> Okay, I have MailScanner working with f-prot, and BOY is it catching all
> of those Swen.A virii!  However, I can't seem to tell whether or not the
> Vipul's Razor that I installed yesterday is working.
>
> I'm running SpamAssassin 2.50, and it seems to be working fine.  I've
> added 'use_razor2 1' to /etc/mail/spamassassin/local.cf and restarted.
>
> If I run razor-check against a spam that I've saved to a separate file, it
> is identified.  However, if I put the message through the spamc client,
> while I get a bunch of other rules, it doesn't show any rule checks for
> razor.
>
> Any ideas would be appreciated!
>
> Ben

A couple of items...

1. If you're using MailScanner then you don't need to run spamc/spamd. 
MailScanner accesses SpamAssassin's libraries directly for increased
speed.

2. If you're running MailScanner and are using it to call SpamAssassin
then the SpamAssassin rules go in
/etc/MailScanner/spam.assassin.prefs.conf.  This file is used instead of
/etc/mail/spamassassin/local.cf so any changes you make there aren't going
to take affect.  Some people symbolic link local.cf to
spam.assassin.prefs.conf.

3. I don't believe it's necessary to add the rule to use razor in the
config files.  It won't do any harm but it's the default.

4. SpamAssassin 2.50 is pretty old.  You should upgrade it to 2.55.  There
were several bugs fixes added and the spammers started customizing the
emails to get around the rules in 2.50.  2.55 is MUCH better.

5. If you include the X-MailScanner id's in the header you should change
the default.  Some of the latest virii are faking these header lines to be

X-MailScanner: found to be clean

since some people were screen on these.


I suggest you make sure you're edited MailScanner.conf to tell it to use
SpamAssassin and turn on the spamassassin display.  There are at least two
of these.  One shows the rules that were triggered and the other shows the
actual numeric scores.  If you want to see if razor is working then you
just need to turn on the rule hits (check the header of this message)

If you really get into this then instal DCC and pyzor.  SpamAssassin will
automatically use them too.  Also, install ClamAV and turn it on inside of
MailScanner.  It's a great open source virus scanner.  MailScanner will
then scan all your emails with F-Prot and ClamAV.  The idea is that if one
is a little slow in updating its virus files then other is likely picking
off the new variants!


Gerry


-- 
redhat-list mailing list
unsubscribe mailto:[EMAIL PROTECTED]
https://www.redhat.com/mailman/listinfo/redhat-list

Reply via email to