qmail-scanner.pl never called spamassassin do you have spamd running?? If you didn't have it running when you compiled it, it will not see spamassassin.
-----Original Message----- From: Jesus Ruiz [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 26, 2003 2:40 PM To: qmail scanner general Subject: [Qmail-scanner-general]Qmail-Scanner-1.20st (patched st) I have installed this patch so i can delete the spams, but it is not working Here is my configure options: ./configure --qs-user qscand --qs-group qscand --spooldir /var/spool/qmailscan --qmaildir /var/qmail --bindir /var/qmail/bin --qma il-queue-binary /var/qmail/bin/qmail-queue --admin spam --domain 11deaes.com --admin-fromname "System Anti-Virus Administrator" --n otify sender,admin --local-domains 11deaes.com --silent-viruses auto --lang en_GB --debug yes --minidebug 1 --unzip 0 --add-dscr-hdr s 0 --dscr-hdrs-text "X-Qmail-Scanner" --archive 0 --run-first-p-s yes --redundant no --log-details yes --log-crypto 0 --fix-mime 1 --sa-quarantine 8 --sa-delete 10 --scanners "auto" --install 1 and my spamassassin 2.6 local.cf: required_hits 1 rewrite_subject 1 report_header 1 report_charset 1 use_terse_report 1 defang_mime 1 dns_available yes dcc_add_header 1 dcc_home /usr/local dcc_path /usr/local/bin pyzor_path /usr/bin use_pyzor 1 use_razor2 1 use_dcc 1 use_bayes 1 auto_learn 1 subject_tag ********This could be SPAM********* timelog_path /var/log/spamassassin when i send and email messages that get 1000 points from spam control the program don't delete it. Here what the log look like: tail -f /var/spool/qmailscan/qmail-queue.log Wed, 26 Nov 2003 15:33:33 -0400:9013: +++ starting debugging for process 9013 by uid=502 at Wed, 26 Nov 2003 15:33:33 -0400 Wed, 26 Nov 2003 15:33:33 -0400:9013: setting UID to EUID so subprocesses can access files generated by this script Wed, 26 Nov 2003 15:33:33 -0400:9013: program name is qmail-scanner-queue.pl, version 1.20 Wed, 26 Nov 2003 15:33:33 -0400:9013: incoming SMTP connection from via SMTP from 200.105.128.48 Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: mkdir /var/spool/qmailscan/tmp/mx210698752134979013 Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: start dumping incoming msg into /var/spool/qmailscan/working/tmp/mx210698752134979013 [1069875213.16363] Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: primary Content-Type of text/plain found Wed, 26 Nov 2003 15:33:33 -0400:9013: w_c: rename new msg from /var/spool/qmailscan/working/tmp/mx210698752134979013 to /var/spool/qmailscan/working/new/mx210698752134979013 [1069875213.16628] Wed, 26 Nov 2003 15:33:33 -0400:9013: d_m: starting /usr/local/bin/reformime -x/var/spool/qmailscan/tmp/mx210698752134979013/ </var/spool/qmailscan/working/new/mx210698752134979013 [1069875213.16671] Wed, 26 Nov 2003 15:33:33 -0400:9013: d_m: finished /usr/local/bin/reformime -x/var/spool/qmailscan/tmp/mx210698752134979013/ [1069875213.17581] Wed, 26 Nov 2003 15:33:33 -0400:9013: d_m: unpacking message took 0.009383 seconds Wed, 26 Nov 2003 15:33:33 -0400:9013: unsetting QMAILQUEUE env var Wed, 26 Nov 2003 15:33:33 -0400:9013: g_e_h: return-path is "[EMAIL PROTECTED]", recips is "[EMAIL PROTECTED]" Wed, 26 Nov 2003 15:33:33 -0400:9013: from=Jesus Ruiz <[EMAIL PROTECTED]>,subj=Test spam mail (GTUBE), x-qmail-scanner-message-id=<[EMAIL PROTECTED] bo> via SMTP from 200.105.128.48 Wed, 26 Nov 2003 15:33:33 -0400:9013: This is a PLAIN text message (because it's either not mime, or is text/plain), skip virus scanners - but not SA Wed, 26 Nov 2003 15:33:33 -0400:9013: ini_sc: start scanning Wed, 26 Nov 2003 15:33:33 -0400:9013: ini_sc: recursively scan the directory /var/spool/qmailscan/tmp/mx210698752134979013/ Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: starting scan of directory "/var/spool/qmailscan/tmp/mx210698752134979013"... Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '81:ILOVEYOU' = 'Virus-subject' = 'Love Letter Virus/Trojan' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing subject: ILOVEYOU Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '82:message/partial.*' = 'Virus-content-type' = 'Message/partial MIME attachments blocked by policy' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing content-type: message/partial.* Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '85:.{100,}' = 'Virus-date' = 'MIME Header Buffer Overflow' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing date: .{100,} Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '86:.{100,}' = 'Virus-mime-version' = 'MIME Header Buffer Overflow ' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing mime-version: .{100,} Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '87:.{100,}' = 'Virus-resent-date' = 'MIME Header Buffer Overflow' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing resent-date: .{100,} Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: '90:[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED] com|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED] e.com|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|JGQZC [EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|cxkawog@ krovatka.net|[EMAIL PROTECTED]' = 'Virus-to' = 'BadTrans Trojan exploit!' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a header! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: checking for objects containing to: [EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]| [EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED] m|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED] cite.com|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED]|[EMAIL PROTECTED] atka.net|[EMAIL PROTECTED] Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: 'eicar.com' = '69' = 'EICAR Test Virus' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a size! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: 'happy99.exe' = '10000' = 'Happy99 Trojan' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a size! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: 'zipped_files.exe' = '120495' = 'W32/ExploreZip.worm.pak virus' Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: type is a size! Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: skipping auto-generated file 1069875213.9015-0.mx2 Wed, 26 Nov 2003 15:33:33 -0400:9013: p_s: finished scan of dir "/var/spool/qmailscan/tmp/mx210698752134979013" in 0.004198 secs Wed, 26 Nov 2003 15:33:33 -0400:9013: scanloop: starting scan of directory "/var/spool/qmailscan/tmp/mx210698752134979013"... Wed, 26 Nov 2003 15:33:33 -0400:9013: scanloop: scanner=spamassassin,plain_text_msg=1 Wed, 26 Nov 2003 15:33:33 -0400:9013: scanloop: finished scan of "/var/spool/qmailscan/tmp/mx210698752134979013"... Wed, 26 Nov 2003 15:33:33 -0400:9013: ini_sc: scanning message took 0.004688 seconds Wed, 26 Nov 2003 15:33:33 -0400:9013: q_r: fork off child into /var/qmail/bin/qmail-queue... Wed, 26 Nov 2003 15:33:33 -0400:9016: q_r: xstatus=0 Wed, 26 Nov 2003 15:33:33 -0400:9013: qmail-scanner: Clear:RC:1(200.105.128.48): 0.019189 1252 [EMAIL PROTECTED] [EMAIL PROTECTED] Test spam mail (GTUBE) <[EMAIL PROTECTED]> 1069875213.9015-0.mx2:547 Wed, 26 Nov 2003 15:33:33 -0400:9013: cleanup: /bin/rm -rf /var/spool/qmailscan/tmp/mx210698752134979013/ /var/spool/qmailscan/working/new/mx210698752134979013 Wed, 26 Nov 2003 15:33:33 -0400:9013: --- all finished. Total of 0.157843 secs ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general ------------------------------------------------------- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help YOU! Click Here: http://sourceforge.net/donate/ _______________________________________________ Qmail-scanner-general mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
