On Thursday 24 March 2005 19:36, Gene Heskett wrote: >On Thursday 24 March 2005 13:58, [EMAIL PROTECTED] wrote: >>SA does not allow running it as 'root' user. It is considered a >> security risk. SA files also should not be in 'root' user folder. >> Should be in something like /var/filter/.spamassassin (filter >> being the name of the user) >> >>You need to have a user such as 'filter' run it. >> >>Here is a fairly good write-up. >> >>http://advosys.ca/papers/postfix-filtering.html > >I followed this link, and have anomy partially installed, even went >and bought the AvpLinux package from kapersky. Unforch the server >link returned after my card was honored, seems to be a dead link, >mozilla opens a new instance, and sits there forever with a blank >screen ... ahh, that was the new firefox, lemme try mozilla. Ok, > its also sitting there waiting for their sites response, which > apparently isn't going to happen. > >Since the link will time out in a few days, has anyone else noted > that this is a constant problem, or is it just a network glitch? > If its a problem, I can cancel the card charge easily enough. The > question then becomes "how do I make all this anomy stuff work > without it?" > >>> Why is this? And how can I fix it? >>> >>>>and B: that it cannot write to /root/.spamassassin/bayes_journal. >>>> >>>>The file had disappeared! >>>> >>>>I went back thru the shell history to >>>> make sure I hadn't done anything stupid, but the only thing >>>> between the time it worked, and the files disappearance was my >>>> looking at it with the 'less' file viewer. >>>> >>>>So I touched a new one and set the perms to 0666 so it would be >>>>writable. >>> >>> Is this some sort of a berkeleyDB file? If so, how can I >>> regenerate it properly? >>> >>>>That didn't make any difference. The other files in that >>>> directory are being updated if I run a session of sa-learn, but >>>> that file isn't being touched, and although the dates are being >>>> updated for the other 2 main files, no content is actually being >>>> added to them by the sa-learn session as evidence by their >>>> unchanging size of several megs each. >>>> >>>>However, it does seem to be filtering the spam as well as before >>>> after I updated the rules for the 2nd filter in kmail as the >>>> marker strings had been changed some from the 2.64 version. Its >>>> also not marking the subject line [SPAM] like it did before. I'd >>>> like it to if possible. >>>> >>>>>>>>From this amount of data, can it be determined whats wrong? >>>> >>>>Any help accepted with glee & thanks.
Update of sorts. I have not yet installed the kaspersky stuff although I finally did get it to download, about an hour short of my call my card and cancel the charge deadline. I'm prefering to make spamassassin work if I can. But I cannot learn new spam so its become an ever larger problem as the days wear on. I've opened up the rpm for 3.0.2 with mc, and verified that everything is properly installed, overwriting my install of the tarball version from last week. I've disabled the init..d/spamd launcher in favor of the very similar spamassassin launcher thats now used, and the spamd's are running. Running 'spamassassin --lint' returns nothing. Adding a -D to the cli spits out a lot of stuff with no obvious to me errors. But the log messages haven't changed with each incoming message generating this series of log entries: Mar 28 13:30:55 coyote spamd[1616]: connection from localhost.localdomain [127.0.0.1] at port 40618 Mar 28 13:30:55 coyote spamd[1616]: info: setuid to root succeeded Mar 28 13:30:55 coyote spamd[1616]: Still running as root: user not specified with -u, not found, or set to root.Fall back to nobody. Mar 28 13:30:55 coyote spamd[1616]: processing message <[EMAIL PROTECTED]> for root:99. Mar 28 13:30:56 coyote spamd[1616]: cannot write to /root/.spamassassin/bayes_journal, Bayes db update ignored: Permission denied Mar 28 13:30:59 coyote spamd[1616]: identified spam (9.6/5.0) for root:99 in 3.8 seconds, 3344 bytes. Mar 28 13:30:59 coyote spamd[1616]: result: Y 9 - BAYES_99,HELO_DYNAMIC_SPLIT_IP, HTML_90_100,HTML_IMAGE_ONLY_16,HTML_IMAGE_RATIO_02,HTML_MESSAGE,MPART_ALT_DIFF, RCVD_IN_NJABL_DUL,URIBL_OB_SURBL,URIBL_SBL,URIBL_WS_SURBL scantime=3.8,size=3344, mid=<[EMAIL PROTECTED]>, bayes=0.997353255786358,autolearn=no Which I hand wrapped to improve the readability above. It appears to me that the problem is the fallback to the user 'nobody', who at 99, would not have perms to write to those files since I and kmail are running as root. If I run the 'spamassassin --lint' as root, those files are successfully updated. An attempt to 'su nobody' returns this: [EMAIL PROTECTED] /]# su nobody This account is currently not available. What can I do to restore it other than going back to SA-2.6.4? Or jumping ship to the kaspersky stuffs? -- Cheers, Gene "There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order." -Ed Howdershelt (Author) 99.34% setiathome rank, not too shabby for a WV hillbilly Yahoo.com and AOL/TW attorneys please note, additions to the above message by Gene Heskett are: Copyright 2005 by Maurice Eugene Heskett, all rights reserved.
