Greetings
I am not new to SA
However, I am new to razor and pyzor... I must admit to only cursory
viewing
of any of those type of posts for the past year or more...
Are those of you running medium to high volume mail servers happy with
razor
and pyzor for just the scoring they provide?
Should I be adjusting timeouts or anything or are the defaults pretty good.
Searching and reading, I really havent found a lot of fine tuning info on
them other than the basics and docs at Vipul's site.... sooooo are they are
plug and play as the install was?
Thanks
- rh
--
Abba Communications
Spokane, WA
www.abbacomm.net
These are my observations. Others may differ.
Each of these have files that are used by the user running
spamassassin/spamc/whatever located in their home directory (e.g.
/home/user/.pyzor /home/user/.razor). At least to work porperly that is the
way it should be set up. So, if you run spamassassin as one user (a site
wide setup) then you only have to set up one user. If not, then ideally
everyone that uses SA would be set up.
Let's say you are logged in as root. Install pyzor via your package manager
(recommended because otherwise you may have to search around for patches and
make some permission changes). The run 'pyzor discover'. This creates
/root/.pyzor/servers which is a file that contains the IP address and port
to the main pyzor server. Don't use that server. Edit and change to
82.94.255.100:24441
Run 'pyzor ping' to see if you get a response. If you don't you may be
blocking outbound udp/tcp on port 24441 or inbound udp from 82.94.255.100
(ports 1024 - 65535).
If it works, you can do the same for other users as needed.
su user1 -c 'pyzor discover; echo "82.94.255.100:24441" >
/home/user1/.pyzor/servers; pyzor ping'
Razor.
Set up root first.
razor-admin -create
razor-admin -create
(yes - run it twice)
I also suggest creating an identity.
razor-admin -register
(you may have to run this twice)
I suggest disabling logging (or logs will eventually fill your hard drive)
edit /root/.razor/razor-agent.conf
If you don't have that file, your system may have created a site wide
configuration file (which may be a good idea). It is probably
/etc/razor/razor-agent.conf
Edit the file and change:
debuglevel = 3
to
debuglevel = 0
If you don't have /etc/razor/razor-agent.conf but would like to use it
site-wide:
mkdir /etc/razor
mv /root/.razor/razor-agent.conf /etc/razor
If /etc/razor/razor-agent.conf exists, when you run 'razor-admin -create'
razor-agent.conf will not be created in the .razor directory of the user
running the command. If it does not exists then razor-agent.conf will be
created (and then may need to be edited).
If you want to use one identity for the entire system, copy the contents of
/root/.razor to each user that will run SA and then give them ownership.
cp -r /root/.razor /home/user1/
chown -R user1:user1 /home/user1/.razor
If you plan on reporting (spamassassin -r) and want each user to have their
own identity, then you should run 'razor-admin create' (twice) and
'razor-admin -register' (may need to run it twice) as the user in question.
su user1 -c 'razor-admin -create; razor-admin -create; razor-admin
-register'
Remember, if you do not have /etc/razor/razor-agent.conf then you may need
to edit razor-agent.conf for each user.
Also, I suggest a crontab entry for each user that runs 'razor-admin
-discover' about once a week or so.
sfa:~# ls -l /root/.razor
total 6
lrwxrwxrwx 1 root root 19 2007-05-13 10:01 identity -> identity-rusG9yXAjJ
-rw------- 1 root root 90 2007-05-13 10:01 identity-rusG9yXAjJ
-rw-r--r-- 1 root root 604 2007-05-13 10:01 razor-agent.log
-rw-r--r-- 1 root root 714 2007-05-13 09:59 server.folly.cloudmark.com.conf
-rw-r--r-- 1 root root 38 2007-05-13 09:59 servers.catalogue.lst
-rw-r--r-- 1 root root 22 2007-05-13 09:59 servers.discovery.lst
-rw-r--r-- 1 root root 38 2007-05-13 09:59 servers.nomination.lst
sfa:~# cat /etc/razor/razor-agent.conf
#
# Razor2 config file
#
# Autogenerated by Razor-Agents v2.81
# Sun May 13 09:59:24 2007
# Non-default values taken from /etc/razor/razor-agent.conf
#
# see razor-agent.conf(5) man page
#
debuglevel = 0
identity = identity
ignorelist = 0
listfile_catalogue = servers.catalogue.lst
listfile_discovery = servers.discovery.lst
listfile_nomination = servers.nomination.lst
logfile = razor-agent.log
logic_method = 4
min_cf = ac
razordiscovery = discovery.spamnet.com
rediscovery_wait = 172800
report_headers = 1
turn_off_discovery = 0
use_engines = 4,8
whitelist = razor-whitelist
If you don't create .razor files for each user that runs SA then it will try
to -discover its servers every time it runs. This is time consuming for you,
and increases load on the razor servers too.
Gary V
_________________________________________________________________
More photos, more messages, more storageget 2GB with Windows Live Hotmail.
http://imagine-windowslive.com/hotmail/?locale=en-us&ocid=TXT_TAGHM_migration_HM_mini_2G_0507
