SPAM directory, eg on the first time a spamassassin-detected email passes 
through the filter, one that has 'X-Spam-Flag: YES' in the headers.

`$MAILDIRMAKE -f SPAM $VUSERDIR/Maildir;$MAILDIRACL -set \
$VUSERDIR/Maildir INBOX.SPAM owner aceilrstwx;chown -R vpopmail.vchkpw \
$VUSERDIR/Maildir/.SPAM`

(note the backticks)

I worked this out by creating a folder in squirrelmail and then looking to see 
what it did ;-)

As I recall there was a man page for maildiracl.
I don't have access to that box anymore, and my own box is running an older 
version of courier-imap which works OK so I haven't changed it.

>
> Nikki
>
> [I've top posted this because in this rare instance it seemed to be clearer
> - hope you don't mind.]
>
> Bob Hutchinson wrote:
> > maildrop is picky about it's filter files and not very helpful about
> > spotting errors ;-(
> >
> > here is a filter to kick-start you (watch out for wrapping):
> > import EXT
> > import HOST
> >
> > VPOPBIN="/home/vpopmail/bin"
> > QMAILDIRMAKE="/var/qmail/bin/maildirmake"
> >
> > VUSERDIR=`$VPOPBIN/vuserinfo -d [EMAIL PROTECTED]
> > VMAILDIR="$VUSERDIR/Maildir"
> > SPAMDIR="$VUSERDIR/Maildir/.SPAM"
> >
> > if (/^X-Spam-Flag: *YES/)
> > {
> >`test -d $SPAMDIR`
> >if( $RETURNCODE == 1 )
> >{
> >`$QMAILDIRMAKE $SPAMDIR;chown -R vpopmail.vchkpw $SPAMDIR`
> >}
> >to $SPAMDIR/
> > }
> > else
> > {
> >to $VMAILDIR/
> > }
> >
> > #
> > # use this for courier-imap v4.xx
> > # MAILDIRMAKE="/usr/lib/courier-imap/bin/maildirmake"
> > # MAILDIRACL="/usr/lib/courier-imap/bin/maildiracl"
> > # `$MAILDIRMAKE -f SPAM $VUSERDIR/Maildir;$MAILDIRACL -set
> > $VUSERDIR/Maildir INBOX.SPAM owner aceilrstwx;chown -R vpopmail.vchkpw
> > $VUSERDIR/Maildir/.SPAM` #
> >
> > then put something like this in your .qmail-user file
> >
> > |/usr/local/bin/maildrop 
> > | /home/vpopmail/domains/mydomain.com/spam-mailfilter

-- 
-
Bob Hutchinson
Midwales dot com
-

Re: [toaster] problems with spamassassin 3.1.1

[Ingo Claro]

Found the problem!!

> @40004436092c206c3584 simscan: calling /usr/local/bin/spamc  
spamc -u [EMAIL PROTECTED]


the spamc binary is in:
/usr/bin/spamc

regards,




*Ingo Claro F.*
Gerente de Operaciones
[EMAIL PROTECTED] 
(+56-2) 43 00 155





Ingo Claro escribió:

Got this:

@40004436092c0e078b8c CHKUSER accepted rcpt: from 
<[EMAIL PROTECTED]:[EMAIL PROTECTED]:> remote 
<[192.168.1.105]:unknown:192.168.1.105> rcpt <[EMAIL PROTECTED]> : found 
existing recipient

@40004436092c0f04c7ac simscan: cdb looking up
@40004436092c0f50e024 simscan: cdb for  found 
clam=no,spam=no,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif

@40004436092c0f5141cc simscan: pelookup clam = no
@40004436092c0f5193d4 simscan: pelookup spam = no
@40004436092c0f51d63c simscan: pelookup spam_passthru = yes
@40004436092c0f5237e4 simscan: spampassthru = yes/1
@40004436092c0f527a4c simscan: pelookup attach = 
.vbs:.lnk:.scr:.wsh:.hta:.pif
@40004436092c0f52c09c simscan: attachment flag attach = 
.vbs:.lnk:.scr:.wsh:.hta:.pif

@40004436092c0f532244 simscan: .vbs is attachment number 0
@40004436092c0f5364ac simscan: .lnk is attachment number 1
@40004436092c0f53a32c simscan: .scr is attachment number 2
@40004436092c0f53e594 simscan: .wsh is attachment number 3
@40004436092c0f542414 simscan: .hta is attachment number 4
@40004436092c0f54667c simscan: .pif is attachment number 5
@40004436092c0f54dbac simscan: starting: work dir: 
/var/qmail/simscan/1144391970.257199.7789

@40004436092c0fa322bc simscan: pelookup: called with [EMAIL PROTECTED]
@40004436092c0fa370dc simscan: pelookup: domain is domain.com
@40004436092c0fa3c6cc simscan: cdb looking up domain.com
@40004436092c0fa44f84 simscan: cdb for domain.com found 
clam=yes,spam=yes,spam_passthru=yes,spam_hits=10.1

@40004436092c0fa495d4 simscan: pelookup clam = yes
@40004436092c0fa4d83c simscan: pelookup spam = yes
@40004436092c0fa51aa4 simscan: pelookup spam_passthru = yes
@40004436092c0fa560f4 simscan: spampassthru = yes/1
@40004436092c0fa59f74 simscan: pelookup spam_hits = 10.1
@40004436092c0fa67a34 simscan: Per Domain Hits set to : 10.10
@40004436092c0fa6c084 simscan: pelookup: local part is test
@40004436092c0fa71a5c simscan: cdb looking up [EMAIL PROTECTED]
@40004436092c0fa71a5c simscan: cdb looking up [EMAIL PROTECTED]
@40004436092c0fa77c04 simscan: pelookup: called with [EMAIL PROTECTED]
@40004436092c0fa7c254 simscan: pelookup: domain is domain.com
@40004436092c0fa800d4 simscan: cdb looking up domain.com
@40004436092c0fa879ec simscan: cdb for domain.com found 
clam=yes,spam=yes,spam_passthru=yes,spam_hits=10.1

@40004436092c0fa8bc54 simscan: pelookup clam = yes
@40004436092c0fa8febc simscan: pelookup spam = yes
@40004436092c0fa94124 simscan: pelookup spam_passthru = yes
@40004436092c0fa9838c simscan: spampassthru = yes/1
@40004436092c0fa9c5f4 simscan: pelookup spam_hits = 10.1
@40004436092c0faa17fc simscan: Per Domain Hits set to : 10.10
@40004436092c0faa5e4c simscan: pelookup: local part is test
@40004436092c0faaa0b4 simscan: cdb looking up [EMAIL PROTECTED]
@40004436092c109fd23c simscan: cdb looking up version attach
@40004436092c10f0c0fc simscan: calling clamdscan
@40004436092c206c1a2c simscan: cdb looking up version clamav
@40004436092c206c29cc simscan: normal clamdscan return code: 0
@40004436092c206c2db4 simscan: calling spamc
@40004436092c206c3584 simscan: calling /usr/local/bin/spamc  spamc 
-u [EMAIL PROTECTED]

@40004436092c206d0c5c simscan: cdb looking up version spam
@40004436092c206dc3f4 simscan: done, execing qmail-queue
@40004436092c242f67a4 simscan: qmail-queue exited 0
@40004436092c24e050b4 tcpserver: end 7785 status 0
@40004436092c24e05c6c tcpserver: status: 0/20


simcontrol file:
domain.com:clam=yes,spam=yes,spam_passthru=yes,spam_hits=10.1
:clam=no,spam=no,spam_passthru=yes,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif


regards,





*Ingo Claro F.*
Gerente de Operaciones
[EMAIL PROTECTED] 
(+56-2) 43 00 155






Kiril Todorov escribió:

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Bill Shupp wrote:
 

Ingo Claro wrote:
   

Hello all:

when I activate spamassassin for a domain the mails get corrupted, I
only get this:

Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 3833 invoked by uid 89); 7 Apr 2006 04:09:06 -
Received: by simscan 1.1.0 ppid: 3826, pid: 3830, t: 0.0193s
   scanners: attach: 1.1.0 spam: 3.1.1




looking in spamd/current i've found the following warning:
info: config: failed to parse, now a plugin, skipping: ok_languages 
all


so removing that line in local.cf gets that solved, but no mails.

I don't see anything in the logs that indicates the mail gets scanned,
but if I remove spamassassin in simc